Our project experience is very broad and our success is very consistent. Here is just a small sample:
Service Organization Control (SOC) SSAE-18
We provide SSAE-18 related services for a range of companies, including an international software development organization, a professional services provider, and other fintech companies. On these projects we first determined the necessary Trust Service Principles that needed to be covered. Then we thoroughly evaluated the current status of all related operations and technology, revised where necessary policies and procedures, proved and evidenced all controls – which led to unqualified opinions and certifications.
Sarbanes-Oxley Project Design and Management
For a NYSE listed company that was late and over budget on their SOX compliance project we assumed management and control.The project was reorganized, communication with the External Auditor was established, documentation completed, key controls identified, test plans implemented and remediation completed where appropriate.The company’s 10K was filed with unqualified opinion expressed by the External Auditor on the financial statements.Each year the process has gotten more efficient and less expensive.
A NYSE listed company required a quick, reliable implementation of their Internal Audit function.With the Audit Committee of the Board of Directors, we developed the annual Internal Audit Plan and implemented the components on an agreed upon schedule.Additional ad hoc IA activities are covered when appropriate in response to management directives and or whistleblower provisions.Year to year work has allowed rotation of all critical controls.
Sarbanes-Oxley Audit as part of an Integrated Audit
Under contract to one of the Big 4 accounting firms as part of an Integrated Audit we conducted independent testingof SOX IT controls, including Information System Resource Strategy and Planning, Information System Operations, Information Security, Business Continuity Planning, Application System Implementation, Database Implementation and Support, Network Support, System Software Support, Hardware Support.
Telecommunication network design
A real estate company with offices and functions across the country recognized the inefficiencies of certain distributed processes.We analyzed all the workflow and modified existing systems to take advantage of improvements in telecommunication.This has permitted centralization, better control of finances and improved timeliness of reporting to management.
Data System Integrity Audit
A private financial service provider company is required to report annually to a number of large clients on the status of their Internal Controls.Using SAS-70 as a model, we conduct an annual review of their Internal Controls with recommendations for remediation.This encompasses all the controls for processing client data and all the IT controls.
JSOX prototype development and compliance
A Tokyo based securities company needed to comply with Japan’s Financial Instruments and Exchange Law (JSOX).We worked with management to design the required documentation and Risk Control Matrices.Ongoing work includes testing of all financial procedures and IT processes with evaluation of results and recommendation for appropriate remediation.
Environmental design and build out
Our relationship with a company that provides environmental, ergonomic and technological services has benefited many clients seeking to consolidate operations, save money, relocate offices as well as improving their environmental citizenship.This technology includes alternative energy sources, futureproof computer infrastructure and wiring, use of sustainable materials, improvement of energy efficiency, and use of low environmental impact materials.
Workflow Analysis and Documentation
A company going through reorganization had a complex set of procedures described by the court and attorneys.The process needed to be reviewed and documented as a flow chart in order to determine the feasibility of the plan.This work was designed to determine any open ends that did not complete the cycle and then serve as the basis for laying out the workflow and approval process.Finally, the workflow documentation has been used as a training document
System Evaluation Analysis and Consolidation
One of the largest Securities brokers recognized a problem with having five different Customer Relationship Management systems.With a combination of homegrown, purchased software and subscription service, there was no integration, a great deal of repetitive operations and divergent uses.We analyzed each systems’ uses, mapped the various databases and recommended a single solution that satisfied all users and save money.