Technology Risk | EY - Global

Technology Risk | EY - Global EY Logo Insights AI Insights Attractiveness surveys Geostrategy Economic Analysis Team Risk Sustainability Technology EY Transformation Services Strategy by EY-Parthenon Strategy Consulting Corporate Strategy Geopolitical Strategy Commercial Strategy Working Capital Turnaround and Restructuring Consulting Sustainability Strategy Industry Strategy AI Strategy Consulting Transactions and Corporate Finance by EY-Parthenon M&A Advisory M&A Integration M&A AI-powered Technology Divestment Strategy Corporate Finance Valuation, Modeling & Economics Due Diligence Services Infrastructure Advisory Transaction Tax Consulting Customer Experience by EY Studio+ Cyber Risk, Compliance and Resilience Services Data and decision intelligence CRO (Risk) Supply chain and operations Technology leaders’ agenda Transformation EQ Transformation Platform People and workforce Change management and experience services HR Transformation Services Integrated workforce mobility Learning and development consulting Recognition and reward advisory Workforce analytics Assurance Services Audit Climate change and sustainability services Financial accounting advisory services Forensic and Integrity Services Private client audit experience Technology Risk Long-term value metrics creation IFRS Tax Tax planning Tax operating model strategy and transformation | EY – Global Tax policy and controversy Global trade Global tax reform Sustainability tax services Tax compliance Transaction Tax Tax services: Designed for private Law Corporate and commercial law Digital law Labor and employment law Legal operations Transaction law Technology EY.ai Audit technology Tax technology M&A AI-powered Technology Technology transformation Alliances Technology Managed Services Blockchain EY Managed Services Cybersecurity Managed Services Financial Accounting & Corporate Reporting Managed Services Risk Managed Services Supply Chain and Operations Managed Services Sustainability Managed Services Tax Managed Services Technology Managed Services EY Private EY Private client experience EY private client audit experience service offerings Tax services: Designed for private Family enterprise IPO Entrepreneurship Climate change and sustainability services Climate change and sustainability services Sustainable finance Sustainability Strategy Supply chain transformation Sustainability tax services Legal services Global renewables Climate and decarbonization Environment, Health and Safety (EHS) Services Industries Advanced manufacturing and mobility Aerospace and defense Automotive Chemicals and advanced materials EY-Nottingham spirk innovation hub Future mobility Industrial products Mobility lens suite Transportation Consumer Consumer products The future consumer Sustainability Energy and resources Mining & Metals Power & Utilities Energy and Resources Strategy Consulting Digital navigator for mining Oil & Gas – Our latest thinking Energy industry cloud for SAP solutions Global renewables Energy and Resources Strategy Consulting UtilityWave Financial Services Banking and capital markets Insurance Wealth and asset management Sustainable finance Fintech and ecosystems Government and infrastructure Data and technology Education Human services Infrastructure Public finance management Health Health Life Sciences Private Equity Digital in private equity Exit readiness Generative AI services for private equity PE deal origination Private Equity Portfolio Company Value Creation Services Technology, media & entertainment and telecommunications Technology, media & entertainment and telecommunications Technology sector Telecommunications sector | Insights, surveys & services As-a-service business operations and transformation TMT business resiliency suite Future network now Capital operations and innovation suite (COInS) Careers What you can do here Careers in Tech Careers in Assurance Careers in Consulting Careers in EY-Parthenon Careers in Tax Careers in People Advisory Services Careers in Financial Services Careers in Global Delivery Services Careers in Core Business Services What it's like to work here Diversity, equity and inclusiveness Personalized career development Flexibility and mobility People stories How to join us How we hire Interview tips What we look for Job search Job search Students and entry-level Contract opportunities Talent community Careers in EY-Parthenon Careers in EY-Parthenon Experienced Job Search Early Career Opportunities About us Our purpose Our values Our people Campaigns Alliances Alumni Newsroom Locations Connect with us Insights\r\n"}}" id="rich-text-8c90040264e2" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> Insights Read more Read less Discover the insights you need to make better decisions today, to shape the future with confidence.

\r\n"}}" id="rich-text-8860dbbbbcf7" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> Discover the insights you need to make better decisions today, to shape the future with confidence.

