Information security audit is one of the key tools that makes it possible to assess a company's actual protection level for its assets (including IT assets). The audit results make it possible to create or improve the existing information security system.