Company Presentation

Size: px
Start display at page:

Download "Company Presentation"

Transcription

1 0 International Assurance Providers PO Box AC Tiel The Netherlands +31 (0) enquiries@assuranceproviders.eu

2 IAP IN BRIEF... International Assurance Providers (IAP) is a Qualified Security Assessor (QSA) certified by the Payment Card Industry Security Standards Council (PCI SSC). IAP also performs vulnerability scanning and penetration testing services by her own specialists and a PCI SSC Approved Scanning Vendor (ASV). IAP is listed in the official site of PCI SSC in the QSA list ( IAP is an independent provider of business assurance and advisory services. IAP is specialized in helping enterprises to understand risk and mitigate threats related to information security, information technology, operational and financial performance. With an average experience of 20 years in information system and procedures auditing, the IAP team provides you with peace of mind from day one. Communication and professionalism are key values that ensure high quality of services. Main services provided by IAP are : PCI DSS compliance, internal auditing, penetration testing, vulnerability scanning, technology risk services, consulting services and project management. International Assurance Providers (IAP) is an independent provider of business assurance and advisory services, we specialise in helping clients understand risks and mitigate threats related to Information technology, operational and financial performance. Assurance Providers ensure your organisation is compliance with the latest obligatory regulations, is prepared to cope with Operational related threats and conduct business in today s ever-changing world. Whether auditing the latest standards or providing informed advice on technology procurement we are here to help clients every step of the way, see our services section for a full overview. 1

3 OUR SERVICES: RELIABLE AND COST EFFECTIVE IAP Services help organisations save time and manage risks more effectively. We help organisations improve the value and performance of the internal audit function by facilitating bespoke solutions tailored to your company circumstances and needs. Our Audit, risk and compliance specialists along with our unique approach to account management and best practice allow us to service your needs with a unique 360% degree approach. Whether you need outsourcing, internal audit optimisation or start-up assistance, we deliver the knowledge acquired through years of experience in auditing and consulting across many standards and industries. Internal audit services: IAP helps organisations improve the value and performance of the internal audit function by facilitating bespoke solutions tailored to your company circumstances and needs. Whether you need outsourcing, internal audit optimisation or start-up assistance, we deliver the knowledge acquired through years of experience in auditing across many standards and industries. Technology risk services: Our Technology Risk Services provide clients with effective costeffective solutions that assist in controlling the risk associated with technology use. Effective strategies and solutions to manage business technology risk must be based on a 360 degree approach encompassing business operations, services and objectives. Your IT Infrastructure must be aligned to the business and appropriately controlled to streamline security, reliability, and availability 24/7/360. Consulting services: IAP's specialised consultants have broad experience in helping organisations in key areas such as audit, compliance & governance, business continuity, corporate security & risk. Project management: Project management is considered of paramount importance for IAP's internal processes and when taking on any assignment or advisory role with clients. Certified projects managers ensure independent assessment are conducted in a timely manner. IAP have expertise in Quality assurance projects, specific IT projects and Business process redesign projects amongst others. Awareness programs and Control self assessment workshops: Self assessment is a tool for gaining knowledge about business process risks, while empowering the business owners to take responsibility for identifying and mitigating those risks. IAP can help with Awareness and training programs on risks, security and fraud prevention as well as the design and execution of a Guided control self assessments and strategic assessments. Resource selection and allocation: Our extensive global network of contact with specialists in audit, risk and security allows IAP to source carefully selected candidates based on your business needs. Search and selection of proficient staff for both contract and full-time placements, assistance and guidance for set-up and managing an internal audit department (co sourcing). 2

4 OUR TEAM: EXPERIENCE, SKILLS,... AND MUCH MORE Formed by a core of certified international auditors and experienced business consultants we pride ourselves on delivering value and peace of mind from day one. Our expanding team is composed of some of the most knowledgeable professionals specialized in advising some of the worlds largest corporations. Assurance Providers prides itself on sourcing and retaining consultants with the right attitude and expertise. Whilst supporting them with clear communication, the necessary tools, approach and guidance to complete assignments on time and on budget. Assurance Providers are committed to completing projects within the agreed milestones and targets whilst ensuring you are informed and consulted on any amendments before execution. Our commitment to communication and quality of service is considered essential by all our representatives. Professionalism is of paramount importance at Assurance Providers and we strive to ensure this is reflected by having: Clear, documented, lines of communication both internally and externally. Screened, certified and proficient professionals. Internal evaluation and quality control procedures. Certification and assurance providing must be independent and confidential. Assurance Providers have strict procedures in place to appropriately protect any sensitive company information or knowledge acquired during assignments. Audit independence is a critical component of our professional care. Consequently, we require our professional staff from all service line to maintain their objectivity when delivering services to clients. In line with current rules, regulations, and best practices, our professional staff follows the professional standards of relevant professional organizations. These include, but not limited to, the following: International Standards for the Professional Practice of Internal Auditing and the Code of Ethics of Institute of Internal Auditors (IIA). Standards for the Professional Practice of Information Technology Auditing and the Code of Ethics of Professional Association of IT-Auditors (NOREA). Standards for IT Audit and Assurance and Code of Professional Ethics of Information Systems Audit and Control Association (ISACA). 3

