Compliance Audits
The most common type of security audit is the compliance audit. This audit assesses whether an organization complies with internal policies or regulations. Compliance audits are typically less expensive and less time-consuming than other audits. However, they may not comprehensively view an organization's security state. In addition, compliance audits cannot always identify security weaknesses that attackers could exploit.
