IT Audit
Auditors are not typically the people you want to see wandering through the halls of your office. TrustCC auditors are different. We’re not here to fine you or to get you in trouble. Our goal is to scour your information security controls and identify weaknesses to help protect you from those that will cause trouble – attackers, forgetful or disgruntled employees, and yes, regulators.
TrustCC has developed several different audit plans to help your organization meet its compliance and internal audit goals. Our Information Technology Audits cover a broad range of areas including, but not limited to, systems and applications, information processing facilities, development and change control, management of IT and enterprise architecture, and client/server operations.
Designed For:
- Banks and credit unions that want to evaluate overall compliance with GLBA guidelines in preparation for a regulatory examination.
- Any organizations in need of a third party to analyze their SOX404 key controls and testing procedures.
- Organizations that want to provide their Board (or Audit Committee) with a representation of the current state of information security and regulatory compliance.
- Any organization in need of a third party’s performance of an external IT audit, which will include identifying, testing and evaluating the effectiveness of general IT controls in the form of policies, procedures, and processes.
What We Typically Provide:
- Regulatory Compliance: Procedures designed to evaluate compliance with technical, physical and administrative control provisions (safeguards) that are addressed by your particular regulatory environment.
- Comparative Analysis: TrustCC will provide you with a general comparison to other organizations with similar regulatory requirements so you know how you may be "measured" when examined by your regulators
How You Benefit:
- You'll understand your areas of risk and will be able to prioritize your risk management initiatives to address matters of greatest priority.
- Our reports will show you where you are and where you are not compliant with your regulatory environment, whether it is GLBA, HIPAA, SOX 404, PCI DSS, TG-3 PIN Security, or others.
- At the committee's directions and as the "eyes and ears" of the Board, TrustCC endeavors to perform audits that are distinctive from those performed by our competitors
| More Detailed Information (PDF opens in a new window) | Contact us today – Satisfaction is 100% guaranteed. |
Sarbanes-Oxley Section 404 Audit (SOX 404 Audit)
Our team of skilled IT auditors will work with your public accounting firm requirements to provide a level of testing needed for compliance. Our hands-on, real world experience with the industry’s most widely used technologies gives us an informed and practical perspective on controls testing. Our consultants hold current advanced certifications from Microsoft, Cisco, CompTIA, ISACA, and ISC2. These qualifications ensure that the most competent technical team members conduct your SOX 404 testing and that the recommendations provided are cost effective and practical. We supply IT audit and technology expertise that few public accounting firms can deliver using their leveraged model of inexperienced and experienced staff.
Many organizations are turning to TrustCC to analyze SOX404 key controls and testing procedures using a risk based approach and this often results in more efficiency in SOX404 activities.
FFIEC Audits
TrustCC has developed a comprehensive audit program in adherence with the FFIEC Information Technology Examination Handbook booklets. The FDIC and state regulators that examine our clients ultimately correlate their regulations with FFIEC guidelines. Therefore, we have leveraged the same baseline to create audit test steps that similarly reflect the FFIEC booklets.
Mainframe Security Audit
Organizations are realizing the need to test the security posture of their mainframe systems and the applications that run on them. TrustCC offers security services to help these organizations meet regulatory requirements and design methodologies to insure the security of their mainframes and the applications running on them.
TrustCC is one of only a few security firms with personnel trained in the security of mainframe (OS390) and AS/400 systems. TrustCC is competent with Top Secret, ACF-2, Examine and Vanguard mainframe security products.
Recent Quote
“TrustCC's professionalism, knowledge, and effective communication style are a welcome change compared to other firms. Their recommendations allowed us to easily implement the necessary control changes to not only pass examination, but ensure the proper protection of both the Bank’s and our Customer’s information." – Eric Jensen Chief Financial Officer of Fortune Bank; December 2007
About TrustCC
TrustCC’s team of professionals is unsurpassed in hands-on experience and regulatory knowledge. We focus our attention on detail, insightful reporting, and our customers’ needs.
TrustCC is known for its systems, security, and regulatory expertise, customer service and independence.
We are confident that our services will exceed your expectations.
Locations Served
TrustCC started in the Seattle/Tacoma area. Today TrustCC serves clients throughout the United States and elsewhere!