Skip to main content

Approach

Distinctive approach

Continuous improvement

Datacentre Compliance

Datacentre
Compliance

Our approach comprises of an intensive automated audit workflow based on our SOCassurance™ solution, continuous improvement of your-, and our processes and customer excellence in everything we do. This approach is summarized in underlying figure.

ISAE 3402 SOC1

ISAE 3402
SOC1

ISAE 3000 SOC2 and ISAE 3402 SOC1 are the most important international datacentre standards in use today. ISAE stands for International Standard on Assurance Engagements. ISAE 3402 is the standards for (financial) outsourcing and ISAE 3000 is the standard for non-financial information and if for an ISAE 3000 assurance engagement SOC2 is applied, more specifically the General IT Controls of an organization.

Transparant Reporting

Transparant
Reporting

ISAE 3402 SOC1 and ISAE 3000 SOC2 govern the way organizations report on their various compliance controls. These reports usually come in the form of a Service Organization Control (SOC) report, which provides the information needed to accurately evaluate the risks and test risk controls associated with outsourced vendors. ISAE 3000 and ISAE 3402 reports provides the attestations of compliance with defined criteria. These defined criteria vary from the processing of financial data to IT governance and control of IT systems specifically.

Creative & Professional

Creative
& Professional

The core attributes of our approach are efficiency and minimizing the disruption of operational processes during the audit procedures. This requires effective planning and open communication with Capgemini during the planning phase, throughout the entire engagement and particularly during the reporting and audit phase. Our approach is focused on delivering quality throughout the entire process and is subject to the Conclude Accountants quality standards. This ensures adequate stakeholder involvement at the appropriate level. 

1 Step

Audit program & planning

2 Step

PBC and selections

3 Step

Testing activities

4 Step

Audit findings & management

About

Certicus is an international audit firm providing services to the top tier IT and financial services firms worldwide. We continuously explore the latest technology and adapt to follow world’s new trends to deliver the best assurance services to the market.