Audit Services


140x140

Susan Orr Consulting, Ltd. performs IT General Controls and Information/Cyber Security reviews for financial institutions across all charters.  These audits incorporate FFIEC guidance, GLBA, ISO, Agreed Upon Procedures as applicable and feasible; and include but are not limited to areas such as:

  • Management oversight
  • Enterprise-wide Information and Cyber Security Risk Assessments
  • GLBA – Information and Cyber Security Program
  • Operations, Support and Delivery
  • Business Continuity and Disaster Recovery
  • Incident Response
  • Outsourced Third Party Risk Management
  • Development and Acquisition
  • Internet Banking, Mobile Financial Services
  • Electronic Payments (EFT, ATM/Debit Card)
  • Remote Deposit Capture

You will be provided a formal report of audit observations and recommendations.




Susan Orr Areas of Expertise




Susan E. Orr, CISA, CISM, CRP, CRISC


  • Certified Information Systems Auditor (CISA)
  • Certified Information Security Manger (CISM)
  • Certified Risk Professional (CRP)
  • Certified In Risk & Information System Control (CRISC)