Implementing, Assessing

Auditing

Compliance Services

Compliance involves an entity conforming to a set of requirements identified by a regulatory authority. Adhering to a particular standard can be required by laws and regulations, organizational policy, business functions, third party service provider compliance requirements, or a combination of the aforementioned. Failure to meet compliance requirements typically results in financial obligations and/or cessation of the associated business function.

HiNoon Consulting can assist organizations in implementing, assessing and/or auditing most information security related compliance standards. Audits, third-party assessments and certifications are three main objectives pertaining to regulatory standards. The compliance governing body determines which of those three objectives are applicable to particular standard.

HiNoon Consulting experts bring industry knowledge to provide the following compliance services:

What's the difference between

Audits, Assessments & Certifications?

Audits include "an independent review and examination of records and activities to assess the adequacy of system controls, to ensure compliance with established policies and operational procedures, and to recommend necessary changes in controls, policies, or procedures." The audit report provides the overall results of compliance. Typically, auditors are certified in accordance to the requirements set forth by the applicable regulatory authority. HiNoon Consulting provides audit support services in an advisory role within clients' internal compliance teams. Experience with various auditors has proven instrumental in navigating the audit process.

Assessments consist of "testing and/or evaluation of system controls in an information system to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the requirements for the system." Assessors are usually subject matter experts attesting to an organization's compliancy. Assessors may carry a variety of industry certifications and/or degrees, they may or may not be certified by a governing body.

Certification verifies the correctness of applied compliance requirements and issues a certificate (proof) as to its correctness. Certifications are issued by the respective compliance regulatory committee or authorized certifying body upon the recommendation of an approved auditor. It is pertinent to execute due diligence when achieving industry compliance as not all regulations require a certification, but for those that do the authoritative body are very selective regarding the requirements and approved auditors.