SOX 404 Compliance
Turning SOX Compliance into a Structured Business Process
SOX compliance relies on structured processes and clear accountability to reduce risk and support future public reporting.
AAFCPAs Blog.
A resource for finance and business leaders seeking timely insights, practical guidance, and industry perspective. Explore content across accounting, tax, audit, and advisory topics to support informed decision-making.
All Blog Posts
Cybersecurity & IT Risk
AI Is Raising a Critical Question: Who Owns Cybersecurity Risk?
As organizations adopt AI tools and rely more heavily on data, one question becomes increasingly important: Who is responsible for governing the policies, risks, and…
Cybersecurity & IT Risk
Healthcare Organizations May Need to Rethink HIPAA Security Compliance
Proposed changes to the HIPAA Security Rule would introduce more specific cybersecurity requirements and raise expectations for how organizations protect electronic protected health information.
Smart Automation: AI & RPA
Questions to Answer Before Scaling AI Across Your Organization
Before adopting automation and AI tools, leaders should have a clear understanding of the business challenge, the desired outcome, and how technology can support that…
Risk Advisory
Understanding DMF Certification: Process, Timeline, and Key Decisions
When DMF certification becomes a necessity, understanding how controls, documentation, and attestation come together is key to meeting NTIS requirements.
Events
AAFCPAs to Speak at 2026 Plan Sponsor Fiduciary Summit
AAFCPAs’ Shawn Huxley, CPA, MSA, Partner, Employee Benefit Plans and Vassilis Kontoglis, Partner, AI Digital Transformation & Security have been invited to speak at the…
Cybersecurity & IT Risk
Carla McCall Featured in FM Magazine on Finance Roles in Cybersecurity
FM Magazine Report: 5 emerging business cyberthreats — and how to combat them FM Magazine (October 2025) – From deepfakes to payment fraud, companies are…
Cybersecurity & IT Risk
How IT Controls Keep Your Systems and Data Safe
During AAFCPAs’ recent webinar, Understanding Your ITGCs: Why They Matter and How to Strengthen Them (November 2025), Lisa Whittemore, CFE, CRMA, MBA and Vassilis Kontoglis…
Cybersecurity & IT Risk
Watch Understanding Your ITGCs: Why They Matter and How to Strengthen Them
IT General Controls (ITGCs) are under increasing scrutiny—and the consequences of failure are growing. CEOs, CFOs, and Boards are often blindsided by assessment findings, risk…
