This is a significant step for the Auditor as the Auditor has to select a profile from the predetermined profiles or has to enforce the Organization's existing policies. The Secure Auditor has the following profiles available for the Auditor to use:
- CIS Profile - This profile is designed by following the standards of Center for internet Security and NSA.
- ISACA Profile - This profile is designed by following the Information Systems Audit & Control Association standards which use COBIT framework.
- SANS Profile - This profile is designed by following System Administration, Audit, Networking and Security standards for Auditing.