Oxley Technologies Inc. is a leading Information Technology (IT) Risk Assurance and Advisory consulting firm and leading training organization in the field in West and Sub-Sahara Africa with a global outlook. With proven 13 years’ operating experience in information/IT risk assurance and auditing, Cyber-security risk assessment and management, and expert training services in these fields, we provide IT audit/assurance services, which help organizations to identify, assess, measure, manage and mitigate key risks inherent in the operating environment such as technology risk, processs risk, operational risk, information risk, etc. Given the complex nature of today's technology platforms and business environment, our IT general control review and focused IT systems/applciations review are conducted by experienced professionals with knowledge of best security practices and standards. Frameworks and standards we apply during our reviews are not limited to COBIT 5 (IT governance and management processes), ISO/IEC 27001 (ISMS), ISO/IEC 22301 (BCMS), payment card industry data security standard (PCIDSS), IT Infrastructure library (ITIL), ISO/IEC 20000 IT Service Management). Our methodology has always been to assess the current state of controls in the operating and technology space of our client in the form of gap analysis. Thereafter, we recommend controls to close identified gaps based on standard processes, procedure and baseline configurations of concerned systems or technologies in use. We have an expanded program for reviewing business processes, information systems and IT infrastructure of our clients.

Our company provide assurance services in the following technical areas among others:

• Information technology governance, risk and compliance (IT GRC) services including information security (IS) policies drafting, review and update to suit operating environment. Some of such IS policies are not limited to cybersecurity policy, acceptable use of information asset policy, computing mobility (a.k.a. bring your own device, BYOD) policy, access control policy, change management policy, business continuity policy, disaster recovery policy, IT service management policies, IT Steering Committee charter, security baseline standards for IT systems and applications, among others.
• Operating systems security and assurance for Windows, UNIX, LINUX, Android, Apple/IOS based systems across various vendors and original equipment manufacturers (OEMs) such Microsoft, IBM, Oracle, HP, Dell, Google, Apple, etc.
• Virtualized infrastructures security and assurance for VMware, Vshpere, VCenter ESXi Host based hypervisors.
• Databases Systems security and assurance for Oracle, Microsoft SQL Server, MySQL, Postgress SQL based RDBMS.
• Enterprise network security and topology management including security reviews and assessment of network devices such as switches, routers, firewalls, IDS/IPS, Syslog servers across different vendors/OEMs (Checkpoint, Palo Alto, Cisco, Juniper, Sophos), network access control (NAC) & port security solutions (Portnox, Forescout), network access authentication tools (TACACS+, RADUIS).
• Security and assurance on enterprise applications, ERP systems and core business applications such as, Active Directory/Domain Controllers, Microsoft Dynamics, Core Banking Applications (Flexcube CBA, Finacle CBA, Globus, BankOne), Treasury Front Office Dealing Applications (Finacle Treasury, Bloomberg, TMS, Reuters), Enterprise resources planning applications (SAP ERP, PeopleSoft, SAP Business Object EDW, Oracle Financials, Oracle EBS), Transaction messaging application (SWIFT), among others.
• Cloud security technologies, applications and platforms (SaaS, IaaS and PaaS) such as AWS, Azure, Google Cloud, etc.
• Cybersecurity program assessment, including vulnerability assessment and penetration testing (VAPT), and Security Operations Center (SOC) architecting and assessment. Analysis, optimization, and correlation of security events from divergent cybersecurity tools such as security information & event monitoring (SIEM), database activity monitoring (DAM), file integrity monitoring FIM), endpoint detection and response security (EDR), Antivirus systems (AVS), security patch management system, cyber threat intelligence monitoring including dark web monitoring, among others.
• Management systems standards auditing and certification programs for ISO/IEC 27001 (information security management system), ISO/IEC 22301 (business continuity management system), ISO/IEC 20000 (IT service management system), ISO 9001 (Quality management system).
• Data assurance services: Revenue assurance, Data analytics and integrity checks, business intelligence, data science and continuous auditing capabilities using data analytics tools such as ACL (audit command language), SQL, R, Python, etc.

In addition to the above core technical areas, we have built strong presence and reputation in Nigeria and across Sub-Sahara Africa with a team of highly experienced professionals who are united by our shared values and an unwavering commitment to quality service delivery to clients. Through strong business collaboration with reputable organizations, we have built strong partnerships founded on mutual trust and benefit in Nigeria and within Sub-Sahara Africa and beyond. We make a difference by helping our people, our clients and our wider communities achieve their potentials by making sure that we meet and surpass their expectations always as a minimum service requirement. In addition to our IT risk assurance and advisory services, we are the leading technical training organization in Nigeria and across Sub Sahara Africa, providing user awareness, and management review support programme for Auditors, IT Risk Managers, and Other IT/information assurance practitioners in various technical areas as have been listed above. Find below technology solutions and applications we provide IT audit/assurance services among several others.

Kindly Contact Us for further details. We will be happy to answer all your questions.

Banking applications        Treasury applications     E-payment solutions/platforms.      ERP Solutions

Finacle                                                         Finacle Treasury                                     ATM (audit & security)                                                             JD Edward.

Flexcube                                                     Reuters                                                      POS (audit & security)                                                             PeopleSoft.

Globus                                                         SWIFT                                                         Front-End Processor (FEP)                                                    SAP R/3 FICO.

Equinos                                                                                                                            Payment Cards (security & controls)                                 Oracle Financial FA.

T-24                                                                                                                                    E-payment solutions (bills)      

Pheonix                                                                                                                            Online Banking App

                                                                                                                                            Web payment & Integration solutions