Compliance
Current- Review digital technology related SOX controls for all NORESCO systems:
- File shares
- ERP systems
- SaaS systemsWork directly with third parties SOX auditors to address areas of concern.Use Auditboard portal to manage all SOX related compliance tasks.Collect evidence from financial systems to provide control.
- Work with software vendors to address compliance questions, discuss options for closing control gaps, and escalate issues as needed.Work with Cybersecurity leadership to:
- Assess systems handling CUI ( in scope for CMMC v2 L2 and DFARS 7012)o Controls Complianceo Control effectivenesso Documentation and resolution of gaps.