Outsourced Information Systems Audit

  • Home
  • Outsourced Information Systems Audit
  • IT General Controls (ITGCs)

    IT General Controls refer to the policies and procedures that provide a basic level of security and control over an organization's information technology infrastructure. An ITGC assessment reviews the effectiveness of these controls and provides recommendations for improvement. The purpose of the assessment is to ensure that critical systems, data and information are protected from potential threats and risks. Benefits of this assessment include increased security and protection of sensitive information, better control over IT systems, and improved compliance with regulatory requirements.

  • Internal Audit for ISO 27001

    This internal audit focuses on evaluating the implementation and effectiveness of an organization's information security management system (ISMS) in accordance with the ISO 27001 standard. The audit covers various domains of information security including access control, risk management, and incident response. The purpose of the assessment is to identify areas for improvement and ensure that the organization's ISMS is aligned with best practices. Benefits of this audit include improved information security, better alignment with international standards, and increased confidence in the security of sensitive information.

  • Internal Audit for ISO 22301

    This internal audit focuses on evaluating an organization's business continuity management system (BCMS) in accordance with the ISO 22301 standard. The audit covers areas such as crisis management, disaster recovery, and business continuity planning. The purpose of the assessment is to ensure that the organization is prepared to respond to disruptions and minimize the impact on its operations. Benefits of this audit include improved resilience, better alignment with international standards, and increased confidence in the organization's ability to manage disruptions.

  • Internal Audit for ISO 20000

    This internal audit focuses on evaluating an organization's IT service management system (ITSM) in accordance with the ISO 20000 standard. The audit covers areas such as service delivery, service level management, and problem management. The purpose of the assessment is to ensure that the organization's ITSM processes are effective and aligned with best practices. Benefits of this audit include improved IT service delivery, better alignment with international standards, and increased efficiency in managing IT services.

  • Skills Framework for Information Age Assessment

    This assessment focuses on evaluating an organization's digital skills and capabilities. The assessment covers areas such as data analysis, cybersecurity, and digital marketing. The purpose of the assessment is to identify areas for improvement and support the development of a digital skills strategy. Benefits of this assessment include improved digital competency, better alignment with industry trends, and increased competitiveness in the digital marketplace.

  • PCI DSS Scoping and Internal Assessment

    This assessment focuses on evaluating an organization's compliance with the Payment Card Industry Data Security Standard (PCI DSS). The assessment covers areas such as data protection, access control, and incident response. The purpose of the assessment is to ensure that the organization is handling sensitive payment card data securely and in accordance with regulatory requirements. Benefits of this assessment include improved data security, better alignment with industry standards, and reduced risk of financial penalties

  • Cobit Assessment

    This assessment focuses on evaluating an organization's governance of enterprise IT (GEIT) in accordance with the Control Objectives for Information and related Technology (COBIT) framework. The assessment covers areas such as IT governance, risk management, and compliance. The purpose of the assessment is to ensure that the organization's IT systems are aligned with its business goals and that IT decision-making is transparent and accountable. Benefits of this assessment include improved IT governance, better alignment with industry standards, and increased efficiency in managing IT systems.

  • SOC Audits

    SOC (System and Organization Controls) audits are evaluations conducted by independent parties to assess the internal controls within a service organization that have an impact on the financial reporting of the entities it serves. These audits review the design and performance of the service organization's controls related to areas such as security and availability to ensure they are functioning as intended.