A-LIGN

Providing internal audit services in the nature of business auditing; disaster recovery services, namely, business continuity consulting related to technology related security; Business continuity consulting in the field of business practices utilized during the disaster recovery process and business consulting relating to technology-enabled security; Business consulting related to disaster recovery; Attest services in the nature of account auditing services provided to entities which must adhere to cybersecurity and privacy compliance frameworks, standards and regulations under the Sarbanes Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA) and Health Information Technology for Economic and Clinical Health Act (HITECH), Payment Card Industry Data Security Standard (PCI DSS), Gramm-Leach-Bliley Act (GLBA), Consumer Financial Protection Bureau (CFPB), Federal Financial Institutions Examination Council (FFIEC), National Technical Information Service (NTIS), Limited Access Death Master File (LADMF), General Data Protection Regulation (GDPR) laws, E.U.-U.S Privacy Shield, Criminal Justice Information Services (CJIS) assessments, Agreed Upon Procedures (AUP) engagements, System and Organization Controls (SOC), SOC1, SOC2, SOC3 and SOC for Cybersecurity, Statement on Standards for Attestation Engagements (SSAE), International Standard on Assurance Engagements (ISAE), and Canadian Standard on Assurance Engagements (CSAE), computer software systems' Supplier Security and Privacy Assurance Program (SSPA), and CFPB readiness

Regulatory compliance consulting and assessment services in the nature of providing advisory services relating to cybersecurity and privacy compliance frameworks, standards and regulations under the Sarbanes Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA) and Health Information Technology for Economic and Clinical Health Act (HITECH), Payment Card Industry Data Security Standard (PCI DSS), Gramm-Leach-Bliley Act (GLBA), Consumer Financial Protection Bureau (CFPB), Federal Financial Institutions Examination Council (FFIEC), National Technical Information Service (NTIS), Limited Access Death Master File (LADMF), General Data Protection Regulation (GDPR) laws, E.U.-U.S Privacy Shield, Criminal Justice Information Services (CJIS) assessments, Agreed Upon Procedures (AUP) engagements, System and Organization Controls (SOC), SOC1, SOC2, SOC3 and SOC for Cybersecurity, Statement on Standards for Attestation Engagements (SSAE), International Standard on Assurance Engagements (ISAE), and Canadian Standard on Assurance Engagements (CSAE), Computer Software Systems Supplier Security and Privacy Assurance Program (SSPA), and CFPB readiness; Regulatory compliance consulting relating to security of computer networks, applications, and personal information, namely, providing SOC assessments and attestation, PCI DSS assessment and advisory services, healthcare-related assessments in the nature of HIPAA, HITECH, Health Information Trust Alliance (HITRUST) assessments, related to international IT security standardization certification services, federal assessments in the nature of Federal Risk and Authorization Management Program (FedRAMP) authorization, Federal Information Security Management Act (FISMA) authorization and certification, and computer and scientific subject matter assessment services, including providing computer and scientific subject matter Special Publication (SP), Federal Information Processing Standards (FIPS), and Cybersecurity Framework (CSF) assessment services; regulatory compliance consulting, namely, providing General Data Protection Regulation (GDPR), E.U.-U.S. Privacy Shield, Health Insurance Portability and Accountability Act (HIPAA) security and privacy and Health Information Technology for Economic and Clinical Health Act (HITECH), cybersecurity, data privacy, information security and compliance best practices review, compliance program assessment in the nature of assessing people, processes, technology, data, assets, policies, and procedures to ensure compliance with information security and privacy standards and requirements, computer network and enterprise-level risk assessment, third party risk management, data protection analysis and privacy impact assessment services; Providing internal audit services in the nature of information security and privacy auditing, namely, legal analyses of privacy and information security policies to determine compliance with applicable laws and regulations; Regulatory compliance consulting in the field of data storage and transmission via computer systems