Scope and Risk Assessment

Client may lack of a clear project scope, and has difficulty defining key versus non-key processes and controls.

Apply our Express Workflow® methodology.

Process Map and Control Framework

Client may have difficulty maintaining an appropriate top-level perspective, and becomes lost in procedural detail.

Apply our Express Workflow® methodology.

Review Deliverables and Feedback

Client may lack experience with COSO and COBIT frameworks.

Apply our Express Workflow® methodology.

Control Validation Process

Client may have resource constraints.

Provide experienced audit and technical resources.

Control Testing Process

Client may have resource constraints.

Provide experienced audit and technical resources.

Report Audit Results

Client may be unable to demonstrate evidence of standardized control environment.

Assist by standardizing and formalizing control structures.

Implement Action Plan

Organization management and staff may not have the luxury of excess staff to impose separation of duties.

Identify those processes that must be initiated to maintain a self-supporting environment.

Change Management

Organization management and staff may resist empowerment and responsibility.

Apply facilitation and catalyst for change as an internal program management office.