Financial Performance improvement and Service Organizations Internal Controls (SOC Suites)
Accounting Systems (ISO 17065)
EVMS – EVMS
Approved Cost Estimating System – Approved Cost Estimating System
DCAA Approved Accounting System – DCAA Approved Accounting System
DCMA Approved Purchasing System (Readiness Review only) – DCMA Approved Purchasing System (Readiness Review only)
Contract Financial Performance Improvement Program (IPMDAR) – Contract Financial Performance Improvement Program (IPMDAR)
Technology/Service Performance improvement with Internal Controls
Risk management System ISO 31000 (ISO 17065)
IT Service Delivery – IT services are delivered through multiple standards such as ISO and CMMI. Major components in both are processes such as: Requirement Development and management, Customer need analysis, Project Planning, Project Monitoring and Control, Project Quality Audits, Configuration Audits, Internal Audits, Corrective Actions and Management Review plus a few others.
Information Security Services – CMMC Interim Plan compliant to NIST 800-171 Processes to protect CUI data for DOD CMMC
E-Governance (LA-Tech Transfer Services Delivery) – Statutory and Regulatory Compliance Services Delivery. Statutory requirements are mandated by Federal Government rules such as taxes,
E-Contracts Services Delivery (LA-Tech Transfer Services Delivery) – E-Contract Services pertain to the Business-related agreements between the Organization and external parties including Government Agencies, Customers and Subcontractors, Outsourced Service providers and Suppliers of hardware and software and other services.
Food Safety (Farmer to Family) Delivery Services: FOOD-Tech Transfer Food safety issues start from the Farmer with Fertilizers used in the agricultural arena and span all over the processing stages (Butcher shops, Processing centers and Packaging centers) and ends up on the dinner table through refrigerators at the family level or at the restaurants table served by the servers and their Storage, Cooking and Serving, and Cleaning practices and environmental cleanliness.
ENERGY-Tech Transfer – Energy Technology Starts from Energy source including Fossil fuels and other alternate resources such as wind, solar, Hydroelectric, and nuclear power plants, including Cogeneration, Energy Generation Centers. Energy Storage and Transmission Infrastructure, Energy Transformers at the distribution level and end up in the end user level both Residential and Institutional customers. Energy consumptions extend from User Practices at the comfort level, Appliance Usage practices, Child Safety regulations and Conservation Practices power metering practices
MED-Tech Transfer – Medical Technology service start from the Manufacture of medical devices and medical supplies including Bandages to the supply side and all the way to the Giant Medical device manufacturers, users (Patients) and the family members at the home care environment. Medical technology spans all the way from Hospitals, Clinics, Emergency clinics, doctors’ offices and medical camps operating under hazardous environmental conditions. Medical technology also touches personnel at all levels from Top at Doctors level to medical practitioners, maintenance crew and cleaning staff. Medical industry is highly regulated through FDA and Public safety organizations, Volunteer network in the hospitals and healthcare centers. Product recalls is a major issue in the Medical Technology area. Highly structured Third Party auditing is expected to grow in that area of Product recall at the Manufacturers level.
HR-Tech Transfer – HR Management starts from the personnel qualifications, training and Competency requirements to fill the employment position either as an employee on W2 or 1099 as an independent consultant. Personnel health and medical status and Insurance coverage and family insurance and health benefits matter in the HR Management sector. Personnel visa status, Security Clearance requirements and employee employment authorization from the Government affects the HR Management conditions. Employee past performance history, Work experience in the specific job performance matter. Hiring and firing rules impact the HR management including paid vacations are important factors. Job offers and periodic employment Review facilitates the effective HR Management function.
Emerging Technology/Service Performance improvement with Internal Control
Current Emerging Technologies
ET-1 Advanced and Quantum Computing – Advanced computing refers to technical capabilities that support compute and data intensive modeling and simulation. This includes the use of quantum mechanics and information theory to enable faster speeds, better precision, and optimum functionality.
ET-2: Artificial Intelligence – Artificial intelligence (AI), also known as machine intelligence, is a branch of computer science that aims to imbue software with the ability to analyze its environment using either predetermined rules and search algorithms, or pattern recognizing machine learning models, and then make decisions based on those analyses.
ET-3: Automation Technology – Automation is the creation and application of technologies to produce and deliver goods and services with minimal human intervention. The implementation of automation technologies, techniques and processes improve the efficiency, reliability, and/or speed of many tasks that were previously performed by humans.
ET-4: Distributed Ledger Technology – Distributed Ledger Technology (DLT) is a type of ledger that is shared, replicated, and synchronized in a distributed and decentralized manner. DLT can be used to decentralize and automate processes in a large number of sectors. The attributes of a distributed ledger technology allow for large numbers of entities or nodes, whether collaborators or competitors, to come to consensus on information and immutably store it.
ET-5: Edge Computing – Edge Computing brings computation and data storage relying on a central location that can be thousands of miles away. This is done so that data, especially real-time data, does not suffer latency issues that can affect an application’s performance. Processing is done locally, reducing the amount of data that needs to be processed in a centralized or cloud-based location.
ET-6: Immersive Technology – Immersive technology refers to technology that attempts to emulate a physical world through the means of a digital or simulated world by creating a surrounding sensory feeling, thereby creating a sense of immersion.
ET 7: Composite Process Group – A combination of selected group of processes based on the Affinity of Usage.
Service Organizations Performance Improvement with Internal Controls
Service Organizational Internal Controls Categories (SOC Suite)
SOC 1 – SOC 1 Report describes what’s going to be in SOC 2 Report. SOC 1 structure is based on Description Criteria and Practice examples for each Description criteria as shown below. Reference the Process Development Implementation plan TEXT) in WORD (PIID Table)
SOC 2 – SOC 2 Extends beyond the structure illustrated in SOC 1 Following items are covered under TRUST Services Criteria: Please refer the SOC 2 PIID in ISO 17065 Process Development and Implementation Plan TEXT in WORD (PIID Table)
SOC for Cybersecurity – SOC for Cyber Security Incorporates SOC 2 Principles with Cybersecurity processes to integrate the application for SOC for Cybersecurity Model. Please refer PIID in ISO 17065 Process Development and Implementation Plan TEXT in WORD (PIID Table)
SOC for Supply Chain – SOC for Supply Chain is the integration of SOC2 With ISO 28000 RISK Management System. Please refer the PIID in ISO 17065 Process Development and Implementation Plan TEXT in WORD (PIID Table)
Hybrid SOC with ISO 27000 and ISO 27701 – SOC2 Based on ISO 27001
Hybrid SOC with IPMDAR – SOC2 Based on IPMDAR