Illustrative stock imagery from Pexels. Images do not identify the people, premises or events discussed and do not imply endorsement.
Reviewed 26 October 2026. Original publication date retained: 2023-09-05.
An IT support provider may hold access that is important to several customers. An audit can examine whether those responsibilities are understood and controlled without relying on anonymous claims about fewer incidents or more sales.
Questions to follow in an audit
- How are access rights agreed with each customer?
- Who reviews privileged accounts and staff departures?
- How are customer incidents escalated and lessons followed up?
Connect the records with practice
Trace one support account from customer approval through current permissions, a service record and the process for ending access.
These are illustrative audit trails, not findings about a named organisation, technical instructions or a guarantee of a particular result. The appropriate evidence depends on the activities, risks and agreed scope. The organisation remains responsible for its operations and legal obligations.
AAA provides independent certification audits. Confirm the applicable standard edition, scope and customer requirements before agreeing a programme. Request an indicative price or discuss your proposed audit.
Further reading: ISO information security.