A cybersecurity audit aims to serve as a 'checklist,’ which authenticates that the policies a cybersecurity team indicates are really on the ground and that there are controls available to implement them.