Audit Template

Network Security Audit Template

A structured audit template to evaluate the security of your organisation's network infrastructure.

Synaptic Technologies · v1.0 · 2026

Your network is the backbone of your business. A compromised network can expose every device, system, and piece of data connected to it. This audit template guides you through a structured review of your network security controls — from perimeter defences to internal segmentation and monitoring.

Audit Information

Organisation Name—

Audit Conducted By—

Date of AuditDD/MM/YYYY

Scope (sites/locations covered)—

Next Audit DueDD/MM/YYYY

Perimeter Security

A next-generation firewall (NGFW) is deployed at the network perimeter.

Firewall rules are documented, reviewed, and follow a deny-all default policy.

Unnecessary inbound ports and services are blocked.

Intrusion Detection/Prevention System (IDS/IPS) is deployed and active.

Internet-facing services are limited to only what is business-essential.

DDoS mitigation is in place for internet-facing services.

Network Segmentation

The network is segmented into VLANs (e.g. corporate, guest, IoT, servers).

Guest Wi-Fi is isolated from the corporate network.

IoT and operational technology (OT) devices are on a separate, restricted network.

Server infrastructure is in a dedicated, access-controlled network segment.

Inter-VLAN routing is controlled and only permitted where required.

Wireless Security

All wireless networks use WPA3 or WPA2-Enterprise encryption.

Default SSID names and router passwords have been changed.

Wi-Fi passwords are changed at least annually or when staff leave.

Rogue access point detection is in place.

Wi-Fi coverage is reviewed to prevent signal leakage outside the premises.

Remote Access & VPN

All remote access to internal systems is via an encrypted VPN.

MFA is required for VPN access.

Remote Desktop Protocol (RDP) is not exposed directly to the internet.

VPN access is restricted to authorised users and devices only.

VPN session logs are retained and reviewed.

Network Devices (Routers, Switches, APs)

All network devices are running current, supported firmware.

Default credentials on all network devices have been changed.

Management interfaces (SSH, HTTPS) are restricted to authorised IP addresses.

SNMP v1 and v2 are disabled; SNMPv3 is used if SNMP is required.

An up-to-date network diagram exists documenting all devices and connections.

Monitoring & Incident Detection

Network traffic is monitored for anomalies and suspicious activity.

Firewall and network device logs are centralised and retained for at least 12 months.

Alerts are configured for critical events (port scans, brute force, unusual data transfers).

A process exists to review and respond to network security alerts.

Network performance baselines are documented to help identify anomalies.

DNS & Email Security

DNS filtering is in place to block access to known malicious domains.

DNSSEC is enabled on your domain.

SPF, DKIM, and DMARC records are correctly configured for your email domain.

Email gateway filtering is in place to block malicious attachments and phishing links.

Risk Rating Guide

For each finding, assign a risk rating:

CriticalImmediate action required. Significant risk of breach or data loss.

HighAction required within 30 days.

MediumAction required within 90 days.

LowBest practice improvement. Address within 6 months.

InformationalNo immediate risk. Note for future consideration.

This template is provided by Synaptic Technologies for internal use. It does not replace a formal penetration test or professional security assessment. Contact us at [email protected] for a professional network security review.

Need a Professional Network Audit?

Our network security team can conduct a thorough audit and provide a prioritised remediation plan.