
An Information security audit is a systematic evaluation of the cyber security of a company's information system by measuring how well it conforms to a set of established criteria. The companies are expected to follow reasonable security practices to protect them under Section 43-A of IT Act, 2000.