The AI Health Check provides a comprehensive analysis of your organization’s AI systems to identify potential risks and vulnerabilities. The base of the AI Health Check is the NIST Artificial Intelligence Risk Management Framework (AI RMF). We will use the framework to compare your organization’s AI systems against a tailored version of the outcomes described in the AI RMF. The AI RMF can also be completed for organizations that have not implemented AI systems as a means to evaluate the current governance practices in place. We can also complete an AI Risk Assessment as part of the AI Health Check to assist organizations with identifying AI-related risks and their potential impact on the organization.

Governance-as-a-Service (GaaS) provides a comprehensive framework to help organizations develop, implement, and optimize their AI governance and risk management practices. We can assist organizations with AI policy and strategy development that aligns with established risk appetite and tolerance levels.

Strategy-as-a-Service (SaaS) is designed to guide organizations on their AI journey by delivering a tailored AI roadmap with strategic recommendations. We will assist organizations by helping align their AI strategy with business objectives and market opportunities.

System and Organization Controls (SOC) Reports, with a contributing author to various AICPA SOC guidance, which gives you a credible voice of reason.

• SOC 1^®: Attestation for service organizations relevant to user entities' internal control over financial reporting (ICFR).
• SOC 2^®, SOC 3^® and SOC for Cybersecurity: Attestation relevant to security, availability, processing integrity, confidentiality and/or privacy.

Hands on assistance from prior military, law enforcement and security leaders to meet your protection and compliance needs.

The Cyber Security Health Check for Financial Institutions combines the NIST Cybersecurity Framework (CSF) with the latest guidance from the FFIEC IT examination handbook and common cyber security frameworks, such as the CRI Profile and CIS Controls. The level of controls in the assessment are customized based on your organization’s size, complexity, and risk profile/maturity.

In addition, we have implemented elements from the OCC Cybersecurity Supervision Work Program (OCC Bulletin 2023-22), updated FDIC Information Technology Risk Examination (InTREx) procedures (FIL-52-2023), and NCUA Information Security Examination procedures (CORE and CORE+) to ensure high risk areas for financial institutions are covered as part of the assessment.

Our standardized, risk-based approach allows organizations to better track progress over time and potentially reduce the examination time regulators need to spend in areas covered by the assessment. The methodology allows us to configure the assessment to match your individual requirements and maturity level.

We are here to help finance and IT groups before the audit process takes place. We are also here to help as your internal auditors. Our top-down, risk-based approach to system and process controls will help you take this area of work off your plate, using a team who has Sarbanes-Oxley (SOX) experiences.

As part of our Mergers and Acquisition Services, you can select customized analyses focused on security, continuity, and IT costs.

Providing the team to assess your vendors/business partners throughout your business lifecycle for the technology compliance you depend on.

Embedding risk assurance into bot or artificial intelligence development, as well as testing automated controls, will ease you into this transformative business change.

• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• Certified Public Accountant (CPA)
• Certified Information Security Manager (CISM)
• CompTIA Security+/Network+
• Qualified Security Assessor (PCI DSS QSA)
• Registered Professional Advanced (CMMC RPA) (consulting)
• Certified CMMC Professional (CCP) and Assessor (CCA) (assessor)
• Certified Cloud Security Professional (CCSP)
• Certificate of Cloud Auditing Knowledge (CCAK)
• Certificate of Cloud Security Knowledge (CCSK)
• Certified in Risk and Information Systems Controls (CRISC)
• Certified Ethical Hacker (CEH)
• AWS Certified Security - Specialty
• Certified Forensic Computer Examiner (CFCE)