The internal audit function is undergoing a significant extension to include IT systems and operations. Organisations need to know that their systems remain secure and that they keep delivering value.
However, conducting IT assessments requires specialised knowledge which may not be available in house. We can support your internal audit team with competencies in a great variety of IT domains, and offer the latest techniques, tools and intelligence.
External auditors will thus have more confidence in the overall control and security of the environment.
Providing a wide range of IT audit services, our experts are certified internal auditors with broad experience in many business sectors, including finance, telecommunications, media, utilities, aviation, transportation, logistics, manufacturing, technology, health care, pharmaceuticals and chemicals.
The following internal IT audit services are offered by our Deloitte experts:
IT Security
Based on security standards, we assess the function of the Corporate Security Officer and the organisation of security functions
IT infrastructure security
Building on our Assess range of services, we perform deep attack and penetration testing on a one-off or a regular basis.
IT application security
Source code analysis, database security reviews, web server to mainframe transaction reviews, etc.
SAP security
We perform a thorough security audit of the SAP environment to uncover sources of fraud due to technical vulnerabilities.
SAP control assurance
We perform a review of the SAP roles and authorisation processes to uncover sources of fraud due to weaknesses in the process control.
IT Governance
We assess the control over the IT function, using for example, the COBIT standard.