IT Risk and Assurance - Our services - Ernst & Young - United Kingdom

IT Risk and Assurance

ERP advisory – We provide independent advisory services throughout the entire ERP system lifecycle, covering selection, design, implementation and upgrade. We help establish and maintain a well controlled environment through the design, implementation and monitoring of effective and efficient security and controls. Our program risk management services help reduce risk and aid transparent status reporting.

Information security – We help organisations to identify and manage their information security risks. We help improve efficiency and effectiveness of security initiatives by assessing the current state, prioritising improvements and conducting projects to reduce risk and improve regulatory compliance.

Information management and process analytics – We help clients transform data into meaningful information. We help improve clients’ data governance and management, leading to better business decisions through use of more accurate information. We help clients leverage data analytics to facilitate internal monitoring and business insights, to enhance performance and/or reduce risk.

IT internal audit – We offer IT risk assessment services, helping clients develop and execute their internal audit plan to address IT-related business risks. We provide objective assessments of clients’ IT governance and control environments, aligned to their business and IT strategies. We help determine compliance with policies and other requirements, identify areas for cost reduction and control and process improvements.

IT risk and control advisory – We assess clients’ IT environments to identify and remediate control and performance gaps compared to leading practice. We align with industry standards (e.g., CobiT, ITIL), as well as stakeholder expectations. We help clients gain stakeholder buy-in, reduce risk, and increase value and visibility of IT cost.

Privacy – We help clients to effectively identify and manage privacy and data protection risks and compliance requirements. We work across our clients’ organisations to help meet stakeholder expectations and requirements.

Third party reporting – We provide clients with independent assurance as to the fairness of management statements to enhance stakeholder communication and increase audit efficiencies. We review outsourced process and control environments, assessing control effectiveness over a period of time. We assess against stated objectives, in accordance with reporting standards (e.g., AAF 01/06) or agreed procedures.

Software asset management – We help clients identify improvement opportunities to derive cost savings, increase value for IT spend and reduce the risk of breaching software licensing agreements.