KPMG / Management and transformation

Visible risks and control gaps to support decisions.

KPMG

COBIT / SOX / ISO 27001

References for assessing IT controls

Audit experience · 2009–2011

Problem → Solution → Impact

Problem

Audited organisations needed to assess technology risks and the consistency of controls supporting business processes.

Useful conclusions required comparing controls with evidence within the scope of each engagement. This case brings together audit experience across organisations and business processes.

Solution

At KPMG, I participated in IT audits and control assessments using SOX and ISO 27001 references, reviewing controls and evidence to identify gaps and communicate findings.

COBIT was used as a governance and control reference framework, alongside SOX and ISO 27001 references applicable to each engagement. My contribution included reviewing controls and evidence, identifying gaps and communicating findings to support decisions.

Impact

Identification and communication of findings and control gaps within audit engagements. My KPMG experience included IT risk and internal-control assessments across more than 25 organisations.

The more than 25 organisations describe the scope of my KPMG experience in 2009–2011. Each engagement communicated findings and control gaps; follow-up and closure depended on the organisation.

Let’s discuss your project