Telecom and IT

    Internal audit and GRC for telecom and IT

    Networks, data centres and cloud services run on thousands of assets and suppliers. Oversight gives internal audit and GRC one view of the controls around them.

    Request a demo →
    The challenge

    What makes assurance in telecom and IT difficult

    Large asset estates

    Access, vulnerability and change controls have to hold across more systems than anyone can test by hand.

    Deep supply chains

    Vendors, integrators and cloud providers carry part of your risk and your customers' data.

    Service that cannot stop

    Continuity and incident response are tested by regulators and customers alike.

    Internal audit runs
    • IT general controls, cyber and data protection engagements planned from your universe.
    • Test steps for access reviews, change management and vulnerability handling, with evidence from system owners.
    • Findings traced to the configuration export or log that shows them.
    • Follow-up with owners and due dates, escalating to the chief audit executive when actions slip.
    GRC teams run
    • NCA ECC and ISO 27001 controls mapped once and evidenced once.
    • Vendors and cloud providers tiered, with security questionnaires scored.
    • A cyber risk register rated for confidentiality, integrity and availability.
    • Continuity plans and exercises with recovery targets for each critical service.
    Your universe

    Auditable areas, ready on day one.

    Identity and access managementChange and release managementVulnerability managementNetwork and data centre securityCloud and third partiesService continuityCustomer data protection
    Regulations included

    Upload the rules you answer to, such as the Communications, Space and Technology Commission's regulations or NCA's cloud controls, and they become audit criteria the same day.

    Request a demo

    See it run on your scope.

    Bring a real engagement or your annual plan. Thirty minutes on your material, and a reply within one working day.

    Used only to arrange the walkthrough. No mailing list.