Steve Simmons

20 years of experience in information security auditing and advisory services that include performing and managing information technology audit engagements and information security and privacy compliance assessment services.
The areas of focus for these services include SSAE 18 (SOC 1), SOC 2, SOC 3, ISO 27001, ISO 22301, ISO 9001, PCI DSS, SOX, NIST, FISMA, HITRUST, and HIPAA and HITECH requirements. The examinations for all of these requirements have been performed across multiple markets such as technology, healthcare, insurance, financial services, transportation, and telecommunication.