Cybersecurity
We provide cybersecurity services to maximize the confidentiality, integrity and availability of your critical information assets and reduce cyber risk.
Featured
Ransomware prevention guide
Cybersecurity
Proactively protect and address your cybersecurity and information technology (IT) risks.
Information assets and technology investments left ungoverned and unprotected leave organizations vulnerable to compromise and loss of reputation, revenue/value, customers and intellectual property. Couple these risks with the increasing demands for transparency, accountability and compliance by regulators, government entities, shareholders and others, and you have a perfect storm of risks.
While sophisticated hacking is a valid threat to organizations, it is rarely the root cause of a data breach. The vast majority of data breaches and cybersecurity incidents are actually caused by a breakdown of basic cybersecurity processes and controls.
The Baker Tilly team provides comprehensive cybersecurity services to help organizations assess cyber risk, implement measurable security enhancements and improve control effectiveness. We will evaluate your cybersecurity controls, deliver recommended improvements and provide assurance that your cybersecurity controls are working.
Our solutions
Our clients count on our proactive, experienced cybersecurity services to manage cyber risk, helping them win now and anticipate tomorrow.
Cybersecurity and IT assessments
SOC reporting
- SOC 1®, SOC 2® and SOC 3®
- SOC for Cybersecurity
- SOC readiness assessment
Cybersecurity assessments
- CIS Critical Security Controls (CSC) assessment
- Microsoft Supplier Security & Privacy Assurance Program (Microsoft SSPA)
- New York State Department of Financial Services (NYSDFS)
- National Institute for Standards and Technology (NIST) 800-171
- National Institute for Standards and Technology (NIST) CSF 2.0
- National Institute for Standards and Technology (NIST) 800-53
- Penetration testing assessment
International Organization for Standardization (ISO) certifications
- ISO 27000 family
- ISO 27701
- ISO 22301
- ISO 42001
- ISO 9001
Payment Card Industry Data Security Standard (PCI DSS)
- PCI DSS
- PCI SAQ
- Approved Scanning Vendor (ASV)
Federal assessments
- Cybersecurity Maturity Model Certification (CMMC)
- The Federal Risk and Authorization Management Program (FedRAMP)
- Government Risk and Authorization Management Program (GovRAMP, formerly StateRAMP)
Healthcare assessments
- Health Insurance Portability and Accountability Act (HIPAA)
- HITRUST®
International standards
- BSI Cloud Computing Compliance Criteria Catalog (C5)
Privacy compliance assessments
- General Data Protection Regulation (GDPR)
- California Consumer Privacy Act (CCPA)
IT assurance
- IT SOX compliance
- IT SOX readiness
- IT SOX – PCAOB
- IT internal audit – ERM
- IT internal audit – general IT
- IT internal audit – risk assessment
- IT ESG
- IT GRC – SOD
- IT ERP – NetSuite
- IT ERP – Oracle
- IT ERP – SAP
Cybersecurity advisory
- AI governance advisory
- IT and cybersecurity internal audit solutions
- Federal assessment advisory
- Third-party vendor risk management
- Vulnerability assessment
- Technology due diligence
- Cyber incident response planning and business continuity
Our industries
Energy
Energy consulting expertise where it matters — on the ground, in the grid and for the future.
Financial Institutions
The financial institutions industry continues to diversify, but competition and more complex vendor relationships make determining business strategy more complicated.
Healthcare
Baker Tilly helps healthcare organizations address today’s challenges while planning for what’s next through a coordinated approach across the healthcare ecosystem.
Higher Education
We empower higher education leaders to navigate the greatest challenges and ensure universities and colleges continue sustainability to drive social mobility, knowledge creation, economic and workforce development while contributing to a healthier and more just and civil society. Baker Tilly will help you articulate and realize your goals and maximize your chances of achieving them. Let's go there. Now, for tomorrow.
HITRUST CSF® Assessment Services
The HITRUST CSF® provides an integrated, certifiable approach to securing PHI. Any organization handling PHI on behalf of customers may be required to obtain a HITRUST CSF certification.
Professional Services
Baker Tilly works with professional services firms to address complex financial, tax and operational challenges through audit, tax, and advisory services tailored to how you operate.
Manufacturing
Providing manufacturing consulting solutions to help businesses reduce risk and improve efficiencies across the supply chain.
Real Estate
Innovative real estate consulting, tax and assurance solutions for developers, owners, investors and property managers.
