Growth in AAFCPAs’ Business Process & IT Consulting Practice

Posted on August 3, 2022May 29, 2025

Boston, MA (8/3/2022) – AAFCPAs, a best-in-class CPA and consulting firm known for tax, assurance, accounting, wealth management, business process, and IT advisory solutions, today announced the addition of Andrew Mathieson and Brenna Mellen. These professionals join the firm’s growing Business Process & IT Consulting Practice, which provides business intelligence & productivity, information risk management & cybersecurity, and special IT attestations, compliance, and certifications.

Andrew Mathieson and Brenna Mellen (L-R)

Andrew is a seasoned IT risk & cybersecurity advisor who helps clients, and those charged with governance and risk management, navigate their digital ecosystem with confidence. This confidence enables further innovation through technology! He has years of hands-on experience as well as earned expertise as a Certified Information Systems Auditor (CISA), a HITRUST Certified Cybersecurity Framework Practitioner (CCSFP), a Certified Information Systems Risk and Compliance Professional (CISRCP), a Certified Data Privacy Solutions Engineer (CDPSE), and he holds an advanced Certificate of Cloud Security Knowledge (CCSK). Learn more about Andrew Mathieson, CISA, CDPSE, CCSFP HITRUST, CISRCP, CCSK.>>

Brenna supports AAFCPAs’ Assurance Practice in providing IT General Controls (ITGCs) Assessments to provide confidence to those charged with governance that there is proper risk management and risk mitigation related to IT systems. She also has extensive experience performing special attestation engagements, including Cybersecurity and System and Organization Controls (SOC) reports for organizations that must provide assurance about their systems to users. Learn more about Brenna Mellen.>>

AAFCPAs is a leading CPA and consulting firm based in New England with clients all over the United States, as well as multi-national businesses.

Learn more about AAFCPAs’ #GrowthStory!

Can you see yourself here? Contact Amy Quinn, Talent Manager, Acquisition & Engagement, for an exploratory discussion, and follow AAFCPAs on LinkedIn: #growthstory #greatmindsgreathearts #aafcpas

Related Insights

SOC Report 2022 Revised Points of Focus

In late 2022, the AICPA updated its guidance on performing System and Organization Controls (SOC) attestations with revised points of focus that offer enhanced context for meeting the criteria in your report. Organizations and their auditors should be aware of the updates and go through an exercise to actively incorporate these revised points of focus […]

A Startup’s First Steps to SOC Readiness

Early-stage companies have a lot to contend with, including funding, staffing, infrastructure, product development, and marketing, which can create a chaotic environment. Those that collect personal identifiable information or health information as part of their business model also must add earning their SOC (System and Organization Control) certification to the list. The SOC Report has […]

SOC Report: Why are our Sales & Marketing Teams Insisting we have one?

Prospects may ask for a SOC report as a way to assess the controls and processes in place at an organization before doing business with them. Many organizations, particularly in regulated industries or those that handle sensitive information, are required to demonstrate compliance with relevant regulations and industry standards. A SOC report can be an […]