The engagement
We undertake information systems and IT control assignments, with specialist participation where required. Cybersecurity and privacy-related work is scoped to the specific requirement and does not imply a guarantee of protection.
Scope of work
- Information systems audit
- IT governance and access-control reviews
- Financial system and reporting controls
- Data privacy and DPDP-related compliance review within the agreed scope
Engagement deliverables
The work may produce a controls assessment, findings report and remediation priorities. Penetration testing, incident response and legal opinions require separately confirmed expertise and responsibility.
How the work begins
- Describe the requirement. Identify the entity, proposed transaction or matter and any deadline.
- Review acceptance and scope. We assess the facts, competence, independence and other relevant professional requirements.
- Agree written terms. Confirm responsibilities, records, deliverables and the intended use of the work.
Common question
Does a systems review guarantee that no cyber incident will occur?
No. A review addresses the agreed scope and period. Ongoing security management remains necessary.