Computer Audit

Organisations rely heavily on their ICT systems to meet their aims and objectives. Failures of the control arrangements within these systems could have business critical implications for the ongoing well-being of an organisation.

Specialist computer audit can provide assurance to senior management and audit committees, that the computer environment is well controlled, operating effectively and meets all the relevant legislation. Areas of particular risk are:

Unauthorised access to and disclosure of business sensitive information

Disaster recovery / Business continuity

Theft / loss of ICT equipment

Our experienced Computer Audit team understand from a practical perspective, the issues and risks that face ICT teams daily. This ensures that the recommendations we make are practical, cost effective and risk focused and our computer audit reviews add value, both to the assurance/governance framework and to ICT management.

Give us a call

0845 300 3333

"If you treat audits as a means to improve your business area and not as a slight on you and your teams performance, then with the help of a good auditor it can only be a positive experience. TIAA, and specifically Richard Johnson, have audited my ICT team twice in the last twelve months and on both occasions the results have had a positive effect on my ICT team and related departments.

I have always adopted the attitude of being completely honest when being audited and that in turn means I have to be prepared for a warts and all report. Fortunately my area is reasonably mature and critical reflection is at the heart of everything we do. The resulting audit reports were well balanced and a true reflection of where we were, giving no real surprises. The real positives of the report are the acclamation that we are doing things correctly whilst highlighting a few minor changes that would improve our performance.

On both occasions Richard spent a week with us. It is very easy for auditors to witness a contrived working environment when visiting sites as people generally want to put on a good performance. Richard counters this by being completely unobtrusive in his manner and asking only pertinent questions of the right people. This is achieved by his expert knowledge of the subject area. He is also an extremely good listener and elicits information from the general conversations you have. Where appropriate he passes on best practice from other sites and indeed highlights good practice at your own. You have to be prepared to demonstrate your capabilities and not just talk a “good game”. This could be perceived as a lack of trust but Richard puts you at ease and you don’t feel like you are doing anything but your day job. Finally, Richard is open to discussion on audit points and he is more than prepared to consider any pertinent counter arguments you may have.

Audits should be seen as an aid to achieving excellence and not a hindrance. Richard Johnson and TIAA are definitely help in achieving the former".

Ian Taylor - Head of ICT, Bron Afon Community Housing