Independent review and examination of records and activities to assess the adequacy of system controls, to ensure compliance with established policies and operational procedures, and to recommend necessary changes in controls, policies, or procedures. Note: In some publications, audit is used in conjunction or synonymously with the terms inspection or assessment; these terms are not interchangeable.
Sources:
CNSSI 4009-2022
under audit (security)
Independent review and examination of a system’s records and activities to determine the adequacy of system controls, ensure compliance with established security policy and procedures, detect breaches in security services, and recommend any changes that are indicated for countermeasures.
Sources:
NIST SP 800-82r3
from
ISO/IEC 7498-1:1994