Chris is a Principal of FoxPointe Solutions / the Information Risk Management Division of The Bonadio Group.

Focus Areas

Chris focuses on the internal and external auditing of information technology and information security practices and controls, serving clients across a wide range of industries, including public and private companies, financial institutions, healthcare organizations, technology companies, and school districts. He conducts audits in accordance with regulatory compliance standards to help organizations evaluate and strengthen their control environments, with a focus on the following areas:

• NIST Cybersecurity and Security and Privacy Controls Framework
• NY 23 NYCRR 500 Cybersecurity Requirements for Financial Services Companies
• Gramm-Leach-Bliley Act (GLBA)
• State, Federal, and international data privacy and security laws
• HITRUST Common Security Framework
• Federal Financial Institutions Examination Council (FFIEC)
• Federal Deposit Insurance Corporation (FDIC)
• Office of the Comptroller of the Currency (OCC)
• Federal Trade Commission (FTC) Red Flag Rule
• National Credit Union Administration (NCUA)

Education

St. John Fisher College, B.S. Accounting

St. John Fisher College, M.B.A. Accounting

Certifications

• Certified Information Systems Auditor (CISA)
• Certified Assessor for the HITRUST Common Security Framework (CCSFP)
• Master of Business Administration (MBA)

Affiliations

• Information Systems Audit and Control Association (ISACA)
• Independent Bankers Association of NYS
• Hochstein School of Music and Dance Technology Committee