Implementing Sarbanes-Oxley (SOX) Compliance Within 90 Days.

Our client needed to fulfill SOX compliance requirements quickly, including a design and implementation of its internal controls program. The company had stretched its resources across multiple areas, so it needed an experienced team that could efficiently design and launch the financial and technology SOX program. They wanted a partner that understood their business, could move quickly, and provide a framework suitable for external audit review.

Read Blog
Risk Management

What Our Recent Survey Says About The State Of Enterprise Risk Management

Vertex11 was recently invited to speak to over sixty leaders of Enterprise Risk Management (ERM) practices across the United States. At the conference we conducted a survey, which actually reinforced what we already knew. Before we dive into some of the results, it is important to mention this was a bit of an experiment on our part. An ERM survey was conducted by PricewaterhouseCoopers (PWC) in 2004, then again in 2008

Summer Book Series

Perspective On The Final Book In Our Summer Book Series: Uncommon Service By Frances Frei & Anne Morriss

You can’t be good at everything. The authors make the case that striving for all-around excellence leads directly to mediocrity. For us, this is really a risk appetite discussion. Does your organization want to try to be great at everything at the risk of being mediocre or even worse? In organizations today, this conversation really isn’t had enough. The case can be made that you’ll never get all the funding you need to make every aspect of cybersecurity great.

Manta Spotlight: Misbahuddin Syed

Misbahuddin Syed is an essential member of the Vertex11 team. He’s an expert in information technology, security, risk management, process re-engineering, and process improvement. Throughout his career, Syed has been responsible for designing and operationalizing programs that manage vulnerabilities, improve security, prevent data loss, and so much more. His certifications are like an alphabet soup that includes CISA, CFE, CISM, and CRISC, just to name a few.