How secure is your office IT? New: the IT-Label Security Audit

Many companies have the basics of their security in order. The laptops have antivirus, the passwords are strong and there are backups. Yet a large part of the risk sits in a place almost nobody looks: in the meter cupboard, in the patch cabinet, behind the desk where the router stands.

That is why IT-Label is introducing the IT-Label Security Audit. A Certified Partner visits your office and checks how securely your IT is physically set up. In this article you read what the audit involves, why a visit on site shows more than a remote check, and how to request one.

What you cannot see from your desk

An online check or a questionnaire is a good start. But it relies on what you already know. The things you do not know stay out of sight. Think of these situations from practice:

• The router still uses the manufacturer's default password.
• Guests connect to the same Wi-Fi network as your staff.
• The patch cabinet is not locked, or stands in a room that anyone can enter.
• You share a meter cupboard or technical room with other tenants.
• A printer, a camera or an old access point is on the network, and nobody knows who manages it.
• The building's cameras and access gates are on the same network as your office.

None of these points is hard to fix. But you have to see them first. Anyone who can physically reach your cable, your patch cabinet or your router can bypass much of your other security. Read more in who can physically reach your network?

Your security is only as strong as the place where the cable enters the building.

What is the IT-Label Security Audit?

The Security Audit is an on-site assessment of the security of your office IT infrastructure. A Certified Partner of IT-Label visits and checks everything on the spot. A Certified Partner is an independent IT specialist trained in the IT-Label methodology.

After the visit you receive a report. It lists the risks the partner found, in order of importance. For each risk there is advice: what you can do, and who you should discuss it with. The report is digitally signed.

What is checked?

• Wi-Fi. The security and settings of your Wi-Fi, whether guests have their own network, the coverage, and who can connect.
• Network equipment. Your router, firewall, switches and access points: have the default passwords been changed, is the software up to date, and who manages the equipment?
• Server room and patch cabinet. Is the room locked, who has access, are power and cooling in order, and is the cabling well organised?
• Connection and cabling. Where your internet connection enters, who can reach it, and whether you share cabinets or rooms with others.
• Devices on the network. Printers, cameras and other devices that are unsecured or unknown on your network.
• Separated networks. Whether your office network is separated from guests, other tenants and the building systems, such as access control and climate.

What the audit does not do

The audit looks at how your infrastructure is set up and secured. The partner does not look at the content of your network traffic, files or e-mail. The partner also does not try to break into your systems. We ask for your written permission before the audit.

Does it also cover spaces you share with others, such as a shared patch cabinet? Then we also ask the landlord for permission to include them.

On its own, or with another service

You can book the Security Audit on its own. You can also combine it with another IT-Label service:

• Only the Security Audit. You want to know how securely your office IT is set up.
• With a pre-inspection. For example for a new rental space. In one visit you get a picture of the digital level of the space and of its security. You receive a separate report for each.
• With a certification. For landlords: the official IT-Label for the building, plus an audit of the security of their own office space.

Please note: the Security Audit itself does not lead to a certificate. The IT-Label for a building only follows from the certification.

How a Security Audit works

1. Request. You fill in the form on the Security Audit page. Would you like a pre-inspection or certification as well? Tick the box.
2. Quote and appointment. A Certified Partner sends a quote and schedules the audit at a time that suits you.
3. On-site audit. The partner checks your Wi-Fi, network and server room on site. A contact person with access to the technical rooms makes it faster. Think of your IT supplier or a colleague who knows the IT.
4. Report and advice. You receive a digitally signed report with the risks in order of importance and advice for each risk.

What does it cost?

A Security Audit is available from € 750 excl. VAT per location. This includes the on-site visit and the report with advice. If you combine it with a pre-inspection, the partner carries out both in one visit.

Frequently asked questions

Do I get an IT-Label after a Security Audit?

No. A Security Audit does not lead to a certificate. The official label for a building follows from the IT-Label certification. You can combine both.

Do you also look at my computers, accounts and e-mail?

No. The audit covers the physical infrastructure: Wi-Fi, network equipment, server room, patch cabinet and cabling. For the security of computers and accounts, your IT supplier is the right contact. The report does mention what you should discuss with them.

I rent my office. Can I have a Security Audit done?

Yes. The audit covers your own office IT. If there are spaces you share with others, such as a shared patch cabinet or meter cupboard, we ask the landlord for permission to include them.

What do I need to arrange for the visit?

Access to your office and, where possible, to the server room and the patch cabinet. A contact person who knows the IT makes the audit faster and more complete.

Who carries out the audit?

Always a Certified Partner: an independent IT specialist trained in the IT-Label methodology.

Know where you stand

You do not need to be an IT expert to know whether your office is set up securely. A Certified Partner looks along with you, on site, and tells you what is good and what can be better. Request a Security Audit.

Want to stay up to date on new services, legislation and the digital security of buildings? Subscribe to the newsletter.