The workshop “Basic Audit of Active Directory Domain Services” took place in Skopje from September 28 to October 1, 2026. The event was organized within the framework of the Balkan Information Technology Audit Program. The program aims to strengthen the capacities of Supreme Audit Institutions in the region regarding the auditing of information technology systems, cybersecurity frameworks, and digital public services. It also seeks to foster regional cooperation and establish a group of regional IT audit experts. Another objective is to enhance digital transparency and resilience against cyber risks in the public sector.

Participants shared practical experiences and methodologies by presenting specific IT audit cases. Active Directory is the service that organizes and manages users, computers, and other resources within institutional networks; it controls access to specific data and systems. Consequently, familiarity with it is essential for any IT auditor. Participants were introduced to the fundamental principles of Active Directory and the associated security risks. They also learned about the new security features in the 2025 version of Microsoft Active Directory Domain Services. The workshop included hands-on practice in extracting and analyzing data via PowerShell commands using a specially prepared VMware image, as well as the use of auditing tools based on CIS standards to compare findings against international best practices.