As finance and operations become more digital, boards need assurance that system access, backups, changes and cyber controls protect the integrity and availability of business information.
Access and identity
Review privileged accounts, dormant users, shared credentials and the process for joiners, movers and leavers. Multi-factor authentication should be considered for important systems where supported.
Segregation of duties matters in systems too: users should not have conflicting capabilities without compensating review controls.
Backups, recovery and resilience
Define what data must be backed up, how frequently and how long it is retained. Keep appropriate protection from ransomware and periodically test whether systems can actually be restored within business requirements.
Change and vendor risk
Control changes to financial systems, integrations and configurations. Understand which third parties host or process important information and what would happen if a key provider became unavailable.
How AS Chartered Accountants can help
Good financial governance is easier when accounting, tax, assurance and advisory work from the same reliable information. AS Chartered Accountants provides partner-led support designed around the realities of operating in Zimbabwe. Explore IT Audit & Cyber Security and Audit & Assurance.
Contact AS Chartered Accountants to discuss your organisation’s requirements and the scope of support that may be appropriate.
