The Challenge
DORA and the increasing pace of digitalization are raising the bar for ICT audits. At the same time, many institutions lack specialized auditors and the necessary capacity to cover all audit areas on their own.
Does this sound familiar to you?
☑️ There is a lack of specialized knowledge internally regarding specific ICT exam areas.
☑️ The Internal Audit department has limited capacity.
☑️ New technologies and a more complex IT landscape create additional auditing needs.
☑️ Special exams or last-minute demands throw off the schedule.
☑️ Absences or a lack of substitutes make it difficult to administer scheduled exams.
This is exactly where we can help: with a qualified ICT audit, the assumption of individual audit areas, or flexible partial outsourcing.
Our services
ICT Audit as a Form of Outsourcing
We handle the annual ICT audit for financial institutions and work closely with your internal audit department.
Scope of Services:
• Conducting the ICT audit in accordance with MaRisk and DORA
• Management of the multi-year planning for the ICT test bed
• Alignment with your audit department’s guidelines and processes
• Conducting the audit directly in your systems
• A combination of in-person appointments and remote exams
• Working papers and audit programs remain at your firm
• Close coordination with Internal Audit
Adoption of Individual ICT and DORA Audit Areas
Ideal for organizations with their own ICT audit function.
We handle specific audit areas:
• to exonerate the audit
• as a temporary solution
• for knowledge transfer
• in the event of short-term capacity constraints
Typical occasions:
• Mergers
• Introduction of new technologies
• Cloud Projects
• AI Applications
• Special regulatory requirements
Consulting and Regulatory Support
We can help you with:
• Information Security
• Privacy Policy
• Artificial Intelligence
• regulatory requirements under DORA
• BaFin ICT Questionnaires
• Establishment of management systems for information security and data protection
• Planning and tracking of corrective actions in response to findings
• Preparation for and follow-up on special exams
Why the "telescope effect"?
Featured Client: Volksbank Mittweida eG
Experienced ICT auditors with several years of practical experience
Proven Expertise and Certifications
Mandatory Professional Development
A combination of regulatory expertise and practical banking knowledge
Flexible support instead of rigid outsourcing models
Does your internal audit department need to be discharged?
The demands on your ICT audit are growing. Your internal resources don’t necessarily have to keep pace. Whether it’s full or partial outsourcing, specific DORA audit areas, or special regulatory topics—we support you exactly where resources or specialized knowledge are lacking and work closely with your Internal Audit department.
This way, responsibility stays where it belongs, while you can focus your internal resources on the areas where you really need them.
Let's see where we can lighten the load on your audit.
In a no-obligation consultation, we'll work together to determine what kind of support is best suited to your institution and your current exam situation.
