Technology & Security Risk Services - Ernst & Young - Australia

Today, the health and viability of most businesses is heavily dependent on the strength and security of their information technology (IT) infrastructure.

As a result, IT has become a high-priority issue in executive suites and corporate boardrooms, driving top management to provide proactive sponsorship for efforts that will ensure adequate IT security and availability. And create an operating environment that effectively manages — and mitigates — risks.

We can help you focus on fundamental as well as emerging IT issues as you develop and execute plans to respond to stakeholder expectations. Our services are based on insights into how leading organisations prioritise their efforts to ensure that IT investments provide maximum security and risk mitigation in the most cost effective manner.

Our services are backed by extensive technical competencies, which include:

• Helping to protect IT assets against external viruses, cyber terrorism and other malicious attacks and internal security threats
• Advising on software application controls integrity
• Improving IT processes
• Addressing regulatory compliance on IT applications

Our areas of focus include:

IT for assurance: Third party reporting, application controls and security, information security

IT for risk: Third party reporting, application controls and security, information security, IT effectiveness, program advisory services

IT for performance: Information management and analysis, application controls and security, information security, IT effectiveness, program advisory services

Technology & Security Risk Services – areas of focus

The Ernst & Young Technology and Security Risk Services team includes experienced professionals in the information technology, performance improvement, and assurance areas.

We can help you in these areas:

Application Controls and Security
There are several reasons to focus on assessing, improving, and monitoring your ERP application controls and security. Some key benefits include: increased confidence by mitigating risks, increased reliability with an independent assessment of application controls, controlled environment effectiveness to balance efficiency and effectiveness of controls, and faster results from a global network of experienced and independent skilled ERP professionals.
For more information contact Mark Brogan  +61 3 9288 8071

Information Security
In today's high-tech and interconnected world, organisations need effective information security management processes that protect while enabling the business to cope with diverse threats from internal and external sources. Information security should be viewed as part of an integrated risk management process that enables the business and manages risk as the organisation expands into new business ventures. The effectiveness of this integration is a critical success factor for business growth and information security risk management.
For more information contact Mike Trovato  +61 3 9288 8287

IT Effectiveness
Information Technology is a fundamental component of day-to-day operations and a significant area of investment for many organisations. However, many are challenged to realise the intended benefit from their investment. To realise greater benefits, and fulfil IT's mandate of value creation, cost rationalisation, and risk management for the entire company, it is crucial that companies increase the strategic alignment of the business and IT, improve IT governance practices, increase IT's operating efficiency, and measure IT's performance in business terms.
For more information contact Jeff Eberwein  +61 3 9288 8600

Third Party Reporting
Your stakeholders are often required to trust what you communicate to them because they have no way of independently verifying what you report. In situations where the risks are high, Third Party Reporting (TPR) Services can provide an independent assessment of your statements and representations to help build a higher degree of confidence and commitment from your stakeholders.
For more information contact Jennifer Arnold  +61 3 8650 7538

Program Advisory Services
Are you investing in the right programs? Will they deliver on time and budget? Will they achieve the outcomes, benefits you are seeking?
'Change' can be difficult to achieve. Coupled with the complexity inherent in large programs, external stakeholders, sponsors and managers are under increased pressure to demonstrate their programs and projects will deliver to expectations. The need for success in both capital projects and business improvement projects is fundamental to a sound, sustainable business. Our Program Advisory Services can assist with the success of your programs.
For more information contact Terry Shipham  +61 2 9248 5668

Information Management and Analysis
Making good business decisions without reliable information can be difficult, if not impossible. Most organisations have vast amounts of operational data within their IT systems. Unlocking critical information to improve business insight requires an efficient and cost effective process for acquiring and analysing data.
For more information contact Craig Macaulay  +61 3 8650 7590