Greg Ameden, Cisa Email & Phone Number

Greg has over a decade of experience working in various Information Technology (IT) environments, and offers knowledge of business process and IT general controls. Currently, that experience lead to working in the public accounting industry, where his advanced risk and controls knowledge provides a strong base for each engagement. Each engagement is unique and requires disciplined project management, formal documentation and technical writing. Greg is a Certified Information Systems Auditor (CISA, Microsoft Certified Professional (MCP) and has obtained an A+ certification, that certifies the competence of service technicians in the computer industry.Recent risk and controls related engagements include type 1 and type 2 service organization control (SOC) pre-assessments and examinations for service providers in the U.S. government and commercial sectors. Additionally, Other risk and controls work has included outsourced IT internal audit, identification and evaluation of IT controls and assessment of IT related risks for financial audits. As a risk and controls specialist he has experience performing SOC 1/ISAE 3402 examinations, SOC 2/SOC 3 examinations including all five Trust Services Principles, related FISCAM/FISMA attestation work, SOX 404 compliance, GLB Privacy, FFIEC and supplemental IT Internal Audits. Greg also completes various consulting engagements to evaluate risk and implement controls.Earlier in his career, he worked as a senior systems engineer. This work involved both technical and non-technical talents, including; policy, procedure, and creation of training documentation, as well as creation of business continuity and disaster recovery plans. Specialties: • IT controls and risk assessment• Application control design and testing• Business process controls and risk assessment• SOC1, SOC 2 and SOC 3 • FISMA/FISCAM, FFIEC and SOX 404• Project management• Technical documentation• Technical training• Hardware maintenance

Listed skills include It Audit, Cisa, Internal Controls, Ssae 16, and 37 others.