5 OUR PROFESSIONAL STATEMENT OF INDEPENDENCE Purpose Given the diversity of our assurance services, IAP has adopted a formal Professional Statement on Independence to guarantee that we conduct business without any financial interests in, or personal or business relationships with, our assurance clients and their affiliates. This statement provides guidance on the provision of independence for assurance engagements. Furthermore, this statement adopts a conceptual framework for such engagements that requires the identification and evaluation of threats to independence and the application of safeguards to reduce any threats created to an acceptable level. Scope This statement is applicable to the firm, their partners and its professional staff, including all members of the assurance team and all others within the firm who can directly influence the outcome of the assurance engagement. The firm, their partners and its professional staff should be guided, not merely by the terms, but also by the spirit of this Statement. In addition, all professional staff conducting assurance services on behalf of the firm should be prepared to justify to us, if called upon, any apparent departure from any of the provisions and spirit of this Statement. Statement To be independent in this Statement, the professional must be free from any interest that is incompatible with integrity and objectivity. Furthermore, the professional must not only be independent but must also appear to be independent. That is, there should be actual independence and perceived independence. If either dimension of independence is impaired, then the value of the assurance engagement is also impaired. Under the above approach all members of the assurance team adhere to maintain independent of the assurance client both in fact and appearance to ensure that the firm is capable of exercising objective and impartial judgement on all issues encompassed within its engagement. Members of the assurance team are not independent if, directly or indirectly, maintain a financial, employment or businesses relationship with the assurance client or provide services which: Create a mutual or conflicting interest between the assurance team and the firm; Result in the member of the assurance team acting as a manager or an employee of the assurance client; Place the assurance team in the position of reviewing its on work; or Place the assurance team in the position of being an advocate for the assurance client. 4

6 FOUNDER International Assurance Providers is founded by Drs Guno Pocorni RE QSA, former Olympic competitor, champion Judo and amongst others President of the IT Audit Section of the Dutch Computer Science Association. He is also involved in the public relations commission of the NOREA. Sustainable added value for clients is his main philosophy and drive to found International Assurance Providers. Guno Pocorni s results-driven attitude and extensive experience in internal, external and IT audit and information security consulting make him to combine and select the most seasoned professionals for the clients benefit. 5

FREQUENTLY ASKED QUESTIONS The MasterCard Site Data Protection (SDP) Program

FREQUENTLY ASKED QUESTIONS The MasterCard Site Data Protection (SDP) Program FREQUENTLY ASKED QUESTIONS The MasterCard Site Data Protection (SDP) Program MERCHANTS Can Level 1 merchants currently use internal auditors to perform an onsite assessment? Yes. However, after June 30,

More information

Payment Card Industry Standard - Symantec Services

Payment Card Industry Standard - Symantec Services Payment Card Industry Standard - Symantec Services The Payment Card Industry Data Security Standard (PCI, or PCI DSS) was developed by the PCI Security Standards Council to assure cardholders that their

More information

Effective from 1 January 2009. Code of Ethics for insolvency practitioners.

Effective from 1 January 2009. Code of Ethics for insolvency practitioners. INSOLVENCY PRACTITIONERS (PART D) Effective from 1 January 2009. Code of Ethics for insolvency practitioners. On 1 January 2014 a minor change was made to paragraph 400.3 of the code. The change clarifies

More information

APB ETHICAL STANDARD 5 (REVISED) NON-AUDIT SERVICES PROVIDED TO AUDITED ENTITIES

APB ETHICAL STANDARD 5 (REVISED) NON-AUDIT SERVICES PROVIDED TO AUDITED ENTITIES APB ETHICAL STANDARD 5 (REVISED) NON-AUDIT SERVICES PROVIDED TO AUDITED ENTITIES (Revised December 2010, updated December 2011) Contents paragraph Introduction 1 4 General approach to non-audit services

More information

FREQUENTLY ASKED QUESTIONS The MasterCard Site Data Protection (SDP) Program

FREQUENTLY ASKED QUESTIONS The MasterCard Site Data Protection (SDP) Program FREQUENTLY ASKED QUESTIONS The MasterCard Site Data Protection (SDP) Program MERCHANTS Can Level 1 merchants currently use internal auditors to perform an onsite assessment? Yes. However, after June 30,

More information

Internal Auditing Guidelines

Internal Auditing Guidelines Internal Auditing Guidelines Recommendations on Internal Auditing for Lottery Operators Issued by the WLA Security and Risk Management Committee V1.0, March 2007 The WLA Internal Auditing Guidelines may

More information

Effective Internal Audit in the Financial Services Sector

Effective Internal Audit in the Financial Services Sector Effective Internal Audit in the Financial Services Sector Recommendations from the Committee on Internal Audit Guidance for Financial Services: How They Relate to the Global Institute of Internal Auditors

More information

INSOLVENCY CODE OF ETHICS

INSOLVENCY CODE OF ETHICS LIST OF CONTENTS INSOLVENCY CODE OF ETHICS Paragraphs Page No. Definitions 2 PART 1 GENERAL APPLICATION OF THE CODE 1-3 Introduction 3 4 Fundamental Principles 3 5-6 Framework Approach 3 7-16 Identification

More information

Internal Audit Activity Update

Internal Audit Activity Update Internal Audit Activity Update April 17, 2013 Agenda Internal Audit (IA) purpose, authority and responsibility State Internal Audit Advisory Board (SIAAB) Fiscal Control and Internal Auditing Act ( FCIAA)

More information

Keeping watch over your best business interests.

