Advisory Risk ITRA IT Internal controls - Ernst & Young - Russia

IT Internal Controls

Some of the measures taken to mitigate business risks are intertwined with IT operations. Our IT risk and assurance professionals assist in the design, implementation and improvement of IT Internal Controls for information security, applications, networks and IT programs. They also help companies with monitoring the operating effectiveness of the controls, and they provide advice by certificates and third party reporting.

Our areas of focus include the following services:

• Application controls and security
• Business continuity management
• Continuous control/process monitoring
• Information security (including Attack & Penetration, ISO 27001 certification)
• IT contract risk
• IT infrastructure controls and security
• IT risk remediation
• Privacy
• Third party reporting
• Vendor selection assistance