Professional Services
IT Audit
The
objective of an IT Audit it to have an independent expert looking at
the existing infrastructure with the goal of establishing the
technological threads that could impact the production of the
business.
Most
big consulting firms typically use a complex method with uncertain
results:
- the
audit itself takes place in a very big amount of time, incurring
high costs for the company;
- the
hundreds of pages long reports are difficult to analyze as they
present an overwhelming and disheartening list of issues;
- too
many recommendations are made so that they can not be prioritized
and nothing is achieved.
Our
approach is radically different and based on the following
principles:
- the
assessment will be based on an evaluation of less than 10 days;
- results
are written in a report of about 30 pages depending on the size of
the company;
- we
will provide a maximum of six recommendations that would have a
significant impact on resolving the most critical issues.
Our
experience shows that in most cases, there is not much wrong with the
infrastructure from a technical point of view, but the issues are
centered around people and process. Therefore, our methodology
highlights the issues in three categories: People, Process, and
Technology.
Technology
We
assess the existing infrastructure of the core business of the
company, and put it in perspective with the expected quality of
service. We pay particular attention to:
- the
physical configuration of servers, including the adequate use of
necessary components;
- the
proper configuration of the storage system;
- the
general health of the systems and the improvements than can be made
without changing the infrastructure.
Process
We
concentrate on the different process that are needed to efficiently
run the system, and assess the level of existing process. We check
that good practice are being followed. In particular, we look at
- operating
system, databases and applications installation process, including
configuration of storage.
- data
security, including authentification and access from different
application layers;
- data
protection and availability, such as backup strategies;
- incident
response management.
People
We put in relation
- the
skills that are necessary in order to run the system in an efficient
way, and
- the
skills that are currently present in the operational team.
Client reference
“I was seduced by the
marketing approach and the after-sales service. During the actual
assignment, I was equally appreciative of the Orinux engineer's
experience and skills”
(Joseph Mathieu NDOUR,
Computer Department, SGBS, Dakar/SENEGAL)
Downloads
< BACK TO TOP