Keeping watch over your best business interests. Keeping watch over your best business interests. 0101010 1010101 0101010 1010101 IT Security Services Regulatory Compliance Services IT Audit Services Forensic Services Risk Management Services Attestation

More information

Professional Ethics in Liquidation and Insolvency

Professional Ethics in Liquidation and Insolvency COE Section 500 Issued February 2012Revised July 2015 Effective on 1 April 2012 Code of Ethics for Professional Accountants Part E Section 500 Professional Ethics in Liquidation and Insolvency SECTION

More information

Whitepaper. Simplifying the Payment Card Industry Data Security Standard. Abstract. A Security-Assessment.com Publication. Special points of interest:

Whitepaper. Simplifying the Payment Card Industry Data Security Standard. Abstract. A Security-Assessment.com Publication. Special points of interest: Whitepaper Simplifying the Payment Card Industry Data Security Standard A Security-Assessment.com Publication Special points of interest: Visa research found that...theft or loss of per sonal fi nanci

More information

PCI DSS and SSC what are these?

PCI DSS and SSC what are these? PCI DSS and SSC what are these? What does PCI DSS mean? PCI DSS is the English acronym for Payment Card Industry Data Security Standard. What is the PCI DSS programme? The bank card data, which are the

More information

The PCI DSS Compliance Guide For Small Business

The PCI DSS Compliance Guide For Small Business PCI DSS Compliance in a hosted infrastructure A Rackspace White Paper Spring 2010 Summary The Payment Card Industry Data Security Standard (PCI DSS) is a global information security standard defined by

More information

PAYMENT CARD PROCESSING

PAYMENT CARD PROCESSING CSU The California State University Office of Audit and Advisory Services PAYMENT CARD PROCESSING California State University, Bakersfield Audit Report 15-42 October 13, 2015 EXECUTIVE SUMMARY OBJECTIVE

More information

How To Write A Pca Dss Compliance Solution For Gameplan Group Ltd

How To Write A Pca Dss Compliance Solution For Gameplan Group Ltd PCI Compliance reporting solution This document describes GamePlan s PCI DSS compliance solution and its ability to assist organisations to be compliant with the regulatory requirements of the Payment

More information

2.1.2 CARDHOLDER DATA SECURITY

2.1.2 CARDHOLDER DATA SECURITY University of Oxford Finance Division FINANCIAL POLICY 2.1.2 CARDHOLDER DATA SECURITY Date: 21 March 2013 Version: 2.1.2 Status: Approved Author: Simon Blee Bridget Midwinter TABLE OF CONTENTS Page EXECUTIVE

More information

INTERNAL AUDIT CHARTER AND TERMS OF REFERENCE

INTERNAL AUDIT CHARTER AND TERMS OF REFERENCE INTERNAL AUDIT CHARTER AND TERMS OF REFERENCE CHARTERED INSTITUTE OF INTERNAL AUDIT DEFINITION OF INTERNAL AUDIT Internal auditing is an independent, objective assurance and consulting activity designed

More information

4374 The Mauritius Government Gazette

4374 The Mauritius Government Gazette 4374 The Mauritius Government Gazette General Notice No. 2260 of 2012 THE INSOLVENCY ACT Notice is hereby given that the following Rules governing the performance and conduct of Insolvency Practitioners

More information

Internal Audit Terms of Reference

Internal Audit Terms of Reference Internal Audit Terms of Reference Introduction 1. The Internal Audit Terms of Reference (ToR) describes the framework within which the Internal Audit Service is delivered. It is intended to act as a guide

More information

PCI Compliance 2012 - The Road Ahead. October 2012 Hari Shah & Parthiv Sheth

PCI Compliance 2012 - The Road Ahead. October 2012 Hari Shah & Parthiv Sheth PCI Compliance 2012 - The Road Ahead October 2012 Hari Shah & Parthiv Sheth What s the latest? Point-to-Point Encryption (P2PE) Program Guide Updated Solution Requirements and Testing Procedures for hardware-based

More information

SECTION B DEFINITION, PURPOSE, INDEPENDENCE AND NATURE OF WORK OF INTERNAL AUDIT

SECTION B DEFINITION, PURPOSE, INDEPENDENCE AND NATURE OF WORK OF INTERNAL AUDIT SECTION B DEFINITION, PURPOSE, INDEPENDENCE AND NATURE OF WORK OF INTERNAL AUDIT Through CGIAR Financial Guideline No 3 Auditing Guidelines Manual the CGIAR has adopted the IIA Definition of internal auditing

More information

Acceptance Criteria for Penetration Tests According to PCI DSS

Acceptance Criteria for Penetration Tests According to PCI DSS Acceptance Criteria for Penetration Tests According to PCI DSS Requirement 11.3 of the PCI DSS (Version 1.2.1, July 2009) defines the regular performance of penetration tests for all systems in scope as

More information

IMCA (Institute of Management Consultants and Advisers) IMCA is the recognised professional institute for management consultants and business

IMCA (Institute of Management Consultants and Advisers) IMCA is the recognised professional institute for management consultants and business IMCA (Institute of Management Consultants and Advisers) IMCA is the recognised professional institute for management consultants and business advisers in Ireland. Its principal objective is the advancement

More information

NNIT Cybersecurity. A new threat landscape requires a new approach

NNIT Cybersecurity. A new threat landscape requires a new approach NNIT Cybersecurity A new threat landscape requires a new approach Effective cybersecurity is not about spending more money. It s about aligning your security initiatives with the threats and priorities

