The main objective of a security audit is to identify configuration, development and logic problems that may allow unauthorized users to access information managed by the system. This in turn can result in unauthorized actions that are not permitted to a normal user such as taking control of the web server or application database.