Technology has become an inseparable element in forming business strategies and making crucial business decisions. It is essential that organizations strengthen their line of defense by managing, addressing and mitigating information technology related risks to ensure effective and efficient business operations.
KPMG’s IT Audit team ably supports and manages IT related risks for our clients ranging from public sector organizations to multinational businesses and emerging technology companies. Our team of experienced professionals is capable of performing effective assessment of IT control environments, analyzing data and control processes as well as assist in managing IT projects.
Our Services
IT Audit
With the increased importance of technology audit and assessments, IT Audit plays a vital role in understanding IT environments that require remediation and mitigation of risk. Performing detailed assessments or regular health checks to evaluate the effectiveness of IT controls in your organization will encourage more effective utilization of your invested technologies.
IT Assurance & IT Attestation
We provide third party assurance to outsourcing companies or shared services centers, giving them and their clients comfort over the shared services center’s internal control environment and processing controls. We provide customized services designed to International Standard for Assurance Engagements (ISAE) 3402 as follows:
— ISAE 3402 readiness assistance
— Type 1 ISAE 3402 examination
— Type 2 ISAE 3402 examination
— Local control report transformation into Type 2 ISAE 3402
System Implementation Review
Our team has the expertise to conduct the system implementation review and assess the readiness of your IT projects to provide comfort around the project prior to “Go-live”. Our methodology for early risk identification includes reviewing planned outcomes defined in earlier stages of the project to assess effectiveness of implementation and operations of the outputs and controls (both from system controls and data quality perspectives). Subsequent to the major systems implementation, our team has vast experience in helping organizations to validate the effectiveness of IT controls on their new systems/software.
Project Management Support
Our project managers are competent in both functional and technical knowledge, providing project management support throughout the IT project life cycle from start to finish. This includes project governance compliance, timely reporting of status updates to management, as well as timely delivery of project versus cost at the highest level of quality. Their seasoned experience will help steer benefit maximization from your IT projects.
SOX & ICOFR
We will conduct an analysis of your control processes to identify gaps, deficiencies and improvement areas to implement effective and sustainable remediation plans under Section 404 of the Sarbanes Oxley Act (SOX) for US SEC registrants companies and Internal Controls Over Financial Reporting (ICOFR).
Agreed Upon Procedures
We will carry out specific and in-depth procedures as defined by your management to perform an independent assessment on your IT environment. The engagement is carried out in accordance with International Standard on Related Services. Factual findings from the procedures would help the management to make fact-based decisions and to modify and improve existing procedures to align with your organization’s objectives.
Loaned Staff or Secondment Engagement
We have dedicated client service team for secondments. Our IT audit specialists are well trained and have the competency in carrying out special tasks covering various IT governance, risk management and IT policies aspects. Our team has various experience in project management, system and technological implementations or assessment of business level operational controls.
The KPMG difference in secondment engagements are:
- Serving you with our best people - We will ensure that you are allocated the right people with the knowledge, experience and commitment to deliver you top quality service.
- Communication - Clearly defined communication channel with a commitment to open and constant dialogue.
- Priority response time - All queries will be acknowledged within 24 hours, and any issues which are unable to be resolved immediately will be addressed in a timely manner to ensure your deadlines and goals are met
- Performance Monitoring - Secondees’ work performances will be monitored on a weekly basis for the 1st month to ensure smooth integration and transition to your work environment, subsequently shifting to bi-weekly / monthly (as required).
