Stock exchanges require member brokers and other intermediaries to undergo periodic system audits covering trading systems, IT controls and operations.
We audit your trading and back-office systems, IT general controls, business continuity and security against the applicable exchange and SEBI requirements.
Objectives
- Review trading systems, algorithms and order management controls
- Assess IT general controls and access management
- Evaluate BCP, DR and backup arrangements
- Test network and application security
Methodology
01
Planning
- Define scope, applicable requirements and critical systems
- Agree audit plan, sampling approach and timelines
02
Fieldwork
- Review of policies, procedures and governance
- Testing of technical and operational controls
- Interviews with process owners and evidence verification
03
Technical testing
- Vulnerability assessment and penetration testing where in scope
- Configuration review of servers, databases and network devices
04
Reporting
- Observations rated by risk with recommendations
- Management responses and follow-up review
Deliverables
Audit plan and scope
Audit report with risk-rated observations
VAPT report where in scope
Remediation plan and follow-up review