Corporate governance, IT risk management, cybersecurity and internal controls are terms that are on the minds of most CEOs, CFOs and CIOs. Regardless of industry or organization size, the management team must understand, plan for and respond to increased potential for security breaches and higher expectations of its company’s control environment.
Not only are organizations now faced with an environment where phishing attacks, ransomware and data breaches and very real, everyday threats. But regulations for companies around their security efforts have also changed.
Recent court cases, federal and state actions and new compliance standards have changed the way companies design and monitor their internal control systems and manage risks. Management can now be held legally responsible for the effectiveness and operation of the internal control systems.
BlumShapiro Consulting has developed, evaluated and enhanced the internal control systems of many organizations. Our proven methodology and approach has resulted in effective and efficient compliance-based projects. This includes performing risk assessments, developing documentation and evaluating internal controls for Sarbanes-Oxley (SOX), Gramm Leach Bliley (GLB), Health Insurance Portability and Accountability Act (HIPAA HITECH), Payment Card Industry (PCI) and Family Educational Rights and Privacy Act (FERPA) compliance standards.
We understand and work with your team to evaluate and report on the effectiveness of a company’s internal controls. Our approach to can be specifically tailored to meet your needs.
Our IT controls, cybersecurity and risk consulting services include:
- Cybersecurity Services
- PCI Compliance
- Internal security control assessment
- IT Risk Assessments
- SOX and corporate governance
- SSAE 16 - SOC 1 and SOC 2
- Computer forensics and e-Discovery