A-LIGN

Owners

Goods & Services

Regulatory compliance consulting and assessment services in the nature of providing advisory and attest services relating to standards and regulations under the Sarbanes Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA) and Health Information Technology for Economic and Clinical Health Act (HITECH), Payment Card Industry Data Security Standard (PCI DSS), Gramm-Leach-Bliley Act (GLBA), Consumer Financial Protection Bureau (CFPB), Federal Financial Institutions Examination Council (FFIEC), National Technical Information Service (NTIS), Limited Access Death Master File (LADMF), General Data Protection Regulation (GDPR) laws, E.U.-U.S Privacy Shield, Criminal Justice Information Services (CJIS) assessments, Agreed Upon Procedures (AUP) engagements, System and Organization Controls (SOC), SOC1, SOC2, SOC3 and SOC for Statement on Standards for Attestation Engagements (SSAE), International Standard on Assurance Engagements (ISAE), and Canadian Standard on Assurance Engagements (CSAE), Supplier Security and Privacy Assurance Program (SSPA), and CFPB readiness; Regulatory compliance consulting relating to applications, and personal information, namely, providing System and Organization Controls (SOC) assessments and attestation, Payment Card Industry Data Security Systems (PCI/DSS) assessment and advisory services, healthcare-related assessments in the nature of HIPAA, HITECH, Health Information Trust Alliance (HITRUST) assessments, International Organization for Standardization certification services in relation to regulatory compliance, federal assessments in the nature of Federal Risk and Authorization Management Program (FedRAMP) authorization, Federal Information Security Management Act (FISMA) authorization and certification, and National Institute of Standards and Technology assessment services, in particular, providing National Institute of Standards and Technology Special Publication (SP), Federal Information Processing Standards (FIPS)

Providing internal audit services in the nature of business auditing