Karsten Thomas
Partner, IT & Controls Assurance
IT & Controls Assurance
AI Advisory
Executive summary
Consulting focus/specialization
- Audit and Advisory regarding IT Systems, IT Processes and Business Processes in ERP-Systems, Internal Control Systems (ICS)
- Audit and Advisory regarding IT Governance, IT Compliance, IT Risk Management
- Regulatory Assurance regarding DDPR, DORA (Digital Operational Resilience Act), EU AI Act
- Digital sovereignty
- GoBD-Compliance
- Data privacy
- Information Security Management
- Auditing of AI systems and AI governance processes
- Data analytics
- Certified Information Systems Auditor (CISA)
- Certified in Risk and Information Systems Control (CRISC)
- Certified Data Privacy Solutions Engineer (CDPSE)
- ISO 27001 Auditor
Engagement
- Member of working group „Technologization in Statutory Audits“ at Institut der Wirtschaftsprüfer in Deutschland e.V. (IDW)
- Member of working group „DORA Audits“ at Institut der Wirtschaftsprüfer in Deutschland e.V. (IDW)
- Member of working group „Audit of Artificial Intelligence (AI)“ at Institut der Wirtschaftsprüfer in Deutschland e.V. (IDW)
- Member ISACA (Information Systems Audit and Control Association)