Skip to content
AI R&D for your audit work, without building a team of your own. Become a Design Partner.Become a Design Partner.Apply to joinApply
Prufy
Login

IT Audit

IT controls, tested against their evidence.

Access, change and continuity tested across your systems, with every exception tied to its source.

Cobalto Banca · Access reconciliationFictional data

Access reconciliation

Period-end population · 412 accounts matched against three sources

AccountDirectoryRequestsQ2 campaignResult
jsanzActiveJoiner approvedReviewedMatches
mlopezActiveLeaver completedRevokedMismatch
aortegaActiveJoiner approvedNo decisionException
pmolinaActiveChange approvedPendingUnder analysis
rdiazDisabledLeaver completedRevokedMatches
Prufy has held the conclusion. mlopez is still active after leaving.Decision needed

The challenge

Where the time goes in an IT audit.

  • Scattered evidence

    Each control lives in a different system and evidence arrives by email.

  • Manual testing

    Exports, screenshots and cross-checks in spreadsheets.

  • Late exceptions

    Discrepancies surface at period end, when there is little time left to resolve them with the control owner.

The evidence

The sources of IT audit work.

Prufy works with the systems your organisation already governs, with the permissions you authorise.

  • IdentityDirectory and recertification campaigns
  • TicketingApproved joiners, leavers and changes
  • Logs and SIEMActivity and security events
  • Policies and proceduresThe criteria each test is measured against

The outcome

Working papers for every control.Each test with its population, its exceptions and the source of every data point, ready for the reviewer.

How the work is shared

You direct. Prufy executes.

You directPrufy executes
  1. 01Scope and controls to testYou direct
  2. 02Extracts and cross-checks populationsPrufy executes
  3. 03Criteria and tolerance for each testYou direct
  4. 04Matches access against requestsPrufy executes
  5. 05A decision on every exceptionYou direct
  6. 06Flags exceptions with their sourcePrufy executes
  7. 07The conclusion for each controlYou direct
  8. 08Prepares the working papersPrufy executes

Digital specialists

A specialist for each control family.

Examples. Each team works with the specialists its methodology calls for.

Access

Recertifications, joiners and leavers, privileged accounts.

Change management

Changes approved, tested and deployed.

Backup and continuity

Backups run and restores tested.

Your audit intelligence belongs to you.

Request a demo

Designed around ISO/IEC 27001, ISO/IEC 42001 and SOC 2 and ready for certification.