Read more Read less Explore See more

\r\n"}}" id="rich-text-b0037b88de90" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> See more

Read more Read less Highlights
\r\n\r\n"}}" id="rich-text-1ff22ecb0690" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> Highlights
Read more Read less

The CEO Imperative Series

Top 10 geopolitical developments for 2025

05 May 2025Andrea Guerzoni

Attractiveness surveys

Why Europe’s confidence persists despite investment at a nine-year low

15 May 2025Julie Teigland

\r\nEY podcasts
\r\nEY webcasts
\r\nCase studies
\r\n

\r\n"}}" id="rich-text-952bdc8ecb84" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text">
EY podcasts
EY webcasts
Case studies

Read more Read less Services\r\n"}}" id="rich-text-e627191cecb3" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> Services Read more Read less EY helps clients create long-term value for all stakeholders. Enabled by data and technology, our services and solutions provide trust through assurance and help clients transform, grow and operate.

\r\n"}}" id="rich-text-ef8fd1dc7f65" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> EY helps clients create long-term value for all stakeholders. Enabled by data and technology, our services and solutions provide trust through assurance and help clients transform, grow and operate.

Read more Read less Explore \r\nSee All\r\n1||About EY-Parthenon\r\n2||About EY-Parthenon\r\n\r\n"}}" id="rich-text-7659160b73a5" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> See All1||About EY-Parthenon2||About EY-Parthenon Read more Read less Spotlight\r\n"}}" id="rich-text-571377e9fd0c" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> Spotlight Read more Read less Customer & Growth by EY Studio+

\r\nEY.ai - A unifying platform

\r\nTechnology transformation

\r\nTax function operations

\r\nClimate change and sustainability services

\r\nEY Ecosystems

\r\nEY Nexus: business transformation platform

\r\n"}}" id="rich-text-502ad8b9c81f" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> Customer & Growth by EY Studio+

EY.ai - A unifying platform

Technology transformation

Tax function operations

Climate change and sustainability services

EY Ecosystems

EY Nexus: business transformation platform

Read more Read less Industries\r\n"}}" id="rich-text-74d9ed2f355d" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> Industries Read more Read less Discover how EY insights and services are helping to reframe the future of your industry.
\r\n

\r\n"}}" id="rich-text-3f22b060d8ce" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> Discover how EY insights and services are helping to reframe the future of your industry.

Read more Read less Explore See more

\r\n"}}" id="rich-text-e7664d535e47" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> See more

Read more Read less Case studies\r\n"}}" id="rich-text-8843a7aa4a19" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> Case studies Read more Read less

Technology

How one health care testing company gets results with AI

04 Dec 2024EY Global

Tax

How a unified tax compliance approach generates value

04 Oct 2024EY Global

Strategy and Transactions

How an American city tackled a major budget gap

06 Sep 2024EY Global

See all

\r\n"}}" id="rich-text-82bcd695ed7e" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> See all

Read more Read less Careers\r\n"}}" id="rich-text-450bb145dd35" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> Careers Read more Read less We bring together extraordinary people, like you, to build a better working world.

\r\n"}}" id="rich-text-5a491a96884e" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> We bring together extraordinary people, like you, to build a better working world.

Read more Read less Explore See more

\r\n"}}" id="rich-text-b04d682b4d5e" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> See more

Read more Read less Spotlight\r\n"}}" id="rich-text-3144b5bbc6d3" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> Spotlight Read more Read less Experienced professionals

\r\nStudent and entry level programs

\r\nTalent community

\r\n"}}" id="rich-text-f68d12000b5b" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> Experienced professionals

Student and entry level programs

Talent community

Read more Read less About us\r\n"}}" id="rich-text-46782458ec6a" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> About us Read more Read less At EY, our purpose is building a better working world. The insights and services we provide help to create long-term value for clients, people and society, and to build trust in the capital markets.

\r\n"}}" id="rich-text-3e18535fe3f0" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> At EY, our purpose is building a better working world. The insights and services we provide help to create long-term value for clients, people and society, and to build trust in the capital markets.

