How to prepare for your IT security audit

Watch this webinar where Senior Manager, Will Finn and Senior Associate Brendan Dougan go through the basics of an IT Security Audit and what is required from you to complete this overall process.

Download this free on-demand webinar today!

How to prepare for your IT security 

The intention of an IT security audit is to provide assurance that the firm is operating in a compliant manner within its own stated policies and that these policies meet the requirements of specific regulatory framework, the FCA in the UK, and the CBI in Ireland. An IT  security audit can help to bridge any gaps between a firm’s compliance obligations and their IT and security controls.

The European Banking Authority (EBA) Guidelines are used by national regulators in the EU and UK and require firms to undertake an annual risk assessment and report findings and actions to the regulator. The guidelines also require an independent audit of ICT controls periodically as well as the annual testing of ‘critical’ systems and the testing of ‘non-critical’ systems every 3 years.



Various aspects covered:


An overview of what an IT security audit actually involves


What we will ask you for in terms of documents and interviews


How you and your colleagues should prepare for the IT security  audit


How the success of an IT security audit should be measured 

Visit our website 
operational and security

About fscom

At fscom, we strive to offer excellent service in a professional and personable manner. We deliver this through our unrivalled understanding of financial services regulation and a strong emphasis on taking a commercial and innovative approach that puts our clients’ needs first.

We are specialists in providing regulatory advisory services to a broad range of financial services institutions including payment services and e-money, retail banks, cryptocurrency, trading and broking and asset management firms.

We work across three core areas of regulatory compliance, financial crime and cyber security and provide a range of services including compliance advice, authorisations, audits, interim roles and compliance training.