The audit of logical and physical security organization aims to ensure that:

• the security policies and procedures defined by the audited party to maintain the operational and security condition of an application, or of all or part of the information system, comply with the audited organization's security needs, the state of the art, or applicable standards;
• they properly complement the technical measures in place;
• they are effectively applied in practice;
• the physical security aspects of the application or information system are properly covered.