Charlie Wood: Expert in Information Risk Management

Charlie is a Partner & Practice Lead with FoxPointe Solutions Information Risk Management Division of The Bonadio Group.

Services

Data privacy
Vulnerability identification and remediation
Controls optimization and compliance
Disaster recovery and business continuity

Focus Areas

Charlie’s years of experience in the information technology industry include a strong focus on security hardening, data privacy, vulnerability identification and remediation, internal and external auditing, controls optimization and compliance, system administration, disaster recovery, business continuity and impact analysis, and overall project management.

IT Security / Systems Performance Assurance

Prior to joining FoxPointe Solutions and The Bonadio Group, Charlie worked with the Systems Performance Assurance group at a Big Four accounting firm, where he gained extensive enterprise risk management experience through IT security reviews supporting critical business processes across a variety of industries. He identified key business processes and IT threats, recommending controls to mitigate risk and help organizations maintain stable, secure, and efficient technology environments. Charlie has conducted compliance reviews for complex public and privately held organizations across multiple service lines and has reviewed, tested, and assisted with the implementation of large-scale ERP solutions, including Oracle, SAP, IBM mainframe, and AS/400 systems.

Expertise in Control Regulations / Regulators and Frameworks

Statement on Standards for Attestation Engagements (SSAE 18)
Payment Card Industry Data Security Standards (PCI DSS)
Health Information Trust Alliance (HITRUST)
Committee of Sponsoring Organizations (COSO)
Control Objectives for Information Related Technologies (COBIT)
Sarbanes-Oxley Act (SOX404)
Health Insurance Portability and Accountability Act (HIPAA)
Gramm-Leach-Bliley Act (GLBA)
ISO 27001/2
Family Educational Rights and Privacy Act (FERPA)
General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679)
Federal Information Security Management Act (FISMA)
Federal Financial Institutions Examination Council (FFIEC)
Federal Deposit Insurance Corporation (FDIC)
Office of the Comptroller of the Currency (OCC)
State, Federal, and international data privacy and security laws

Publications

Frequent contributor to bonadio.com and webcpa.com, among other websites

Certifications

CISA
CISM
CRISC

Management Team

Charlie Wood