---
title: "IT security audit"
description: "An assessment of real exposure: equipment, accounts, external access, backups and policies. The result is a prioritised list with costs, not a report for the shelf."
url: "https://doctor-pc.ro/en/audit-de-securitate"
category: "cyber"
language: "en-GB"
publisher: "Doctor PC Digital Solutions SRL"
---

# IT security audit

You cannot protect what you do not know you have. An audit puts on paper which systems exist, who can reach them, what is unpatched, and where the chain would break if somebody tried.

## What is included

- **Full inventory** — What hardware, what systems, what applications, what accounts. Something nobody remembered was running almost always turns up.
- **Access analysis** — Who can reach what, which accounts hold administrator rights, which former employees' accounts are still active.
- **Vulnerability scanning** — Unpatched systems, services exposed to the internet, default configurations left unchanged.
- **Backup verification** — We test a real restore. It is the most common place where the assumption does not match reality.
- **The human factor** — We assess phishing exposure and password practices — where most incidents actually begin.
- **Prioritised report** — Every finding gets impact, likelihood and remediation effort. You know exactly what to do on Monday morning.

### What you receive

A document management can read, not only IT: findings explained as business risk rather than technical jargon. Each point carries a concrete recommendation and an effort estimate.

Separately, a detailed technical list for whoever carries out the fixes.

### No sales pressure

The audit can be done even if somebody else performs the remediation — including your own internal team. The report is yours and is written so it can be used without us.

Findings are not inflated to make the need look bigger. If the situation is good, we write that.

## Frequently asked questions

### How long does an audit take?

For a company with 20–50 workstations, a week from receiving access, plus a few days to write the report. It does not interrupt operations.

### Do you need access to our data?

Not to its contents. We need read access to configurations, the user list and system status. We sign a confidentiality agreement before starting.

### How often should it be repeated?

Annually for a company with stable infrastructure, or after any major change — new premises, cloud migration, significant team growth.

### How long does an audit take?

For a small or medium company, a few working days for collection and analysis, plus the presentation of findings. We do not stop your operations during it.

### What do I get at the end?

A list of what is exposed, how likely it is to be exploited, what the impact would be and in what order to fix it — with an estimated cost per step. Written so a non-IT reader can follow it.

## Let's work out exactly what you need.

We look at the current situation, tell you what is worth changing and what can wait, then you get a quote with clear figures.

## Request a conversation

Write us a few lines about the situation in your company and we will come back with a concrete proposal.

*Form on the page. Alternatively: phone +40 770 767 226 or office@doctor-pc.ro.*

## Other services

We cover the whole chain, from infrastructure down to repairing a single device.