More information

SecurityMetrics. history products expertise team awards

SecurityMetrics. history products expertise team awards SecurityMetrics history products expertise team awards Our company [history] Who we are and where we came from Proud moments in SecurityMetrics History 2000 - Founded by Brad Caldwell 2001 - First bank

More information

Internal Audit and Advisory Services DRAFT

Internal Audit and Advisory Services DRAFT Internal Audit and Advisory Services DRAFT PAGE(S) Message from the Internal Audit and Advisory Services...1-2 Internal Audit and Advisory Services Plan...3-5 Objectives...6-7 Risk Assessment Process...8

More information

Third Party Agent Registration and PCI DSS Compliance Validation Guide

Third Party Agent Registration and PCI DSS Compliance Validation Guide Visa Europe Third Party Agent Registration and PCI DSS Compliance Validation Guide May 2016 Version 1.3 Visa Europe 2015 Contents 1 Introduction... 4 1.1 Definitions of Agents... 4 2 Registration Process...

More information

A Compliance Overview for the Payment Card Industry (PCI)

A Compliance Overview for the Payment Card Industry (PCI) A Compliance Overview for the Payment Card Industry (PCI) Many organizations are aware of the Payment Card Industry (PCI) and PCI compliance but are unsure if they are doing everything necessary. This

More information

Client Engagement and Compensation Guide

Client Engagement and Compensation Guide Aon Risk Solutions Client Engagement and Compensation Guide Risk. Reinsurance. Human Resources. Introduction The aim of this document is to provide a high-level summary of the work that Aon Risk Solutions

More information

What Every Director. How to get the most from your internal audit. Endorsed by

What Every Director. How to get the most from your internal audit. Endorsed by What Every Director Should Know How to get the most from your internal audit Endorsed by Foreword This is the second edition of our flagship governance guide What every director should know. Since we published

More information

WHITE PAPER. PCI Compliance: Are UK Businesses Ready?

WHITE PAPER. PCI Compliance: Are UK Businesses Ready? WHITE PAPER PCI Compliance: Are UK Businesses Ready? Executive Summary The Payment Card Industry Data Security Standard (PCI DSS), one of the most prescriptive data protection standards ever developed,

More information

Qualification in Internal Audit Leadership (QIAL ) Exam Syllabus

Qualification in Internal Audit Leadership (QIAL ) Exam Syllabus QIAL SYLLABUS MARCH 2015 Qualification in Internal Audit Leadership (QIAL ) Exam Syllabus The QIAL assessment comprises five sections: Case study 1*: Internal Audit Leadership (3 hours and 45 minutes)

More information

Public Sector Internal Audit Standards. Applying the IIA International Standards to the UK Public Sector

Public Sector Internal Audit Standards. Applying the IIA International Standards to the UK Public Sector Public Sector Internal Audit Standards Applying the IIA International Standards to the UK Public Sector Issued by the Relevant Internal Audit Standard Setters: In collaboration with: Public Sector Internal

More information

Achieving PCI DSS Compliance Through Outsourcing: Where to begin?

Achieving PCI DSS Compliance Through Outsourcing: Where to begin? Achieving PCI DSS Compliance Through Outsourcing: Where to begin? August 2014 Can you achieve PCI DSS compliance through outsourcing, and if so, how should you approach it? This whitepaper provides a brief

More information

CPNI VIEWPOINT 01/2010 CLOUD COMPUTING

CPNI VIEWPOINT 01/2010 CLOUD COMPUTING CPNI VIEWPOINT 01/2010 CLOUD COMPUTING MARCH 2010 Acknowledgements This viewpoint is based upon a research document compiled on behalf of CPNI by Deloitte. The findings presented here have been subjected

More information

Data Security Standard (DSS) Compliance. SIFMA June 13, 2012

Data Security Standard (DSS) Compliance. SIFMA June 13, 2012 Payment Card Industry (PCI) Data Security Standard (DSS) Compliance SIFMA June 13, 2012 EisnerAmper Consulting Services Group Overview of EisnerAmper Fifth fhlargest accounting firm in the Metro New York

More information

G-Cloud Pricing. Atos infrastructure Vulnerability Scanning (Outpost24) SaaS

G-Cloud Pricing. Atos infrastructure Vulnerability Scanning (Outpost24) SaaS G-Cloud Pricing Atos infrastructure Vulnerability Scanning (Outpost24) SaaS Contents 1. Introduction... 1 2. Pricing... 2 2.1 External Network Scan... 2 2.2 PCI DSS Approved Scanner Vendor (ASV) Scan...

More information

INTERNATIONAL STANDARDS FOR THE PROFESSIONAL PRACTICE OF INTERNAL AUDITING (STANDARDS)

INTERNATIONAL STANDARDS FOR THE PROFESSIONAL PRACTICE OF INTERNAL AUDITING (STANDARDS) INTERNATIONAL STANDARDS FOR THE PROFESSIONAL PRACTICE OF INTERNAL AUDITING (STANDARDS) Revised: October 2012 i Table of contents Attribute Standards... 3 1000 Purpose, Authority, and Responsibility...

