Third-party assurance summit

With seventeen years of experience at Deloitte & Touche LLP serving clients in the financial services and insurance industries, Kim focuses on third-party assurance, providing attestation services, such as SOC 1 and SOC 2 reports for a wide range of organizations. As a principal, Kim leads engagement teams in delivering third-party assurance and advising clients on the effectiveness of their IT and business process controls. She is experienced in integrated and non-integrated financial statement internal control audits, SOX compliance and readiness assessments, and internal audits. Kim provides guidance to clients as they navigate the complexities of regulatory requirements and industry standards, advise them in demonstrating robust internal controls to stakeholders and regulators.

Geoff is an Audit & Assurance principal and leads the Digital Controls, AI, and Automation market offering and the IT Risk and AI-driven Risk and Controls-related services. He has advised clients through their strategic and transformation initiatives, including risk management, finance/digital transformations, process reengineering, business process outsourcing/insourcing, and ERP implementations. He leads client relationships through internal audit, finance and accounting, compliance, and cybersecurity. Geoff's specialization is risk management, where he spends a significant amount of time advising his clients in modernizing and transforming risk management activities across the three lines, including leveraging AI/GenAI solutions and innovative ways of working. This includes strategy and operating model development and implementation and developing/deploying digital assets. He has led internal audit, SOX, and compliance activities for multiple Fortune 100 companies and has led reviews across various risk domains, as well as advising on implementing enterprise risk management frameworks and conducting internal audit risk assessments. In addition, Geoff has helped to incubate and bring several new products, technology assets, and services to market and is a recognized speaker at several industry and domain conferences on the topics of risk management, digital risk management, AI/GenAI, and risk excellence (coordinated assurance).

With more than 20 years of professional experience, Keith has focused his recent efforts on helping manufacturing organizations and Federal contractors align with National Institute of Standards and Technology (NIST) frameworks, including NIST 800-171, NIST 800-53, and most recently, the Cybersecurity Maturity Model Certification (CMMC). Keith has also been selected by the CMMC AB to be one of the initial 100 Provisional CMMC Assessors and is currently a Certified CMMC Assessor (CCA). Keith has led and delivered on CMMC projects ranging from Controlled Unclassified Information (CUI) Boundary Identification, CMMC gap assessments, and remediation support related to system implementations and process design for global manufacturing and technology companies. Keith’s other CMMC experience includes: Delivered and led gap assessments for manufacturing organizations and Federal contractors to align with NIST frameworks including NIST 800-171, NIST 800-53, and CMMC Developed a CMMC for supply chain framework for a large Federal contractor Led and delivered an enterprise-wide Supply Chain Risk Management (SCRM) concept of operations (ConOps) for a large Federal manufacturing client Led a large-scale cybersecurity and IT controls implementation supporting a finance modernization project for a multi-national company Developed assessment frameworks, remediation roadmaps and CUI boundary engagements to assist multiple organizations achieve CMMC compliance Assisted organizations in developing and deploying tailored operating models and organizational structures in response to CMMC requirements Additionally, his experience includes IT Assurance, and Enterprise Risk Management and Readiness Assessments. Before joining Deloitte, Keith served in the United States Marine Corps, performing technical accounting and budget formulation within Marine Corps Headquarters at the Pentagon. Certifications/Degrees: Bachelor of Arts in Management, Ottawa University Master of Business Administration, Rockhurst University Provisional CMMC Assessor Project Management Professional (PMP) Certified Defense Financial Manager (CDFM)