IT audit that connects systems to the numbers on the page.
IT general controls, application controls, data integrity and access reviews for financial reporting, regulatory programmes and transaction-heavy transformations.
Financial statement risk now lives in systems, logs and interfaces.
Our IT audit practice tests the technology layer behind the balance sheet: change management, access and segregation of duties, batch and interface controls, privileged access, and data migrations. We work for internal audit functions, management assurance teams and as specialist support on statutory audits.
Before work begins, we clarify the operating context, governance expectations, and commercial pressures behind the brief. That gives the engagement a clear purpose before technical analysis starts.
The result is a more complete advisory view: what matters now, where risk may surface next, and how recommendations can be implemented without creating unnecessary hand-offs or ambiguity.
Scope
Clarify the decision, deadline, stakeholders, and evidence standard before work begins.
Delivery
Combine partner judgement, technical review, and practical implementation planning in one workstream.
Follow-through
Convert findings into owners, actions, and next steps that leadership can track after the session.
Where IT audit typically focuses.
ITGC
- Logical access & periodic recertification
- Privileged and break-glass access
- Change management & release governance
- Operations and batch job monitoring
Application controls
- Configuration and master-data integrity
- Automated calculations and postings
- Interface and ETL reconciliation
- ERP compensating controls
Data integrity
- Migration reconciliation and cut-over
- Data quality rules over GL feeds
- BI and reporting lineage spot checks
Regulatory overlays
- DORA / operational resilience mappings
- SOX linkage to financially relevant systems
Evidence your stakeholders can reuse.
We produce testing matrices, exception summaries and linkage to financially relevant assertions so statutory audit and risk teams do not rework the same ground.
“They traced issues we had waved away as "IT housekeeping" straight to reconciliation breaks the auditor actually cared about.”
IT controls singled out on audit?
We can complete a scoped ITGC and application-controls review aligned to your fiscal year-end.