Christopher Ellingwood

Principal | CISA, COBIT 5

cellingwood@berrydunn.com

Chris leads our IT assurance team in engagements of state lotteries, pari-mutuel industry, financial institutions, insurance companies, technology companies, and third-party administrators. Chris oversees all of the firm’s engagements within the gaming industry including SOC audits, security assessments, and risk assessments.

Chris is a Principal in BerryDunn’s Commercial Practice Group. He works closely with staff and clients to supervise SOC engagements. He also specializes in IT assurance services, technology planning, and software development life cycle consulting. As a member of BerryDunn's Recovery Advisory Team, he is guiding his clients through the COVID-19 outbreak.

D 207.541.2290

experience education & certifications industries services presentations & publications memberships community service events insights

Prior to joining the Management Consulting team, Chris worked in BerryDunn’s Financial Services Group conducting financial statement audits and employee benefit audits in the healthcare, banking, and commercial industries.

Chris is also an Adjunct Professor at Champlain College in Burlington, VT. He teaches online courses in Accounting Information Systems for Champlain’s Continuing Professional Studies Program.

Experience highlights

Chris helps clients with a variety of issues including:

SOC 1 (SSAE 18), SOC 2, SOC 3
SOC readiness assessments
Risk assessments
Compliance reviews
Sarbanes-Oxley (SOX) 404
IT reviews and audits
IT consulting and security
IT support for financial audits
Software change management
Internal controls

Publications and Presentations

The 2018 Top IT Security Risks
SSAE 16, presented to North American Association of State and Provincial Lotteries subcommittee on Accounting and Finance

Articles

Artificial intelligence (AI) trends, potential, and considerations for healthcare organizations

Senior living cybersecurity and scams—it's time to start educating your residents

Navigating changes to the SOC 2 guide

Beyond weathering the storm: How the gaming industry can succeed during economically challenging times

Board oversight of cybersecurity: Questions to ask

Yes, you need a SOC for cybersecurity report—here's why

Cyberattack preparation: A basics refresher

Cybersecurity update for organizations: Considerations for boards and senior management

Five IT risks everyone should be aware of

The SOC 2 update — how will it affect you?

The 2017 top IT security risks: Everything is connected

When the skies clear: Web-hosting outage hits Amazon data centers

Memberships and Committees

Information Systems Audit and Control Association, Member

Community Service:

DREAM (Direction through Recreation, Education, Adventure and Mentoring), Alumni Board Officer, Constitution Keeper

Related Services

Accounting and Assurance

FDICIA and SOX 404 Compliance Financial Statement Audits Internal Controls Review IT Controls Review

Reviews and Compilations SEC Audits, Reports and Filings Overview SOC Audits SOC Audits for Gaming and Lotteries

Consulting

Business Advisory

Audit Readiness Benchmarking for Colleges and Universities

Information Security

Policy and Procedure Development Overview Security Compliance, Risk and Gap Assessment Overview Security Program Development Overview Vulnerability Scanning and Penetration Testing Overview