How to understand if your controls are really mitigating your risks

John leads ERM Exchange, and an affiliated governance and controls firm named The Audit Exchange, which provide clients in the public, private and non-profit sectors with Enterprise Risk Management (“ERM”), internal auditing, Sarbanes-Oxley, Service Organization Control (“SOC”) 1 and 2 readiness, forensic investigations, and other governance, risk and controls (“GRC”) services. John has also served as an expert in matters before the United States District Court relating to internal auditing and internal control. Prior to founding ERM Exchange and The Audit Exchange, John was a partner with several international accounting firms and a Director with PricewaterhouseCoopers’ internal audit and technology audit practices. Earlier, John served as an Internal Audit Director for Aramark Corporation, a controller for a national real estate developer, and began his career with two Big Four accounting firms.