Third-party assurance summit

With seventeen years of experience at Deloitte & Touche LLP serving clients in the financial services and insurance industries, Kim focuses on third-party assurance, providing attestation services, such as SOC 1 and SOC 2 reports for a wide range of organizations. As a principal, Kim leads engagement teams in delivering third-party assurance and advising clients on the effectiveness of their IT and business process controls. She is experienced in integrated and non-integrated financial statement internal control audits, SOX compliance and readiness assessments, and internal audits. Kim provides guidance to clients as they navigate the complexities of regulatory requirements and industry standards, advise them in demonstrating robust internal controls to stakeholders and regulators.

Geoff has 20 years of experience, where he focuses on collaborating with his clients to develop bespoke solutions for their strategic opportunities & initiatives. This includes, but is not limited to risk management, digital transformations, process reengineering, business process outsourcing/insourcing, and ERP implementations. His experience involves leading client relationships through Internal Audit, Finance & Accounting, Compliance, Cyber Security, and Risk Management and he brings the firm’s assets to help his clients and their teams succeed. His specialization is risk management, where he spends a significant amount of time assisting his clients in modernizing and transforming risk management activities across the 3 Lines by utilizing digital / AI capabilities and innovative ways of working. This includes strategy development and implementation, facilitating lab sessions and training, and identifying and developing digital use cases and assets. In addition, Geoff is a member of our Internal Audit market offering and Accounting & Internal Controls Offering Portfolio Leadership Teams and leads our Dynamic Risk Assessment capability. He is also a member of our AI Advisory team of our Finance Transformation leadership team. Geoff has led IA, SOX and compliance activities for multiple Fortune 500 companies and has managed operational, regulatory compliance, strategic, financial, and IT IAs domestically and globally, as well as assisted with implementing enterprise risk management frameworks and conducting internal audit risk assessments. In addition, throughout Geoff’s time with Deloitte, he has helped to incubate and bring several new products, technology assets, and services to market and is a recognized speaker at several industry and domain conferences on the topics of Risk Management, Digital Risk Management, AI, Analytics, and automation, and Risk Excellence (Coordinated Assurance).

With more than 20 years of professional experience, Keith has focused his recent efforts on helping manufacturing organizations and Federal contractors align with National Institute of Standards and Technology (NIST) frameworks, including NIST 800-171, NIST 800-53, and most recently, the Cybersecurity Maturity Model Certification (CMMC). Keith has also been selected by the CMMC AB to be one of the initial 100 Provisional CMMC Assessors and is currently a Certified CMMC Assessor (CCA). Keith has led and delivered on CMMC projects ranging from Controlled Unclassified Information (CUI) Boundary Identification, CMMC gap assessments, and remediation support related to system implementations and process design for global manufacturing and technology companies. Keith’s other CMMC experience includes: Delivered and led gap assessments for manufacturing organizations and Federal contractors to align with NIST frameworks including NIST 800-171, NIST 800-53, and CMMC Developed a CMMC for supply chain framework for a large Federal contractor Led and delivered an enterprise-wide Supply Chain Risk Management (SCRM) concept of operations (ConOps) for a large Federal manufacturing client Led a large-scale cybersecurity and IT controls implementation supporting a finance modernization project for a multi-national company Developed assessment frameworks, remediation roadmaps and CUI boundary engagements to assist multiple organizations achieve CMMC compliance Assisted organizations in developing and deploying tailored operating models and organizational structures in response to CMMC requirements Additionally, his experience includes IT Assurance, and Enterprise Risk Management and Readiness Assessments. Before joining Deloitte, Keith served in the United States Marine Corps, performing technical accounting and budget formulation within Marine Corps Headquarters at the Pentagon. Certifications/Degrees: Bachelor of Arts in Management, Ottawa University Master of Business Administration, Rockhurst University Provisional CMMC Assessor Project Management Professional (PMP) Certified Defense Financial Manager (CDFM)