More information

Spillemyndigheden s Certification Programme Change Management Programme

Spillemyndigheden s Certification Programme Change Management Programme SCP.06.00.EN.2.0 Table of contents Table of contents... 2 1 Introduction... 4 1.1 Spillemyndigheden s certification programme... 4 1.2 Objectives of the change management programme... 4 1.3 Scope of this

More information

INSOLVENCY CODE OF ETHICS

INSOLVENCY CODE OF ETHICS Definitions INSOLVENCY CODE OF ETHICS Authorising Body A body declared by Order of the Secretary of State for Trade and Industry or the Department of Enterprise, Trade and Investment to be a recognised

More information

Registration and PCI DSS compliance validation

Registration and PCI DSS compliance validation Visa Europe A Guide for Third Party Agents Registration and PCI DSS compliance validation October 2015 Version 1.1 Visa Europe 2015 Contents 1 Introduction... 4 1.1 Definitions of Agents... 4 2 Registration

More information

Retour d'expérience PCI DSS

Retour d'expérience PCI DSS Retour d'expérience PCI DSS Frédéric Charpentier OSSIR : Retour d'expérience PCI DSS - 1 XMCO PARTNERS : Who are we? Xmco Partners is a consulting company specialized in IT security and advisory Xmco Partners

More information

Puzzled about PCI compliance? Proactive ways to navigate through the standard for compliance

Puzzled about PCI compliance? Proactive ways to navigate through the standard for compliance Puzzled about PCI compliance? Proactive ways to navigate through the standard for compliance March 29, 2012 1:00 p.m. ET If you experience any technical difficulties, please contact 888.228.0988 or support@learnlive.com

More information

Internal Audit Standards

Internal Audit Standards Internal Audit Standards Department of Public Expenditure & Reform November 2012 Copyright in material supplied by third parties remains with the authors. This includes: - the Definition of Internal Auditing

More information

IRIS Managed Payroll Service

IRIS Managed Payroll Service IRIS Managed Payroll Service Friendly, reliable, efficient For further information please call the IRIS team on 0844 815 5677 or email earniesales@iris.co.uk About IRIS Managed Payroll Service IRIS have

More information

PCI PA-DSS Requirements. For hardware vendors

PCI PA-DSS Requirements. For hardware vendors PCI PA-DSS Requirements For hardware vendors PCI security services UL's streamlined PCI PA-DSS certification services get your product to market faster. UL is world leader in advancing safety. Through

More information

VISA EUROPE ACCOUNT INFORMATION SECURITY (AIS) PROGRAMME FREQUENTLY ASKED QUESTIONS (FAQS)

VISA EUROPE ACCOUNT INFORMATION SECURITY (AIS) PROGRAMME FREQUENTLY ASKED QUESTIONS (FAQS) VISA EUROPE ACCOUNT INFORMATION SECURITY (AIS) PROGRAMME FREQUENTLY ASKED QUESTIONS (FAQS) Q1: What is the purpose of the AIS programme? Q2: What exactly is the Payment Card Industry (PCI) Data Security

More information

PCI Compliance Overview

PCI Compliance Overview PCI Compliance Overview 1 PCI DSS Payment Card Industry Data Security Standard Standard that is applied to: Merchants Service Providers (Banks, Third party vendors, gateways) Systems (Hardware, software)

More information

How To Protect Your Credit Card Information From Being Stolen

How To Protect Your Credit Card Information From Being Stolen Visa Account Information Security Tool Kit Welcome to the Visa Account Information Security Program 2 Contents 1. Securing cardholder data is everyone s concern 4 2. Visa Account Information Security (AIS)

More information

Positioning the internal audit function within the Solvency II framework Key challenges. Ludovic Bardon Senior Manager Audit Deloitte Luxembourg

Positioning the internal audit function within the Solvency II framework Key challenges. Ludovic Bardon Senior Manager Audit Deloitte Luxembourg Positioning the internal audit function within the Solvency II framework Key challenges Jérôme Sosnowski Director Governance, Risk & Compliance Deloitte Luxembourg Ludovic Bardon Senior Manager Audit Deloitte

More information

APB ETHICAL STANDARD 5 NON-AUDIT SERVICES PROVIDED TO AUDIT CLIENTS

APB ETHICAL STANDARD 5 NON-AUDIT SERVICES PROVIDED TO AUDIT CLIENTS APB ETHICAL STANDARD 5 NON-AUDIT SERVICES PROVIDED TO AUDIT CLIENTS (Re-issued December 2004) Contents paragraph Introduction 1-4 General approach to non-audit services 5-38 Identification and assessment

More information

Cybernetic Global Intelligence. Service Information Package

Cybernetic Global Intelligence. Service Information Package Cybernetic Global Intelligence Service Information Package / 2015 Content Who we are Our mission Message from the CEO Our services 01 02 02 03 Managed Security Services Penetration Testing Security Audit

More information

UNIVERSITY BOARD SKILLS REVIEW MATRIX 2014. Page 1 of 5

UNIVERSITY BOARD SKILLS REVIEW MATRIX 2014. Page 1 of 5 UNIVERSITY BOARD SKILLS REVIEW MATRIX 2014 Each key skill is linked to relevant strategic objectives and/or the Board s Statement of Primary Responsibilities. To assist with the assessment of Board Members

More information

What are the PCI DSS requirements? PCI DSS comprises twelve requirements, often referred to as the digital dozen. These define the need to:

What are the PCI DSS requirements? PCI DSS comprises twelve requirements, often referred to as the digital dozen. These define the need to: What is the PCI standards council? The Payment Card Industry Standards Council is an institution set-up by American Express, Discover Financial Services, JCB, MasterCard Worldwide and Visa International

