EnhancIT’s business and IT alignment methodology is based on our vast industry experience and addresses IT risk exposures across a variety of organizations. We will focus our attention on three main areas of your business objectives:

• General Technology Controls

  – Since information technology permeates all aspects of an entity’s business, we can assess and recommend controls within each IT processrelated to change management, security, and IT operations.

• Application and Process Controls

  – We can determine which system configuration and account mapping controls have been designed based on appropriate business criteria, to secure data against inappropriate processing (by enforcingvalidity, completeness, and accuracy) and help ensure data integrity.

• User Access and Security

  – In addition to the risk of unauthorized access to data, there may be a risk of theft of sensitive or confidential intellectual property. We can determine if duties are adequately segregated and an overall security posture is maintained.

 

We follow practices suggested by the Information Systems Audit and Control Association (ISACA). Specifically, we will utilize COBIT(Control Objectives for IT) which is a risk-based, process-focused methodology that is used to establish a thorough understanding of the organization’s audit objectives, the risks that threaten those objectives and the relationships between those risks and the organization’s controls.

Our approach includes the following:

	Walk-through of each IT process, identify business risks,assess risk levels, assign control objectives and identify corresponding controls where applicable.
	Independently test each of the identified IT process areas and collect the appropriate evidence supporting the testing activities and subsequent control evaluation.
	Assess the operating effectiveness of each key control activity based on the test results and the supporting documentation.

For all control or process failures EnhancIT can assist with determining the required remediation activities to address the outstanding deficiencies and prioritize the identified remediation plans.

Which means - Don’t wait until it’s too late to fix IT!