Technology Risk

EY CertifyPoint is the global certification body for EY. As an accredited and independent certification institute, EY CertifyPoint can help organizations meet their basic requirements, as well as improve the efficiency and effectiveness of the business management systems. We keep the business at the center, identifying areas of redundancy, bottlenecks and potential efficiency gains by means of a systematic and independent certification approach aligned with recognized globally accepted standards.

We provide certification against ISO standards such as Information Security (ISO27001), Quality (ISO9001), IT Service Management (ISO20000), Business Continuity Management (ISO22301) and Environmental Management (ISO14001). Or we can help you assess your gaps and obtain the necessary readiness for certification. EY CertifyPoint also provides lead implementer and lead auditor courses, including certification of personnel for several ISO standards.

We can address purpose-led risks and opportunities, which go beyond tangible corporate risk, so that they are digitally infused, empowered by end-to-end processes and governed in a way that enables trust among business partners and alliances.

This service provides an objective assessment of the effectiveness of management and governance systems in terms of regulatory requirements and contracted services for outsourced business activities in an increasingly digitized, data-dependent and technology-enabled connected ecosystem.

We assist clients with conducting compliance assessments with respect to:

• Specific laws and regulations applicable to the different lines of business, affecting both financial reporting and operations
• General laws of the land of the country where the entity has operations
• Internal company policies and procedures

Additionally, we create and deploy compliance management frameworks across different locations and business lines.

Here, we help enable contractual excellence and compliance by transparent contract steering, execution and monitoring while closing financial, contractual and operations “blind spots” in contractual relationships. Through our contractual compliance services, EY can help clients to improve contract management processes and systems, manage contract terms to achieve their desired outcomes, and improve supplier relationships. The service involves assisting clients with:

• Understanding risk factors associated with each third party and contract type and to identify the areas of focus for the third-party audit plan
• Performing agreed-upon procedures related to attributes of an organization’s client contracts; related contract systems, processes and controls; contract agreement structure; and a counterparty’s adherence to contract terms
• Performing assessment services and providing recommendations in connection with a contract, a portfolio of contracts, related processes, systems and controls, and adherence to contract terms.

SAM identifies and mitigates risks — such as financial, contractual, regulatory and information security associated with the use of software — and helps optimize software costs.