Chris Tait is a principal with Baker Tilly’s risk advisory practice. He has more than 20 years of experience providing technology-related consulting and assurance services to financial institutions. Chris’ experience includes information technology (IT) auditing and risk management, IT assessments, IT operations management, IT strategy development, package systems selection and implementation, business process redesign and custom systems development in a wide variety of environments.

CCSFP – Certified Common Security Framework Practitioner, 2016 

CCSK – Certificate of Cloud Security Knowledge, 2013 (CSA)

CFSA – Certified Financial Services Auditor, 2006 (IIA)

CISA – Certified Information Systems Auditor, 2005 (ISACA)

Chris Tait is a principal with Baker Tilly’s risk advisory practice. He has been with the firm since 2003. He has more than 20 years of experience providing technology related consulting and assurance services to financial institutions. Chris’ experience includes information technology (IT) auditing and risk management, IT assessments, IT operations management, IT strategy development, package systems selection and implementation, business process redesign and custom systems development in a wide variety of environments.

Bachelor of Science in mechanical engineering

Serves as a technology risk management lead responsible for audit and advisory services for multiple financial institutions (e.g., banks, insurance companies and investment advisory firms)

Experience performing audit and advisory projects related to Sarbanes-Oxley (SOX) and Model Audit Rule (MAR), Federal Deposit Insurance Corporation Improvement Act (FDICIA) and internal control over financial statements (ICFR)

Serves as the team lead on SOC 1/SOC2 engagements

Performs IT risk reviews and develops solutions to enhance current information security practices and enhance compliance with requirements such as the Gramm-Leach-Bliley Act (GLBA), Federal Financial Institutions Examination Council (FFIEC) IT Audit Handbooks

Performs security and controls reviews for a variety of clients. Review areas include cybersecurity, infrastructure, applications, vendor management, disaster recovery and business continuity

Executes maturity, readiness and compliance assessments for Payment Card Industry Data Security Standard (PCI-DSS), NIST Cybersecurity Framework (CSF), HIPAA-HITECH, HITRUST CSF, NIST 800 series standards

Guiding clients through the digital assets landscape by uncovering the potential risks, business impact and strategic opportunity

Information Systems Audit and Control Association (ISACA)

American Institute of Certified Public Accountants (AICPA)

Advanced Regulatory Compliance & Legal Support

Thanks for the message