Technology Audit
In today’s data driven business environment it is critical for organizations of all sizes and in all industries to continually focus on protecting their systems and data. Technology audit’s role is to assess the organization’s ability to safeguard those digital assets, identify vulnerabilities, and recommend opportunities for improvement. Monaco’s internal audit professionals help internal audit functions and technology organizations identify risks and vulnerabilities as well as provide recommendations and solutions to protect organizational information assets.
IT Operational Audits
IT operational audits focus on best practices, productivity, cost efficiency and operational effectiveness within the functional areas of a business’s technology operations. These audits cover areas such as IT governance, IT strategy, end user security, development operations, software licensing, virus protection, effectiveness of backups, and the timely application of operating system patches. These audits also take into consideration the impact of technology and data in operational processes. Monaco IT consultants bring extensive experience in performing audits of a business’s IT operations.
Pre and Post Implementation Reviews
Implementing a new business system successfully requires adhering to the software development life cycle process. Systems implementations can be large initiatives that impact the entire organization. Business requirements need to be designed and approved, testing procedures need to be developed, security needs to be designed, data needs to be migrated, legacy systems need to be decommissioned, and the list goes on. Furthermore, if data must be migrated, an appropriate data transfer process needs to be designed and implemented to ensure the completeness and accuracy of the data. Based on our experience, those involved in implementations usually consider those aspects as secondary to the application go live time and budgetary constraints. Our professionals bring an independent third-party viewpoint and are experienced in the planning, execution, monitoring and oversight of large and small systems initiatives.
Sarbanes-Oxley – ITGC compliance audits
Sarbanes-Oxley (SOX) is an essential component of any public company’s financial reporting process. Establishing effective IT general controls over financial reporting requires an in-depth understanding of the IT risks and a practical and cost-effective approach to identifying and implementing the right controls to mitigate those risks. Monaco’s consultants have extensive experience in developing, optimizing and testing IT SOX programs. Monaco professionals utilize the COSO© 2013 Internal Control model to drive these reviews, assessing the primary control components of the framework: Control Environment, Risk Assessment, Control Activities, Information & Communication, and Reporting & Monitoring. Utilizing a sound control framework and proven experience, Monaco professionals have the foundation to deliver reliable recommendations for improvements and enhancements to their control environments to our clients.
Other IT Services
Change management process assessments
Information security policy development
Information security risk assessments
Security incident response program design / testing
Cloud computing security assessments
Application security assessments
Database security assessments
Disaster Recovery and Business Continuity program assessments