Allison is a Principal of FoxPointe Solutions / the Information Risk Management Division of The Bonadio Group.

Focus Areas

Allison focuses on the internal and external auditing of information technology and information security practices and controls. She has experience providing auditing and consulting services to organizations across a variety of industries, helping clients evaluate the effectiveness of their technology controls and strengthen their overall control environments.

Expertise in Control Regulations / Regulators and Frameworks

• Statement on Standards for Attestation Engagements (SSAE 18) 
• Payment Card Industry Data Security Standard (PCI DSS) 
• HITRUST Common Security Framework (CSF) 
• Health Insurance Portability and Accountability Act (HIPAA) 
• National Institute of Standards and Technology (NIST) 
• Sarbanes-Oxley Act (SOX) 
• Committee of Sponsoring Organizations (COSO) 
• Gramm-Leach-Bliley Act (GLBA) 
• Federal Financial Institutions Examination Council (FFIEC) 
• New York State Department of Financial Services (NY DFS) 

Publications

• Co-authored article for Bonadio Insights regarding the New York Data Security Act

Certifications

• Certified Common Security Framework Practitioner (CCSFP) 

Affiliations

• Information Systems Audit and Control Association (ISACA) 
• Health Information Trust Alliance (HITRUST)