Firewalls & gateways are assessed for secure configuration.
Applications and systems are assessed for secure configuration and maintaince procedures.
User access controls are assessed for secure configuration.
Malware protection and Technical Intrusion controls are inspected to ensure they are fit for purpose.
Patch management processes and systems are assessed to ensure patching is timely and complete.