Security Audit Report

Detects security audit reports including SOC 2, ISO 27001, and IRAP findings.

Type

keyword_list

Confidence

medium

Confidence justification

Medium confidence: keyword-based detection requires corroborative evidence for accurate identification.

Jurisdictions

au

Regulations

AML/CTF Act (Cth), IPA 2009 (Qld), Privacy Act 1988 (Cth)

Frameworks

ISO 27001, NIST CSF, PCI-DSS

Data categories

security, audit

Scope

narrow

Risk rating

9

Should match

• Security audit report: SOC 2 Type II with ISO 27001 control assessment — Test match 1
• IRAP security assessment: security control findings and audit results — Test match 2
• Security certification audit: compliance audit and control objective review — Test match 3

Should not match

• Security guard audit of premises — Non-match 1
• Home security system review — Non-match 2

Known false positives

• Physical security or home security references. Mitigation: Require IT security framework terms like SOC 2, ISO 27001, or IRAP.