Audit Serve Company History

 Primary Focus Areas

1990 – 1996

• Established ExtrAuditnaire/MVS (expert system used to audit the IBM MVS mainframe system)
• Data Center and Development Outsourcing
• Infrastructure Projects
• IS Auditing
• Implemented Change Control Systems

1997 – 2000

• Project Assessment - Euro Currency
• Infrastructure Projects
• Project Assessments – Y2K

2001 - 2003

• Euro currency assessments
• Infrastructure Projects
• Sarbanes Oxley Implementation Projects
• IS, Financial, Vendor Contract and Operations Auditing

2004 - 2006
 

• IS, Financial and Vendor Contract Auditing
• Sarbanes Oxley Implementation Projects

2007 - 2018
 

• NYS Banking - Part 500 Gap Analysis, Validation and Implementation Services
• GDPR Impact Analysis, Project Assessment and Implementation Services
• Vulnerability Assessments  & Penetration Testing
• PCI Gap Analysis & Remediation
• Implementation of Continuous Audit Monitoring Programs
• Established IT Strategic Plans
• Vendor Contract Audits
• Integrated & IT Audits
• SSAE 16 SOC 1 and SOC 2 Reviews
• Sarbanes Oxley Ongoing Compliance Projects
  • Quarterly Testing
  • AS5 Implementation

2019 - 2021

• CCPA Impact Analysis, Project Assessment, Implementation Services and Pre-Implementation Audit Services
• Overall privacy regulation Implementation and Assessment Services 
• GDPR Post-Implementation  Assessment & Audit Services
• Data Protection Officer Outsourcing Services
• Agile and change management Audits and Assessments
• Establish SLAs for outsourcing agreements
• IT Governance Audits
• Outsource Audits
• Integrated & IT Audits

2022 - 2023

• Established and implemented a Data Governance Program for two large financial instutions
• Conducted annual Data Gover4nance audits of a large financial insrtiution
• Conducted annual IT, IS and Disaster Recovery audits for a large financial institution
• Establisheed IT and IS standards for a large financial instituion
• Conducted network level and application levgel vulnerability assessments for several organizations
• Conducted Cybersecurity assessment using NIST CSF
• Conducted Agile and change management Audits and Assessments
• Conducted Data Security Audits of third parties that receive PII from State of WA
• Implementation assessments of Privileged Access Managemenet Solutions
• Worked with financial institutions to challenge and remediate material weaknesses 
   

2024 - Present

• Implementated Data Governance Program for a large financial instution
• Conducted annual Data Gover4nance audits of a large financial insrtiution
• Conducted Data Security Audits of third parties that receive PII from State of WA
• Conducted annual IT, IS and Disaster Recovery audits for a large financial institution
• Performed audits of corporate AI Stategic Plans and implementation initiatives