7/3/24, 2:07 PM Security Audit Checklist - SafetyCulture

Are network devices regularly patched and updated?

Yes No N/A

Data Protection

Is sensitive data encrypted both at rest and in transit?

Yes No N/A

Are regular data backups performed and tested for recoverability?

Yes No N/A

Are data access and usage monitored and logged?

Yes No N/A

Physical Security

Are all the doors and windows secure and able to be locked?

Yes No N/A

Are physical access controls implemented, such as access badges or biometric systems?

Yes No N/A

Are server rooms and data centers secured with appropriate physical safeguards?

Yes No N/A

Is after-hours access to server rooms monitored/controlled?

Yes No N/A

https://public-library.safetyculture.io/products/security-audit-checklist-vjun3ibvep0iyvcx?amp_dev=e2baec22-2f76-4012-813e-082ed6e70b02 3/10
7/3/24, 2:07 PM Security Audit Checklist - SafetyCulture

Are the external walls fit for purpose and are they secure?

Yes No N/A

Is there a visitor log and escort policy for visitors entering restricted areas?

Yes No N/A

Are perimeter doors alarmed?

Yes No N/A

Are alarms active during the day or are areas shut off?

Yes No N/A

Is there a regular lock-up routine?

Yes No N/A

Are perimeter doors supported by cameras?

Yes No N/A

Are computers marked with serial numbers or company information?

Yes No N/A

Is an intrusion alarm system used in the facility?

Yes No N/A

Is the intrusion alarm system in good working order?

Yes No N/A

https://public-library.safetyculture.io/products/security-audit-checklist-vjun3ibvep0iyvcx?amp_dev=e2baec22-2f76-4012-813e-082ed6e70b02 4/10