Technology Audit Services

We offer the following audit services for the financial sector

Cyber Security Audit Aligned with SAMA Framework

Objective: Fortify your institution’s cyber security posture to comply with SAMA’s Cyber Security Framework, safeguarding against evolving cyber threats and ensuring the integrity, confidentiality, and availability of information assets. Services include:

Framework Compliance Review: Evaluation of your institution’s alignment with SAMA’s Cyber Security Framework, focusing on governance, risk management, operations, technology, and third-party cyber security.

Cyber Security Maturity Assessment: Analysis of your institution’s cyber security maturity level, aiming for a structured, formalized, and adaptive cyber security control environment.

Control Domain Analysis: In-depth review of cyber security leadership, governance, risk management, compliance, operations, technology, and third-party interactions.

Policy and Procedure Evaluation: Examination of cyber security policies, strategies, roles, responsibilities, and training programs to ensure they meet the framework’s requirements.

IT Governance Audit Aligned with SAMA Framework

Objective: Strengthen your financial institution’s IT governance practices to ensure they are fully compliant with the SAMA IT Governance Framework, enhancing overall IT strategy, risk management, operations management, and system change management. Services include:

Governance Structure Evaluation: Review the establishment, effectiveness, and compliance of your IT governance structures against SAMA guidelines.

IT Strategy and Policy Assessment: Assess the alignment of IT strategies and policies with your organization’s goals and regulatory requirements.

Risk Management Process Review: Evaluate the effectiveness of IT risk management practices, ensuring they are integrated with enterprise risk management processes.

Operations and Change Management Inspection: Inspect IT operations and system change management practices for compliance with SAMA standards, focusing on maintaining service quality and managing changes effectively.