Browse categories
Explore
Fiverr Pro
English
$
USD
I will do internal audit risk control documentation
Cybersecurity and IT Audit Consultant, VAPT and ISO 27001
IT auditor and cybersecurity consultant with 10+ years in banking and financial services. I help businesses find and fix security weaknesses before attackers or auditors do: vulnerability assessments ...
About this Gig
Need audit-ready risk and control documentation? I will document your key processes, identify the risks and controls, and give you a clear, practical report your auditors and management can use.
I am an IT Auditor at an international audit firm, with 10+ years in banking: internal audit, information risk, ITGC, access management and disaster recovery planning.
What I deliver
- Risk and Control Matrix (RCM) in Excel
- Process and control narratives
- Control gaps, ratings and practical recommendations
- Premium: action plan with owners and priorities
Good for
- Preparing for an internal or external audit
- Documenting IT general controls (access, change management, backups, operations)
- Startups and SMEs building their first control framework
Please message me before ordering so we can agree the processes in scope.
FAQ
What do you need from me to start?
A short description of the processes or systems in scope, any existing policies or procedures, and who owns each process.
Which frameworks do you use?
I align controls with common frameworks such as COSO and COBIT, and with ISO 27001 for IT controls, adapted to your size.
Do you sign an audit opinion?
No. I prepare documentation and findings to help you get audit-ready. I do not issue a formal audit opinion.
Is my information kept confidential?
Yes. I only use your documents for this order, and I am happy to sign an NDA before we start.
