STRYVVE’s Information Systems Audit service is based on a defined audit framework referencing COBIT Framework and ISACA’s Audit Guidelines. Our IS Audit service provides management and business process owners with assurance and advice regarding controls in the organization and that relevant control objectives are being met, identify where there are significant weaknesses in those controls and substantiate the risk that may be associated with these weaknesses; and, finally, advise the executive management on the corrective actions that should be taken. Each IS Audit assignment is scoped vigilantly by our team and is tailored according to the client’s business requirements and defined audit objectives. The audit process applies COBIT’s recommended detailed control objectives to identify gaps and provide management assurance and/or advice for improvement. It also caters to the guidelines set out by ISACA and IIA publications.

The NIST Cybersecurity Framework also provides a maturity matrix by which organizations can compare their risk and maturity levels. This Maturity Model provides a structure for organizations to baseline current capabilities in cybersecurity workforce planning, establishing a foundation for consistent evaluation. It is considered as a management tool for leadership in identifying opportunities for growth and evolution. NIST’s Cybersecurity Framework is evolved around five security Functions: (1) Identify, (2) Protect, (3) Detect, (4) Respond, and (5) Recover. Each of the functions consists of various Categories and Subcategories that break the Functions into prescriptive technical activities or ‘Controls’. All Functions considered together represent a holistic approach to managing security risks. We assess their cybersecurity environment against all five Functions and the respective Categories to build a current profile. STRYVVE’s Cybersecurity Maturity Assessment service provides an easy way to assess an organization’s current cybersecurity maturity against five security Functions. This assessment, known as the Cybersecurity Maturity assessment, is used to determine the Organization’s cybersecurity maturity level within five major ‘domains’ of its Information Technology / Information Security (IT/IS) programs. Within each domain, assessment factors describe specific areas to be evaluated. A maturity level is determined for each component of the assessment and the maturity levels for all components of a domain are used to determine the domain’s maturity level.