Technology Audit

Technology Auditor role is responsible for evaluating an organization’s information systems, technology infrastructure, and IT-related processes to ensure they are secure, reliable, compliant, and aligned with business objectives. 1.

IT Governance & Controls Review and assess IT general controls (ITGC) such as: Access management Change management IT operations Evaluate alignment with frameworks like COBIT, ITIL, ISO 27001.

Assess IT governance structure, policies, and procedures. 2.

Information Security & Cyber Risk Assess effectiveness of information security controls.

Review controls related to: Logical and physical access Data confidentiality, integrity, and availability Incident response and breach management Identify risks related to cyber threats, malware, and data leakage. 3.

Application & Systems Audit Audit applications (UPI, IMPS, NFS, Rupay etc.).

Review: Application access controls Interface controls Data validation and authorization checks 4.

Infrastructure & Technology Reviews Review IT infrastructure including: Servers, databases, networks Cloud environments and outsourced services.

Evaluate business continuity (BCP) and disaster recovery (DR) arrangements. 5.

Regulatory & Compliance Assurance Ensure compliance with applicable laws, regulations, and standards such as: RBI / UIDAI / NCIIPC guidelines.

Data Privacy Laws (e.g., DPDP Act).

Support statutory, concurrent, and regulatory audits.