Visage Solutions, LLC
  The IT Readiness Assessment is be offered as an independent service or as part of the Compliance Planning Service.  It is designed to identify and disclose 'material weaknesses' that an external auditor might identify and attest to in the external audit. There are three levels of IT readiness:

Level 1 - Identification and Assessment of Critical IT Processes

  • Disaster Recovery Effectiveness
  • Secure Identity Management
  • Data Retention and Archiving Effectiveness
  • Data Integrity and Reliability
  • Fraud Detection and Prevention
  • Capabilities Maturity Model Configuration Management
  • Security Rights
  • Controls of Third Party Communications
  • Project Management

Level 2 - Information Security Audit

Identification of the effort required to pass an ISO27001 certification.

Level 3 - IT Compliance Support

301 Review of system to handle complaints
302 Assure there is a copy of all copies, emails, voice mails in the Certification of Disclosure in Companies' Quarterly and Annual Reports
401 Assure there is a copy of all copies, emails, voice mails in the Disclosures in Periodic Reports, including Off Balance Sheet Transactions and Pro Formas
404 Assure there Is a tool that will allow easy documentation of the processes and allow the auditor to verify they are being followed. Ensure control activity and risk information and data retrieval needs to be captured, as well as testing procedures and audit trails. Ensure there is a process that allows monitoring and reporting of all processes?
409 Ensure a system is in place that allows the "real-time" reporting to the SEC, events - or a series of events with a cumulative effect that have a substantial effect of the financial projections of the company.
802 Ensure financial processing audit trail meet seven year preservation requirement.
806 Assure that there is a system in place to allow employees to report complaints and maintain their anonymity (whistleblower)
General Ensure that there are data mining tools that will allow auditors to detect evidence of Fraud. Ensure that questions critical to ascertaining the validity and reliability of the financial reporting process are answered-and remedied, if necessary. Such questions include: How long does it take accounting to close the books? How many accounting systems are there? What are the interfaces? What technology is being used for forecasting, financial modeling? Is there an adequate tie in to the ERP system?
Visage can also assist in Procedure Documentation and Mapping Critical IT Processes
 





  Home  | About Us  | Banking  | Energy and Utility  | Information Security | Reference | Feedback