Cyber-Security

What is the goal of a security audit? National infrastructure protection would require that certain security attributes are present throughout the entire system. This commonality can be collected under the name "best practices' and can be measured with a standard security audit. But the goal of a security audit is not to achieve a passing score, but rather improve security.