Information Systems & Risk Assurance
Information Systems & Risk Assurance
Mitigate risk so you can maximize your business
We work closely with you to identify trends and needs in your organization with the goal of creating common approach and streamlined processes, minimizing unnecessary risks. Â From high-level strategic decisions, controls and project management, to operational details concerning information security, our risk assurance team can help you align your objectives with your overall business plan.
Patrick Morin
Principal
Pat specializes in AICPA’s SOC for Service Organizations (SOC 1® and SOC 2®), Sarbanes-Oxley Act, information technology controls, and data extraction and analysis. Pat also leads the firm’s ESG-related services, assisting clients with ESG planning and reporting efforts.
Subscribe and stay up-to-date on recent information systems and risk assurance news and insights from BNN.
We align our professional expertise to your business goals
Our professionals have extensive backgrounds in information technology controls, operations and security, along with highly effective project management skills. We have nationally recognized SOC resources and the technical expertise you require, along with a collaborative team who will act quickly to address your risk assurance needs. We provide the objectivity, process organization, technological know-how, and assurance-related advice you need. And, our knowledge of a wide range of industries uniquely qualifies us to meet your requirements.
How we can help
- SSAE 18 & System and Organization Control (SOC) Reports
- SOX Compliance & Internal Control Reviews
- IT General Controls Reviews & Assessments
- IT Assessments
- Cybersecurity Assurance
- Virtual Chief Information Security Officer (vCISO) consulting
- Agreed-Upon Procedures
- Compliance Assessments
- Disaster Recovery and Business Continuity Planning
- ESG reporting services
Related services
- Business Strategy
- Information Technology (IT) Strategy
- System Selection and Implementation
- Business Process Enhancement & Redesign
- Applications and infrastructure review