Sound internal control answers three questions: who can come in, who can do what, and who did what. We answer them with practical arrangements: access control for your premises, management of rights in your information systems, traceability of your transactions, your assets and your documents. Our auditor’s eye makes the difference: every arrangement is designed so that it can still be checked afterwards.
Three arrangements
Physical access
- Badges, cards and access QR codes
- Biometric readers
- Visitor management
- Time and attendance
- Sensitive areas: cash office, stores, server room, archives
IT access
- Named accounts, no shared logins
- Rights granted by job function
- Two-factor authentication
- Periodic review of access rights
- Access removed when a member of staff leaves
Traceability
- A log of every transaction: who, what, when
- Asset tracking by QR code, barcode or RFID
- Tracking of documents and their versions
- Approval chain kept on record
- Alerts on unusual transactions
What we do
- Audit of physical and IT access, and of the segregation of duties.
- Design and installation of access control for premises: badges, biometrics, visitor management.
- Electronic time and attendance, linked to payroll.
- Access rights matrix and configuration of rights in your management software.
- Traceability of assets and stock by QR code, barcode or RFID.
- Logging of sensitive transactions and monitoring dashboards.
- Periodic review of access and logs, as part of continuous monitoring.
Our approach
Diagnosis
Premises, systems, job functions and sensitive transactions are reviewed; actual access is compared with intended access.
Design
Who must have access to what, and with what evidence: the rules are agreed with management before any equipment is bought.
Installation
Equipment, configuration of rights, logs and dashboards are put into service and tested.
Review
Access and logs are reviewed at regular intervals; gaps are dealt with.
What you receive
- Access audit report and access rights matrix.
- Access control system in service.
- Logs and monitoring dashboards.
- Access management procedures.