IT Audit and Compliance Services for Financial Institutions

Identify gaps in internal controls through a comprehensive IT Audit of your organization.

In today’s economy, outsourcing IT Audits is a valuable means to meet business objectives. Compass IT Compliance, LLC provides experienced, certified IT Auditors to perform your IT audit work at a lower cost than maintaining your own internal auditing staff. By outsourcing your IT Audit requirements to a trusted technology, you can save costs while ensuring complete IT compliance. 

Their IT Auditors can help determine your areas of risk and the levels of risk to be reviewed. Further, Compass can provide recommendations for remediation, as well as effective independent assurance reporting to your Board or senior management. Led by CISA-certified IT Auditors, Compass' IT Auditing services:

• Help determine your areas of risk and levels of 
  risk to be reviewed.

• Ensure compliance with industry and 
  government regulations.

• Deliver a more effective risk management 
  process.

• Provide independent assurance reporting to 
  your company’s stakeholders.

• Evaluate internal controls to identify risks.

• Assess security compliance with applicable 
  laws and regulations.

• Reduce the time examiners spend reviewing 
  different areas of your organization.

• Reduce costs associated with maintaining full-
  time in-house Auditing staff.

Compass Compliance IT Audits:  Methodology and Deliverables

• Identification and documentation of your IT 
  infrastructure, applications, operating systems, 
  facilities, and key personnel.

• Identification and documentation of significant 
  business processes, as well as the risks and 
  controls implemented.

• Measurement or scoring system that ranks and
  evaluates business and control risks for 
  significant business units, departments, and 
  products.

• Review with your Board or Audit Committee risk
  assessments and annual risk-based audit 
  plans that establish audit schedules, audit 
  cycles, work program scope, and resource 
  allocation for each area audited.

• Implementation of audit plan through planning, 
  execution, reporting, and follow-up.

• Monthly updates reflecting the status of the 
  audit, as well as used and remaining hours.