More information

Public Sector Internal Audit Standards. Applying the IIA International Standards to the UK Public Sector

Public Sector Internal Audit Standards. Applying the IIA International Standards to the UK Public Sector Public Sector Internal Audit Standards Applying the IIA International Standards to the UK Public Sector Issued by the Relevant Internal Audit Standard Setters: In collaboration with: Public Sector Internal

More information

Quality Assurance Checklist

Quality Assurance Checklist Internal Audit Foundations Standards 1000, 1010, 1100, 1110, 1111, 1120, 1130, 1300, 1310, 1320, 1321, 1322, 2000, 2040 There is an Internal Audit Charter in place Internal Audit Charter is in place The

More information

Payment Card Industry Data Security Standard (PCI DSS) v1.2

Payment Card Industry Data Security Standard (PCI DSS) v1.2 Payment Card Industry Data Security Standard (PCI DSS) v1.2 Joint LA-ISACA and SFV-IIA Meeting February 19, 2009 Presented by Mike O. Villegas, CISA, CISSP 2009-1- Agenda Introduction to PCI DSS Overview

More information

WHAT ARE THE BENEFITS OF OUTSOURCING NETWORK SECURITY?

WHAT ARE THE BENEFITS OF OUTSOURCING NETWORK SECURITY? WHAT ARE THE BENEFITS OF OUTSOURCING NETWORK SECURITY? Contents Introduction.... 3 What Types of Network Security Services are Available?... 4 Penetration Testing and Vulnerability Assessment... 4 Cyber

More information

What is the Purpose of IEC?

What is the Purpose of IEC? FACILITY PROGRAMMING IEC has the perfect mix to consult, plan, build or revamp your Educational program as well as your facility program. REPRESENTATION IEC is proud to represent Universities, vocational

More information

Statement of Guidance

Statement of Guidance Statement of Guidance Internal Audit Unrestricted Trust Companies 1. Statement of Objectives 1.1. To provide specific guidance on Internal Audit Functions as called for in section 3.6 of the Statement

More information

PAYMENT CARD PROCESSING

PAYMENT CARD PROCESSING CSU The California State University Office of Audit and Advisory Services PAYMENT CARD PROCESSING California State University, Long Beach Audit Report 15-43 January 5, 2016 EXECUTIVE SUMMARY OBJECTIVE

More information

Cyber Security Consultancy Standard. Version 0.2 Crown Copyright 2015 All Rights Reserved. Page 1 of 13

Cyber Security Consultancy Standard. Version 0.2 Crown Copyright 2015 All Rights Reserved. Page 1 of 13 Cyber Security Consultancy Standard Version 0.2 Crown Copyright 2015 All Rights Reserved Page 1 of 13 Contents 1. Overview... 3 2. Assessment approach... 4 3. Requirements... 5 3.1 Service description...

More information

Sub-section Content. 1 Formalities - Post title: Risk Consultant - Reports to: Head of Group Risk - Division: xxx - Location: xxx

Sub-section Content. 1 Formalities - Post title: Risk Consultant - Reports to: Head of Group Risk - Division: xxx - Location: xxx Sub-section Content 1 Formalities - Post title: Risk Consultant - Reports to: Head of Group Risk - Division: xxx - Location: xxx 2 Job Purpose - To support the implementation of an Enterprise Risk Management

More information

5.5. Penetration Tests. Report of the Auditor General of the Ville de Montréal to the City Council and to the Urban Agglomeration Council

5.5. Penetration Tests. Report of the Auditor General of the Ville de Montréal to the City Council and to the Urban Agglomeration Council Report of the Auditor General of the Ville de Montréal to the City Council and to the Urban Agglomeration Council 5.5 For the Year Ended December 31, 2013 Penetration Tests 5.5. Penetration Tests Table

More information

Employment Consultant Position Description

Employment Consultant Position Description Employment Consultant Position Description Position Title: Employment Consultant Service Area: Hrl Disability Employment Service Award: Labour Market Assistance Industry Award 2010 Classification:

More information

Fiduciary Outsourcing Services

Fiduciary Outsourcing Services Fiduciary Outsourcing Services The Crestbridge Limited affiliation is regulated by the Jersey Financial Services Commission. Crestbridge S.A. and Crestbridge Management Company S.A. are regulated by the

More information

Management. Level 4 NVQ Diploma in Management (QCF) 2014 Skills CFA Level 4 NVQ Diploma in Management (QCF) Page 1

Management. Level 4 NVQ Diploma in Management (QCF) 2014 Skills CFA Level 4 NVQ Diploma in Management (QCF) Page 1 Management Level 4 NVQ Diploma in Management (QCF) 2014 Skills CFA Level 4 NVQ Diploma in Management (QCF) Page 1 Level 4 NVQ Diploma in Management Qualification Title Credit Value Level 4 Structure Reference

More information

Public Sector Internal Audit Standards

Public Sector Internal Audit Standards Public Sector Internal Audit Standards Table of Contents Section 1 Introduction 3 Section 2 Applicability 6 Section 3 Definition of Internal Auditing 8 Section 4 Code of Ethics 9 Section 5 Standards 12

More information

On-Site Manager Exclusive Customer Offer

On-Site Manager Exclusive Customer Offer On-Site Manager Exclusive Customer Offer Information Security & Compliance Subscription Programs Your Partner for a Secure Future NETWORK VULNERABILITY & THREAT MANAGEMENT PROGRAM PCI COMPLIANCE ASSESSMENT

