Whether your data protection is effective depends on measures in different areas. You can take measures to protect your technical ICT infrastructure or your application systems. You can also take measures on an organizational and procedural level. Together these measures form a coherent whole.

Application controls, organizational and procedural measures can be:

• segregation of duties within and outside your applications
• taking away application authorization from employees who leave the organization
• changing the payment procedure
• restricting the authorization/competence of a user to an application
• using programmed input controls
• placing controls on the effective functioning of interfaces between applications.

Deloitte investigates whether the measures within your organization, procedures and applications guarantee the reliability and confidentiality of your data processing. We also advise you on how to enhance this measures system within your organization.