Business Risk Services

IT Audit

The principal objective of our IT audit service is to provide you with robust independent assurance that your IT risks, key management priorities and core systems are being appropriately managed. Grant Thornton has a dedicated team of IT auditors that are able to support your organisation with the skills and experience you require. Whether it’s a co-sourced or fully outsourced IT audit arrangement that is required, our team of dedicated professional have the ability to deliver.

Grant Thornton is one of the few firms to have our own internal audit manual and methodology which is fully compliant with IIA standards and the latest professional guidance. We will bring the rigour of this methodology to completing this assignment to the very highest standard. For IT-specific assignments the methodology draws upon the COBIT framework. COBIT is a set of best practices for information technology management created by the Information Systems Audit and Control Association (ISACA) which is a valuable tool in dealing with the pace of change in IT.

Our team offers a full range of IT services.

• IT Risk Assessment
• IT Strategy Review
• IT General Control Review
• Application Control Review (SAP, Oracle Finance, etc)
• Technical Control Review
  • Operating System Security reviews (Windows, UNIX, AS400, etc.)
  • Database (Oracle, MS-SQL, MySQL, Sybase, etc)
  • Web Server (IIS, Apache, IBM HTTP Server, etc)
  • Web Application Server (IBM Websphere, BEA Weblogic, etc)
  • Network Equipment (Cisco router, Switch and Wireless Access point, etc)
  • Security Equipment (Checkpoint, Netscreen, Cisco PIX, Fortinet, etc)
  • High-level Network Architecture Review