We assist financial institutions in structuring their IT governance framework, taking into account the FSA's supervisory guidelines, the former emergency inspection manual, and the IT governance discussion points published in June 2023. Our service defines the FSA's requirements and internal management methods.

We also assess and validate emergency response plans and measures according to the FISC security standards for financial institutions (including cloud usage guidelines) and BCP-related regulations. Our support includes defining monitoring formats and specific checklists for selecting and managing external vendors, based on selection criteria and ongoing monitoring.

Additionally, we provide draft contracts that align with supervisory guidelines and current economic security requirements, ensuring they are ready for immediate use. We also support the internal audit departments by enhancing their IT department audit standards and internal audit regulations, fulfilling the three lines of defense management required by the authorities.

We begin with a diagnostic process using our evaluation program designed to comprehensively address regulatory requirements. This involves a detailed assessment based on the FSA's supervisory guidelines and industry-specific standards.

Based on the evaluation results, we perform a FIT&GAP analysis against the FSA's target requirements to identify and organize improvement areas. We prioritize issues and consider medium- to long-term plans, including investment strategies, to integrate the findings into the IT strategic plan.

We provide specific checklists for system audits within internal audit departments, enabling auditors to effectively carry out assessments and maintain control over audited departments.

• Ensures compliance with complex IT system controls required by financial authorities
• Adapts to the FSA's new IT governance regulations
• Enhances the internal audit department's ability to effectively monitor the IT department

• Fintech Journal