I.T. Audit

Secure systems. Reliable controls. Aligned with business risks.

ICT Audit with MSM Chris

Information systems are at the heart of modern operations—yet they also introduce significant risks if not properly governed. At MSM Chris, we conduct independent ICT audits to evaluate your systems, infrastructure, and controls, ensuring they support operational integrity, data security, and regulatory compliance.

Our Approach

Our ICT audit approach is risk-based and aligned with industry standards such as COBIT, ISO 27001, and ITIL. We assess your IT environment’s ability to support business objectives securely and efficiently. Our reviews cover general controls, application controls, cybersecurity, and IT governance. We work closely with management and IT teams to deliver practical recommendations tailored to your systems and risk profile.

Digital Integrity. Operational Confidence.

We help organizations identify vulnerabilities, improve control environments, and strengthen IT governance through services such as:

  • Review of IT general controls (access management, change control, backup & recovery)

  • Evaluation of application-level controls (data input, processing, output, and authorization)

  • Cybersecurity risk assessments and basic penetration testing coordination

  • Assessment of system acquisition, development, and implementation processes

  • Review of disaster recovery and business continuity plans

  • IT governance and strategy reviews (alignment with organizational objectives, IT steering, policies)

  • Audit of outsourced IT services and cloud-based systems

  • Support for data protection and privacy compliance audits

  • Pre-implementation and post-implementation reviews of new systems (ERPs, accounting platforms, HRMS)

Benard M. Muola

Head of Assurance, MSM Chris & Associates
Tel: +254 (0) 703 125 358
Email: msmchris@msmchris.co.ke