An IT audit is a structured review of your technology, security, and processes. Use this checklist as a starting point.

Hardware and assets

– [ ] Complete inventory of computers, servers, network gear, and mobile devices

– [ ] Warranty and end-of-life dates tracked

– [ ] Equipment assigned to named owners

– [ ] Secure disposal process in place

Software and licensing

– [ ] Inventory of installed software and subscriptions

– [ ] Licenses match actual usage

– [ ] Unsupported software identified and planned for retirement

– [ ] Renewal dates tracked

Accounts and access

– [ ] MFA enabled for all users and required for admins

– [ ] Former employees’ accounts removed

– [ ] Administrator accounts limited and separate from daily accounts

– [ ] Permissions reviewed regularly

– [ ] Shared accounts minimized

Security

– [ ] Endpoint protection on all devices

– [ ] Operating systems and applications patched

– [ ] Email security configured, including SPF, DKIM, and DMARC

– [ ] Disk encryption enabled on laptops

– [ ] Firewall rules and firmware reviewed

– [ ] Security awareness training conducted

Backup and recovery

– [ ] Critical data backed up, with offsite and immutable copies

– [ ] Microsoft 365 data backed up

– [ ] Restores tested recently

– [ ] Written disaster recovery plan

Network

– [ ] Network diagram current

– [ ] Wi-Fi secured, with guest network separated

– [ ] Remote access secured

– [ ] Monitoring in place

Policies and documentation

– [ ] Acceptable use policy signed by staff

– [ ] Incident response plan exists

– [ ] Onboarding and offboarding procedures documented

– [ ] Privacy policy and breach register in place (Quebec Law 25)

– [ ] Passwords and critical documentation stored securely

Vendors and contracts

– [ ] Key vendors and contacts listed

– [ ] SLAs and support contracts reviewed

– [ ] Cyber insurance requirements understood and met

What to do with the results

Rank gaps by risk, assign owners and dates, and re-audit regularly.

DBR Soft can perform a professional IT audit and deliver a clear remediation plan. Contact us for more information.