StrategyandGovernance
Develop strategies, policies, governance models and controls to manage the ICT Compliance and IT Audit
• Organizational and Technological model
• Framework and methodology
• Policies, Standards, Processes and Guidelines
• Maturity Assessment, Posture and Gap Analysis (e.g. ISO, GDPR, NIS2, PCI, PSD2, NIST, 285, 231, TUB, TUF, etc.)
• Training and Awareness
IT Compliance
Analyze and evaluate an organization’s ICT adherence to laws, regulations, contracts, standard and other obligations to ensure compliance and avoid institutional gaps
• National and International Regulations requirements analysis
• Best Practice assessment (e.g. cyber, security, resilience, etc.)
• Constituency management
• Third Parties compliance (e.g. contract evaluation, etc.)
• Reporting process (e.g. risk exposure, etc.)
• Remediation definition and monitoring (e.g. end-to-end governance, etc.)
IT Audit
Examination and evaluation of an organization’s IT, data management, policies, procedures and operational processes against recognized standards or established policies
• Policy and Standard requirements analysis
• Internal Audit support (e.g. evidences review, etc.)
• External Audit management (e.g. on-site visit, interview, administration process, etc.)
• Reporting process (e.g. residual risk, etc.)
• Remediation definition and monitoring (e.g. end-to-end governance, etc.)