IT audit readiness & assurance
Walk into your SOC, SOX or ISO audit with no surprises.
We find the control gaps before your auditor does, help you close them, and stay on hand through fieldwork. We also test controls year-round, run IT internal audit programs, and place experienced people inside your team.
Frameworks we work with
- SOC 1
- SOC 2
- ISO/IEC 27001
- ISO/IEC 42001
- SOX 404
- OSFI B-10 & B-13
- CPCSC
- NIST CSF
What we do
Fourteen services in four practice areas
Engage us for a single project or as an ongoing extension of your audit, risk and compliance function.
Audit readiness
Get ready for an external audit or certification, and stay ready after it.
Controls testing & assurance
Independent testing and review your management, board and auditors can rely on.
Regulatory, privacy & resilience
Meet regulator expectations, protect personal information and recover from disruption.
We prepare you for audits. We don't issue the reports.
SOC reports come from an independent CPA firm, and ISO certificates from an accredited certification body. Keeping that separation means your report stays credible with your customers.