Control and Compliance

Is your company subject to national or international laws regarding internal control? B-fact has experience with setting up internal control frameworks for:

• Sarbanes Oxley 404
• Code Tabaksblat
• SAS70 - Statements

In addition, we can also independently test all the different types of controls:

• Entity Level Controls and Manual Controls (inquiry, inspection, examination or reperformance)
• Application Controls (based on parameter settings, reperformance testing or with data-analysis tools)
• IT General Controls (both process-based and technology-based (infrastructure, platforms, databases and applications))

Also if you are not subject to such legal obligations (yet), but you do want to improve your internal control or prepare for a possible implementation of SOx or Tabaksblat, we can assist you. In addition, we have experience with setting up frameworks basis on the following standards / methodologies:

• COSO
• CobIT
• ITIL
• ISO/IEC or BS 17799 (Code of Practice for Information Security Management)