Information Systems Audit Services

An information technology audit, or information systems audit, is an examination of the controls within an Information technology (IT) infrastructure. The evaluation of obtained evidence determines if the information systems are safeguarding organizational assets, maintaining data integrity, and operating effectively to achieve the organization's goals or objectives. These reviews are essential to mitigate risks of any business discontinuity or planning disaster recovery mechanisms.

Some key benefits of Information System Audits include:

• Key source of information for security reviews
• Demonstrates management commitment
• Enables business continuity planning and disaster recovery
• Improves personnel awareness, participation and motivation
• Provides opportunities for continuous improvement
• Improves customer confidence and operational performance

Why Kualitatem

Experts at Kualitatem are qualified CISA, CISSP and CMM professionals with ability to meticulously analyze and understand your IT systems and suggest appropriate measures. We offer multiple services including Compliance Management, Implementation and Process Improvement, Auditing and Assurance, Capacity Building and Training around various standards such as ISO 27001:2005, ISO 20000:2005, BS25999, TMMI and CMMI.

1. Risk Assessment Services:

1. ISO 27001:2005 ISMS (Information Security Management System)
2. ISO 20000:2005 ITSM (Information Technology Service Management)
3. Business Continuity Planning and Management (BS 25999)
4. CMMI® Version 1.3 (Capability Maturity Model Integration)
5. TMMI® Version 3. 1 (Test Maturity Model Integration)

2. Implementation and Compliance Services:

1. ISO 20000:2005 – Information Technology Service Management (ITSM)
2. ISO 27001:2005 – Information Security Management System (ISMS)
3. Capability Maturity Model Integration (CMMI 1.3)
4. Test Maturity Model Integration (TMMI Version 3.1)
5. Business Continuity Planning and Management (BCP & DRP)

3. Auditing & Assurance Services:

1. Information Systems
2. Information Security Management System
3. Software Process Improvement Mechanism (CMMI)
4. Testing and Quality Assurance Mechanism (TMMI)
5. Business Continuity Planning and Management (BCP & DRP)
6. PCI - DSS Compliance

4. Process Areas:

1. Project Planning Process Area
2. Project Monitoring and Control Process Area
3. Risk Management Process Area
4. Configuration Management Process Area
5. Quality Assurance and Testing (Verification and Validation) Process Area

5. Capacity Building and Training Services:

1. ISO 27001:2005 Information Security Management System (ISMS) Lead Implementer Training
2. Test Maturity Model Integration (TMMi®) Master Implementer Training
3. ISO 20000:2005 Information Technology Service Management (ITSM) Lead Implementer Training
4. Risk Management Training

5. Quality Assurance and Testing (Verification and Validation) Training
6. Security Awareness Training
7. Certified Information Systems Security Professional (CISSP)
8. Ethical Hacking & Penetration Testing