San Ramon, Calif.-based Armanino LLP, an IPA 100 firm, is partnering with security assurance company Tugboat Logic to provide an integrated, streamlined and expedited security audit process.
The goal is to better ensure the required independence between the entities conducting audit readiness and audit examination in third-party attestations such as SOC 2 and ISO 27001 by offering a coordinated process that allows for a smoother handoff between readiness and the examination, while also maintaining the integrity of checks and balances.
Tugboat helps organizations with the “readiness phase” of the audit process with an automated risk assessment survey, a centralized operations readiness dashboard for policies and controls and a suite of third-party integrations and modules that continuously gather evidence in support of the audit. Armanino then reviews this information and collaborates with the client remotely via an integrated platform to clarify and confirm what evidence has been submitted, what evidence was accepted and what evidence tasks require more information.
“One of the main factors that delay audits is our clients suffering in silence since they may not understand some of the evidence requests from the auditor,” says Armanino partner Liam Collins. “With Tugboat Logic, Armanino auditors can prevent this by having a real-time dashboard of the audit progress, and a simple way for our clients to ask questions to our auditors when they are unsure of a request. This helps speed up audits by up to 50%.”