The Challenge

‍

CELEPAR, a reference in information technology in the public sector, began the 2023/2024 cycle with a commitment to strengthening its governance structure, internal controls and compliance. To this end, it hired Vennx with the challenge of executing its Biannual Internal Audit Plan, covering several critical areas of the organization.

Objective of the Project

Vennx was responsible for conducting 15 internal audits, focusing on:

• Detailed mapping of the processes (walkthrough) with qualified interviews;
• Assessment of operational, regulatory and strategic risks;
• Analysis of internal controls based on COSO, COBIT, ITIL frameworks and good market practices;
• Preparation of recommendations aimed at mitigating risks, increasing efficiency and automation of processes;
• Construction of roadmaps with prioritized actions, considering complexity and impact;
• Creation of interactive Power BI panels for clear and dynamic visualization of the results;
• Presentation of the findings to the Board of Directors with delivery of a final executive report and complete working papers.
  
  

Scope and Coverage

‍

The audits covered strategic and operational areas:

1. LGPD (General Data Protection Law)
   
   
2. Corporate Projects, Processes, and Organizational Structure
   
   
3. Provisions
   
   
4. Intangible and Fixed Assets
   
   
5. Contracts and Agreements
   
   
6. Consulting and Legal Advice
   
   
7. Innovation and Research & Development
   
   
8. Compliance
   
   
9. Information Systems and Information Security
   
   
10. Acquisitions and Accounts Payable
    
    
11. Tax Planning
    
    
12. Accounts Receivable and Contracts with Clients
    
    
13. IT Corporate Governance
    
    
14. Budget
    
    
15. Labor Relations and Benefits
    
    

Achieved results

‍

• 100% of the expected scope delivered on time, with a high technical standard;
• Conducting audits based on a structured methodology aligned with international standards;
• In-depth diagnosis and practical recommendations for risk mitigation and efficiency gains;
• Creation of management panels and dashboards in Power BI, facilitating decision-making and the monitoring of the action plan;
• Effective contribution to strengthening the company's governance, regulatory compliance, and data protection.
  
  

Strategic Impact

‍

Vennx's actions contributed to increasing the maturity of CELEPAR's internal controls, while structuring the basis for more agile, transparent decisions aligned with the principles of public administration and best corporate risk management practices.

‍