Peer-to-peer lending platforms must protect lender and borrower data and keep their technology platform secure and reliable, with periodic IT systems audits.
We assess your platform's application security, data protection, fund-flow controls and IT operations.
Objectives
- Test platform, app and API security
- Review data protection for lenders and borrowers
- Assess controls over fund flows and escrow integration
- Evaluate IT governance, BCP and DR
Methodology
01
Planning
- Define scope, applicable requirements and critical systems
- Agree audit plan, sampling approach and timelines
02
Fieldwork
- Review of policies, procedures and governance
- Testing of technical and operational controls
- Interviews with process owners and evidence verification
03
Technical testing
- Vulnerability assessment and penetration testing where in scope
- Configuration review of servers, databases and network devices
04
Reporting
- Observations rated by risk with recommendations
- Management responses and follow-up review
Deliverables
Audit plan and scope
Audit report with risk-rated observations
VAPT report where in scope
Remediation plan and follow-up review