IT Audit & Advisory

IT is continuously changing – does your company keep up?

Opportunities and threats within the area of IT are constantly changing. From the opportunities in cloud solutions, Blockchain technologies to threats from hackers, ransomware and huge fines up to several million Euros from the EU's GDPR.

In Grant Thornton we have employees who can guide you and your company through all IT-aspects – from strategic work in terms of policies and risk assessment for auditing to the control of the IT-use within your company.

The objective is to ensure that you, your employees, and your business partners can sleep well at night, fully aware that your systems and processes are effective and sufficient to withstand any kind of threat. Furthermore, we want to make sure that the new technologies and opportunities that could contribute to further growth for your company are assessed for your needs.

We can also assist if your company needs advice on doing business in Denmark and wish to ensure that your company is following Danish and European guidelines and regulations.

We advise within the following areas:

EU GDPR

• We have a huge knowledge about the EU GDPR and we can help your company with policies, guidelines, and IT-systems compliant with the EU GDPR.

Assessments on cyber threats

• Get an insight of exactly which cyber threat that could harm your company and how you are protected against it – and what can be done to make sure that you sleep well at night knowing that your company is fully protected.

Efficient and safe use of IT within the company

• Are you obtaining what you desire from your current IT-solution? Are contracts with sub suppliers made correctly and do you get value for money? Are you over- or under-implementing IT?

Advising and sparring in connection with contracts and declarations

• Did your company outsource IT to sub suppliers and receive declarations on behalf of the services? What do the declarations mean and what should you do to make sure that the contracts are compliant?

As a matter of course, we are carrying out auditing and compiling ISAE 3402 and ISAE 3000 declarations. This could be in relation to declarations about GDPR, data processor agreements, or outsourcing contracts.