 |
|
FOR GOVERNMENT |
|
Audit
|
|
Identify Risk. Assess Performance. Ensure Integrity.
|
| |
|
SecureIT’s IT audit practice works with Office of Inspectors General and Chief Counsels to develop and deliver quality internal IT audit functions and deliver independent information technology assessments. Our certified IT audit professionals help Inspector Generals to perform technology audits, implement continuous auditing, develop monitoring techniques that measure compliance with FISMA, and support congressional and agency head requests. SecureIT specialists rely on deep technical skills and industry knowledge to develop and improve internal IT audit functions with quality, efficiency and effectiveness. Our services range from instituting risk-based IT audit strategies to providing ongoing expertise through co-sourcing arrangements. Our methodology can produce significant, measurable impacts on the cost effectiveness of the IT audit function, and its value to the agencies’ internal control and corporate governance functions.
We provide the following services:
- IT audit strategy and planning: Develop strategic, annual and project-specific IT audit plans that integrate seamlessly with your organization’s overall audit approach, and address executive and congressional priorities and concerns..
- Infrastructure and application audits: Our IT audit experts have the knowledge and expertise to audit nearly any network, operating system, application or security process. Enterprise infrastructure, internet applications, wireless networks, mission systems, and cloud computing outsourced services are a few examples of systems our team has audited. We follow government and industry recognized audit standards and practices, and oftentimes identify hybrid audit approaches to effectively audit emerging technology and outsourced services.
- FISMA: Through either outsourcing or co-sourcing arrangements, SecureIT performs IT audits for the Federal Information Security Management Act (FISMA). Our team can address all areas of FISMA spanning entity, component and system level reviews of Program, Policy, Standards, Inventory, C&A, Contingency, Incident Response, Plan of Action and Milestones, Training, and Security Configuration.
- OMB A-123 & Internal Control Assessments: Our team is well versed in OMB A-123, A-127 and A-130 policy and can assist your agency with its assessment of internal control activities. We understand commonly accepted control and control assessment frameworks such as FISCAM, and can ensure that IT controls are designed appropriately, operating effectively, and support compliance with applicable laws and regulations.
- Data mining and analysis: Our team employs Computer Assisted Audit Techniques (CAATs) to perform data analysis and data mining to identify trends and pinpoint anomalies. These services can be used to support audits or periodic monitoring of controls.
|
|