IT Audit

Hart, Brown & Associates can help design, implement and test IT General Controls for your organization and business units, we will provide practical recommendations for remediation items.

The four domains

IT General Controls

IT General Controls (ITGCs) comprise of four domains and can encompass operating systems, applications and databases.

🔹 Access to Programs and Data

> User Identification and Authentication
> Privileged Access
> Periodic Review of User Access and Permissions
> Logging and Monitoring of Privileged Activities & Account Logon Failures
> Information Security Governance & User Awareness

🔹 Program Change

> Change Management Policies, Procedures and Communication of Policy Updates
> Separation of Environments (Development, Test, Production)
> Documentation of Development and End User Testing
> Initial Approvals to Develop and Final Approval to Implement
> Post Implementation Review
> Segregation of Duties

🔹 Program Development

> Framework(s) for Program Development Projects (i.e. Waterfall, Agile, etc)
> Business Sponsorship, Project Charter, Initial Authorization to Develop
> Testing Documentation with Expected and Actual Results
> Testing Approvals and Final Approval(s) to Implement
> Post Implementation Review

🔹 Computer Operations

> Batch Job Processing
> Backup and Restoration Testing
> Incident Management & Problem Management

Malware

Productivity

Botnets

Data Breach

Data Loss

Phishing

Our Services

IT Audit

Hart Brown & Associates can help design, implement and test IT Application Controls for your organization.

IT Application Controls

IT Application Controls (i.e. Business Process Controls) are transaction or process specific controls that support control objectives relevant to the business, for instance; revenue cycle, accounts receivable, accounts payable, general ledger, accounting, treasury, financial close, customer management, vendor management, and many others.

Pre/Post Implementation Reviews

Is your organization upgrading an existing system or installing a new one? If so, have you considered implementing applicable access, change management and SDLC controls prior to Go Live and ensuring that the proper controls are implemented after deployment and enforced these controls up-front have had future success.

Access Control Segregation of Duties (SOD) Analysis

The days of key management personnel needing access to entire systems and processes are over. Users having unnecessary and elevated access can increase chances of fraud and financial misstatement, Inadvertent and unintentional system changes.

How Come?

How Our Cloud Computing
Services Help You?

Our end-to-end cloud computing services allow you to automate infrastructure, reduce costs, and seamlessly scale in today’s digital world.

Know More

Cloud Computing Service Consulting

Evaluate current infrastructure and investments, set goals, and create a plan for scaling and managing multiple vendors.

PaaS (Platform as a Service)

Develop and build applications on a framework or platform delivered over the internet without the need for infrastructure management.

IaaS (Infrastructure as a Service)

Access and manage cloud infrastructure over the internet without the hassle of managing your own with secure APIs.

SaaS (Software as a Service)

Have the cloud vendor manage infrastructure and applications at a lower cost and with a faster deployment time.

Protect your business from the growing threat of cyber-attacks.

Don't wait until it's too late! Call us

Call (+1) 678 421 4707