01
Agreeing the scope
We identify sites, systems, contacts and important dates. We agree access rights, confidentiality and actions that must not be performed without additional permission.
IT infrastructure audit
IT infrastructure and network assessment
We check how your company’s systems operate and how they are protected. We review networks, servers, data access and backups. You receive findings and recommendations for management and your IT team.
Trusted by
Companies and institutions that need stable IT.
Before changing provider or investing in IT
An audit helps establish what needs improvement and what can continue serving your business. We speak with the people responsible for everyday operations and IT, review configurations and examine available documentation. We look beyond individual devices to service dependencies: what would stop working after a failure and who would restore it. We agree the scope and exclusions before starting.
When you need a closer look
A review of the whole environment can be supplemented by a more detailed assessment of a specific area. Each service has a separately agreed scope.
Server audit
Windows and Linux configuration, administrator accounts, updates, backups and service monitoring.Network audit
Connections between devices and sites, access rules, firewalls, Wi-Fi and VPN.NIS2 audit
Assessment of safeguards and procedures against the agreed scope of NIS2 requirements.Backup and recovery
Preparing backups and checking how data and services can be restored after a failure.ISO 27001 · TÜV NORD Polska
TÜV NORD Polska has certified Virtline’s information security management system to PN-EN ISO/IEC 27001:2023-08. The published certificate states its scope and validity.
View Virtline’s certificateHow the infrastructure audit works
We adapt information gathering and tests to your environment and the agreed restrictions.
02
Interviews and review
We collect documentation and configuration information, then check selected settings, access, backups and monitoring. Tests that could place a load on the environment require agreement.
03
Analysis and report
We organise the findings and clarify discrepancies with administrators. The report describes the scope reviewed, findings, limitations and suggested order of changes.
04
Discussing recommendations
We deliver the report and answer questions. If you commission implementation or a follow-up review, we agree its scope, cost and schedule separately.
Practical scope
What we check and what you receive
We tailor these areas to the agreed scope. The report is intended for both management and administrators.
We review the specified computers, servers, network equipment and important applications. We describe their condition, configuration, updates and dependencies, and identify discrepancies with documentation.
We check how permissions are granted and withdrawn, administrator accounts, Active Directory and remote access where included in the engagement. We identify unnecessary access and settings that need improvement.
We review backups, available recovery-test results, monitoring and how problems are reported. We describe dependencies that could hinder recovery. Tests not performed are not presented as proof of effectiveness.
You receive findings, a description of the checks performed and prioritised recommendations. We identify limitations and matters requiring a management decision. We discuss the results and distinguish confirmed problems from issues needing further investigation.
Scope and limitations
The report describes the situation checked at a particular time and within a defined scope. It does not guarantee the absence of all vulnerabilities or certify your company’s compliance. If you need results mapped to a specific standard or customer requirement, we agree that before the review. Penetration testing and post-incident investigation require separate scopes.
IT infrastructure audit questions
How long does an audit take and what determines its price?
+
The number of sites and systems, the checks required, and the availability of documentation and contacts. After an initial discussion, we propose the scope, stages, report date and price. We do not set the duration solely by employee count.
Do we need to hand over administrator passwords?
+
Do not send passwords through the form or an ordinary email. We agree secure access with the permissions required; some work can use configuration exports or be carried out with your administrator. Access granted for the audit should be revoked afterwards.
Can we share the report with a customer or another auditor?
+
A report or summary can be prepared for a specified recipient. It contains sensitive information about your environment, so sharing and confidentiality need to be agreed. Suitability for particular requirements is established before the review.
Can you implement the recommended changes afterwards?
+
Yes, we can agree a separate remediation project or ongoing support. Your IT team or another provider can also use the report. Commissioning an audit does not oblige you to choose us for implementation.
Let’s agree what needs checking in your IT
Tell us why you need an audit, how many sites you have and which systems matter most. Include your preferred deadline. We will arrange access and confidential materials through a secure channel after speaking.
Discuss an IT audit