Seeking a more efficient audit process
Maloney + Novotny is an established organization with years of experience completing security audits for its clients. They complete audits including HIPAA, SOC, NIST, PCI, and HITRUST. But according to Dale Dresch, Shareholder at Maloney + Novotny, they were receiving mounds of documents each month from clients, and sorting and reviewing through these documents was inefficient. He was looking for a more standardized and efficient way to run his audits, not only for his staff but for his customers too. He felt that there had to be a technology out there that could help leapfrog audit firms into the modern age.
“We were receiving thousands of documents from our clients and manually putting them into our software to match the controls for each framework. It is a very time-consuming process to organize every piece of evidence and every policy to match a control in a framework. There was no room for collaboration or interaction with our clients. It also meant that audits took a long time.”
- Dale Dresch, Shareholder, Maloney + Novoty
Determined to solve this challenge, Dresch researched the tools available and was recommended the Ostendio platform. His company realized the benefits that Ostendio could bring to their organization and the benefits of a more efficient audit for their customers. Maloney + Novotny is an Ostendio Auditor Connect partner.
“Automation of the process is the way forward for our industry,” said Dresch. “Customers and auditors can both benefit from using the technology available to do the heavy lift of a complex audit.”
He found that using Ostendio has helped educate his clients about the audit they are undertaking as well as making the process more efficient for his business.
“Ostendio is the only product I found that has the client and the auditor in mind,” said Dresch. “It has a clear dashboard for clients so they can see their audit progress and understand why we are requesting certain documents. For auditors, it helps arrange policies and evidence to match each framework.”
Not only has using the Ostendio helped educate his clients about audits but it has also helped speed up the process of an audit for both the customer and the audit firm. “What used to take weeks to prepare in the old software now takes half a day to prepare using Ostendio,” he said. “I can complete audits in half the time that it took me before using Ostendio.” This time saving has benefited the clients who can spend less time focusing on their audit and more time focusing on their business. It also benefits the auditor as they can complete more audits during a year.