The configuration audit aims to verify the implementation of security practices compliant with the state of the art and the audited party's internal requirements and rules regarding the configuration of hardware and software deployed in an information system. These can notably include network equipment, operating systems (server or workstation), applications or security products.