Catherine Bruder is a Consultant with Doeren Mayhew in the firm’s Information Technology (IT) Assurance and Security Group. She has over 28 years of experience providing audit and IT assurance services.
Credit unions, community banks, service organizations, technology vendors, data centers, health care insurers and manufacturers rely on Catherine to evaluate and design internal control and system management processes. She has designed audit programs to comply with Federal Financial Institutions Examination Council, Sarbanes-Oxley Section 404, Model Audit Rule for Health Care Insurers, Health Insurance Portability and Accountability Act (HIPAA), Gramm-Leach-Bliley Act of 1999 and various other regulatory standards. In addition, Catherine is experienced in providing internal and external vulnerability assessments, Service Organization Control (SOC) reports, penetration testing, information technology general controls reviews, Sarbanes-Oxley Section 404 compliance assessments, Model Audit Rule assessments and SSAE 16 engagements (formerly SAS 70 – Reports of Third Party Service Providers).
A national expert and an acclaimed speaker on SOC 1, 2 and 3 reporting, she is an instructor for the leading American Institute of Certified Public Accountants (AICPA) SOC School for auditors and service organizations impacted by the reporting requirements. Catherine has also authored several published articles on information security and internal controls, as well as being an credited contributing author of the recently released “Service Organization Controls – Quick Reference Guide” and a contributing author to the AICPA Audit “Guide Assessing and Responding to Audit Risk in a Financial Statement Audit.”
A quick registration is required to view our resources.
You will only be asked to do this one time (unless you don't save your browser cookies).