IT Audit and Consulting

Don’t let technology controls slow you down

Information technology controls should support and enable your business objectives — not hinder them. Since organizations have unique characteristics and varying degrees of risk tolerance, we don’t offer a one-size-fits-all solution.

Instead, we help clients assess risks to their information systems and implement controls to mitigate risk based on their tolerance level. Our procedures are designed to accommodate the objectives of the client and regulatory agencies.

The security of your information systems is a crucial component of IT risk and is key to protecting your company and your customers. We can provide you with the hard-to-find technology and understanding of IT audit standards not often available in the internal audit departments of most organizations.

Conceptual image of IT compliance services with virtual checklists and verification symbols in a tech setting

Service when you need it

We provide support on your schedule, so our level of involvement is up to you. These are a few of the ways we can help, either on a short-term or a long-term basis:

  • IT risk assessments and audits
  • IT general and application control reviews
  • Information security audits and assessments
  • Network and cybersecurity  
  • Regulatory and compliance frameworks
  • HITRUST compliance assessment
  • IT policies and procedures review and assessment
  • Payment card industry (PCI) DSS compliance reviews
  • Governance risk management and compliance (GRC)
  • Enterprise risk management (ERM)
  • Data analytics and analysis
  • FFIEC audits
  • Business continuity and disaster recovery plan facilitation and testing

The Kraft Difference

Handshake icon

People you trust

Anchored by local roots and respected in the industry, we’re proud of our people-first culture, which has set us apart for over six decades.

User icon

Industry expertise

Our team is led by experts with up-to-the-minute insight in their field. We’re accessible and ready to help when you need us most.

Bulb Icon

Independent thinkers

As one of our industry’s most established independent firms, we think critically and move quickly. Clients get answers fast and see tailored solutions.

Globe icon

Bandwidth for diversity

As a growing firm in a thriving region, we evolve to meet the needs of our diverse clientele, particularly those in the competitive middle market.

Team Leaders

Erica Hightower is a senior manager with the risk assurance and advisory services (RAAS) practice

Erica Hightower

Senior Manager

Risk Assurance and Advisory Services

KraftCPAs PLLC

Scott Nalley is the member-in-charge with the risk assurance and advisory services (RAAS) group

Scott Nalley

Member-in-Charge

Risk Assurance and Advisory Services

KraftCPAs PLLC

Gina Pruitt is a member with the risk assurance and advisory services (RAAS) practice

Gina Pruitt

Member

Risk Assurance and Advisory Services

KraftCPAs PLLC