Cybersecurity · IT audit

IT audit and technology risk

We assess the controls that support your organization's information and processes, with evidence-based findings and prioritized recommendations.

Quick answer

What does an IT audit evaluate?

It checks whether technology controls adequately protect business information and processes. Depending on the objective, it can cover access, segregation of duties, change management, operations, backup and continuity.

Our leadership brings IT audit and internal control experience built at audit firms and in the financial sector, including reviews of IT controls related to Sarbanes-Oxley requirements.

Review areas

Controls we can assess

Access

User provisioning, removal, privileges and periodic reviews.

Segregation of duties

Conflicts between incompatible roles in critical applications.

Change management

Authorization, testing and release of technology changes.

Operations

Monitoring, incidents, scheduled jobs and vendors.

Backups

Copies, tested restores and retention.

Continuity

Readiness to recover critical platforms.

Objectivity

Independence and conflicts of interest

When auditing solutions implemented by LandoHOUSE or its partners, we define objectivity safeguards and disclose any potential conflict before work begins.

Related solutions

Keep exploring

Frequently asked questions

Straight answers

How is an IT audit different from a financial audit?

An IT audit evaluates the technology controls behind the information; a financial audit gives an opinion on the financial statements. They complement each other.

Does the audit include penetration testing?

Not by default. Technical intrusion testing requires a specific scope and authorization.

What do I receive at the end?

A report with evidence-based findings, risks, prioritized recommendations and a results review with the process owners.

Contact

Request a controls assessment

Which process, risk or opportunity does your company need to address? Let's talk to understand your situation and define the next step.

CoverageBased in Guatemala · regional service according to the agreed scope

Let's talk about your next project

Tell us what you need to improve, build or protect. We will review your request and coordinate the next step.