Read more Read less Explore See more

\r\n"}}" id="rich-text-65b5b60f5dbb" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> See more

Read more Read less Top news\r\n"}}" id="rich-text-292e54590d08" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> Top news Read more Read less

Press release

EY announces large-scale integration of leading-edge AI technology into global Assurance technology platform

09 Apr 2025Emile Abu-Shakra

Press release

Major expansion of EY-Parthenon strengthens EY position in global strategy and transactions market

27 Mar 2025EY Global

Press release

EY reports global revenue of US$51.2b for fiscal year 2024

17 Oct 2024Rachel Lloyd

Search search

close search See all results for ' '

No results have been found

Topics

See All

General

See All

People

See All

Recent Searches

Trending

How a license to lead can transform human potential in an AI world Learn more about the EY AI Sentiment Index Study and unlock key insights to lead in the AI era. 09 Apr 2025 AI How will your decisions today shape the future for generations to come? Discover how shifts in demographics and tech reshape priorities, urging new models for growth through innovative organizational strategies. Read more. 16 Jan 2025 Innovation Realized Amid disruption, how can legal departments innovate with confidence? To play a more strategic and impactful role, legal departments must evolve. Explore the 2025 EY Law Study and learn how. 09 Apr 2025 Law My EY My EY Select your location

Local sites Technology Risk EY teams offer audit, attestation, certification and assessment services to help companies identify, understand, assess, manage and mitigate risk arising from the implementation and use of technology.

As confidence and trust in data and technology are becoming a greater societal concern, understanding risk arising from the implementation and use of technology is increasingly important to accelerating business performance and achieving sustainable growth. The ability to understand these risks and bridge the knowledge gap that often exists between business and IT is the core strength of EY teams. Specialized knowledge of IT is integral to the execution of high-quality audits and the need to safeguard internal controls. EY teams also help decision-makers to attain confidence and embed trust through third-party communications on internal control and regulatory compliance to customers (and their external auditors), investors, management, regulators and other stakeholders. 

Read more Read less Featured Thinking How can responsible AI bridge the gap between investment and impact? Joe Depa 08 Oct 2025 How EY can help\r\n"}}" id="rich-text-cdbae079651e" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> How EY can help Read more Read less IT Audit The execution of high-quality information technology (IT) audit procedures, including understanding the effect of technology at business and IT-process levels, in support of a financial statement audit and an audit of internal control over financial reporting creates the foundation of our commitment to protecting investors and promoting trust in the capital markets.

\r\nEY Professionals serve the public interest by executing high-quality audit procedures with independence, integrity, objectivity and professional skepticism. In doing so, they help to support sustainable, long-term value creation.

\r\nEY multidisciplinary teams with subject-matter knowledge to address the most complex issues use a proven global audit methodology, our global auditing tools and the latest insights to deliver a consistent level of service worldwide.

\r\nEY professionals provide insights, candid observations and permitted services that lead to improved understanding of business risks arising from the use and implementation of technology and informed decision-making.

\r\nIT Audit services include:

\r\n\r\nIntegrated audit\r\nFinancial statement audit\r\nStatutory audit\r\n\r\n"}}" id="rich-text-ad7087be78c6" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> The execution of high-quality information technology (IT) audit procedures, including understanding the effect of technology at business and IT-process levels, in support of a financial statement audit and an audit of internal control over financial reporting creates the foundation of our commitment to protecting investors and promoting trust in the capital markets.

EY Professionals serve the public interest by executing high-quality audit procedures with independence, integrity, objectivity and professional skepticism. In doing so, they help to support sustainable, long-term value creation.

EY multidisciplinary teams with subject-matter knowledge to address the most complex issues use a proven global audit methodology, our global auditing tools and the latest insights to deliver a consistent level of service worldwide.

EY professionals provide insights, candid observations and permitted services that lead to improved understanding of business risks arising from the use and implementation of technology and informed decision-making.

IT Audit services include:

Integrated auditFinancial statement auditStatutory audit Read more Read less System and Organization Controls (SOC) Reporting The SOC reporting services enable entities to provide trusted communications focused on internal controls to customers (and their external auditors), investors, management, regulators and other stakeholders. These services efficiently address service organizations’ customer needs for trusted risk-based information.

\r\n\r\nSOC 1 helps entities (service organizations) that operate information systems and provide business process services supporting financial reporting, build trust and confidence in their delivery processes and controls through a report they can deliver to their customers and customers’ external auditors.\r\nSOC 2/3 help entities meet the needs of a broad range of users that require information and assurance about the controls at the entity that affect the security, privacy, confidentiality, availability and processing integrity of entity’s systems.\r\nSOC for Cyber helps entities meet the needs of a broad range of users that require information and assurance about an entity's enterprise-wide cybersecurity risk management program.\r\nSOC for Supply Chain helps entities meet the needs of stakeholders that require information and assurance about an entity's system and controls for producing, manufacturing, or distributing goods to better understand the risks in their supply chains.\r\n\r\nEY teams also provide pre-assessment services for a draft subject matter such as a system description prior to the performance of a limited or a reasonable assurance engagement (e.g., SOC report).

