Skip to main content

Internal Governance & Control

As organisations grow and outsourcing increases, maintaining strong internal control and business integrity becomes essential. Managing the entire chain with multiple stakeholders is challenging for many companies. Strong internal control is essential to prevent scandals and ensure resilience. Regulators recognising the growing complexity, have established stringent rules and frameworks like DORA, DNB guidelines, and the Cyber Resilience Act. These regulations form the baseline for a secure system. Securance assists organisations in not only meeting these baseline requirements but also achieving self-sufficiency in internal control. This ensures your systems are mature enough to comply with applicable regulations, needing minimal adjustments for exceptions. We always strive to help our clients achieve at least a maturity level 3, preferably 4, in their internal control processes. Our approach involves clearly defining business functions, processes, and responsibilities. We conduct thorough risk analyses and offer training and awareness sessions to strengthen knowledge and culture. Many of our clients struggle to see the bigger picture. We provide the support and expertise needed to optimize control over their internal systems and processes. Investing in internal control means investing in the stability and resilience of your organisation.

advisory-taxonomy.png

Securance Advisory Values

innovation-service.svg

Innovation

Embracing a culture of innovation, we continuously seek groundbreaking solutions and technologies. Staying at the forefront of industry advancements to provide clients with cutting-edge approaches to assurance and cybersecurity.

integrity.svg

Integrity

Our commitment to integrity is unwavering: we conduct ourselves with honesty, transparency, and ethical practices, fostering trust with our clients, partners, and team members. We are always actively looking to be of assistance

Excellence.svg

Excellence

We relentlessly pursue excellence in every facet of our work, setting and upholding the highest standards to deliver exceptional solutions that consistently surpass client expectations.

client-security.svg

Client Centricity

Placing our clients at the forefront, we tailor our solutions to meet their unique needs, ensuring a personalized and responsive approach that builds lasting partnerships based on understanding. collaboration, and exceeding expectations

collabration.svg

Collaboration

We value collaboration, recognizing that our collective strength lies in the diverse skills and perspectives of our team. By fostering an environment of teamwork, we amplify our ability to solve complex challenges and drive Innovation

Continuous Improvement.svg

Continuous Improvement

Committed to lifelong learning and development, we embrace a mindset of continuous improvement, encouraging our team to evolve and adapt to emerging trends, technologies, and best practices, ensuring we remain at the forefront of our industry

Securance as your Advisory partner

At Securance, we believe in maintaining robust internal controls and promoting integrity within business operations. Our services are tailored to meet the stringent requirements set by regulatory bodies, ensuring your organisation is always compliant and resilient. As your dedicated implementation partner, we bring deep expertise and a proven track record in successfully managing risk and compliance challenges across various industries.

SOC 2 or ISO 27001: Which is better suited for my organization?

If your organization provides business-to-business IT or financial services, it’s likely that your clients will request SOC 2 or ISO 27001 certification or attestation. This process can demand significant resources and time from your organization. This article explains the similarities and differences between these two certifications. A SOC 2 report and an ISO 27001 certificate can be compared to close relatives, and there are opportunities for efficiency, as achieving one certification can significantly reduce the time required to obtain the other.

 

career-img-banner

ABN AMRO - ISAE Type II

Summary

ABN AMRO Asset Management manages €30 billion in assets and strives to ensure the security and reliability of its processes and policies. Responding to increasing client demands for enhanced process security, ABN AMRO initiated an ISAE implementation project. While risk management was not new to the organisation, the ISAE framework presented a novel challenge.

career-img-banner

a.s.r. Life - Risk Management Rationalisation and Optimisation

Summary

a.s.r. Life, led by CEO Philippe Wits, faced significant challenges in the life insurance sector, including maintaining portfolio profitability in a shrinking market while optimising client services. With stringent supervision and a focus on efficiently identifying and monitoring major risks, a.s.r. Life prioritised risk management on their agenda.

Control Reports

Due to current developments in outsourcing and the associated risk management, SASconsult has developed an implementation model that enables a cost-efficient ISAE 3402 implementation. This model (the SAS | Modeller) is delivered in a web tool that includes the process flows. The result is that the processes and controls required under ISAE 3402 are visible to everyone (via, for example, the intranet).

COSO due for renewal

The widely adopted COSO (Committee of Sponsoring Organizations of the Treadway Commission) risk framework, frequently utilized in the implementation and auditing of standards such as ISAE 3402 or ISO 27001, is due for a comprehensive update.

Status Update: Solvency II

General

Since the beginning of 2012, negotiations have been underway to finalise the content of the Omnibus II directive and the Level 2 implementing measures. The definitive agreement on the Omnibus II directive is expected shortly. The definitive agreement on the Level 2 implementing measures is expected in the autumn. The focus lies on the risk-free curve, capital requirements, and own funds, as well as transitional measures.

Pillar Developments 

Additionally, there are developments per pillar:

Five Reasons to Implement ISAE 3402

ISAE 3402 is the standard for outsourcing processes and security. It is increasingly required across various industries and by government entities for participation in tenders.

Securance advises TelecityGroup

TelecityGroup is Europe’s leading carrier-neutral data centre provider. TelecityGroup’s data centres offer high connectivity and secure environments for IT and telecom equipment, which are the driving force behind the digital economy. Telecity has data centre clusters in 12 major European cities. In Telecity’s data centres, the networks that make up the Internet converge, and bandwidth-intensive applications, content, and information are securely hosted.

TelecityGroup Netherlands realises ISAE 3402 certification

Amsterdam, 19 May 2015 – All TelecityGroup locations in Amsterdam have been certified according to the international outsourcing standard ISAE 3402. With this certification, TelecityGroup Netherlands demonstrates that its data centres meet internationally accepted quality and security standards. For customers, this certification provides proof that their outsourced processes are effectively controlled within the data centre.

Collateral for bank support, an additional risk to the euro crisis?

President Klaas Knot of the Dutch Central Bank (DNB) has expressed clear concerns regarding the collateral accepted by the seven central banks in the eurozone. ‘I would have preferred it otherwise; I would have preferred we had not done this at all. As a central banker, I am naturally not enthusiastic about this,’ he stated.

In December and February, the ECB provided banks with three-year loans totaling €1000 billion. During this operation, the collateral requirements were relaxed, increasing the risk exposure.