Information Technology, Cybersecurity and Data Management Services

Together, the Information Technology (IT), Cybersecurity and Data Management teams form the technical and analytical foundation that supports regulatory compliance across financial and market conduct examinations, supervision, and enforcement activities. Their combined expertise ensures that insurers’ data and IT systems are secure, reliable, and aligned with evolving regulatory expectations.

 

Regulatory-Focused IT & Data Examinations

  • Frameworks Used: COBIT, NIST CSF, ITIL, and NAIC guidelines are applied to assess IT governance, cybersecurity maturity, and data management practices.
  • Scope of Review: Includes IT general controls (ITGCs), application controls, data governance, and system reliability as they relate to financial reporting and market conduct compliance.

Cybersecurity & Risk Management

Technical Services Include:

  • Vulnerability assessments and penetration testing using tools like Nessus and Metasploit.
  • Incident response readiness evaluations.
  • Vendor risk management reviews, including SOC 1/2/3 reports.
  • Business continuity and disaster recovery (BC/DR) assessments, including RTO/RPO validation.

Compliance Alignment: Ensures adherence to GLBA, HIPAA, state cybersecurity regulations, and NAIC Insurance Data Security Model Law.

Data Governance & Integrity

Policy Development: Collaborates with compliance and executive teams to implement data governance policies that ensure data quality, consistency, and regulatory compliance.

Data Security: Implements encryption, access controls, and audit trails to protect sensitive policyholder and financial data.

Data Retention & Accessibility: Ensures data is stored in compliance with regulatory retention schedules and is readily accessible for audits and legal inquiries.

Advanced Data Analytics & Forensics

Tools & Platforms: Power BI, Tableau, ACL, SQL Server, TeamMate AM/+, Python, Excel, Power Automate and Visual Basic.

Capabilities:

  • Data extraction, transformation, and loading (ETL) for structured and unstructured data.
  • Anomaly detection and trend analysis to support fraud detection and compliance monitoring.
  • Audit trail reconstruction and control validation for regulatory examinations.

Custom Regulatory Technology Solutions

Development Focus: Agile, secure, and scalable tools tailored to support compliance workflows, automate reporting, and enhance examination efficiency.

Integration: Seamless integration with legacy systems, cloud platforms, and third-party data sources to ensure a unified compliance ecosystem.

Certified Expertise & Regulatory Alignment

Certifications Held:

  • CISA, AES, AFE, CFE, MCM, AMCM
  • Additional credentials in cybersecurity (e.g., CISSP), cloud security (e.g., CCSK), and programming (e.g., Python, Visual Basic).

Regulatory Insight: Deep understanding of insurance regulatory frameworks ensures that all technical evaluations are aligned with examiner expectations and statutory requirements.

The IT, Cybersecurity, and Data Management teams are indispensable to regulatory compliance in the insurance industry. Their combined capabilities ensure that insurers’ systems and data are not only technically sound but also fully compliant with the complex and evolving regulatory landscape. Their work empowers regulators to make informed, data-driven decisions while safeguarding the integrity of the insurance marketplace.

Team Leadership

Scott Garduno, FSA, MAAA
Senior Managing Director

Steven Sigler, CFE, AES, AMCM, CISA
Senior Director

TESTIMONIALS

What our team says about us

Cynthia M. Fitzgerald, AIRC, ACS, AIAA, CICSR, CFE(Fraud), CIE, MCM, PHAM, ITP, CCP

Director

Working at ER has allowed me to develop my leadership skills to elevate my team in the Health Consulting Services space. Consistent and meaningful engagement with executive leadership at ER is incredibly supportive and collaborative. At ER, we foster a creative work environment where everyone feels valued and heard. ER leadership is committed to professional development and work life balance. I enjoy the opportunity to lead a strong team with vision and purpose as we support state and federal regulators with dynamic and creative solutions. One of the attributes I like most about working at ER is the opportunity to work closely with other leaders in other areas of insurance regulation. This opportunity is only possible when leaders feel trusted, supported and equipped with the tools necessary to be successful. At ER, we take care of our clients, our team and each other as we deliver on our mission.

Craig Leonard, CIE, CPCU, CCP, FLMI, ARC, AIAF, ARM, MCM

 Senior Director Market Conduct

Working at ER has been an incredible experience that allows me to lean into my strongest skills as a thought leader who is always looking to raise the bar and find better ways to improve market regulation processes. ER’s commitment to quality, efficiency, and first-rate representation creates an environment where innovation thrives, and continuous improvement is the standard. Our firm’s streamlined structure ensures prompt attention to clients at all levels, enabling me to partner with them in meaningful ways and consistently exceed their expectations. In my 34 years being involved in market regulation, I have never worked with a more knowledgeable, dedicated team. With deep knowledge and dedication to the NAIC’s Market Regulation Handbook, combined with our ‘out-of-the-box’ thinking, we identify critical findings often overlooked by others. I take immense pride in the work we do and the value we provide to our clients every day. 

Mark Ossi, CPA, CFE, AMCM, CFE (Fraud)

Director Financial Analysis

In my previous position as a state regulator, ER was one of our trusted contracting firms.  I felt like they were a strategic partner in the Department’s insurance regulatory oversight and was happy to have them be part of our team for the seventeen years I was employed at the Georgia Department.  In 2019, I joined the ER Team and have been even more impressed with ER’s professionalism, culture and commitment to assisting our client’s mission of regulatory oversight of the insurance industry with the goal of safeguarding policyholders.

We'd love to hear from you! Share what services you are interested in and how we can work together to achieve your goals.

12 + 4 =

We value your perspective. Share your thoughts, suggestions, or experiences with our team anytime at feedback@examresources.net.

CORPORATE HEADQUARTERS

20 10th Street NW, Suite 803
Atlanta, GA 30309-6197

Office: 404.816.6188
Fax: 404.816.6197

UTAH OFFICE

10619 S. Jordan Gateway, Suite 335
South Jordan, UT 84095

Office: 801.562.5748

VIRGINIA OFFICE

145 N. Main Street
Stuart, VA 24171

Office: 276.694.3806
Fax: 404.816.6197