Audit and security

The physical security audit verifies the effectiveness of the physical protection measures put in place to secure premises, sensitive equipment and employees. The objective is to identify physical vulnerabilities and optimize security devices in order to reduce the risks of theft, intrusion, sabotage, or environmental incidents.

Physical security audit modules:

1. Physical risk analysis:

   • Assessment of existing physical threats (theft, intrusions, fires, accidents).

   • Identification of vulnerabilities related to sensitive installations and equipment.

2. Physical access control:

   • Audit of access control devices: cards, badges, biometrics, fences, etc.

   • Assessment of access procedures for employees, visitors and third parties.

3. Building surveillance and security:

   • Verification of the effectiveness of video surveillance systems and alarms.

   • Inspection of security devices (entrance door, windows, alarms, motion detectors).

   • Analysis of fire risk prevention measures (fire extinguishers, smoke detectors, sprinkler systems).

4. Protection of critical infrastructures:

   • Securing sensitive areas such as data centers, server rooms and archives.

   • Verification of access management protocols for high-risk areas.

5. Emergency Safety and Crisis Management:

   • Audit of evacuation procedures, emergency devices and safety training.

   • Analysis of emergency management plans, evacuations, and physical security in the event of a disaster.

6. Evaluation of staff training:

   • Verification of employee awareness of physical security and emergency protocols.

   • Analysis of continuing education programs and security simulation exercises.

2- Audit en sécurité informatique

An IT security audit assesses the security status of the company’s information systems, including networks, data, and applications. The goal is to identify IT vulnerabilities, ensure the confidentiality, integrity, and availability of data, while ensuring compliance with cybersecurity regulations.

IT security audit modules:

1. Network Security Assessment:

   • Analysis of network protection devices: firewalls, VPNs, access controls.

   • Verification of network segmentation, flow management and identification of weak points.

2. Audit of systems and applications:

   • Identification of vulnerabilities in operating systems, software, and applications.

   • Checking for security updates and patches applied to critical software and systems.

3. Data security:

   • Verification of data management policies (encryption, secure storage, controlled access).

   • Analysis of backup practices, data recovery and protection against loss or alteration of sensitive data.

4. Access and identity management:

   • Audit of user access rights, management of roles and permissions.

   • Audit of password management practices, multi-factor authentication (MFA) and separation of responsibilities.

5. Protection against computer threats:

   • Evaluation of intrusion detection systems (IDS/IPS), antivirus and malware protection tools.

   • Attack resistance testing, including penetration testing to assess resilience against cyber attacks.

6. Security Compliance and Governance:

   • Verification of compliance with security regulations (GDPR, PCI-DSS, ISO/IEC 27001, etc.).

   • Évaluation de la politique de gestion de la sécurité, de la formation des employés, et des actions mises en place pour assurer la conformité.

7. Incident Response Plan:

   • Review of the IT incident response plan (IRP) and crisis management mechanisms.

   • Incident simulation to test the responsiveness and effectiveness of teams in the face of a cyberattack.

Additional services

In addition to physical and IT security audits, MPM Sarl also offers

Assistance in implementing recommendations

Regular audit and monitoring of improvements

Continuing education and awareness

Help implement corrective actions after an audit, including configuring security features and updating systems.

Training programs for staff on physical and IT security to ensure better risk management.

Offers regular audits to verify security progress and implementation of corrective actions

The physical and IT security audit offered by MPM Sarl allows companies to identify vulnerabilities and implement robust security measures to protect their physical and digital assets. Through detailed, personalized and expert audits, MPM Sarl offers an in-depth risk analysis and practical recommendations to improve the overall security of companies, ensuring their compliance and optimizing their security resources.