This sample audit report presents the results of the vulnerability assessments and penetration testing that security specialists performed on a company’s external and internal environments. The intent of the project was to review the security posture of the company’s network, devices and applications accessible from the internet. The scope of the review was limited to specific target dates and agreed-upon target systems.

This sample summary report is designed to deepen understanding of the level of security, to identify security deficiencies and areas of strengths and weaknesses, and to help develop an action plan to correct vulnerabilities and mitigate the associated risks.