IT risks & controls

PwC’s risk and control experts provide assurance over systems and processes as well as security and technology.

Systems & Process Assurance (SPA)

In today's business world, IT and financial reporting environments are becoming increasingly complex with even greater reliance being placed on the information produced by these systems and processes.

Attention to the design, documentation and operation of controls is critical to ensuring the accuracy and timeliness of information used for financial reporting and management decision-making.

PwC’s Risk & Control Solutions team work with our external audit team to assess the effectiveness of the security and controls operating in key business processes.

 

SPA and PwC

Our Systems and Process Assurance (SPA) practice provides services related to controls around the financial reporting process, including financial business processes and IT management controls.

Serving both audit and non-audit clients, SPA provides:

  • Financial and operational applications/business process controls reviews
  • Database security controls reviews
  • IT general controls reviews
  • Infrastructure security reviews
  • Third party assurance and opinion services
  • Sarbanes-Oxley readiness, process improvement and sustainability services
  • Pre and post implementation systems reviews.

 

Security and Technology (S&T)

Information is the lifeblood of organisations operating in today's global market. To remain competitive, businesses need to capture, process, and share growing volumes of information quickly and efficiently. At the same time, all organisations need to proactively take action to protect their information assets, and ensure they comply with legal and other requirements.

 

S&T and PwC

PwC can help our clients to:

  • Develop, implement and maintain a secure, well-controlled IT environment to improve business performance,
  • Obtain a realistic picture of their security weaknesses, and
  • Address their governance, risk and compliance requirements.