Risk Advisory
Understanding DMF Certification: Process, Timeline, and Key Decisions
When DMF certification becomes a necessity, understanding how controls, documentation, and attestation come together is key to meeting NTIS requirements.
Blog
James Jumes
James Jumes
SOC Reports
Understanding SOC Automation: Avoiding Pitfalls
CTOs, CISOs, and Heads of Compliance are seeing a flood of automation platforms promising a faster, more affordable System and Organization Controls (SOC) report process....
Cybersecurity & IT Risk
How to Right-Size Cybersecurity to Fit the Small Nonprofit
Organizations rely on technology for communicating, managing our work, assisting us in making accurate and timely decisions, assisting customers, and staying in the know wherever...
Cybersecurity & IT Risk
October Designated National Cybersecurity Awareness Month
October kicks off National Cybersecurity Awareness Month (NCSAM), which is dedicated to raising public awareness on the importance of cybersecurity. Launched in 2004 by the...
Cybersecurity & IT Risk
FQHCs Prepare for National Cybersecurity Awareness Month
FQHCs are faced with an ever-shifting cybersecurity landscape due to emerging technologies and shifting internal and cloud vulnerabilities. Adding to this are regulations designed to...
Cybersecurity & IT Risk
Securing Your IT Infrastructure & Creating Resiliency
IT infrastructure is the combination of hardware, software, communications, data centers/hosting services, and human resources that allow an organization to deliver information technology services to...
Technology & Process
SOC Report 2022 Revised Points of Focus
In late 2022, the AICPA updated its guidance on performing System and Organization Controls (SOC) attestations with revised points of focus that offer enhanced context...
Business Intelligence & Analytics
The Most Pressing Data Use Challenges for CFOs
AAFCPAs’ 2021 CFO Survey disclosed results on the most pressing challenges CFOs face in connection to data use. We asked CFOs: What is your primary...
Resources
Cybersecurity Update
In the rapidly evolving threat landscape of cybercrime, reactive or one-off measures may not be sufficient to secure your organization’s systems and data. Sophisticated organizations...
