Cybersecurity
Cybersecurity
Jeff Krull
CPA, CISA, CITP
Partner
Mike Cullen
CISA, CISSP, CIPP/US
Principal
Emily Di Nardo
CPA, CITP, HITRUST CHQP
Partner
Matt Gilbert
CISA, CRISC
Principal
Garrett Gosh
CPA, CITP
Partner
Madhu Maganti
CPA, CISA, M.S.
Partner
Brian Nichols
CISSP, CIPP/US
Principal
Atit Shah
CISA
Principal
Joe Shusko
CISA, PMP
Principal
Christopher J. Tait
MBA, CISA, CCSK, CFSA, CCSFP
Principal
Bosco Yuen
CPA, CISSP, CISA, CIA, CSX, CCSA, PMP
Partner
Organizations need an accurate and objective view of their cybersecurity profile to safeguard information assets and protect the organization's value.
Proactively protect and address your cybersecurity and information technology (IT) risks.
Information assets and technology investments left ungoverned and unprotected leave organizations vulnerable to compromise and loss of reputation, revenue/value, customers and intellectual property. Couple these risks with the increasing demands for transparency, accountability and compliance by regulators, government entities, shareholders and others, and you have a perfect storm of risks.
While sophisticated hacking is a valid threat to organizations, it is rarely the root cause of a data breach. The vast majority of data breaches and cybersecurity incidents are actually caused by a breakdown of basic cybersecurity processes and controls.
Baker Tilly’s cybersecurity specialists work with organizations to assess their risk and achieve measurable security enhancements and cybersecurity control improvements. We will evaluate your cybersecurity controls, deliver recommended improvements and provide assurance that your cybersecurity controls are working.
Cybersecurity services and IT assessments
- System and Organization Controls (SOC) reporting | SOC 1 and 2, SOC 2 + HITRUST | SOC for Cybersecurity | SOC for Supply Chain
- IT audit and cyber internal audits/assessments | outsourcing, co-sourcing
- IT SOX | readiness, testing
- Cybersecurity risk assessments | ISO, NIST CSF, CSC
- Ransomware services
- Technology risk services | technology due diligence | IT project risk reviews and risk assessments | IT effectiveness assessments
- Penetration testing and vulnerability assessment
Cybersecurity and privacy compliance services
Cybersecurity certifications
Cybersecurity compliance assessments
We have experience performing assessments against a variety of compliance frameworks, including:
- Defense Federal Acquisition Regulation Supplement (DFARS) for Cybersecurity
- Family Education Rights and Privacy Act (FERPA)
- Federal Information Security Modernization Act (FISMA)
- Gramm-Leach Bliley Act (GLBA)
- Health Insurance Portability and Accountability Act (HIPAA)
- International Organization for Standardization (ISO) 27001
- Model Audit Rule (MAR)
- NAIC Insurance Data Security Model Act
- National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) – 800-171 and 800-53 (including Revision 5)
- New York Department of Financial Services (NY DFS) Cybersecurity Regulation
- Payment Card Industry Data Security Standard (PCI DSS)
Privacy assessments
- General Data Protection Regulation (GDPR)
- California Consumer Privacy Act (CCPA)
We are making great headway on security policies, procedures and it’s measurable. Our exposed surface area for cyber-attack is smaller than it’s ever been.Director of Information Systems for a large insurance company
Our industries
Healthcare & Life Sciences
Baker Tilly helps organizations win now, and explore the options for tomorrow, through an orchestrated approach and understanding encompassing all facets of the healthcare ecosystem.
Financial Services
The financial services industry continues to diversify, but competition and more complex vendor relationships make determining business strategy more complicated.
Higher Education
Balance competing priorities. Effectively align limited resources. Advance student and institutional success.
Real Estate
Innovative solutions for developers, owners, investors and property managers.
Energy
With expertise in oil and gas, power and utilities and renewable energy, we provide a collective view with measurable results.
Manufacturing & Distribution
Helping manufacturing and distribution (M&D) companies reduce risk and improve efficiencies from the shop floor to the top floor.
Law Firm & Professional Services
In the face of intense competition, successful law firms must deliver quality legal services and practice effective business management.
HITRUST CSF Assessment Services
The HITRUST CSF provides an integrated, certifiable approach to securing PHI. Any organization handling PHI on behalf of customers may be required to obtain a HITRUST CSF certification.
