IT General Controls Assessment Services

Our team takes a personalized approach to assessing ITGCs. We start by getting a strong understanding of your organization, its objectives, and its compliance requirements in order to provide a complete and meaningful assessment scope. This helps us identify relevant IT processes and controls. It also allows us to begin to create a detailed roadmap full of recommendations that helps put your organization on the path to implementing a strong IT control environment.

Our Holistic Approach

Your information needs to be accurate and accessible to the people who need it – and safe from those who don’t. ITGC areas we can help evaluate and provide internal control recommendations include:

• Logical Access – We’ll take a close look at the authentication methods and password restrictions used to access your systems, and how logical access to your systems is being managed.
• Physical Security – How you are monitoring your data center’s environmental controls to limit the exposure to unplanned downtime (i.e., power outages, system failures, etc.) is vital – as is knowing whether your data centers and physical offices are protected with the right security measures. These are just a few of the areas we can work through in your tailored engagement.
• Backup – Timely, accurate, and available backups are critical to reducing the risk of the inability to recover data due to file corruption and cyberattacks. We will evaluate how your data is being stored and identify risks that should be mitigated by additional controls.
• Computer Operations – When multiple databases or systems interface, you have to be confident information is transferring in an accurate and timely manner. We will work with you to gain an understanding of critical data transfers and the controls in place to safeguard and protect the transmission of that data.
• Change Management – How your organization develops or promotes changes to your production environment can improve the way your company leverages technology and serves your customers. Conversely, system changes can create unplanned operational downtime due to lack of formal change management procedures. We will help you identify changes you need to make and create a plan to put them in motion.

Let’s Work Together

Don’t underestimate the importance of your data and the critical role ITGCs play in your business. Our team has the knowledge and experience it takes to make sure your ITGCs are helping maintain the security and integrity of your data while moving your business forward. Let us know how we can help.