Nontrivial Auditing

A company performs an audit to ratify that they have procedures in place to ensure that their financial reports are as accurate as possible, that likely risks have been identified and planned for, and that standard business practices are being followed unless there is a good reason not to follow them. Audits should be carried out regularly by all companies in order to make sure that they are operating in an intellegent manner, sort of like a person going to his or her physician to get an annual checkup. In certain cases like health care, a company is required to perform periodic audits. Our current list of audit areas is listed below, but if you do not see an area that you interested in, please contact us as we might be interested in developing that area.

NameDescription
Computer Security AssessmentEvaluating security controls present in software applications, computers, and networks.
Contractual ComplianceEvaluating compliance with an organization's contractual obligations such as CARF, JACO, and health and safety requirements.
Corporate ComplianceEvaluating compliance with industry standard guidelines for corporate governance, such as hiring, firing, and evaluating staff.
Performance AssessmentEvaluating the effectiveness of an organization's performance improvement system.
Physical Security AssessmentEvaluating security controls present at a physical location.
Process ComplianceEvaluating compliance with an organization's general processes, policies, and procedures.
Regulatory ComplianceEvaluating compliance with regulatory requirements such as HIPAA, NIST, Sarbanes-Oxley, and state and federal regulations.
Risk AssessmentEvaluating the effectiveness of an organization's risk mitigation planning.