ITCA (IT Controls Assessment)
Determines whether the IT control environment is properly designed, implemented, and operating effectively.
Scope
Reviews IT general controls, access management, privileged access, change management, backup controls, logging, patching, asset inventory, policies, and IT operations.
The gaps it finds
Weak IT governance, missing control evidence, poor access reviews, uncontrolled changes, weak backups, incomplete logs, unclear IT ownership, and IT operational control gaps.
Value to the board
Provides a clear baseline of IT control health and identifies gaps that can create operational, cyber, audit, or compliance exposure.
Framework alignment
- COBIT
- ISO 27001 Annex A
- ITIL
- CIS Controls
Reporting
Like every assessment in the portfolio, this engagement ends with the full deliverable set, from executive summary and maturity scorecard to remediation roadmap and board dashboard. The methodology page describes each deliverable.
Scope this assessment
A scoping conversation confirms objectives, stakeholders, systems, and the document request list before any work begins.