Pete Finnigan's Oracle Security Weblog

I came across this short post describing 10 steps to creating your own security audit and even though its not about Oracle its worth a read to give you some ideas on the scope of an audit.

10 Steps to creating your own IT security audit

"Every business, including yours, has valuable IT assets such as computers, networks, and data. And protecting those assets, requires that companies big and small conduct their own IT security audits in order to get a clear picture of the security risks they face and how to best deal with those threats.

The following are 10 steps to conducting your own basic IT security audit. While these steps won't be as extensive as audits provided by professional consultants, this DIY version will get you started on the road to protecting your own company."