A9 AdvisoryIT Audit and Assurance
Independent assurance over technology and controls. We provide independent IT audit and assurance: general IT controls, application controls, cyber and data audits, delivered by certified auditors who understand both technology and finance.
The Challenge
Audit committees need independent assurance over technology risks, but internal audit teams often lack specialist IT skills, and external audits focus on financial statements.
How We Help
We provide independent IT audit and assurance: general IT controls, application controls, cyber and data audits, delivered by certified auditors who understand both technology and finance.
Our GRC specialists have more than 15 years of experience with UAE government entities and private sector organisations across the region, and hold certifications including CISA, CRISC, ISO 27001, ISO 22301, ISO 42001 and ISO 27701. We also build Arbor GRC, our own platform for running these programmes.
What We Deliver
IT General Controls
Access, change, operations and backup controls tested.
Application Controls
Automated controls in ERP and core systems.
Cyber Security Audits
Independent review of the security programme.
Co-Sourced Internal Audit
Specialist IT auditors supporting your internal audit function.
SOC Readiness
Preparation for SOC 1 and SOC 2 reports.
What You Can Expect
- Independent assurance for the audit committee
- Control weaknesses found before external audit
- Stronger internal audit capability
How We Work
Assess
Understand your obligations, risks and current state.
Design
Build the framework, policies, controls and governance.
Embed
Train owners and run the first cycle alongside them.
Assure
Audit, report and prepare for regulators and certification.
Standards and Frameworks
Frequently Asked Questions
Can you work alongside our internal audit team?
Yes. Many clients use us on a co-sourced basis for specialist IT audit work.
Do you combine IT and financial audit?
Yes. Our IT auditors and chartered accountants can work as one team.
Often Combined with
Regulatory Compliance
UAE IA, Dubai ISR, ADHICS, NCEMA 7000 and sector regulations.
Governance, Risk and ComplianceISO Certification Readiness
ISO 27001, 22301, 42001, 27701, 20000 and 9001.
Governance, Risk and ComplianceEnterprise Risk Management
Link risk to strategy and make better decisions.
Talk to an Adviser
Tell us what you are working on and we will bring the right specialists to the conversation. We reply within one working day.