The Security You Need.
The Compliance to Succeed. 

BARR Advisory is a leading provider of IT governance, risk and compliance services.
Our specialists help enterprises of all sizes strengthen security, meet complicated mandates
and take business efficiency to the next level.

learn more

Our Approach: Simplify and Customize

We go beyond the compliance checklist and assess all aspects of your organization’s unique environment, identifying risks, areas for improvement and simplifying the processes and controls needed to turn compliance into a strategic asset.

https://www.barradvisory.com/wp-content/themes/salient/css/fonts/svg/arrows_hamburger 2.svg

Plan and Scope

We believe in determining the why before proposing the how and that careful planning is imperative to achieve your business objectives. We simplify complex projects by defining roles, responsibilities
and setting clear expectations
over project scope.

https://www.barradvisory.com/wp-content/themes/salient/css/fonts/svg/basic_sheet_txt .svg

Assess

We take a comprehensive approach toward assessment. By identifying business issues and opportunities at every level, we simplify solutions and turn risks and complex compliance requirements into a competitive advantage for your organization.

https://www.barradvisory.com/wp-content/themes/salient/css/fonts/svg/arrows_circle_check.svg

Report and Comply

Whether we are performing a compliance examination, risk assessment or internal GRC advisory services, we deliver the highest quality reports. To ensure accuracy, our technical writing team reviews all reports prior to distribution.

https://www.barradvisory.com/wp-content/themes/salient/css/fonts/svg/arrows_clockwise_dashed.svg

Optimize

Our approach enables organizational alignment, integration of business processes and continuous improvement. Our commitment to you extends far beyond our final deliverables. We follow up to ensure our work infuses value in your organization.

Cybersecurity Risk Management, Compliance and Advisory Services

As a trusted advisor to some of the fastest growing cloud service providers (IaaS, PaaS, SaaS), we simplify compliance across multiple regulatory and customer requirements in a wide range of industries including technology, financial services, healthcare and government. Explore our services below.

SOC Examinations

Differentiate your organization by providing your stakeholders with a Service Organization Control (SOC) report that demonstrates your commitment to confidentiality, integrity and availability. BARR is here to assist you with the following audit reports:

SOC 1

Focuses on controls that are relevant to an audit of your clients’ financial statements.

SOC 2

Reports apply more broadly to operational controls covering security, availability, confidentiality, processing integrity, and/or privacy across a variety of systems.

SOC 3

Reports are similar to SOC 2 but shorter and allow for more general distribution such as posting to your website.

Healthcare Compliance

From HIPAA to HITRUST compliance challenges, our service professionals can help you navigate the complex healthcare rules and risks associated with business associates who handle e-PHI.

ISO Certifications

ISO 27001, ISO 27017, and ISO 27018 are internationally accepted standards that demonstrate your organization’s commitment to information security risk management. Let us help you achieve certification.

Government Assessments

As an accredited Third-Party Assessment Organization (3PAO), we provide independent assessment services to cloud providers. We follow the ‘do once, use many times’ framework to help organizations streamline complicated government mandates.

Payment Card Industry (PCI) Services

If you store, process, or transmit credit card data either as a merchant, processor, or service provider, then the Payment Card Industry Data Security Standard (PCI DSS) applies to you. Our focus is helping your organization achieve PCI compliance.

Penetration Testing and Vulnerability Assessments

Whether it’s an Infrastructure as a Service (IaaS), Platform as a Service (PaaS) or Software as a Service (SaaS), our specialists have extensive experience in penetration testing for cloud-based environments.

IT Governance Risk and Compliance (GRC) Advisory

BARR Advisory provides governance, risk and compliance (GRC) services to help clients improve risk management, streamline information security processes and reduce cost.

"It’s odd to say that it was a pleasure doing business with an auditor. However, that was definitely our experience with BARR Advisory. They had a detailed approach to documentation, review and assessment; as well as a thorough understanding of all aspects of the various criteria, standards and controls that were the basis of our audit. The method and tools they used to conduct our readiness assessment and final audit insured that the entire process was clearly communicated, easy to understand, comprehensive in nature and completed in a timely, efficient manner. We give BARR Advisory our highest recommendation.”

EDITH HANEYEVP, General Counsel & Compliance Officer, Fogo Data Centers

"The work with BARR Advisory has proven to be an asset to our company and our clients; we are truly appreciative."

DOLLY KRISHNASWAMYGlobal IP Strategist & Security, Alphaserve Technologies

“BARR was extremely helpful in streamlining the SOC 2 process for our company. Their friendly and professional auditors led us through two audit periods, and helped us affect lasting security measures while increasing company efficiency. Would highly recommended them.”

JEB BROWNPHD - PRESIDENT, CENTER FOR CLINICAL INFORMATICS

Save Yourself Time By Using Salient

Handling how you manage payments online is very important. Salient is a new innovative and easy to use method of sending & receiving money online. It’s fast, secure and free to sign up.

  • Top Customer Support
  • Most Liked Company
  • Best In Class 2016
  • Friendliest Group
  • Innovative Brand
electronic security

Equifax Data Breach: BARR’s Director of Cyber Risk Weighs In

| Cloud Computing, News, PCI DSS, Risk Management, Vulnerability Management | No Comments

The massive Equifax data breach is the latest cybersecurity incident in the ongoing struggle against threat actors. With 143 million consumers, or roughly half of the US population, potentially affected,…

security

What Security Roles Should SaaS Providers Have on Their Teams?

| Cloud Computing, Healthcare Security, Risk Management, SaaS, Vulnerability Management | No Comments

Increased cloud usage obviously benefits cloud service providers. But as SaaS services increase in popularity, so do opportunities for hackers to compromise them. Data breaches in the U.S. cost companies…

Meeting the 90-Day Mandate: 4 Tips for Agencies Moving to the Cloud

| Cloud Computing, Compliance Updates, Federal, News, Risk Management | No Comments

President Donald Trump’s executive order mandating a “cloud first” federal IT policy has drawn both criticism and praise. Few people, however, disagree that it’s time for a change. Not only…

4 Keys to Better Defend Healthcare Data Against Ransomware

| Cloud Computing, Healthcare Security, Risk Management | No Comments

Healthcare IT is moving to the cloud; unfortunately, so are opportunistic hackers. With cyberattacks threatening lives and poaching profits, healthcare providers have an obligation to cut cybersecurity risks. Until they…

Contact Us for a Free Consultation

We’re here to help you! Speak with a BARR specialist about your security and compliance needs.