The team carries out the repeatable work behind government organizations internal controls, OMB Circular A-123, audit-readiness, internal audit, enterprise risk, resilience, third-party risk and compliance programs, including controls monitoring and testing delivered as a managed service: process and control documentation, control testing, documentation (PBC) request and evidence management, deficiency and corrective action plan (CAP) tracking, third-party and vendor risk assessments (due diligence, questionnaire and evidence review, and ongoing monitoring), compliance assessments, resilience and continuity support, and recurring risk and compliance reporting. Exposure to OMB Circular A-123, the GAO Green Book, state internal control requirements, audit readiness, GRC platforms (e.g., Archer, Optro (formerly AuditBoard), ServiceNow) third-party risk management platforms (e.g., ServiceNow Vendor Risk Management, OneTrust, ProcessUnity) or vendor risk intelligence tools (e.g., BitSight, SecurityScorecard).