Services / Assurance

ICT Audit

Systems and information controls

Scope of work

What the engagement covers

Information systems play a central role in financial reporting, operations, and decision-making. An ICT audit provides assurance that these systems are reliable, secure, and properly controlled. At MSM Chris & Associates, our ICT audit services focus on evaluating the controls, processes, and governance around information technology. We assess whether systems support business objectives, safeguard data, and produce information that can be relied upon.

Our work is risk-based and proportionate to the size and complexity of the organisation. We focus on areas that matter — system access, data integrity, change management, backups, and system continuity — rather than producing technical reports that offer little practical value.

Our ICT Audit Services Cover

  • Review of IT general controls (access, change management, backups, and security)
  • Assessment of system reliability and data integrity
  • Evaluation of controls over financial and operational systems
  • Review of user access rights and segregation of duties
  • Business continuity and disaster recovery readiness

We begin by understanding the systems in use and how they support operations and reporting. Our findings are discussed with management to ensure accuracy and context before final reporting. Recommendations are practical and prioritised, taking into account existing resources, system limitations, and operational realities. Our ICT audit reports clearly outline identified risks, control gaps, and recommended actions. The objective is to support better system control, improved data reliability, and reduced operational risk.

Get in touch

What to share with our team

Identify the systems, locations and period in scope, the reporting or control concerns and any recent changes.