Arowana’s expertise in implementing the ITIL framework has helped in its endeavour of supporting organizations achieve ISO/IEC 20000-1:2005 certification.

ISO/IEC 20000 is the first international standard for IT Service Management. ISO/IEC 20000 was originally developed to reflect best practice guidance contained within the ITIL (Information Technology Infrastructure Library) framework, although it equally supports other IT Service Management frameworks and approaches including Microsoft Operations Framework. Arowana effectively engages with customers to achieve this in its true essence and profit from it across all divisions of the organization

ISO/IEC 27001 is part of a growing family of ISO/IEC standards and information security management system (ISMS) is associated at performing an audit and improving the overall compliance.

Arowana has supported organizations in following comprehensive quality systems which can be used in conjunction with the ongoing endeavour on ISO/IEC 27002. The Code of Practice for Information Security Management lists security control objectives and recommends a range of specific security controls for an enterprise.

Arowana believes that organizations that implement ISMS in accordance with the best practice advice in ISO/IEC 27002 are likely to meet the requirements of ISO/IEC 27001 certification but the end value is beyond just certification.

Sarbanes-Oxley Act of 2002, also known as the Public Company Accounting Reform and Investor Protection Act of 2002 and commonly called SOx or Sarbox is part of the QC endeavours and Arowana has delivered this with a high degree of transparency with its customers.

As part of SOX its mandatory for every compliant organization to have an effective internal control over financial reporting. This will also enhance the perception of an organization and provide an edge over competing enterprises.

Arowana delivers this in a consultative mode by working alongside the customer. The key to define specific controls as part of this and achieve them are in designing these controls exclusively for the organization. This design will need to consider the specific business and business context the enterprise belongs to. Proven frameworks and standards like COBIT, ISO27001 and ITIL come in handy for a successful implementation.

The Control Objectives for Information and related Technology (COBIT) provides managers, auditors, and IT users with a set of generally accepted measures, indicators, processes and best practices to assist them in maximizing the benefits derived through the use of information technology and developing appropriate IT governance and control in a company.