E100 July 2024 Edition
Published: Jul 15, 2024
Last Updated: Feb 4, 2025
Hi Friend,
I hope you are doing well and enjoying your summer! As one of our valued Elite 100 clients, we are committed to keeping you informed about the latest updates from our firm and the most significant industry trends. Please find this month’s highlights below.
Firm Spotlights
A New Era of Growth and Innovation at Schellman
We are thrilled to announce the appointment of Alyson Castillo to Schellman’s executive team, as our Chief Growth Officer to drive the firm’s growth and expansion. Alyson has proven successful in fostering growth and building key partnerships, highlighting these attributes as key assets for the firm. In this new role, Alyson will focus on client acquisition, revenue growth, and brand enhancement, aiming to expand Schellman’s presence in global compliance and deliver exceptional value to our clients.Join us for our next Lunch & Learn - August 20
Join us on August 20th for our second Elite 100 Exclusive Lunch and Learn virtual event. We'll kick off with trending topics from our Pen Test team, exploring advanced penetration testing and AI testing techniques.
From there, you will hear from our privacy team on the modernization of global privacy management system frameworks, the impact of AI on privacy assessments, and the increasing use of privacy concerns to justify data localization requirements.
Don't miss this opportunity to gain valuable insights and network with fellow Elite 100 members!
Watch a short 45-second video talking about advanced penetration testing.
What is Trending?
SSDF - New CISA Attestation Requirement
As of June 8th, companies that sell critical software to the government were required by their sponsoring agencies to submit a CISA attestation form that they were complying with certain requirements of the NIST SSDF standard. FedRAMP Authorized cloud providers also have to complete these requirements. Companies could perform a self-attestation or use a 3PAO such as Schellman.
We have performed assessments for more than 100 products across multiple build environments to help our clients meet the deadlines for critical software. With the deadline for all other software attestations quickly approaching on September 8th, we are engaged for more than 100+ more. We are ready and able to start this assessment for your company before the end of 2024.
Learn more: Attestation Requirement for Critical Software Sales to Government and review these FAQs.
I look forward to connecting with you soon.
About Douglas Barbin
As President and National Managing Principal, Doug Barbin is responsible for the strategy, development, growth, and delivery of Schellman’s global services portfolio. Since joining in 2009, his primary focus has been to expand the strong foundation in IT audit and assurance to make Schellman a market leading diversified cybersecurity and compliance services provider. He has developed many of Schellman's service offerings, served global clients, and now focuses on leading and supporting the service delivery professionals, practice leaders, and the business development teams. Doug brings more than 25 years’ experience in technology focused services having served as technology product management executive, mortgage firm CTO/COO, and fraud and computer forensic investigations leader. Doug holds dual-bachelor's degrees in Accounting and Administration of Justice from Penn State as well as an MBA from Pepperdine. He has also taken post graduate courses on Artificial Intelligence from MIT and maintains multiple CPA licenses and in addition to most of the major industry certifications including several he helped create.