-
M&A transaktioner
M&A transaktioner
-
Børsnoteringer & kapitalmarkeds-transaktioner
Børsnoteringer og andre kapitalmarkedstransaktioner
-
Private kapitaltilførsler
Private kapitaltilførsler
-
Hvad er IT-revisorerklæringer?
Der findes forskellige typer it-revisorerklæringer. Læs hvad forskellen på ISAE 3000 og ISAE 3402 er.
-
ISAE 3402 – IT-revisorerklæring
En revisorerklæring af typen ISAE 3402 dokumenterer it-forholdene hos en virksomhed og fungerer ofte som bevis for, at virksomheden lever op til lovkrav og god it-skik.
-
ISAE 3000 GDPR – IT-revisorerklæring
En ISAE 3000 revisorerklæring er resultatet af vores gennemgang, der beviser om jeres virksomhed overholder databeskyttelsesloven (GDPR) som databehandler.
-
ISAE 3000 Cyber – IT-revisorerklæring
ISAE 3000 Cyber er en it-revisorerklæring der er relevant, hvis man ønsker at vise hvilke sikringsniveau virksomheden har i forhold til cybersikkerhedsrisici.
-
Forberedelsesforløb inden ISAE erklæringsarbejdet
Vi assisterer virksomheder i forløbet frem mod ISAE erklæringsarbejdet.
-
GAP analyser
For it sikkerhed kan GAP bruges til at påvise hvor der bør lægges ressourcer ift. hvor man gerne ser sin organisation være fremadrettet.
-
IT-rådgivning
Vi rådgiver både store og små virksomheder om alt lige fra håndtering af governance, risk og compliance (GRC), til spørgsmål om GDPR, udarbejdelse af it-sikkerhedspolitikker (informationssikkerhedspolitikker), implementering af NSIS eller NIS2.
-
ISO 27001/2 og ISO 27701
Vi hjælper med udarbejdelse af certificering omkring informationssikkerhed, hvor ISO 27001 er den mest anerkendte internationale standard.
-
NIS2 – rådgivning om implementering
Virksomheder og offenlige organisationer kan være omfattet af NIS2, hvis man anses for at være en del af Danmarks kritiske infrastruktur. Vi assisterer i arbejdet hen mod at blive NIS2-compliant.
-
NSIS – MitID/NemLog-in3
Udbydere af MitID skal have tilladelse fra Digitaliseringsstyrelsen, for at udbyde løsningen. Vi hjælper med formkrav og indhold til hvad der skal til for at blive godkendt.
-
It due diligence
Som it-revisorer er vi den uvildige part i it due diligence gennemgang ved virksomhedskøb, -salg eller -overtagelse. Vores detaljerede fagviden, fra det tekniske og det organisatoriske, gør, at vi ikke kun vurderer værdiansættelsen af hardwaren i virksomheden, vi vurderer mest af alt den forretningsmæssige værdi af systemerne.
-
Praktisk IT-sikkerhedsvurdering
Vi udarbejder praktisk IT-sikkerhedsvurdering til brug i virksomhedens it-funktion, men mest af alt til brug af direktion og bestyrelse.
Recently the first set of proposed European Sustainability Reporting Standards (ESRS) standards that were developed by the European Financial Reporting Advisory Group (EFRAG) were delivered to the European Commission (EC).
EFRAG’s role with the EC is to be its technical advisor on corporate reporting matters – both financial and non-financial. EFRAG is working very closely with the EC as it looks to finalise Europe’s Corporate Sustainability Reporting Directive (CSRD). The CSRD will soon be turned into legislation replacing the current Non-Financial Reporting Directive that currently exists.
Below are the most significant changes that EFRAG has made to its Exposure Drafts (EDs) on the ESRS that were issued earlier this year:
- The number sustainability standards included in the first set of ESRS delivered to the European Parliament has been dropped from 13 to 12 as the result of the content of the two proposed governance standards being merged into one
- The number of KPIs and specific disclosure requirements contained in all the EDs on ESRS has been significantly reduced. Across all the ESRS the total number of disclosures, if material, that are now required has reduced from 136 to 84
- The 'rebuttable presumption' principle, that was a notable feature of the original EDs has been dropped. Simply put this now means there is no longer a need to provide comprehensive disclosures when a disclosure requirement set out in the ESRS has been considered 'non-material', and
- The requirements that surround a reporting entity having to provide detailed disclosures about the value-chains it participates in have been clarified. Based on feedback received from the ED process a phased 3-year approach to disclose what is required has now been included.
Full details and links updated ESRS documents can be found at www.efrag.org.
The European Council (EC), who gave its final approval to the CSRD last week, will now consult EU bodies and Member States on these draft standards, before adopting the final standards as delegated acts in June 2023, followed by a scrutiny period by the European Parliament and EC.
The reporting requirements in Europe will be phased in over time for different kinds of companies. The first companies will have to apply the standards in financial year 2024, for reports published in 2025. Listed SMEs will be obliged to report as from 2026, with a further possibility of voluntary opt-out until 2028. However, they will be able to report according to separate, proportionate standards that EFRAG will develop next year.
EFRAG also announced last week that its focus in the next few months will be on drafting a second set ESRS that will draft sector specific standards:
- Five sectors covered by GRI: agriculture, coal mining, mining, oil and gas (upstream), oil and gas (mid-to downstream), and
- Five high-impact sectors: energy production, road transport, motor vehicle production, food/beverages, textiles. This second set of draft ESRS will also focus on some specific standards for SMEs.
We hope you find this information helpful in giving you some insight into EFRAG’s progress on the ESRS. If you would like to discuss any of the points raised, please speak to your usual Grant Thornton contact or your local member firm.