Technology Risk

For companies continuing to invest in technology, it is essential to fully understand IT process risks and to proactively identify potential internal control gaps prior to a system upgrade or implementation.

IT pre- and post-upgrade and implementation assessment services include:

• Enterprise Resource Planning (ERP) assessments
• Consolidation tool assessments
• Governance, Risk, Compliance (GRC) program readiness

The rapid advancement of technology, coupled with an exponential rise in cyber threats, increases risk exposure to technology infrastructure.

EY teams can help identify the ways in which cybersecurity risks can impact IT audit processes, including financial reporting, business procedures and internal controls.

Technology risk cybersecurity services include:

• Cybersecurity program assessments
• Incident response tabletop simulations
• Breach response and analysis assessments
• Cybersecurity disclosure reporting support
• Vulnerability assessments

Investors, regulators and society at large are demanding more transparency on nonfinancial performance, especially regarding ESG issues. 

Technology Risk ESG services include:

• Internal controls pre-assessment
• Evaluations of non-financial systems implementation
• Data pre-assessments
• Gap analysis
• Peer benchmarking analysis