D&S Technologies, LLC
External IT Audits
Protecting financial institutions, one question at a time.
A high-level review of your IT controls and risk posture.
Our External IT Audit is conducted in three phases:
Phase One is a thorough review of documentation to ensure alignment with regulatory requirements and industry best practices.
Phase Two involves interviews with key personnel to assess day-to-day operations and identify potential risks within processes and procedures.
Phase Three is an on-site assessment of your environment and any affiliated locations to identify physical or operational weaknesses that could expose the institution or its customers to risk.
Depending on the size and complexity of the institution, the audit is typically completed within three days. Our approach is grounded in established frameworks, including the FFIEC IT Handbook, ISO 27001, Microsoft best practices, NIST SP 800-53 and 800-88, Financial Institution Letters, and broader industry standards, supported by years of professional experience.