• Objectively assess a company’s ISP business processes. Assess the company’s risks and the
• efficacy of its risk management efforts.
• Ensure the existence of policy and procedures and they are well implemented.
• Ensure the company is compliant with relevant laws and statutes.
• Evaluate internal control and make recommendations on how to improve it.
• Identify shortfalls or gaps in all processes (operations, financial and technical)
• Promote ethics and help identify improper conducts.
• Assure safeguards of company’s resources (finance, assets, property…etc.).
• Investigate fraud. Communicate the findings to the management and company’s leadership.
• Follow up with the concerned departments to implement corrective and preventive actions based on the audit recommendations