Ivan Spiteri
Director of Technology Advisory & Assurance
With technology increasing in sophistication and complexity, it is essential that the Board and Senior Management have access to leading edge Technology Risk Assurance skills that will bring value and insight to your business. As outlined below, we have a team of Technology Assurance specialists, supported by latest methods and leading edge tools:
IT Infrastructure Assurance
Our IT audit specialists are trained to operate alongside our financial auditors to add value to BDO Audit Methodology. This includes a review over the IT General Controls (ITGCs), automated application & business processing controls, batch processing risks and BDO’s data analytics solutions (using tools such Qlik, IDEA and SQL scripting).
Cyber Security
Our cyber security experts work alongside businesses to provide threat intelligence to senior management or conduct security health checks, vulnerability scanning and penetration testing, network security reviews, PCIDSS accreditation reviews, security breach response plan, cyber security strategy advice, the security policies to prevent an attack, protect strategies, the monitoring tools to deploy, and good practice response plans.
Access Management
Our methods include evaluation of authentication and identity management controls, deployment of tools to assess segregation of duties across systems or databases and review of privilege users.
Data Management
Our data experts provide skills in data analytics, data mining, database security, data privacy and data quality. They bring a wealth of experience and knowledge across most data environments, including Oracle, DB2 and SQL.
Application Level Risks
Our specialists in SAP, Oracle, Navision and other systems can tailor specific reviews to cover user commissioning, evaluation of roles & permissions, automated controls or system embedded workflows, change management, interface management. We can deploy security tools and data analytics to aid the quality of the outputs.
IT Resilience
Our specialists can assess the quality of your business impact assessments, disaster recovery plans, backup arrangements, testing and recovery approach.
Project and Change Management
With digital transformation comes challenge. Drawing on the experiences of working with many organisations going through change or IT projects in crisis, we can provide an assess the digital strategy, the quality of the functional or technical specifications, stakeholder engagement, project governance, project planning, financial management, controls design, data migration, testing plans, training approach, cut-over to BAU and management of 3rd parties. We tailor our health check to focus on the key challenges or risks facing the transformation programme.
IT Service Management
IT services continue to be outsourced/off-shored, located in the cloud or brought back in-house. We can provide the Board with assurance over any transition plans or the gaps in the current IT service delivery model (using an ITIL benchmarking assessment tool).