More information

INTERNATIONAL STANDARDS FOR THE PROFESSIONAL PRACTICE OF INTERNAL AUDITING (STANDARDS)

INTERNATIONAL STANDARDS FOR THE PROFESSIONAL PRACTICE OF INTERNAL AUDITING (STANDARDS) INTERNATIONAL STANDARDS FOR THE PROFESSIONAL PRACTICE OF INTERNAL AUDITING (STANDARDS) Introduction to the International Standards Internal auditing is conducted in diverse legal and cultural environments;

More information

APES 320 Quality Control for Firms

APES 320 Quality Control for Firms APES 320 Quality Control for Firms APES 320 Quality Control for Firms is based on International Standard on Quality Control (ISQC 1) (as published in the Handbook of International Auditing, Assurance,

More information

BRAND-NAME is What COUNTS!!!

BRAND-NAME is What COUNTS!!! BRAND-NAME is What COUNTS!!! USE PCI-DSS and make a name for your business Amit Jain Lead Solution Architect Aug 2015 Who We Are WHO WE ARE Company facts and figures ESTABLISHED TRUSTED 1995 BY MORE THAN

More information

Becoming PCI Compliant

Becoming PCI Compliant Becoming PCI Compliant Jason Brown - brownj52@michigan.gov Enterprise Security Architect Enterprise Architecture Department of Technology, Management and Budget State of Michigan @jasonbrown17 History

More information

Brown Smith Wallace, LLC

Brown Smith Wallace, LLC Brown Smith Wallace, LLC Successful Software Selection Whitepaper Series How to Adhere to Payment Card Industry Data Security Standards By Ron Schmittling, CPA/CITP, QSA, CISA, CIA To learn more about

More information

Kenya Revenue Authority (KRA) Chief Manager - Strategy, Planning and Policy

Kenya Revenue Authority (KRA) Chief Manager - Strategy, Planning and Policy Kenya Revenue Authority (KRA) Chief Manager - Strategy, Planning and Policy Job details Reference Number: KRA/HR01/14 Job Title: Chief Manager - Strategy, Planning and Policy Supervisor: Deputy Commissioner

More information

Business Ethics Policy

Business Ethics Policy Business Ethics Policy Page 1 of 12 Preface and document control This document is intended to provide information in respect of G4S Group Head Office policy, procedure, standards or guidance and will be

More information

Code of Ethics for Pharmacists and Pharmacy Technicians

Code of Ethics for Pharmacists and Pharmacy Technicians Code of Ethics for Pharmacists and Pharmacy Technicians About this document Registration as a pharmacist or pharmacy technician carries obligations as well as privileges. It requires you to: develop and

More information

American Express Data Security Operating Policy United States

American Express Data Security Operating Policy United States American Express Data Security Operating Policy United States As a leader in consumer protection, American Express has a long-standing commitment to protect Cardmember Information, ensuring that it is

More information

Article - Now in its. Drs. Sam C.J. Huibers EMIA CRMA RO. The role(s) of the auditor in projects - Sam Huibers

Article - Now in its. Drs. Sam C.J. Huibers EMIA CRMA RO. The role(s) of the auditor in projects - Sam Huibers The role(s) of the auditor in projects: Proactive Project Auditing Audit PROJECTS Article published in EDPACS Issue 5, 2013 Taylor and Francis Drs. Sam C.J. Huibers EMIA CRMA RO This is an Author's Original

More information

PCI DSS Compliance - what you need to know

PCI DSS Compliance - what you need to know PCI DSS Compliance - what you need to know What is PCI DSS? PCI DSS Payment Card Industry Data Security Standard A set of rules laid out by the PCI Security Standards Council to protect card holder data

More information

Managed Security Protection & Outsourcing Services

Managed Security Protection & Outsourcing Services Managed Security Protection & Outsourcing Services Reduced Risk, Enhanced Compliance, Minimized Cost Odyssey Managed Security Protection & Outsourcing Services Market understanding, knowledge and expertise,

More information

A Guide to the Cyber Essentials Scheme

A Guide to the Cyber Essentials Scheme A Guide to the Cyber Essentials Scheme Published by: CREST Tel: 0845 686-5542 Email: admin@crest-approved.org Web: http://www.crest-approved.org/ Principal Author Jane Frankland, Managing Director, Jane

More information

Management and Leadership. Level 5 NVQ Diploma in Management and Leadership (QCF)

Management and Leadership. Level 5 NVQ Diploma in Management and Leadership (QCF) Management and Leadership Level 5 NVQ Diploma in Management and Leadership (QCF) 2014 Skills CFA Level 5 NVQ Diploma in Management and Leadership (QCF) Page 1 Level 5 NVQ Diploma in Management and Leadership

More information

Manchester City Council Role Profile. Enterprise Architect, Grade 12

Manchester City Council Role Profile. Enterprise Architect, Grade 12 Key Role Descriptors: Manchester City Council Role Profile Enterprise Architect, Grade 12 ICT Service, Corporate Core Directorate Reports to: Head of Enterprise Architecture Job Family: Technical This

More information

MTI OVERVIEW MANAGING DATA SECURELY FOR OVER 25 YEARS

MTI OVERVIEW MANAGING DATA SECURELY FOR OVER 25 YEARS MTI OVERVIEW MANAGING DATA SECURELY FOR OVER 25 YEARS MTI.COM COMPANY OVERVIEW GLOBAL SOLUTIONS & SERVICES PROVIDER, MANAGING DATA SECURELY FOR OVER 25 YEARS OUR COMPANY OUR PEOPLE MTI is a global solutions

