IT Audit & Consultancy

We deliver a full range of IT auditing and consulting to assist organizations relying heavily on IT applications and automated systems in their day-to-day operations. We are well-positioned to assist banks, insurance companies and supermarket chains, retail stores, e-businesses, software and hardware vendors, data centers and sizable organizations with automated key controls to improve the use of bank core system, ERP systems, automated financial and business reporting. Our IT audit team could also lend support in the areas of statutory audits, due diligence and internal control reviews.

Our IT audit team helps address and identify issues related to IT-related risk for improvement of business operation. Our services provide an independent assessment of the effectiveness of IT-related internal controls and the extent of the objectives of IT governance achieved. We give you impartial professional views in formulating IT business plan and prioritizing IT projects to ensure that your business goals can be achieved through minimizing the risks of IT systems and applications.

Our strategic alliances with other successful IT consultancy firms and the strong technical support from our IT Audit Team of Crowe LLP in the United States enable us to offer unparalleled services for quality assurance of IT systems, minimizing potential losses arising from human errors and system defects. Our services include:

Assurance, Attestation & Readiness Servcies

• focus on Information Systems General Control Reviews
• help clients meet compliance requirements like Sarbanes-Oxley Act
• prepare a risk-based IT internal audit plan (IT co-sourcing/outsourcing)

IT Organization & Business Systems Effectiveness

• adopt the IT governance tool, COBIT to address strategic alignment, compliance, risk and resources management, and Internal Controls-Integrated Framework, COSO to increase the effectiveness and efficiency of operations, reliability of financial reporting

Business Continuity Management (BCM)

• design a BCM framework that incorporates necessary business process recovery, disaster recovery, and crisis management

IT Process Management

• review existing tools and software used for user management, controls design and implementation, IT services and change management

IT Security & Privacy Management

• review the network and operating system’s security to address the issues of information security and privacy
• provide internal and external penetration testing to identify weaknesses in the IT security system

For details, please contact Ms Ester Ip at (tel) +852 2894 6191