IT Audit
The incessant development of information technology has changed the way organizations work in many ways. The pen and paper of manual transactions have made way for the online data entry of computerized applications.
IT risk assessment
Management requests to monitor and report on their risk posture continues to increase. Common questions related to information and technology are:
- Are we at risk?
- How risk mature are we?
- How do we compare to our peers from a bench-marking perspective?
- Are we compliant to laws and regulations?
- Are we prepared to comply with upcoming laws and regulations?
- What is our strategy moving forward?
- Is our IT strategy aligned to our business and IT risks?
Our IT Audit practice has recognized capabilities and subject matter experience assisting clients in understanding areas of business and industry risk (governance, process, operations, and IT) that translates and aligns IT risk components to the business, with the ability to go beyond a company’s standard areas of IT controls and to ensure business-IT alignment. For these risk assessments we use frameworks like COBIT, ISO, and ITIL
IT process and controls audit
IT process and IT general computer controls are key to safeguarding assets, maintaining data integrity and the operational effectiveness of an organisation.
We offer services that identify, develop and test internal controls and policies. Our control reviews are created and implemented to address management objectives ranging from business process, to application and technology infrastructure controls.
Invariably, our reviews are in the context of business and/or audit risk. Not only do we seek to highlight significant exposures, we also go the extra mile to recommend potential solutions for risk mitigation.
Compliance audit
Our IT Audit practice has recognized capabilities and subject matter experience assisting clients in identifying, bench-marking, rationalizing and evaluating controls around relevant application systems and related IT infrastructure that support significant flows of financial transactions and business processes that need to be compliant to specific laws and regulations.
Pre- / Post-implementation reviews
Our approach in systems pre-implementation reviews synchronizes itself with the project life cycle, focusing on the design, development and testing of internal controls throughout the business process transformation and systems development/stabilization process. Our post-implementation approach focuses on determining whether the system meets the business requirements effectively.
Our IT Audit practice performs business process & application controls reviews, security reviews, data conversion and interface reviews, project governance reviews and so forth.
Data analytics
Data Analytics can help an organisation to provide insights to the business by developing deeper understanding of business risks and controls effectiveness and industry trends, become adaptive to risks and shift from stagnant or point-in-time reviews to focused implementation of on-going or continuous controls monitoring capabilities.Our practice has several tools available to perform data analysis.