More information

Don Roeber Vice President, PCI Compliance Manager. Lisa Tedeschi Assistant Vice President, Compliance Officer

Don Roeber Vice President, PCI Compliance Manager. Lisa Tedeschi Assistant Vice President, Compliance Officer Complying with the PCI DSS All the Moving Parts Don Roeber Vice President, PCI Compliance Manager Lisa Tedeschi Assistant Vice President, Compliance Officer Types of Risk Operational Risk Normal fraud

More information

Worldpay s guide to the Payment Card Industry Data Security Standard (PCI DSS)

Worldpay s guide to the Payment Card Industry Data Security Standard (PCI DSS) Worldpay s guide to the Payment Card Industry Data Security Standard (PCI DSS) What is PCI DSS? The 12 Requirements Becoming compliant with SaferPayments Understanding the jargon SaferPayments Be smart.

More information

Keep money moving. A guide to payment services from Sage Pay. www.sagepay.com

Keep money moving. A guide to payment services from Sage Pay. www.sagepay.com Keep money moving A guide to payment services from Sage Pay www.sagepay.com The lifeblood of business Making it safe and easy for your customers to pay you is essential payment channels aren t just a part

More information

SERVICES OVERVIEW. Integrating Risk, Technology, People and Process for a sustainable Future CONTACT US. About Us. Our Business Philosophy

SERVICES OVERVIEW. Integrating Risk, Technology, People and Process for a sustainable Future CONTACT US. About Us. Our Business Philosophy About Us Vestinex Pty Ltd is a boutique professional business services provider based in Sydney, Australia. We offer a range of services across two broad categories of Ethics and Investigations and Information

More information

Adding value to your ship management business. Shipping & Transport PRECISE. PROVEN. PERFORMANCE.

Adding value to your ship management business. Shipping & Transport PRECISE. PROVEN. PERFORMANCE. Adding value to your ship management business Shipping & Transport PRECISE. PROVEN. PERFORMANCE. 2 Shipping & Transport Adding value to your ship management business The management of risk and implementation

More information

Trusts. Protect your organisation from money laundering and fraud to prevent reputational damage

Trusts. Protect your organisation from money laundering and fraud to prevent reputational damage Trusts Protect your organisation from money laundering and fraud to prevent reputational damage Our Our organisation organisation was was founded on on four four key key values: innovation, quality, quality,

More information

NEC Managed Security Services

NEC Managed Security Services NEC Managed Security Services www.necam.com/managedsecurity How do you know your company is protected? Are you keeping up with emerging threats? Are security incident investigations holding you back? Is

More information

AFGHAN ACCENTURE CONSULTING SERVICES

AFGHAN ACCENTURE CONSULTING SERVICES AFGHAN ACCENTURE CONSULTING SERVICES COMPANY BROCHURE INDEX Page No. The Company 3 Company Profile 4 Our Objectives 5 Mission Statement 6 Our Services 7 Audit & Assurances Services 8 Business Services

More information

PCI DSS Compliance. 2015 Information Pack for Merchants

PCI DSS Compliance. 2015 Information Pack for Merchants PCI DSS Compliance 2015 Information Pack for Merchants This pack contains general information regarding PCI DSS compliance and does not take into account your business' particular requirements. ANZ recommends

More information

The Payment Card Industry Data Security Standard How and Why to Become Compliant

The Payment Card Industry Data Security Standard How and Why to Become Compliant How and Why to Become Compliant By Howard E. Glavin Jr. Principle Consultant and Manager of Governance Services for IBM Internet Security Systems Table of Contents Purpose: 1 Background: 1 Do PCI Requirements

More information

Hospitality manager apprenticeship standard

Hospitality manager apprenticeship standard Hospitality s work across a huge variety of organisations including bars, restaurants, cafés, conference centres, banqueting venues, hotels and contract caterers. These s generally specialise in a particular

More information

THE UK S LEADING HEALTHCARE RECRUITMENT GROUP MANAGED SERVICES SOLUTIONS

THE UK S LEADING HEALTHCARE RECRUITMENT GROUP MANAGED SERVICES SOLUTIONS THE UK S LEADING HEALTHCARE RECRUITMENT GROUP MANAGED SERVICES SOLUTIONS CONTENTS INTRODUCTION OUR SERVICES THE PLACEMENT GROUP COMPANIES MANAGED SERVICES BESPOKE RECRUITMENT SOLUTIONS IMPLEMENTATION NHS

More information

Strategies To Effective PCI Scoping ISACA Columbus Chapter Presentation October 2008

Strategies To Effective PCI Scoping ISACA Columbus Chapter Presentation October 2008 Strategies To Effective PCI Scoping ISACA Columbus Chapter Presentation October 2008 Matthew T. Davis SecureState, LLC mdavis@securestate.com SecureState Founded in 2001, Based on Cleveland Specialized

More information

WHITE PAPER. PCI Basics: What it Takes to Be Compliant

WHITE PAPER. PCI Basics: What it Takes to Be Compliant WHITE PAPER PCI Basics: What it Takes to Be Compliant Introduction A long-running worldwide advertising campaign by Visa states that the card is accepted everywhere you want to be. Unfortunately, and through

More information