IT governance review
Policies, roles, risk management, and oversight of IT.
Advisory and assurance
IT audit
Assurance that your systems, access, and IT controls are sound.
Overview
IT audit: how we help
Your finance and operations depend on IT working correctly and under control. Our IT audit reviews how systems are governed, who can access what, how changes are managed, and whether data is backed up and recoverable, then reports gaps and fixes.
We follow recognised IT control frameworks, scaled to the size of your business. Fieldwork combines interviews, configuration reviews, and evidence testing, and findings are written for both your IT team and your board.
Scope, responsibilities, and any reliance on our findings are agreed in a written engagement letter.
What's included
Inside a it audit engagement
Access control review
Who can access what in your key systems, and whether that access is appropriate.
Change management review
How changes to systems and data are requested, tested, approved, and recorded.
Application and ERP controls
Built-in controls in finance, payroll, and operational systems.
Backup and continuity
Whether data is backed up, recoverable, and covered by a tested continuity plan.
Third-party and cloud review
Oversight of vendors, hosting providers, and cloud services.
Outcomes
What you can expect
Visibility of IT risk in business terms
Tighter access and change controls
Evidence for auditors, boards, and regulators
- 1A short conversation to understand your business and goals
- 2A written scope, timeline, and fee for your approval
- 3Delivery by an experienced consultant, with regular updates
- 4A clear report or deliverable with practical next steps
Questions
Frequently asked questions
01Is IT audit different from an IT security audit?
Yes. IT audit looks at governance and controls over systems and data. An IT security audit focuses on technical defences against threats. Many clients benefit from both.
02Which frameworks do you use?
We draw on recognised IT governance and control frameworks and tailor the scope to your size, sector, and regulatory needs.
03Can the IT audit support our financial audit?
Yes. Reviewing IT general controls and application controls gives your auditors more confidence in system-generated numbers.
04How does an engagement start?
We begin with a short conversation to understand your business, objectives, and constraints. We then send a written scope, timeline, and fee for your approval before any work starts.
Next step
Ready to talk about the right system for your business?
Tell us what you are trying to fix. We will recommend a practical path, with no obligation.
Book a consultation