IT Audit & Risk
Do you manage finances, host data centres or help customers further with a smart application? And do you want to show that you do this with due care and that you are demonstrably ‘in control’? In that case, an assurance rapport is the perfect tool. Outsourcing processes can be quite a challenge, so demonstrably being in control gives both you and your (future) customer a pleasant feeling.
ISAE 3000 and ISAE 3402 are international assurance standards for reporting on the control of outsourced processes. In these reports you describe how your enterprise has been organised, which services you provide, and how you deal with risks. With an ISAE 3000 and ISAE 3402 statement you show that the processes that are outsourced to you are under control, e.g. with regard to information security.
We take care of the audit of the assurance rapport in a pleasant and efficient manner. In doing so, we prefereably cooperate with employees who play a pivotal role in the enterprise, so we will be able to get a good picture of the processes. We report the results of our audit in an audit opinion that is part of the final report.
If your business is not yet ready for reporting on process control, we will be happy to help you achieve the desired level. We look at your enterprise with fresh eyes and advise you on both the risks and the opportunities.
- No long reports, but clear advice
- Broad knowledge & complete solutions
- Access to an international network
Our services
Below services are related to IT Audit & Risk
We combine your knowledge of your business with our extensive knowledge of SMEs, to serve you in the best possible way with advice on internal control and IT risks. We continuously keep ourselves abreast of IT developments. For specialist issues we work together with other businesses that enable us to provide full support. For example, with regard to cybersecurity. Our approach is fully transparent, our communication to the point; we use short lines of communication, and you will have a dedicated point of contact. Your organisation and objectives are key.
The ISAE 3000 standard is used for reporting on a broad range of subjects. If you want to offer your customers security on specific subjects, this standard will be suitable. We will be happy to find out together what the best way is to give substance to the demand for security. This assurance report comes in 2 types. Type 1 reports on the control at a specific moment. Type 2 reports on a period. Together we look at what type of report is best suited to your situation.
If the processes that your customer outsources to you impact their financial reporting, the ‘International Standard on Assurance Engagements (ISAE)’ 3402 is the pre-eminent standard that can provide security. With this standard, we provide an audit opinion to make sure that your customer and the stakeholders are reassured. An ISAE 3402 report has 5 sections:
- Statement by the management.
- Assurance report by the independent service auditor.
- Description of the internal control system.
- Description of the control objectives, control measures, and test results.
- Other information (optional).
This assurance report comes in 2 types. Type 1 reports on the control at a specific moment. Type 2 reports on a period. Together we look at what type of report is best suited to your situation.
“It’s essential to know the latest figures, so that you can make timely adjustments. My advisor and I now have an almost intuitive understanding; it’s a great working relationship.”
Edwin 't Hart, Groenrijk 't Haantje
Onze adviseurs helpen je graag verder
David 't Hart
Adviseur
Stephanie Verhaagen
Adviseur
Ad de Brabander
Adviseur
Koert Kouwenhoven
AdviseurBlogs
Wij delen onze kennis graag met je via blogs. Iedere week behandelen we daarin actuele onderwerpen voor ondernemers. Volg ons op social media om geen blog te missen.
Blijf op de hoogte
Meld je aan voor onze nieuwsbrief: Ruitenburg Actueel