AVAKA Financial Services
South AfricaTechnology direction

ICT strategy and policy reviewConnect technology direction to the strategy it must enable.

We assess whether ICT strategy, policies, investment decisions, performance measures and infrastructure priorities form a coherent operating model for the organisation’s objectives and risks.

Discuss this serviceReview the scope
South African business environment representing ict strategy and policy review

Standalone service

ICT strategy and policy review

An independent review of technology alignment, policy coverage, decision rights, performance and infrastructure priorities.

Questions this service answers

A precise scope starts with the right question.

  1. 01

    Does ICT strategy clearly support business priorities and critical services?

  2. 02

    Do policies establish usable decision rights, controls and escalation?

  3. 03

    Can leadership see whether technology performance and investment deliver the intended outcomes?

Defined outputs

Evidence designed for action.

Final coverage follows the agreed target, authority, materiality and evidence available. These are the core outputs around which the engagement is built.

  • 01

    Business and ICT strategy alignment assessment

  • 02

    ICT policy coverage and accountability review

  • 03

    Technology performance and investment analysis

  • 04

    Infrastructure and governance improvement roadmap

Delivery discipline

A method that protects the conclusion.

  1. 01

    Context

    Identify critical dependencies

    Map the processes, systems, data and third parties the organisation relies on.

  2. 02

    Control

    Assess design

    Evaluate whether controls address the intended risk with clear ownership and evidence.

  3. 03

    Evidence

    Test operation

    Inspect configurations, records and populations to determine whether controls operated.

  4. 04

    Sequence

    Prioritise remediation

    Order actions around material exposure, technical dependencies and delivery capacity.

Reference points

Criteria agreed before testing begins.

  • COBIT and NIST reference points
  • POPIA
  • King V technology and information governance

Applicability and final criteria are confirmed during engagement scoping.

Also in Technology assurance

Related services

03.08Technology project assuranceIndependent assurance over implementations, migrations and technology-enabled change.03.01IT auditIndependent testing of access, change, operations, backup and other technology controls.03.02Data assuranceIndependent evidence over data lineage, completeness, accuracy and system-generated reporting.

Start with the target

Define what this ict strategy and policy review needs to prove.

Request a scoping call