Today’s Business Environment
Businesses today depend upon information systems for nearly all aspects of their financial and operational functions. The insured security of this information is very important to a company’s financial and organizational health as well as to its customers, shareholders and regulators. Attention to the design, documentation and the operating effectiveness of those controls is critical to ensuring the accuracy and timeliness of information used for financial reporting and management decision-making.

Do any of these sound familiar?

•  You need confidence in the quality of the information produced by your IT systems.
•  You need assistance in documenting or testing your internal controls over financial reporting.
•  You need an independent review of your control structure, including identification of weaknesses and possible design enhancements.
• You rely on financial information from a third party and need independent assurance on that information.
• Your organization has been asked to provide a SAS 70 report.
• You are implementing – or have just implemented – a new IT system and need to ensure proper control compliance around the new system. You are entering into a merger, acquisition, joint venture or other related transaction and are in need of due diligence on systems and controls.

Our Approach
We employ a risk based approach that is designed to identify and assess the major business risks affecting your IT infrastructure and your business. We have found this to be the most effective and efficient way to providing services to our clients.

The hallmark of our firm’s quality assurance process is our experienced professionals. Our skilled team brings years of experience which ensures that you will benefit from a quality of services rated amongst the best in the profession. Our membership in the BDO Seidman Alliance, one of the world’s largest accounting organizations, provides us access to extensive resources on an as needed basis.

Our Team
The IT Audit and Advisory Service Group of Beard Miller Company LLP (bmc) has significant experience, technical skills and qualifications that work to help identify and reduce risks in your IT environment, while looking for ways to increase operational efficiency.

Members of our IT Audit and Advisory team are certified by leading internationally recognized organizations and are dedicated to the education, research and professional standards. The team members possess designations such as:

•  Certified Information Systems Auditor (CISA)
• Certified Information Technology Professional (CITP)
•  Certified Public Accountant (CPA)

• SAS 70 Reviews (Preliminary / Type I / Type II)
• Application / General Control Reviews
•  SOX 404 – IT control (Design / Review)
• Financial / Operational Audit Support (including use of computer assisted audit techniques)
• Fraud and Forensic Review Assistance – IT perspective
• Internal Audit Outsourcing – IT
• Security Reviews ( various platforms)
• Technology / Process Pre-implementation Reviews
•  Privacy Consulting (e.g. GLBA)
• PCI Preliminary Assessment