Outsourcing and Privacy

Article:  This article discusses the 10 critical questions management should ask about outsourcing and discusses specific privacy concerns associated with outsourcing
Published on March 15, 2013

GTAG 7 - Information Technology Outsourcing

Guide:  Key considerations of the internal audit function within the context of IT outsourcing. Information on the types of IT outsourcing activities to consider, the lifecycle, and how outsourcing activities should be managed
Published on April 06, 2007

Managing Risks by Obtaining a Service Auditors Report

Brochure:  The AICPA discusses the business risks of outsourcing tasks and functions to service organizations and how practitioners should prepare an audit report
Published on March 06, 2013

Guidelines on Security and Privacy in Public Cloud Computing

Guidance:  An overview of the security and privacy challenges pertinent to public cloud computing and points out considerations organizations should take when outsourcing to a public cloud environment
Published on November 21, 2012

Privacy Risk Assessment Questionnaire

Article:  Key questions businesses should ask about privacy risk, implementing sound privacy policies and practices, managing privacy risk, and obtaining privacy assurance.
Published on March 12, 2013

Service Organization Control Reports

Webcast:  The purpose of this 2 hour video webcast is to provide better understanding on how the replacement of SAS 70 reports by three new reporting options affects their risks and assurance concerns.
Published on April 30, 2012

Privacy Resources

Overview:  This page provides useful resources to learn more about privacy initiatives through reports, articles and other sources.
Published on March 14, 2013

Building a Privacy Practice in Small and Medium-Sized CPA Firms

Toolkit:  This guide serves as the first step for practitioners reviewing or considering investing time and resources in Privacy Advisory Services.
Published on March 12, 2013

IT Assurance Services Guidance

Guide:  The guidance set forth provides the CPA with direction and best practices towards improving information quality and managing information risk.
Published on April 25, 2013

Service Organization Control Reporting

Article:  Today, it is common for entities to outsource business tasks or functions to service organizations, even those that are core to an entity’s operations. Although user entities may rely on a service organization to perform outsourced tasks or functions, the user entity still retains responsibility (and the risks associated) for
Published on March 04, 2013

Small Company Security Resources

Article:  This article discuss small business security resources.
Published on March 13, 2013

Information Security Management

Article:  Roman Kepczyk takes a closer look at several solutions that can mean the difference between a safe environment versus the very shaky alternative.
Published on February 05, 2013

Privacy Services

Overview:  The AICPA developed assurance and advisory services that build trust and confidence in businesses as a natural extension of the CPA's service offerings.
Published on March 14, 2013

Big Firm Technology

Article:  Tim Trueblood offers his opinions on how small firms can enjoy the same enterprise environment large firms do, for a much lower price tag.
Published on March 18, 2013

2006 Top Technology Initiatives

Survey:  According to the results of the 2006 Top Ten Technologies survey Information Security has been voted as the number one technology to watch in 2006.
Published on February 11, 2013