ITAS-Risk & Compliance

In the fast moving Information Technology (IT) and e-commerce scenario, it is a constant challenge for companies to balance their business goals and the business risks involved in using or not using technology.

KPMG understands the need to keep pace with technology and take advantage of the tremendous opportunities offered by technological innovation. Our ITAS-Risk & Compliance practice focuses on the inherent risks posed by technological systems used by our clients to attain their corporate goals.

If you are undergoing rapid growth, have large, complex information systems or are implementing new leading edge technologies or e-commerce approaches, KPMG can help you identify and manage the associated IT risks so you can achieve your strategic and financial goals.

Trust and Security in the e-business world

More and more businesses are entering the arena of electronic trading, both business-to-customer, and business-to-business, every day. With this huge growth in activity, there is an increasing realization on the part of these firms that not only do they need make sure that they are secure, but they also have to trust the security of their trading partners.

KPMG's ITAS-Risk & Compliance practice helps businesses create these "communities of mutual trust" that are so vital to successful e-trading.

From providing services of independent audits of secure e-business infrastructures, to assisting in the design and implementation of Public Key Infrastructure (PKI) approaches, ITAS-Risk & Compliance has the skills and experience to help global organizations achieve their objectives in this vital, expanding arena.

Improved Return from your IT Projects

Continuous advances in technology have shortened development time and increased the complexity of information system development projects. This complexity and the time pressures brought to bear by the need for reduced "time to market,” also introduce additional risks. KPMG offers you practical advice and assistance to enhance your company’s processes and controls to manage these risks and increase the likelihood that a project will meet its objectives.

KPMG can help you get value for money from the often huge investment made in major software package implementations such as SAP, PeopleSoft, Oracle, BaaN, or customized approaches.

Improved Return from your IT Investment

Increasingly competitive pressures means you must look carefully at your IT investments to ensure that you are getting value for money.

We can provide you with valuable independent feedback regarding how your investments compare with those of your competitors and the marketplace. We can also help you manage your use of IT so it effectively delivers a competitive advantage.

Plan for Business Interruptions

As organizations move their business online, the demand for continuous availability of services increases dramatically. Having reliable systems with high availability and the means to quickly recover should anything serious go wrong, is becoming a key differentiator in the e-Business world. Events other than the traditional "disaster" can impair service capabilities such as inadequate change management plans, hardware failure, virus attacks, or telecommunications failures.

KPMG can help you plan for these events through risk analysis, network and system design, and recovery planning - improving the availability, reliability, and recoverability of the key information systems that you and your customers count on.

The Services of KPMG's IRM Practice

Information Security Assessment

With security approaches flooding the market and the respective threats proliferating daily, companies are giving priority to ways of orienting the decision making process in information security risk management.

KPMG’s Information Security Assessment service has the necessary strategies and techniques to help measure factors of risk. We measure value in terms of availability, integrity and confidentiality of an information asset and its importance for the Company’s strategy and continuity.

Information Technology (IT) Risk Management Benchmarking

Do you manage your IT risks? IT controls form an essential part of the management of the use of technology in your company. A comparison of your experience with similar companies will be able to help you obtain the best benefit from your controls.

Based on international standards (COBIT e BS7799) KPMG’s Information Technology Risk Management Benchmarking - ITRMB offers a comparison with the market, and it is a tested instrument for improving the quality of the performance of the IT operations. It clearly depicts the information your company could obtain from your present controls in comparison with similar companies.

Penetration Study Services

When a company’s systems are infected by a virus or a hacker cracks your defenses and has access to sensitive information, the consequences may be disastrous for the company.

KPMG’s internal and external vulnerability invasion assessment services (Invasion tests) help its clients test the security of their information through simulated attacks on their defenses.

Using traditional hacker techniques we identify the targets and launch controlled sorties against the existing security controls. Our objective is to furnish concrete proof of the vulnerabilities and recommend effective neutralization measures, thus permitting our clients to focus and prioritize security resources.

Business Process Analysis

Effective, efficient control of the main business processes, particularly those conducted with the support of integrated management systems, is vital to guarantee the integrity of the information you use for making business decisions.

KPMG’s international methodology for Business Process Analysis - BPA offers a flexible approach for assessment of risks and controls. It was planned to help you use the available control resources in the best possible way, to reduce the risks of failures and to attain your business goals.

Business Continuity Planning

Availability of information is essential in the Information Era. Natural disasters, felonious intentions and catastrophic or lesser accidents may interrupt the availability of information and cause a negative impact on the main business processes.

KPMG’s Business Continuity Planning services – BCP are a structured answer to the possibility of an interruption or catastrophe. To be prepared for such a case means that your company has a much greater possibility of surviving. Additionally, and perhaps more importantly, this puts you in a stronger, more solid market position.