IT Audit and Review

Our IT Audit and Review services are conducted to ISACA standards providing management with clear evidence based statements of risk and opportunity related to their IT and IS operations, with recommendations as appropriate.

As jargon free as possible, our reports are written to be understood by the whole management team.

Who can benefit from an independent IT audit or review?

• Organisations large or small that uses information based technologies and relies on these technologies for critical or significant amounts of process with their organisation.
• Organisation about to embark on development of an IT strategy. The output from a structured audit is invaluable input to the strategy process.
• Any organisation seeking external investment or looking to sell. Specialist IT audit now forms a regular part of the due diligence process. running your own audit helps you configure your operation to maximise its appeal to investors.

All reviews and audits are conducted against an agreed scope of work set out prior to commencement of the assignment.

]Our reviews are compliance based and look at conformance to process and standards. As part of the reporting we report on any weakness and risks as well as opportunities from both a technical and business perspective.

Audits are configured to meet specific needs and can be most easily split into the following.

Operational Audits - These are designed to examine the control structures in a given process or set of processes or specific area of a process. Operation components typically form part of due diligence.

Administrative Audits – These are configured to look at operational efficiency and productivity within a given organisational structure.

IS/IT Audits – These combine collection and analysis of a broad spectrum of information from which we can provide a statement of assurance that the processes and controls in place provide reasonable protection against undesired events either preventing them or detecting and correcting them in a timely manner.

Specialized Audits - These can include audit of internal controls of service companies (SAS/70, ISAE 3402). These reviews are designed to provide external parties assurance that a service companies internal controls are satisfactory.