Information System Audit (DISA)
DISA-certified IS audits covering IT general controls, ERP application controls, and RBI-mandated cybersecurity assessments.
What We Cover
- IT General Controls (ITGC) — access management, change management, IT operations
- Application controls review for ERP systems (SAP, Tally Prime, Oracle)
- RBI-mandated IS audit for scheduled banks, cooperative banks, and NBFCs
- Cybersecurity framework assessment and vulnerability reporting
- Data analytics using CAATs — anomaly detection and access pattern review
- Segregation of duties (SoD) conflict analysis
- SOC 1 / SOC 2 readiness gap assessment
- IS audit report in RBI-prescribed format with remediation recommendations
Key Deliverables
How We Work
Scope & Planning
Define audit scope covering IT infrastructure, applications, databases, and network components. Prepare risk-based audit plan.
Controls Assessment
Evaluate IT General Controls (access, change management, operations) and Application Controls (input, processing, output) across all critical systems.
Testing & Analytics
Perform substantive testing using CAATs, review audit logs, test access controls, and verify data integrity across systems.
Reporting & Remediation
Issue detailed IS audit report with findings, risk ratings, and actionable recommendations. Support management in implementing remediation measures.
Is This Service Right for You?
Frequently Asked Questions
What is a DISA qualification?
DISA (Diploma in Information Systems Audit) is a post-qualification certification from ICAI that qualifies Chartered Accountants to conduct information systems audits. It covers IT governance, information security, system development lifecycle, and IT audit methodologies.
Is IS audit mandatory for banks?
Yes. RBI mandates IS audit for all scheduled commercial banks, urban cooperative banks, and NBFCs above certain thresholds. The audit must be conducted by CISA/DISA qualified professionals and covers core banking systems, electronic delivery channels, and cybersecurity controls.
What systems do you audit?
We audit ERP systems (SAP, Tally, Oracle), core banking solutions, payment platforms, e-commerce systems, custom applications, cloud infrastructure, and database systems. Our approach covers both on-premise and cloud-deployed systems.
Stop worrying. Talk to us today.
Our qualified CAs are ready to help you navigate taxes, compliance, and business growth. Reach out now.