Home || Fraud Detection | Analytics | Data Management | Information Security || Scillani

Some advice

It is easy to be prepared for an audit. An audit is for job for an auditor to find audit evidence to prove that you have implemented internal controls. To prove existence you need to describe procedures, roles and responsibilities.

In advance of the audit you should ask about the objectives for the audit, to be able to prepare documentation that can be useful when the audit is done.

When you're being audited you must assign time and to the extent other people need to be involved, you should make reservations in their calendars.

If you mange the outcomes of an audit properly then it can be used as input in your improvement program.

Focus On

COBIT

We often use COBIT Assurance Guide in our audit work.

ACL

We have long time experience in using the ACL software as a tool in audit work.

IT Audit

[An assurance that will provide credibility]

Every organization must have an established control environment, to some extent formal and clear and in others cases informal and difficult to understand. When you are being audited, most often is a part of the financial audit, you often will have remarks that may be extensive to attend to. By using us as IT Auditors we can do this audit to verify that you have implemented proper internal controls.

Have you received and audit report with remarks or are you concerned about how well you manage your IT-environment. For us IT-Audit is about verifying that IT is efficient and effective and it can be used as a catalyst. We can assist you with this as independent IT-auditors.

General IT-controls: To ensure a basic level of internal controls for your IT environment, a General IT-controls audit will provide with assurance that it is efficient and effective. We can do this audit on your organization or help you prepare for one.

Application controls: For critical applications an Application controls audit will provide you with assurance that it works as intended and is maintained with a desired level of internal controls. Our approach for an application controls audit is not only interviews and review of documentation, most often we involve data analysis or penetration testing.

Issue specific controls: An IT-audit can target a specific issue with its objective. We have been involved in a wide range of issues such as Business Continuity Management and disruptions, Integration and data exchange, Post Project Review, Post Implementation review. If you have an issue that you need to address, then we can have a discussion about it.

Data analysis: In current organizations most often IT systems process high data volumes, than can be used to verify compliance against policies and procedures. We have the skill and experience in working with data analysis, where we use tools such as ACL and Idea.

(c) 2003-2012 Scillani Information AB
Phone: +46 (0)40 543 131, Fax: +46 (0)40 543 130, E-mail: info@scillani.se, Internet: www.scillani.com