Tecnología de la información

Our professional services in Technology

-Evaluation Of general computer controls.

Database.
Operating systems.
Strategic planning.
Computer service providers.
Development and maintenance of information systems.
Software y Hardware.
Logical and Physical Security
Networks

– Review of control structures information systems related to critical areas of the business.

– Evaluation of information systems, following guidelines of information system standards like COBIT (Millennium – Control Information Technology), SOX (Sections 302 and 404), Information Technology Standards issued by the SUDEBAN and Rule ISO 27001 and 27002 for Information Security.

– Evaluation of the security scheme for access to information systems.

– Diagnosis of legality of software used in computational platform.

– Reviewing the integrity and quality of the data.

– Master of customers and suppliers.

– Master of inventories.

– Simulation of operations to verify the reasonableness of accounting figures balance and accuracy of records:

Interests of passive banking products (savings accounts, current accounts, DPF, certificates, etc.).
Active interest in banking products (Portfolio of Mortgage Loans, consumer, agricultural, credit cards, etc.)
Accounts Receivable and Payable
Execution of reconciliations between related files.

– Considering design proposals for adequate segregation of duties of the users.

– Penetration Studies (internal and external).

– Review of Business Continuity Plans and Disaster Recovery, and related risks. – Review of Pre and Post Implementation systems.

– Review of data migration processes and / or conversions.

– Reviewing security schemes implemented, including the authorization objects and values of access through transactions defined in user roles.

-Evaluation of the process of defining roles, including identifying process owners and the appropriate allocation on users, generating matrices of access by functional areas of business.

-Evaluation of Systems Audit structures, functions and responsibilities. – Training and education in the areas of systems audit of and the using of files interrogation tools (ACL).

– Outsourcing and Co-Sourcing in performing audits of systems audit in technology platforms.

– Implementation of standards and best practices in the use of information systems.

– Support in compliance controls in the implementation of projects.

– Diagnosis of specific situations related to the computing environment.

– Review of internal control applications.