\r\nAgreed Upon Procedures (AUP) services help entities communicate independent results of controls testing or other procedures agreed upon between the entity and third-party recipients of the report. AUP engagements allow entities to communicate independent factual findings on control testing or other procedures to third-party recipients of the AUP report. EY teams present and report on a set of procedures that entities and the specified third party report users agree to, and the related findings resulting from the procedures.

\r\nISAE 3000 reports on audit-related procedures that the auditor, entity and any appropriate third parties have agreed to (related to nonfinancial information):

\r\n\r\nISAE 3000 control testing – the capability to perform the procedures and control testing, leading to an assurance report (in accordance with the ISAE 3000 standard)\r\nISAE 3000 implementation support and training – the capability to provide training on the execution of procedures, leading to an assurance report (in accordance with the ISAE 3000 standard)\r\n\r\n"}}" id="rich-text-ca99f5462cb5" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> The SOC reporting services enable entities to provide trusted communications focused on internal controls to customers (and their external auditors), investors, management, regulators and other stakeholders. These services efficiently address service organizations’ customer needs for trusted risk-based information.

SOC 1 helps entities (service organizations) that operate information systems and provide business process services supporting financial reporting, build trust and confidence in their delivery processes and controls through a report they can deliver to their customers and customers’ external auditors.SOC 2/3 help entities meet the needs of a broad range of users that require information and assurance about the controls at the entity that affect the security, privacy, confidentiality, availability and processing integrity of entity’s systems.SOC for Cyber helps entities meet the needs of a broad range of users that require information and assurance about an entity's enterprise-wide cybersecurity risk management program.SOC for Supply Chain helps entities meet the needs of stakeholders that require information and assurance about an entity's system and controls for producing, manufacturing, or distributing goods to better understand the risks in their supply chains. EY teams also provide pre-assessment services for a draft subject matter such as a system description prior to the performance of a limited or a reasonable assurance engagement (e.g., SOC report).

Agreed Upon Procedures (AUP) services help entities communicate independent results of controls testing or other procedures agreed upon between the entity and third-party recipients of the report. AUP engagements allow entities to communicate independent factual findings on control testing or other procedures to third-party recipients of the AUP report. EY teams present and report on a set of procedures that entities and the specified third party report users agree to, and the related findings resulting from the procedures.

ISAE 3000 reports on audit-related procedures that the auditor, entity and any appropriate third parties have agreed to (related to nonfinancial information):

ISAE 3000 control testing – the capability to perform the procedures and control testing, leading to an assurance report (in accordance with the ISAE 3000 standard)ISAE 3000 implementation support and training – the capability to provide training on the execution of procedures, leading to an assurance report (in accordance with the ISAE 3000 standard) Read more Read less ISO Management System Certification, Implementation and Training The ISO Management System Certification, Implementation and Training services provide implementation and certification of a management system according to ISO standards and other established certification frameworks.

\r\nEY CertifyPoint B.V., an EY entity founded in 2002, is an accredited, independent, and impartial certification institute headquartered in the Netherlands. Through EY CertifyPoint, EY teams provide Lead Implementer and Lead Auditor courses, including certification of entity personnel for several ISO standards.

\r\nEY teams support entities in meeting their goals by improving the efficiency and effectiveness of their management systems. EY teams keep the business at the center, identifying areas of redundancy, bottlenecks and potential efficiency gains by means of a systematic and independent certification approach against a globally recognized standard.

