Vestige offers a wide variety of IT review and audit services designed to provide management with assurance that proper controls are in-place and working within their IT Systems. We have developed comprehensive audit programs that when conducted by our professional IT Audit staff provide solid recommendations on areas needing improvement. We have expertise in most network and workstation operating systems, a wide variety of complex software solutions including ERP/MRP systems, Electronic Medical Records (EMRs), Customer Relation Managers (CRMs) and Accounting & Finance packages.

In addition, we have a deep expertise in database and application development languages which gives us insight into how the systems operate behind-the-scenes and what makes effective controls. Depending on the type of audit being performed, Vestige uses a number of industry-standard, recognized audit frameworks, including ISACA's CobIT and ISO 17799/27000.

Our review and audit solutions include:

• General IT Risk Assessment
• IT General Controls (ITGC) Assessment
• Network Penetration Testing
• Web-Application Vulnerability Assessment
• Perimeter Security Assessment
• Electronic Data Processing (EDP) Review
• e-Discovery Readiness Audit
• Litigation Portfolio Review
• Internal Regulatory Compliancy Reviews, including:
  
  • Payment Card Industry (PCI)
  • Health Information Privacy and Portability Act (HIPPAA)
  • Gramm-Leach-Bliley Act (GLBA)
  • Sarbanes-Oxley Act (SOX)
  • Family Education Rights and Privacy Act (FERPA)
• Assistance with SAS70 Type I & II

Whether your requirements include understanding your current risk, establishing a risk posture, baselining your existing controls or looking for in-depth findings and recommendations on managing and securing your Information Technology assets, Vestige's professional IT Audit Team can assist in delivering highly cogent findings and recommendations tailored to your needs.