Technical Configuration Audit
Systems checked against hardening benchmarks.
- Server and OS configuration review
- Firewall and network device audit
- Cloud configuration audit
- Database security review
Security Audit Services
Affix Center audits your systems, configurations and processes against security best practice and compliance requirements, and supports remediation - including NIC and CERT-In audit readiness.
A security audit is a structured review of an organisation's systems, configurations, access controls and security policies against a defined standard or best practice. Affix Center performs technical and process audits, helps government portals prepare for NIC and CERT-In empanelled audits, and supports closing every gap found.
The challenge
Problems we solve
- A portal blocked from go-live by audit observations
- Upcoming ISO 27001 or regulatory audit with unknown gaps
- Policies that exist on paper but not in practice
- No clear view of who has access to what
Our capabilities
What we deliver
Policy & Process Audit
Security that works in practice.
- Information security policy review
- Access management review
- Incident response readiness
- Vendor and third-party risk
Compliance Readiness
Prepared before the formal audit.
- NIC and CERT-In audit preparation
- ISO 27001 gap assessment
- GIGW security requirements
- Evidence and documentation
Remediation Support
Closing the gaps, not just listing them.
- Prioritised action plan
- Hands-on fixes where needed
- Policy drafting
- Re-audit and closure
Our approach
How we deliver Security Audit Services
A structured, transparent engagement with clear checkpoints at every stage.
Scope
- Agree assets, environments and rules of engagement
- Identify compliance drivers (NIC, CERT-In, ISO)
- Sign NDA and authorisation
Test & review
- Automated scanning plus manual testing
- Configuration and policy review
- Evidence captured for every finding
Report
- Executive summary for leadership
- Risk-ranked technical findings
- Clear remediation steps
Fix & verify
- Remediation support for your team
- Retesting of closed issues
- Final report / audit-ready evidence
Technology & standards
- CIS Benchmarks
- ISO 27001 controls
- CERT-In guidelines
- OWASP ASVS
- Nessus
- Cloud security posture tools
Industries we serve
- Government & public sector
- Banking, financial services & insurance
- Pharma & healthcare
- SaaS & technology
- Manufacturing
- Education
Who it is for
- Government portals preparing for NIC / CERT-In audit
- Organisations working towards ISO 27001
- Regulated businesses with periodic audit obligations
- Leadership wanting an independent security view
Why Affix Center
Mumbai team, India-wide delivery
We work out of Lower Parel, Mumbai and deliver for clients across India, on-site when it matters and remotely when it does not.
In business since 2014
A decade of building and running systems for government bodies, enterprises and growing businesses.
ISO certified processes
Delivery run on ISO 9001, ISO 27001 and ISO 20000 certified processes for quality, information security and IT service management.
One partner, end to end
Strategy, build, hosting, security and support from one accountable team - no hand-offs between vendors.
Let's discuss your Security Audit Services requirement
Tell us what you need and our team will get back to you within 2 business days.
Frequently asked questions
What is a security audit?
It is a structured review of systems, configurations, access and security policies against a standard or best practice, producing findings and a plan to close the gaps.
Can you help our portal clear its security audit?
Yes. We prepare portals for NIC and CERT-In empanelled security audits and support remediation of the observations raised.
Do you also audit policies and processes?
Yes. We review both technical controls and the policies and processes around them.
Is a security audit the same as VAPT?
No. VAPT tests for exploitable weaknesses; an audit reviews controls and configurations against a standard. Many organisations need both.
Where is Affix Center based, and where do you deliver?
Our office is in Lower Parel, Mumbai (Mathurdas Mill Compound, A-101, 1st Floor, Todi Building, Mumbai 400013). We deliver for clients across India, on-site where it matters and remotely otherwise.
How do I start a conversation?
Call +91 98700-61247, email admin@affixcenter.com, or use the contact form; our team replies within 2 business days.