Information Systems and Auditing Services

1. Independent Auditing Services of Information Systems

In the scope of our Information Systems Auditing Services, designed by ITGI (Information Technologies Governance Institute) based on COBIT (Control Objectives for Information and Related Technologies) Information Systems Management Model, the “General Controls” and “Application Controls” related with main process fields under the titles of “Planning and Organization”, “Supply and Application”, Service Presentation and Support”, and “Inspection and Evaluating”, are audited in accordance with BDDK (Banking Regulation and Regulation and Supervising Agency) and the maturity levels of Information Management Processes are determined and reported.

General Inspection Fields Auditing Services

“Planning and Organization” Main Process Field

• Defining the Strategic Information Systems Plan
• Defining the Information Architecture
• Determining the Technological Aspect
• Defining the Processes of Information Systems, Organization and Relations
• The Management of Information System Investments
• Transmitting the Purposes and Instructions of the Management
• Human Resources Management
• Quality Management
• The Assessment and Management of Information Systems
• Project Management 

“Supply and Application” Main Process Field

• Determining the Atomization Solutions
• The Development and Maintenance of Application Software
• Creating and Maintaining the Technological infrastructure
• Providing the Operation and Utilization
• Providing the Resources of Information Systems
• Change Management
• Performing and Accrediting the Systems Solutions and Changes

“Delivering Service and Support” Main Process Field

• Defining and Managing the Service Levels
• The Management of the Services Provided by Third Parties 
• Performance and Capacity Management
• Ensuring Service Continuity
• Ensuring the Security of the System
• Defining and Allocating the Expenses
• The Education of the Users 
• Service Presentation and Event Management
• Configuration Management 
• Problem Management
• Data Management 
• Physical Environment Management
• Operation Management 

“Inspecting and Evaluation” Main Process Field

• Inspection and Evaluation of Information Systems Performance
• Inspecting and Evaluating Internal Control
• Accommodating to the Related Legislation Including the Internal Methods and Basis of Auditee 
• Providing Institution Management in With Regard to the Information Systems

Auditing Services of Application Controls

The Auditing of Application Controls includes auditing and evaluating the activity and sufficiency of several internal controls such as; defining, producing, utilizing, completeness and security of the data used in order to carry out or support the activities in the scope of Information Systems or authorizing the access to the data.

• Data Preparing Procedures 
• Document Approval Procedures
• Document Compilation Procedures
• The Procedures of Correcting the Defective Documents
• Control of Document Storing
• Data Input Approval Procedures
• Controls of Accuracy and Completeness
• The Procedures of Correcting the Defective Data
• Controls of Data Process Consistency
• Data Processing Affirmation and Approval Controls
• The Procedures of Correcting Data Processing Faults
• The Controls of Arrangement and Storing of Reports
• The Procedures of Report Distribution
• Report Understandings
• The Procedures of Report Affirmation and Error Correction
• The Security of the Reports Which Include Critical Information

2. The Management of Information Systems and Processes and Consultancy Services

Our Information Systems and Processes Management Consultancy Services, which was designed with respect to COBIT (Control Objectives for Information and Related Technologies), which was developed by ITGI (Information Technologies Governance Institute) aims to reach the main control goals, under the scope of main process fields such as, Planning and Organization, Supply and Application, Service Presentation and Support and Inspecting. Our services are designed in order to develop and/or improve the Information System processes of the companies and carried out in five phases which is the part of the application method advised by ITGI. Our goal is to improve the processes under the scope of each application circulation and raise the level to the higher maturity level.

Determining the Needs 

Determining the Solutions

• Defining the Projects
• Developing the Application Plans
• Application
• Including the improvements to the Application
• Inspecting the Application Performance

Revision 

• The Revision of the Activity of the Application.
• Ensuring the Consistency.
• Determining New Needs 

Other certifications we provide depending on need, which are internationally accredited alongside ITGI/COBIT;

• Carnegie Mellon Software Engineering Institute / Capability Maturity Model Integration (CMMI)
• OGC/itSMF ITIL (The IT Infrastructure Library)
• ISO (International Organization for Standardization) 27001

The Management Model and Standards of Information Systems are also utilized