IT RISK & GOVERNANCE AUDITING
IT audit requires breadth and depth of technology skills that only a firm like Global One LT can provide. Our resources possess technological skills within various specialties such as infrastructure and security, ERP systems, database management, project management, application security, or business continuity.
We follow practices suggested by the Information Systems Audit and Control Association (ISACA). Specifically, we will utilize COBIT (Control Objectives for IT), which is a risk-based, process-focused methodology that is used to establish a thorough understanding of the organization's audit objectives, the risks that threaten those objectives, and the relationships between those risks and the organization's controls.
IT Audit Methodology & Approach
IT audit methodology is based on our vast industry experience and addresses IT risk exposures across a variety of organizations.
- • General IT Controls – We can assess and recommend controls within each IT process related to change management, security, and IT operations.
- • Application Controls – We can determine which system configuration and account mapping controls have been designed based on appropriate business criteria, to secure data against inappropriate processing (by enforcing validity, completeness, and accuracy) and help ensure data integrity.
- • User Access and Security – In addition to the risk of unauthorized access to data, theft of sensitive or confidential intellectual property may also be a risk. We can determine if duties are adequately segregated and an overall security posture is maintained.
Our IT Audit Professional Resources
Our IT audit professionals have serviced a broad range of corporate, government, and non-for-profit entities and are led by directors and managers who are Certified Information Systems Auditors (CISA) and Certified in Risk and Information Systems Control (CRISC).
IT Risk Management and Governance Approach
IT Risk Analysis and Governance requires breadth and depth of technology skills that only a firm like Global One LT can provide. We follow practices suggested by the Information Systems Audit and Control Association (ISACA). Specifically, we utilize the Risk IT framework to help implement IT governance and enhance risk management. IT Risk Management process model we utilize is divided into three domains:
(courtesy ISACA)
Risk Governance:
- • Establish and maintain a common risk view
- • Integrate with ERM
- • Make risk-aware business decisions
Risk Evaluation :
- • Collect data
- • Analyze risk
- • Maintain risk profile
Risk Response :
- • Articulate risk
- • Manage risk
- • React to events
Global One LT can help with IT risk management to provide tangible benefits, e.g., fewer operational failures and surprises, improved information quality, greater stakeholder confidence, reduced regulatory concerns.
Our consultants have excellent education and experience. They have advanced management degrees and certifications like PMP, CISA, CRISC, Scrum Master, Lean Six Sigma.