\r\nThe following standards are addressed:

\r\n\r\nISO 9001: Quality Management System\r\nISO 14001: Environment Management System\r\nISO/IEC 20000-1: IT Service Management System\r\nISO 22301: Business Continuity Management System\r\nISO/IEC 27001: Information Security Management System\r\nISO/IEC 27017: Cloud Security Controls\r\nISO/IEC 27018: Protection of Personally Identifiable Information in Cloud\r\nISO/IEC 27701: Privacy Information Management System\r\nISO 37001: Anti Bribery Management System\r\nISO/IEC 42001: Artificial Intelligence Management System\r\nISO 45001: Occupational Health and Safety Management System\r\nISO 50001: Energy Management\r\nWorld Lottery Association (WLA) assessments\r\nCSA STAR certification\r\nNEN 7510-1: Health Information Security Management System\r\nHébergeur de Données de Santé (HDS)\r\nMulti-Tier Cloud Security (MTCS - Singapore)\r\nGDPR assessment\r\nCISPE Code of Conduct accredited monitoring body\r\nIntegrated approach with ISAE3402, SOC and other attestation reports, such as a combination of ISO/IEC 27001:2013 with ISAE3402\r\n\r\n"}}" id="rich-text-2d8db74140a5" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> The ISO Management System Certification, Implementation and Training services provide implementation and certification of a management system according to ISO standards and other established certification frameworks.

EY CertifyPoint B.V., an EY entity founded in 2002, is an accredited, independent, and impartial certification institute headquartered in the Netherlands. Through EY CertifyPoint, EY teams provide Lead Implementer and Lead Auditor courses, including certification of entity personnel for several ISO standards.

EY teams support entities in meeting their goals by improving the efficiency and effectiveness of their management systems. EY teams keep the business at the center, identifying areas of redundancy, bottlenecks and potential efficiency gains by means of a systematic and independent certification approach against a globally recognized standard.

The following standards are addressed:

ISO 9001: Quality Management SystemISO 14001: Environment Management SystemISO/IEC 20000-1: IT Service Management SystemISO 22301: Business Continuity Management SystemISO/IEC 27001: Information Security Management SystemISO/IEC 27017: Cloud Security ControlsISO/IEC 27018: Protection of Personally Identifiable Information in CloudISO/IEC 27701: Privacy Information Management SystemISO 37001: Anti Bribery Management SystemISO/IEC 42001: Artificial Intelligence Management SystemISO 45001: Occupational Health and Safety Management SystemISO 50001: Energy ManagementWorld Lottery Association (WLA) assessmentsCSA STAR certificationNEN 7510-1: Health Information Security Management SystemHébergeur de Données de Santé (HDS)Multi-Tier Cloud Security (MTCS - Singapore)GDPR assessmentCISPE Code of Conduct accredited monitoring bodyIntegrated approach with ISAE3402, SOC and other attestation reports, such as a combination of ISO/IEC 27001:2013 with ISAE3402 Read more Read less System and process assessments A system and process assessment includes an assessment of internal control as part of an upgrade or an implementation of an ERP (e.g., SAP S/4HANA), an application or a process. These services provide an independent assessment of an entity’s current state or a documented future state internal control to provide leading practice recommendations for management’s consideration. A system or a process upgrade or an implementation assessment helps the entity to:

\r\n\r\nObtain confidence that internal control considerations are adequately addressed.\r\nUnderstand complex business processes.\r\nIdentify new risks and control gaps introduced by changes to process or technology and remediation recommendations based on leading practices.\r\nEnable the entity to take advantage of new capabilities that allow better leverage of investment in new process or technology, including opportunities for process automation and improvement, and GRC. integration, reporting and continuous control monitoring.\r\n\r\nA pre-assessment of a draft subject matter such as a system description prior to the performance of a limited or a reasonable assurance engagement (e.g., SOC report), helps the entity to:

\r\n\r\nUnderstand how to apply the evaluation criteria to the subject matter \r\nUnderstand the disclosure requirements for the subject matter information (e.g., management’s description for a SOC report)\r\nUnderstand procedures performed to assess the subject matter information and/or controls\r\n\r\n"}}" id="rich-text-df154e4d7417" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> A system and process assessment includes an assessment of internal control as part of an upgrade or an implementation of an ERP (e.g., SAP S/4HANA), an application or a process. These services provide an independent assessment of an entity’s current state or a documented future state internal control to provide leading practice recommendations for management’s consideration. A system or a process upgrade or an implementation assessment helps the entity to:

Obtain confidence that internal control considerations are adequately addressed.Understand complex business processes.Identify new risks and control gaps introduced by changes to process or technology and remediation recommendations based on leading practices.Enable the entity to take advantage of new capabilities that allow better leverage of investment in new process or technology, including opportunities for process automation and improvement, and GRC. integration, reporting and continuous control monitoring. A pre-assessment of a draft subject matter such as a system description prior to the performance of a limited or a reasonable assurance engagement (e.g., SOC report), helps the entity to:

