Consulting · ICT audits · FM & healthcare

An honest assessment of where your technology actually stands.

An ICT audit gives you a clear, independent picture of your technology environment, what's working, what's a risk, and what's costing more than it should. We specialise in complex, multi-site environments including facilities management and healthcare.

Book a Discovery Call What's included

ISO 27001 certified ISMS Fixed scope and fee before we start Certified consultants, dedicated PM

ICT audit · written report

Findings: rated by risk

Executive summary a board can act on
Technical remediation list
A prioritised risk register
A 12-month roadmap

How the audit runs

Scoping
Discovery
Analysis
Yours to keep

The kind of audit that tells you what you actually need to know.

An audit by your own IT team, or by your current MSP, has a conflict of interest built in. We come in with no prior relationship, no ongoing commercial stake, and no reason to shade findings. You get the truth. And a clear plan for what to do with it.

Back to Consulting →

Every layer reviewed, every finding clearly prioritised.

We scope each audit to the areas that matter most for your organisation, whether that's a full estate review, a specific infrastructure layer, a vendor assessment, or a compliance-focused audit. No two audits are the same, because no two environments are.

Infrastructure & applications

Infrastructure audit: Servers, network, storage, end-of-life and end-of-support assessment
Application and licensing audit: What you're running, what you're paying, what's redundant

Security & data

Security posture review: Control coverage, vulnerability exposure and access management
Data governance: Data management and retention compliance review

Resilience & vendors

BC/DR review: Business continuity and disaster recovery capability assessment
Vendor performance assessment: Are your current providers delivering what they're contracted for?

Operational & multi-site

OT audit: Operational technology assessment for facilities management environments
Multi-site standardisation: Consistency of controls across locations

An ICT audit often surfaces strategic questions about technology direction. Our IT Strategy service builds the roadmap that addresses what the audit uncovers.

Specialists

FM and healthcare specialists.

Facilities management and healthcare organisations have technology challenges that generic IT auditors don't fully understand: operational technology, complex regulatory environments, multi-site inconsistency, and the tension between uptime and security. We've audited these environments before. We know where to look.

What generic IT auditors don't fully understand

Operational technology
Complex regulatory environments
Multi-site inconsistency
The tension between uptime and security

We know the sectors where ICT complexity is highest.

Most ICT audits are straightforward in a simple office environment. Our value is in the complex ones: multi-site, regulated, and operationally critical environments where the stakes are real.

Facilities management

Government and commercial FM contracts require technology that's consistent, auditable and secure across dozens or hundreds of sites. We understand the operational technology layer, the compliance obligations and the commercial reporting requirements.

Healthcare

Clinical environments have specific requirements around data sovereignty, system availability and integration with state and national health infrastructure. We've worked with hospitals, health networks and allied health providers across South Australia.

Government

Government & public sector

Government entities face unique procurement, compliance and reporting obligations. We understand the ASD ISM, Essential Eight requirements, and the audit standards that apply to government technology environments.

Audits we've delivered.

Live clinical environment · Downer partnership

Sunshine Coast University Hospital

Independent ICT audit for one of Queensland's largest public health facilities, delivered in partnership with Downer.

Read the case study →

Local government · Audit into delivery

The Barossa Council

A current-state audit across identity, servers, network, backup, endpoints and Microsoft 365, which became the Council's prioritised 12-month roadmap.

Read the case study →

What you get

What lands on your desk at the end.

The report is yours to keep and act on, including if you act on it with someone else. An audit that only makes sense if you then hire us is not an audit.

Area

What we look at

What you receive

Security & governance

We look atPosture against the ACSC Essential Eight and ISO 27001, access and identity, backups and recovery testing

You receiveA prioritised risk register

Cloud & infrastructure

We look atMicrosoft 365 and Azure configuration, servers, network, and the hardware nearing end of support

You receiveA stability and cost review

Operations & licensing

We look atSoftware assets and licence position, what you are paying for versus using, and where documentation is missing

You receiveA 12-month roadmap

Two versions of the findings, because two audiences need them. An executive summary a board can act on, and a line-by-line technical remediation list an internal IT team or your incoming provider can work through.

Five phases, scoped before we start.

Most of it happens without touching your team. The parts that need access are agreed up front, in writing.

01 · Agreed in writing
Scoping
What is in scope, what access we need and what we will not touch, settled before anything begins.
02 · On site and remote
Discovery
Senior engineers on site for the parts that need eyes in the room, with cloud and network assessed remotely.
03 · Against frameworks
Analysis
Findings mapped to the Essential Eight and ISO 27001, and rated by risk rather than listed by system.
04 · Two audiences
Reporting
An executive summary and a technical remediation list, written to be read by different people.
05 · Face to face
Debrief
We walk you through it and answer questions. The report is yours either way.

Got questions? We have answers.

Something else? Call 1300 080 000.

How is an ICT audit different from a managed services review?

A managed services review is conducted by your IT provider. It tells you what they think of their own work. An ICT audit is independent. We have no relationship with your current vendor and no stake in the outcome. That independence is the point: you get an honest assessment of whether your technology is fit for purpose, whether you're getting value from your current providers, and what the risks actually are. If everything's fine, we'll tell you that too.

Do you specialise in any particular industries?

We have deep experience in facilities management (including government FM contracts), healthcare, and multi-site organisations. These sectors have specific characteristics: high operational technology exposure, complex regulatory requirements, distributed sites with inconsistent standards, that require more than a generic IT audit approach. We understand the operational context, not just the technology.

What does the audit deliverable look like?

You receive a written report with three components: an executive summary that gives leadership a clear, jargon-free view of findings and risk; a detailed findings register with each issue rated by severity and with specific remediation recommendations; and a prioritised action plan that sequences what to fix first and what can wait. We present findings in person. So decision-makers understand the context, not just the list.

Downer partnership

External ICT auditing for Australia's major hospital environments.

InterIntra partners with Downer to deliver independent ICT auditing services at the Royal Adelaide Hospital (RAH) and the Sunshine Coast University Hospital (SCUH). Our audits assess ICT infrastructure, vendor performance, security posture and lifecycle risk across complex, multi-site clinical environments.

Enquire About FM Audits

Delivered across