Chris Tait is a principal with Baker Tilly’s risk advisory practice. He has more than 20 years of experience providing technology-related consulting and assurance services to financial institutions. Chris’ experience includes information technology (IT) auditing and risk management, IT assessments, IT operations management, IT strategy development, package systems selection and implementation, business process redesign and custom systems development in a wide variety of environments.
- Serves as a technology risk management lead responsible for audit and advisory services for multiple financial institutions (e.g., banks, insurance companies and investment advisory firms)
- Experience performing audit and advisory projects related to Sarbanes-Oxley (SOX) and Model Audit Rule (MAR), Federal Deposit Insurance Corporation Improvement Act (FDICIA) and internal control over financial statements (ICFR)
- Serves as the team lead on SOC 1/SOC2 engagements
- Performs IT risk reviews and develops solutions to enhance current information security practices and enhance compliance with requirements such as the Gramm-Leach-Bliley Act (GLBA), Federal Financial Institutions Examination Council (FFIEC) IT Audit Handbooks
- Performs security and controls reviews for a variety of clients. Review areas include cybersecurity, infrastructure, applications, vendor management, disaster recovery and business continuity
- Executes maturity, readiness and compliance assessments for Payment Card Industry Data Security Standard (PCI-DSS), NIST Cybersecurity Framework (CSF), HIPAA-HITECH, HITRUST CSF, NIST 800 series standards
- Guiding clients through the digital assets landscape by uncovering the potential risks, business impact and strategic opportunity
- Information Systems Audit and Control Association (ISACA)
- The Institute of Internal Auditors (IIA)
- American Institute of Certified Public Accountants (AICPA)
- Cloud Security Alliance (CSA)
- AWS Certified Cloud Practitioner
- 2020 (Amazon Web Services)
- CCSFP – Certified Common Security Framework Practitioner, 2016
- (HITRUST Alliance)
- CCSK – Certificate of Cloud Security Knowledge, 2013 (CSA)
- CFSA – Certified Financial Services Auditor, 2006 (IIA)
- CISA – Certified Information Systems Auditor, 2005 (ISACA)
