Audit and IT Risk Consulting

We offer SOC 1, SOC 2, SOC 2+, and SOC 3 audit reports that demonstrate the robustness of the control environment and secure data handling in service organizations. We assist in selecting the most suitable form of reporting and preparing for attestation.

We provide assurance over processes and controls in both non-financial and financially relevant areas. We assist with ESG, compliance, and the control environment of service organizations.

We implement management systems according to ISO standards (e.g., 27001, 22301, 42001) and ensure certification through EY CertifyPoint. We also offer training and readiness assessments for ISO certifications. We provide integrated audits that combine multiple standards or reports at once.

We assess the risks involved in implementing new systems or transforming existing ones, cloud migration, and other changes. Our evaluations focus on areas such as governance, data quality, security, and operational readiness.

We assist in meeting the requirements of NIS2, DORA, AI Act, GDPR, and other regulations. We translate legal frameworks into specific processes, controls, and evidence. Additionally, we are capable of providing compliance assurance with individual regulatory frameworks through various reporting formats.

We specialize in GxP (Good Practice) validations for the pharmaceutical industry, ensuring compliance with regulatory standards and enhancing operational efficiency. Our services include Computer Systems Validation (CSV) for critical systems such as laboratory, manufacturing, and clinical data management systems.

We offer assurance services for the evolving landscape of artificial intelligence (AI). As organizations adopt AI technologies, independent verification of governance, fairness, and security is crucial. Our services focus on data integrity, compliance, and transparency while evaluating AI systems' reliability and performance. In cooperation with colleagues from EY CertifyPoint, we can also implement certification according to the ISO 42001 standard, focused on the transparent and ethical use of AI in accordance with regulations.

We offer expert evaluations of digital interfaces for accessibility in line with WCAG standards. We help identify barriers, propose corrective measures, and ensure compliance with legislative requirements as well as the needs of diverse user group