Make A Payment
Client Portal
Contact us
Contact us

IT Risk Advisory

Deliver sound risk management practices, internal control systems and compliance frameworks.
Meet our team

Broad capabilities, unmatched expertise

Schneider Downs’ IT Risk Advisory professionals help organizations gain valuable insights into their processes and technologies. A well-planned, properly structured information technology (IT) audit program is essential to evaluate risk management practices, internal control systems, and compliance with regulations and corporate policies.
Business Continuity & Disaster Recovery Disaster Recovery/Business Continuity Planning and Table Top Exercises Deliver sound risk management… Cybersecurity Maturity Model Certification Services (CMMC) Deliver sound risk management practices, internal control systems and compliance frameworks. Schneider… Data Privacy Services Data Privacy Services Deliver sound risk management practices, internal control systems and… FFIEC IT Compliance Assessment Deliver sound risk management practices, internal control systems and compliance frameworks. The… GDPR Compliance Deliver sound risk management practices, internal control systems and compliance frameworks. The… HIPAA Compliance Assessment Deliver sound risk management practices, internal control systems and compliance frameworks. The… HITRUST HITRUST Information Technology Audit Deliver sound risk management practices, internal control systems and compliance frameworks. With… InfoSec Policy Templates Deliver sound risk management practices, internal control systems and compliance frameworks. The… IRS Publication 1075 Deliver sound risk management practices, internal control systems and compliance frameworks. To… ISO 27001 Compliance Assessment Deliver sound risk management practices, internal control systems and compliance frameworks. ISO… IT General Controls Audit Deliver sound risk management practices, internal control systems and compliance frameworks. IT… IT Risk Assessment Services Deliver sound risk management practices, internal control systems and compliance frameworks. Prior… Network Device Security Configuration Assessment Identify vulnerabilities, mitigate risks and be better prepared against cyber threats. It… NIST The National Institute of Standards and Technology (NIST) The National Institute of… Payment Card Industry Security Standard Compliance PCI DSS CompliancePayment Card Industry Data Security Standard Deliver sound risk management… SAP Audits and Controls SAP Audits and Controls PRIMARY CONTACT: Eric M. Wright CPA, CITP Schneider… Sarbanes-Oxley Solutions Sarbanes-Oxley Solutions Deliver sound risk management practices, internal control systems and compliance… SOC Services SOC Services Delivering SOC Reports With IT, Internal Audit, And External Audit… Third-Party Risk Management Third-Party Risk Management Deliver sound risk management practices, internal control systems and…

Our focus is on making personal connections

Our dedicated IT Risk Advisory professionals have experience working with various industries and companies of all sizes. We will partner with you to provide comprehensive IT audits and compliance reviews to ensure your organization has effective and efficient technology controls that better align the technology function with its business and risk strategies. Our IT Risk Advisory practice ensures your organization will be risk-focused with sound IT controls, timely resolution of audit deficiencies, and informs the board of directors of the effectiveness of risk management practices.

IT Risk Advisory Resources

Learn How We Can help you meet your goals

Ask A Question
Submit an RFP

OUR THOUGHTS ON

“Shadow AI” Risk in Financial Institutions: What a Recent Cybersecurity Disclosure Reveals About AI Governance

Shadow AI, the unauthorized use of AI tools by employees outside approved environments, is creating new cybersecurity and data governance…

Read More >
SOC Audit IPE Explained: How to Avoid Delays, Rework and Exceptions

In a SOC report audit, one of the most important, but often misunderstood, aspects is Information Provided by the Entity…

Read More >
Resurgence of TrickMo Highlights Growing Sophistication of Android Banking Malware

Android banking malware continues to evolve as threat actors enhance existing malware families to evade detection and disruption. A recently…

Read More >
Third-Party Cyber Risk in Banking: Lessons from the Everest Ransomware Claims

The biggest threat to your bank's data might not be your bank at all. In April 2026, the Everest ransomware…

Read More >
Don't Mistake Evidence Collection for Audit Integrity: What Compliance Automation Can't Tell You

Collecting evidence for an audit probably isn’t the highlight of your day to tell at the dinner table, so we…

Read More >