Compliance & Control

• Internal Control Assessment - At BlumShapiro we have developed documentation and testing approaches for the internal control environment that identify the strengths and weaknesses of current controls and processes. This provides you with the insight to focus on risk areas and proactively assure directors and shareholders. We help to refine and revise the current processes and procedures.
  
  
• Assessment of Business Risks - We facilitate sessions with your organization's executive management, board and other personnel to identify, assess and evaluate key business risks. Our in-depth review and report quantifies the information gathered from these sessions including a discussion of existing controls to mitigate the major risks. This risk assessment provides a plan for your ongoing monitoring and review of your company's internal control processes.
  
  
• The Gramm-Leach-Bliley Act Compliance - The Gramm-Leach-Bliley Act(GLBA) Data Protection Rule requires organizations in various industries (i.e. banks, financial institutions, automobile dealerships) to implement and maintain an Information Security Program designed to insure the security and confidentiality of customer information. This includes the following customer information:
  
  
  • Bank and credit card account numbers
  • Income and credit histories
  • Social security numbers
  
  In addition, this act requires the regular confirmation and testing of the Program to ensure that the controls implemented function as expected.
  
  Key elements to an effective Information Security Program address key controls over critical IT operational areas, including:
  
  
  • Network and software design and management
  • Data security and access management
  • Data storage, transmission and retrieval
  • Virus protection and prevention
  • Intrusion detection and response
  • Staff awareness and training
  
  BlumShapiro Consulting is aware of the challenges that the GLBA Data Protection Rule can pose to a company. Our Certified Information Systems Auditors can identify the exposures your company faces and how those risks can be effectively addressed by:
  
  
  • Confirming and testing that proper network and application controls are in place
  • Evaluating data back up and virus protection procedures
  • Assessing the physical controls over critical hardware and network components
  • Determining that internal and remote access controls are protecting data assets
  • Reviewing current information systems' policies, procedures and practices
  
  Our goal is to provide clients with realistic solutions that will ensure compliance to the requirements of the GLBA.
  
  
• HIPAA Compliance - The Health Insurance Portability and Accountability Act of 1996 (HIPAA) requires that a covered entity (health plans, health care clearing houses and certain health care providers) must assure that the integrity, confidentiality and availability of the electronic health information they collect, maintain, use or transmit is protected. Unfortunately, many organizations are unclear how to attack this problem.
  
  BlumShapiro Consulting understands the compliance issues related to HIPAA, and has developed security compliance programs to help organizations implement security standards that support the four major areas where controls and monitoring procedures must be put into place.
  • Administrative Safeguards
  • Physical Safeguards
  • Technical Safeguards
  • Organizational Requirements
  
  Within each of these areas, there are a multitude of sub-elements and standards that need to be created. To enhance the implementation process, it is important to synthesize and summarize all of these elements into manageable steps. BlumShapiro Consulting can help you link the little pieces with the big picture and give you confidence that your information is secure and your controls and procedures are in compliance with HIPAA regulations.

• Sarbanes-Oxley compliance - Our team assists you in complying with both the Section 302, Officer Certification, and Section 404, Management Assessment of Internal Controls aspects of Sarbanes-Oxley. We work with your financial statement auditor to enable the attestation to management's assessment of the control environment. Our clearly independent role eliminates any perception of conflicts.
  
  
• Corporate compliance - BlumShapiro Consulting assist companies with the developmental, operational and monitoring phases of their overall corporate compliance program policies and procedures.
  
  
• Outsourcing of internal audit function - We act as an internal audit function for both public and private companies and assist in the development of an annual audit plan and performance of the various audits.

• Limited controls exist within and between P&Z, Assessor and Tax Collector impacting processing of permits
• Current processes are not documented and/or followed by staff
• Some permits are not entered into the CAMA/Assessors systems