Align oversight with your strategic goals and growth plans.
Risk touches every aspect of an organization—from the security of your systems to the integrity of your financial reporting. As regulatory expectations shift and operational complexity grows, AAFCPAs helps leadership teams assess vulnerabilities, prioritize remediation, and embed risk awareness into daily decision-making. Strong systems, well-designed processes, and a risk tolerance aligned workforce are essential to this effort, serving as both safeguards and enablers of more reliable operations.
Our risk advisory professionals bring a cross-disciplinary lens to your challenges, applying experience in governance, internal controls, compliance, cybersecurity, operational resilience, and strategic planning to build effective enterprise risk management programs. The result is a measured, practical approach tailored to your risk profile—one that supports growth without sacrificing resilience. Whether preparing for an audit or building a broader risk strategy, we provide clarity in an uncertain environment.
Risk is a constant. So is the need for judgment.
There is no one-size-fits-all approach to managing risk. AAFCPAs works with enterprise leaders to develop frameworks and safeguards that reflect the complexity of their operations and the industry in which they work. Our team brings deep experience in cybersecurity, financial reporting, compliance, and IT governance, helping you make informed decisions in high-stakes environments. By assessing the likelihood and impact of risks, and aligning safeguards with your risk tolerance, we help lay the foundation for long-term risk reduction. We offer perspective, not just process—so you can weigh risk thoughtfully, act decisively, and build the confidence that comes from preparedness.
Enterprise Risk Management
Enterprise Risk Management
AAFCPAs offers adaptable solutions to fit your organization’s goals, structure, and readiness. Whether launching a full ERM program or strengthening oversight in specific areas, our approach brings rigor without rigidity.
Cybersecurity and IT Risk
Cybersecurity and IT Risk
Transforming data into actionable insights. AAFCPAs helps strengthen your cybersecurity and IT risk posture without compromising operational efficiency. We deliver practical, right-sized strategies to manage threats, meet compliance requirements, and protect critical systems and data.
SOX 404 Consulting
SOX 404 Consulting
AAFCPAs helps public companies and pre-IPO organizations meet SOX 404 requirements with efficient, risk-based internal control solutions. Our team streamlines compliance, enhances control design, and supports alignment with external auditors to reduce effort and cost.
Internal Control and ITGCs
Internal Control and ITGCs
Developing and maintaining an effective control environment is essential for governance, compliance, and risk management. We partner with you to assess and strengthen your controls, turning regulatory requirements like Internal Controls over Financial Reporting (ICFR) into opportunities for improved confidence, performance, and efficiency.
SOC Reporting Services
SOC Reporting Services
AAFCPAs delivers trusted SOC reports that demonstrate your organization’s strong controls and commitment to managing risk. Our expert team provides thorough, efficient assessments—backed by certified ethical hacker oversight—to help you build trust with clients and ensure compliance and operational integrity.
HIPAA Compliance
HIPAA Compliance
AAFCPAs supports organizations that handle protected health information (PHI) through structured, regulator-aligned assessments tailored to your environment. Whether assessing your current posture or preparing for attestation, we deliver the clarity, documentation, and insight needed to demonstrate accountability and meet expectations with confidence.
ISO 27001 Readiness
ISO 27001 Readiness
Our team supports organizations at all stages of readiness, from those standing up a new information security program to those aligning existing SOC 2 controls, NIST, or other control sets that meet other standards with ISO requirements. We create efficiencies by leveraging your current controls, help reduce the risk of nonconformities, streamline your timeline, and strengthen audit readiness.
Technology & Process Advisory
Technology & Process Advisory
AAFCPAs helps organizations modernize technology and optimize processes to reduce hidden risks and build stronger, more resilient operations. By aligning systems with your strategic goals, we enable clearer data, improved controls, and smarter decisions—strengthening your risk management and supporting sustainable growth.
View All Insights >>
Connect with us
John Buckley
John Buckley
CPA, CGMA | Partner
Vassilis Kontoglis
Vassilis Kontoglis
Partner, AI Digital Transformation & Security
James Jumes
James Jumes
MBA, M.Ed. | Partner, Governance, Risk & Compliance
Andrew Mathieson
Andrew Mathieson
CISA, CDPSE, CCSFP, HITRUST, CISRCP, CCSK | Director, Governance, Risk & Compliance
