|
Burwood's capabilities extend from the
pre-audit process stage to sustaining compliance best practices. Our strengths include:
- Ability to link infrastructure risks to business and applications gaps
- Blend of legal, risk management and business skills with deep technical experience which helps us link compliance requirements to optimal remediation
- Understanding of technology and technology operations applied to supporting infrastructure
- Understanding the people, processes and technology behind running complex IT infrastructure
- Practical approach based on delivering quantifiable results and value
- Understanding of how to ensure a successful audit which typically improves operations of client companies
Burwood Group's methodology is based on the following four stages (e.g., SOX Project):
- Assess – Determine where the organization fails to meet expected standards based on SOX requirements and best practices
- Remediate – Identify and design the processes and supporting technology required to meet SOX requirements and best practices – generally includes various metrics
- Deploy – Implement the process and technology changes defined during the remediate phase
- Sustain – Develop a continuous mechanism by which the first three phases can be implemented on an ongoing basis to be compliant with SOX
For example, Burwood Group's high level approach to IT Controls analysis can be depicted as follows:

|