AVAKA Financial Services
South AfricaTechnology controls

IT auditTest the technology controls your organisation already depends on.

We assess how technology supports business strategy and test the design and operation of controls across access, change, infrastructure, operations, performance and regulatory obligations.

Discuss this serviceReview the scope
South African business environment representing it audit

Standalone service

IT audit

Independent testing of access, change, operations, backup and other technology controls.

Questions this service answers

A precise scope starts with the right question.

  1. 01

    Are privileged and business-user access rights appropriately controlled?

  2. 02

    Do system changes move into production through authorised and tested processes?

  3. 03

    Do infrastructure, performance and continuity controls support the business services that depend on them?

Defined outputs

Evidence designed for action.

Final coverage follows the agreed target, authority, materiality and evidence available. These are the core outputs around which the engagement is built.

  • 01

    Technology-to-business dependency and control scope

  • 02

    Access, change, infrastructure and operations test results

  • 03

    Technology performance and business-impact analysis

  • 04

    Prioritised remediation and retest criteria

Delivery discipline

A method that protects the conclusion.

  1. 01

    Context

    Identify critical dependencies

    Map the processes, systems, data and third parties the organisation relies on.

  2. 02

    Control

    Assess design

    Evaluate whether controls address the intended risk with clear ownership and evidence.

  3. 03

    Evidence

    Test operation

    Inspect configurations, records and populations to determine whether controls operated.

  4. 04

    Sequence

    Prioritise remediation

    Order actions around material exposure, technical dependencies and delivery capacity.

Reference points

Criteria agreed before testing begins.

  • COBIT and NIST reference points
  • POPIA
  • King V technology and information governance

Applicability and final criteria are confirmed during engagement scoping.

Also in Technology assurance

Related services

03.02Data assuranceIndependent evidence over data lineage, completeness, accuracy and system-generated reporting.03.03Cyber governanceA review of cyber accountability, risk ownership, investment oversight and resilience governance.03.04Cybersecurity assessmentA risk-based assessment of cybersecurity governance, controls and resilience against defined outcomes.

Start with the target

Define what this it audit needs to prove.

Request a scoping call