SecureIT is committed to serving commercial clients across industries with expert information security, governance, risk, and audit advice that helps companies succeed in accomplishing their missions. We leverage industry benchmark frameworks such as CoBIT, ISO and ITIL, and help clients identify risk, design holistic governance and protection programs, monitor performance, and comply with industry laws and regulations. Some of the solutions that have added the most value to our commercial clients include:

• Audit Readiness & Liaison: Act as facilitator, interpreter, and liaison between our clients, their auditors and their regulating authorities. Simplify the process of compliance and at the same time, create greater efficiencies and minimize disruptions. Eliminate distraction, confusion, and stress of key IT personnel. Conduct audit readiness reviews, and lessen the load on IT personnel during the actual review. Identify and mitigate risks before the auditors and regulators arrive.
• Service Organization Controls (SOC) Assessments: Assist with scoping SOC reviews by selecting the proper type of SOC assessment, choosing the most relevant Trust principles (for SOC 2 and SOC 3) or control objectives (for SOC 1), and defining the boundaries of the in-scope system. Assist with SOC readiness by identifying and/or designing controls, identifying artifacts and evidence to demonstrate operating effectiveness, defining remediation tasks to be addressed, and developing policies and procedures. Draft the System Description, including all required content. Perform pre-audit readiness assessments by evaluating the design of controls and testing for operational effectiveness and proper documentation. In partnership with our Alliance CPA firms, perform SOC 1/SSAE 16 and SOC 2 audits (both Type 1 and Type 2) that lead to the issuance of formal SOC reports.
• IT Audit Co-sourcing/Outsourcing: At SecureIT, we invest heavily in ongoing training of our Certified Information Systems Auditors and systems experts — so that you don’t have to. In fact, we encourage our clients to leverage our people, methodologies, technology, knowledge and expertise on their own behalf. Depending on your needs, our staff can perform single audits encompassing all areas of technology, or a comprehensive series of audits scheduled throughout the year. We can also provide experienced professionals to supplement your existing IAD resources and help transfer knowledge and build skills internally within your team. Advantages of partnering with us include greater audit efficiency, reduced staff travel expenses, complete objectivity and confidentiality, and an innovative training program for less experienced auditors.

For more information on all of our service offerings visit What We Do.