IT AuditOur expertise is in IT General and Application controls.
IT general controls cover systems development, change management, security and
computer operations. Application controls includes validity, completeness, accuracy
and security. Our reviews don't segregate manual and application controls. We
look for the control that is the most effective and don't waste time with secondary
controls that are not sufficient for reliance. We also take a risk perspective.
There's no point getting bogged down in detail on control objectives when the
risks are minimal if the control is not effective. We start with an understanding
of business process by asking our clients for their inputs, their process and
outputs. We document the business process using swimlane diagrams and a control
matrix. Swimlane diagrams are an excellent tool for documenting business process
as they are easily prepared and understood. The control matrix includes not just
application controls but also efficiency and effectiveness. We think it’s
time Sarbox (or the equivalent) reviews should include efficiency (achieve the
desired result with the minimum use of resources) and effectiveness (achieve the
desired result). Then we are talking about value for the money.
We
rely on our affiliate, Horwath
Orenstein LLP, for risk management and corporate governance. Our services
include: Sarbanes Oxley (Bill 198 - Canada) Compliance The
US Public Company Accounting Reform and Investor Protection Act of 2002 is better
known as Sarbanes-Oxley, or "SOX" for short. Whether your organization
is a large or small public company, a private company contemplating an IPO or
even a not-for-profit, SOX guidelines are useful to strengthen controls, improve
the accuracy of financial reporting, and provide assurance to key stakeholders.
CEO/CFO Certification - CSA MI 52-109 Effective
on or after March 30, 2005 CEOs and CFOs must now certify the design and operating
effectiveness of their company's Disclosure Controls and Procedures.
We can help you determine Disclosure Controls and Procedures appropriate
for your organization, remediate control deficiencies and evaluate
their effectiveness for certification requirements.
CEO/CFO Certification - CSA Staff Notice
52-319
On November 23, 2007 through CSA Notice 52-319, the CSA announced
an update to the initiative to repeal and replace MI 52-109 Certification
of Disclosure in Issuers' Annual and Interim Filings.
Information
Technology Risk Management Technology permeates nearly every aspect
of business today and represents a significant part of your Certification and
Compliance Process. We understand the potential threats and vulnerabilities that
technology poses. We can help you with an IT Audit, working with your people to
identify critical IT risks and implement effective solutions to ensure sustainable
operations. Find out more about our risk management services by contacting
Michael Burns at 416-485-2200 or by email at mburns@180systems.com. | 