Understand how to apply the evaluation criteria to the subject matter Understand the disclosure requirements for the subject matter information (e.g., management’s description for a SOC report)Understand procedures performed to assess the subject matter information and/or controls Read more Read less IT Compliance and Regulatory Assurance IT Compliance and Regulatory Assurance services help entities understand, prepare for, and report to address rapidly evolving laws, regulations and professional standards. These services help an entity more sustainably and efficiently address regulatory and sector-specific (e.g., Government, Healthcare, Financial Services) technology compliance requirements. Examples include helping entities comply with requirements related to:

\r\n\r\nAI regulations (e.g., AI Act)\r\nCyber security (e.g., Cyber Resilience Act, Cybersecurity Maturity Model Certification, Network and Information Security (NIS2) Directive)\r\nData security (e.g., Data Act)\r\nDigital resilience (e.g., Digital Services Act, Digital Markets Act, Digital Operational Resilience Act)\r\nSector-specific requirements (e.g., HITRUST, SWIFT, TISAX)\r\nData and IT controls in ESG reporting \r\n\r\n"}}" id="rich-text-a5136a58b58c" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> IT Compliance and Regulatory Assurance services help entities understand, prepare for, and report to address rapidly evolving laws, regulations and professional standards. These services help an entity more sustainably and efficiently address regulatory and sector-specific (e.g., Government, Healthcare, Financial Services) technology compliance requirements. Examples include helping entities comply with requirements related to:

AI regulations (e.g., AI Act)Cyber security (e.g., Cyber Resilience Act, Cybersecurity Maturity Model Certification, Network and Information Security (NIS2) Directive)Data security (e.g., Data Act)Digital resilience (e.g., Digital Services Act, Digital Markets Act, Digital Operational Resilience Act)Sector-specific requirements (e.g., HITRUST, SWIFT, TISAX)Data and IT controls in ESG reporting  Read more Read less

Our latest thinking

How responsible AI can unlock your competitive edge

Discover how closing the AI confidence gap can boost adoption and create competitive edge. Explore three key actions for responsible AI leadership.

Sinclair Schuller

How can reimagining risk prepare you for an unpredictable world?

The 2025 EY Global Risk Transformation Study explores how Risk Strategists see disruption earlier, adapt faster and respond with more precision.

Scott McCowan + 2

How AI assessments can enhance confidence in AI

Well-designed AI assessments can help evaluate whether investments in the technology meet business and society’s expectations. Read more.

Anne McCormick + 1

How Mott MacDonald is building confidence through responsible AI

Explore how EY teams helped a global firm establish and accelerate AI governance to enable them to transform responsibly and ethically.

How to prepare your data for AI

In this episode of the Think Ecosystem podcast, Sameer Shah and AI leaders discuss the looming AI bubble – and what a pop might mean. Learn more.

39m 57s

How can we upskill Gen Z as fast as we train AI?

An inside look at how literate Gen Z is in AI; how Gen Z understands and uses AI. Learn more.

How to navigate global trends in Artificial Intelligence regulation

Learn why the AI regulatory approach of eight global jurisdictions have a vital role to play in the development of rules for the use of AI.

EY Global

Top 10 Opportunities for Technology Companies in 2024

Technology companies have plenty of opportunities to act upon in 2024, despite a challenging macro environment. Here are the top 10.

Ken Englund + 3 Previous Next

Why cyber risk management matters for financial resilience

By embedding cyber risk management into financial planning, CFOs can enhance their organization’s cyber resilience.

Read more (via EY.com US) Explore Assurance
 

Assurance teams serve the public interest by promoting trust and confidence in business and the capital markets.

Assurance services Audit Climate Change and Sustainability Services Financial Accounting Advisory Services Forensic & Integrity Services IFRS Technical Resources Featured How private boards unlock value by elevating risk management

On the agenda (5)

Skip west Assurance services Featured: What makes today’s climate leaders tomorrow’s business leaders? Discover FLM east Audit Featured: Global Audit Quality Report: a commitment to continuous improvement Discover FLM east Climate change and sustainability services Featured: What makes today’s climate leaders tomorrow’s business leaders? Discover FLM east Financial accounting advisory services Featured: Transforming a private bank for customer centricity and innovation Discover FLM east Forensic and Integrity services Featured: How can trust survive without integrity? Discover FLM east east Careers at EY

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you.

