| |
|
|
| |
| |
|
|
[US (Sarbanes-Oxley), EU (8th
Directive), Canada (MI 52-109,
Australia (Rec 7.2), India (Clause
49)]
 |
|
Project management |
| |
|
|
 |
|
Risk assessment |
| |
|
|
 |
|
Process and controls documentation |
| |
|
|
 |
|
Testing and evaluation |
| |
|
|
 |
|
Remediation strategy and
implementation |
| |
|
|
 |
|
Compliance tools setup |
Internal
Audit
| [Co-sourcing] |
| |
|
|
 |
|
Internal Audit Co-Sourcing |
| |
|
|
 |
|
Governance Reviews |
| |
|
|
 |
|
Risk and Controls Assessment |
| |
|
|
 |
|
IT Audit |
| |
|
|
 |
|
Fraud Risk Management |
| |
|
|
 |
|
External Quality Assessments |
| |
|
|
|
|
| |
|
|
|
|
|
 |
| |
|
|
| |
| |
|
|
IT
Governance and Security Reviews
[US (GLBA, HIPAA), EU (Data Privacy),
COBIT and ISO 27001 ]
 |
|
IT governance reviews
|
| |
|
|
 |
|
Enterprise security assessment |
| |
|
|
 |
|
IT general process risk
& controls evaluation |
| |
|
|
 |
|
Regulatory compliance
assistance |
| |
|
|
 |
|
Third party service provider
security review |
| |
|
|
 |
|
Documentation of IT policies
and procedures |
Application
Due Diligence
| |
| |
|
|
 |
|
Business requirements
assessment |
| |
|
|
 |
|
Pre and post implementation
reviews |
| |
|
|
 |
|
Application controls evaluation |
| |
|
|
|
|
| |
|
|
|
|
|