Within the scope of a risk-oriented auditing approach, IT system audits or the IT audit is an essential component of the audit of annual financial statements. The objective of the audit is an assessment of the error risks, that is to say, the risk of a significant error in the IT system, to an extent that it is relevant for accounting. IT systems relevant for accounting are related not only to financial accounting, but also, for example, to merchandise management, payroll accounting, and online banking systems. We do not limit ourselves only to conclusions, but also systematically point out vulnerabilities. In addition, we will provide you with valuable impulses for increasing efficiency and effectiveness in the existing IT business processes and IT-related business processes (organizational, technological and operational).
subject areas.
- Conducting IT audits under IDW PS 330, 331, 850, 951
- Certification of software products (software certificate IDW PS 880)
- Certification of service-related internal control systems (IDW PS 951, ISAE 3402)
- Preliminary check for audits (data media transfer)
- Audit outside of the annual financial statements
- Examination of authorization concepts
- Conducting security checkups (Security Alliance / BSI)
- IT compliance
- IT reports