Skip to main content
Loyca
Service reference 03Audit & AssuranceACTIVE PRACTICE PROTOCOL

IT Audit

Independent assurance over your IT estate

Risk-based examination of IT controls, operations, and change management, with evidenced findings.

PROTOCOL OVERVIEW

Executive Context & Technical Scope

We audit the IT function against a defined control framework and your own policies: access management, change control, backup and recovery, operations, and third-party dependencies. Every finding is supported by evidence, rated by risk, and paired with a remediation owner and a date.

TARGET PROFILES

Who Requires This Protocol

Internal audit functions needing specialist IT capability
Boards or audit committees commissioning independent review
Organisations responding to an external audit finding

ENGAGEMENT ARTIFACTS

Verifiable Outputs & Deliverables

Audit plan and scope agreed in writing

Delivered under strict NDA with executive presentation and engineering remediation roadmap.

Findings register with evidence references and risk ratings

Delivered under strict NDA with executive presentation and engineering remediation roadmap.

Management action plan with owners and dates

Delivered under strict NDA with executive presentation and engineering remediation roadmap.

Executive summary for the audit committee

Delivered under strict NDA with executive presentation and engineering remediation roadmap.

PRACTITIONER FAQ

Frequently Asked Scoping Questions

Can you co-source with our internal audit team?
Yes — co-sourcing is common where internal audit owns the relationship and needs technical depth for specific reviews.
Will this disrupt operations?
Evidence gathering is mostly read-only and scheduled around your team. We agree access and timing before we start.
PRACTICE CONTINUUM

INTELLIGENCE WITHOUT LIMITS

Scope IT Audit for your organization.

Get a fixed-scope proposal, verifiable deliverables list, and exact timeline for it audit.

Direct Hotline:+254 740 658 068
NO-OBLIGATION GUARANTEE

What to expect in your scoping call

  • Direct Senior Lead

    You talk to a seasoned cybersecurity consultant, never a sales script.

  • Strict Confidentiality

    We operate under mutual NDA before discussing sensitive architecture.

  • Actionable Next Steps

    Immediate priorities and costed options, whether you engage us or not.

Message Loyca on WhatsApp