You have designed specific measures to ensure safety in your organization. However, rules are not always lived by and software sometimes fails. Besides that, your company's activities and processes can change with time.

It is important for you to make sure that the measures you set out are still efficient.

After creating the security audit you can use this audit to check your organization once, but preferably with a set out frequency.