IT Risk Audit
The CVM IT Risk Audit uses our proprietary risk framework to deliver a comprehensive, objective and fully documented report on the viability of a corporation’s Information Technology (IT) systems.
The Questions
1. The data contained within a company’s financial systems drives critical busines decisions on a daily basis. Are those systems reliable enough upon which to base the decisions?
2. Many, if not all, of the company’s critical business functions, financial data and proprietary corporate knowledge are tied up in IT systems and processes. Are the systems and policies robust enough to protect the company and maintain in its competetive advantage going forward?
The Answers
The CVM IT Risk Audit helps provide the answers to these questions. Through a standardized questionnaire and the collection of supporting data, we apply our IT Risk Framework across functional business areas defined by the client. The resulting matrix assigns a weighted risk score for each functional area and framework component, as well as an overall enterprise risk score.
The data is compiled and analyzed in two reports:
- Data Integrity Report
- Analysis of financial systems and data reliability
- Uses Sarbanes-Oxley sections 302, 404 and 409 as data integrity guidelines
- IT Risk Analysis
- Completed Risk Matrix
- Risk grading analysis which identifies exposure in critical components and functional areas
- Recommendations for improving risk score
- Complete supporting documentation
Call CVM today at 203.245.4504 or email us at sales@cvm.com.
|
|
 |
CONTACT |
For more information on business continuity services, please contact:
Charles Veth
203.245.4504 ext.101
cwv@cvm.com
|
| CVM IT RISK FRAMEWORK |
Security
> Network protection
> Application security
> Transaction auditing
> Security policies
> Physical security
> Change management
Business Continuity
> Power redundancy
> Disaster recovery plans
> Backup and recovery
> System redundancy
> Vendor reliance
Systems and Infrastructure
> Hardware, software, OS
> Support contracts
> Mission critical apps
> Industry standards
> Licensing compliance
Scalability
> Applications
> IT Staff
> Campus infrastructure
> Hardware and OS platforms
Pending Projects
> Planned upgrades
> Planned system migration
> New technology acquisition
> Support requirements
IT History
> Security issues
> Systems failures
> Upgrade and migration timelines
> Leadership changes
Cost
> Opportunity cost
> Vendor relationships
> Outside services
|
|
