Document background
The Security Audit Policy serves as a foundational document for organizations operating in New Zealand to establish and maintain effective security audit processes. This policy becomes necessary when organizations need to systematically evaluate their security controls, ensure compliance with New Zealand's regulatory requirements, and maintain robust security standards. The document provides comprehensive guidance on conducting security audits, including scope definition, methodology, frequency, documentation requirements, and reporting procedures. It addresses requirements under New Zealand's Privacy Act 2020, relevant sections of the Crimes Act, and other applicable legislation, while incorporating international security standards and best practices. The Security Audit Policy is particularly crucial in today's digital environment where organizations face increasing cybersecurity threats and regulatory scrutiny.