Experienced professionals Students and entry-level The team Shelly Fliehe EY Global Technology Risk Leader Client-driven. Problem solver. Empathetic leader. Boy mom. Ravenous reader. All in. Minneapolis, MN, United States Daryl Box EY Americas Assurance Technology Risk Leader Driven leader. Champion of quality. Mentor. Husband and father. Houston, TX, United States Jim Okas EY Americas Deputy Technology Risk Leader Growth-oriented leader. Prioritizes quality and collaboration. Dedicated relationship builder. Mentor. Advocate for diversity. Devoted father and husband. Iselin, NJ, United States Sai Adwaith Krishnamurthy EY Global Delivery Services Technology Risk Leader Trusted risk advisor supporting organizations to transform. Passionate about EY people. Proud father of two. Pune, India Kate Stimpson EY Asia-Pacific Assurance Technology Risk Leader Quality focused leader. Diversity champion. Passionate about learning and innovation. Mentor, advocate for well being. Liverpool FC fan. Yogi. Sydney, Australia Cathy Cobey EY Global Assurance Responsible AI and Technology Risk AI Leader Thought leader in digital trust. Advocate of women in technology. Lover of good food. Film festival enthusiast. Avid learner. Parent. Toronto, Canada Sven Bartheidel EY Global Technology Risk Strategy and Markets Leader Builds confidence in the technologies of the digital age and in digital ecosystems. Husband and father of three children. Spends as much time as possible on the North Sea coast and in France. Hamburg, Germany Richard Brown EY EMEIA Assurance Technology Risk Leader Working with great clients and the best teams to bring clarity and insight over the key technology risks today and tomorrow. Golfer, runner, diver, lover of wine and father to four. London, United Kingdom Gregory Gruz EY Global Technology Risk Markets Leader; Program Director, Vanguard and Expanded Assurance, EY & Associés International experience in technology risk, digital transformation, and go-to-market strategies. Passionate about AI and emerging technologies. Thrives in global environments. Enjoys hiking and yoga. Paris, France Brandon Miller EY Global and Americas Technology Risk System and Organization Controls, Attestation and Certification Leader Experienced, growth-minded leader. Helps clients establish and communicate trust in their processes, controls and operations. Mentor. Husband and father of two sons. Des Moines, IA, United States Jaime Kipnes EY Global and Americas Technology Risk Cybersecurity Leader Passionate leader focused on cybersecurity risk management where audit, technology and compliance intersect. Recognized diversity champion, coach and mentor. Proud mom. New York, NY, United States Ammar Ajam-Oghli EY Global Technology Risk Innovation and Digital leader Technology risk innovator. Leading transformative solutions and advancements in risk management and tech integration. Experienced in AI, cybersecurity and digital transformation. Zurich, Switzerland Irwan Burhan EY Global Technology Risk Automation and Analytics Leader Passionate about innovation and people-first leadership. Proud husband and father of two. Los Angeles, CA, United States Jatin Sehgal EY Global ISO Leader and EY CertifyPoint Managing Director ISO management systems guru and subject matter professional for ISO implementation, training and certifications. Go-getter and entrepreneurial. Growth hacker, well-traveled and sport lover. Amsterdam, Netherlands Daan Smulders EY Global Technology Risk IT ESG Leader Energized by working in a global environment. A focus on bringing the best of EY to our clients and prospective clients. Amateur chef. Proud husband and father. The Hague, Netherlands Show more Contact us Like what you’ve seen? Get in touch to learn more. EY logo \r\nConnect with us
\r\n\r\nOur locations\r\nMy EY\r\nSite map\r\nLegal and privacy\r\n\r\n"}}" id="rich-text-2fdf569f0008" data-up-is="rich-text" data-up-translation-read-more="Read more" data-up-translation-read-less="Read less" data-up-translation-aria-label-read-more="Read more button, press enter to activate, or use Up arrow key to learn more about this content" data-up-translation-aria-label-read-less="Read less button, press enter to activate, or use Up arrow key to learn more about this content" class="up-rich-text cmp-text" data-up-analytics="rich-text"> Connect with us
Our locationsMy EYSite mapLegal and privacy Read more Read less Open Facebook profile Open X profile Open LinkedIn profile Open Youtube profile EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.

\r\n"}}" class="cmp-text"> EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.

Welcome to EY pl (en) You are visiting EY pl (en) pl en