Defdone | Audits

IT audit and
transformation

We advise organisations whose IT estate has not kept pace with the scale of the business. We conduct current state reviews, prepare remediation plans supported by a business case, and take responsibility for their execution. We work with the board, the owner and the operational teams in parallel, since each requires a different level of detail.

Scope of support

Current state review and maturity assessment

Inventory of systems, infrastructure, application portfolio and team capability. Assessment against established reference frameworks, with a defined target state.

IT governance and operating model

Allocation of responsibility between the centre and subsidiaries, decision rights, investment rules and group-wide standards.

Sourcing and vendor governance

Review of managed service agreements covering scope, service levels, audit rights, privileged access and exit provisions.

Cost and application
portfolio

Total cost of ownership analysis, systems performing the same function in different parts of the organisation, and unused licensing.

Consolidation and standardisation

Bringing separate environments across a group to a common technical and organisational standard, whether that separation stems from acquisitions or from the historical autonomy of individual entities.

Regulatory
readiness

Identification of gaps against the requirements applicable to the organisation, with a costed and scheduled closure plan.

Approach

Stage 1

Diagnosis

Review of documentation, configuration and contracts, interviews with management and operational teams, and verification of the actual state at selected sites. The outcome is a baseline no party disputes.

Stage 2

Remediation plan

Findings are ordered by materiality and cost of resolution. Each item carries an effort estimate, a date, an owner and its dependencies. The plan is issued in two forms: a decision document for the board and a working document for the teams.

Stage 3

Execution

We run the programme office: schedule, budget, vendor coordination and periodic reporting. We supplement the client's team where resources are short. We bill against delivered scope.

Key deliverables of
the review

Current state report with a risk register and assigned materiality.
Maturity assessment with target state and the gap to be closed.
Remediation roadmap phased across defined time horizons.
Business case and cost estimate for each course of action.
Recommendations on the operating model and vendor arrangements.
Decision paper for the board and the shareholder.

When we typically
get engaged

Current state report with a risk register and assigned materiality.
Maturity assessment with target state and the gap to be closed.
Remediation roadmap phased across defined time horizons.
Business case and cost estimate for each course of action.
Recommendations on the operating model and vendor arrangements.
Decision paper for the board and the shareholder.

Let's talk about a review of your IT estate

Scope and timing are agreed following an initial conversation, in which we establish whether a review is warranted at this point.

Get in touch

Let's Talk!

Oops! Something went wrong while submitting the form.