Chris is a Director of FoxPointe Solutions / the Information Risk Management Division of The Bonadio Group.

What do you focus on?

I have a focus on internal and external auditing of information technology and information security practices and controls, providing services to clients across multiple industries, including public and private companies, financial institutions, healthcare organizations, tech companies, and school districts, ensuring that client controls are functioning. I conduct audits in accordance with regulatory compliance standards and focuses on the following areas:

• NIST Cybersecurity and Security and Privacy Controls Framework
• NY 23 NYCRR 500 Cybersecurity Requirements for Financial Services Companies
• Gramm-Leach-Bliley Act (GLBA)
• State, Federal, and international data privacy and security laws
• HITRUST Common Security Framework
• Federal Financial Institutions Examination Council (FFIEC)
• Federal Deposit Insurance Corporation (FDIC)
• Office of the Comptroller of the Currency (OCC)
• Federal Trade Commission (FTC) Red Flag Rule
• National Credit Union Administration (NCUA)

Education

St. John Fisher College, B.S. Accounting

St. John Fisher College, M.B.A. Accounting

Certifications

• Certified Information Systems Auditor (CISA)
• Certified Assessor for the HITRUST Common Security Framework (CCSFP)
• Master of Business Administration (MBA)

Affiliations

• Information Systems Audit and Control Association (ISACA)
• Independent Bankers Association of NYS
• Hochstein School of Music and Dance Technology Committee