At AIC, we not only stand for but breathe the principles of availability, integrity, and confidentiality. We customize our Information Systems audit and security programs to meet the individual needs of our clients. Individualized programs may include, but are not necessarily limited to:



Compliance Auditing Services

* Sarbanes-Oxley Act compliance

* Gramm-Leach-Bliley Act compliance

* Health Insurance Portability and Accountability Act compliance

* Implementation of a full-scale compliance program

* Assistance enhancing an existing program

* Proven risk-based approach

* Planning & scoping

* Risk assessment & controls design

* Testing and evaluation operating effectiveness

* Deficiency assessment

* Reporting

Information Security Management Services

based on the ISO/IEC 27002 security standard and cover:

* Security policies and procedures

* Asset Management 

* Human Resource Security

* Physical and environmental security

* Information Systems acquisition, development and maintenance

* Business Continuity Management

* Information Security Incident Management