Application Controls
Advisory Services

If your organization is reengineering its business processes through client/server application suites such as SAP, Oracle Financials, PeopleSoft, or JD Edwards, or simply wants to fine-tune the automated controls embedded in its existing business consider our Application Control Advisory services. We can help you identify, document and test the effectiveness of your controls, maximize efficiencies and minimize IT risks. Our approach is process-driven and generally includes reviewing the automated and manual processes along with the supporting applications. We have a risk-based methodology and tools that make our process effective and efficient. Our Application Controls Advisory Services typically include the following components, yet these can be scoped independently:

• • Process and Configuration Review – Evaluate manual and automated controls including the review of system settings and configurations embedded in the process.

• • Application Security – Analyze segregation of duties through the system and your organizational requirements. Evaluation of restricted and privileged access.

• • Infrastructure Security – Review security over the logical access path supporting the significant applications, including operating system security, program change, availability and computer operations.