Get notified when there's news

Want to stay up-to-date? Sign up for our infoupdate. You'll be notified directly when we publish new content that's relevant to you.

I accept


Home page // IT auditor statements: Businesses demand independent documentation
Solid IT procedures and secure handling of sensitive data have become more important than ever.
August 19, 2022

IT auditor statements: Businesses demand independent documentation 

In sales situations and tenders, it's becoming increasingly common for even smaller companies to prove that they have 100% control over information security. This has led to a significant increase in interest in independent IT auditor statements such as ISAE 3000 and ISAE 3402. "It's crucial to show your customers and partners that you handle their data securely and professionally," says CIO and IT auditor Simon Okkels from inforevision.

Solid IT procedures and secure handling of sensitive data have become more important than ever, and the topic has moved into the boardrooms of companies across the country.

"Documenting your IT procedures used to be seen as an administrative burden, but today it has become an important tool in many companies. Partly because digitalization has made data and IT a major security risk that requires the full attention of the entire organization, and partly because companies increasingly need to be able to demonstrate that they have personal data and procedures under control if they want to bid on projects. Together, this has led to a growing interest in independent IT auditing," says CIO and IT auditor Simon Okkels from inforevision.

Read more about IT auditing and the ISAE 3000 (Data Processor Declaration) and ISAE 3402 (General IT Controls) declarations.

The process is as valuable as the product

Simon Okkels is a Certified Information Systems Auditor (CISA®) - a highly specialized global certification that guarantees deep knowledge of audit processes, reporting and compliance procedures in IT auditing and information security.

Simon Okkels uses these skills when he and his colleagues from inforevision visit data processors, IT service providers and others to prepare IT audit statements.
The statement provides an independent and accurate picture of how a company manages its information security and how the organization works with information and personal data. It provides transparency so that customers and partners can easily see what the company is doing and how well it is doing it. Two of the most common IT auditor statements are ISAE 3000 (Data Processing Statement) and ISAE 3402 (General IT Controls).

"The declaration itself is the product of our work, but often the process leading up to the declaration is just as valuable because it also includes advice and professional sparring on how the company can develop its set-up, streamline workflows and improve quality," says Simon Okkels.

A strong statement requires focus throughout the year

An IT auditor's statement must be renewed annually and typically the process is faster after the first year.

"On the other hand, we focus more on whether the company can prove and document that their processes and controls have worked during the period. Therefore, a strong statement requires an ongoing focus on information security management throughout the year," says Simon Okkels. 

Read more about IT auditing and the ISAE 3000 (Data Processor Declaration) and ISAE 3402 (General IT Controls) declarations.

Simon Okkels
Partner, CIO, IT Auditor
+45 39 53 50 25
so@inforevision.dk

Newest Oldest Most read
New
inforevision
January 3rd
Approx. 3 minutes

New Year's greetings 2025

New Year's greetings 2025...

2025 - a year with many unknowns. A new year is already well underway. In Denmark, we enter 2025 with an economy in tri...

inforevision
New
Tax, VAT and duties
December 11th.
Approx. 4 minutes

6 tax tips for the New Year

6 tax tips for the New Year...

Stocks, pensions, gifts and charity. There may be deductions to be made and money to be saved if you give your personal finances a ...

Tax, VAT and duties
New
Tax, VAT and duties
December 11th.
Approx. 3 minutes

Guide: Reporting employee shares to the Danish Tax Agency

Guide: Reporting employee shares to the ...

By January 20, 2025 at the latest, you must report your employees' share salary to eKapital. We have put together a guide to help you...

Tax, VAT and duties
New
Tax, VAT and duties
December 11th.
Approx. 2 minutes

The green craftsman deduction is back

The green craftsman deduction is back...

From January 1, 2025, you can get a deduction for so-called green renovations to your home or holiday home. There are also improvements...

Tax, VAT and duties
New
Pension
Tax, VAT and duties
December 10th.
Approx. 3 minutes

Remember your pension before the end of the year

Remember your pension before the end of the year...

You get an extra deduction for deposits of up to DKK 80,600. This applies to both private and employer schemes. In addition, you can...

Pension
Tax, VAT and duties
New
inforevision
December 10th.
Approx. 1 minute

Two new state authorized public accountants in inforevision

Two new state authorized public accountants in inforevi...

Charlotte Preisler Friedlænder and Mette Schüsler have completed one of the country's most demanding training programs and can now call themselves...

inforevision
New
Mileage deduction
December 10th.
Approx. 1 minute

Transportation allowance and mileage reimbursement in 2025

Travel deductions and mileage allowance in ...

The Tax Council has set the new rates for deductions for transportation between home and work and for reimbursement of expenses...

Mileage deduction

Read more current news here