ITQAN

Section two

Infrastructure

Servers, cloud, accounts and permissions, and admin surfaces. We start from an asset list the owner signs.

When it is requested

A company that wants its servers, cloud, accounts, or admin surfaces reviewed.

What the assessment covers

  1. 01We start from an asset list the owner signs: what is in the review and what stays out.
  2. 02Accounts, permissions, and admin surfaces are in scope only when they are named in writing.
  3. 03The report is confidential and ordered by severity, with remediation guidance. It is not a public procedure.
  4. 04Construction and assessment stay separate contracts, even when the infrastructure carries an app we built.