Reviews and interprets information provided(including, but not limited toNIST, HITRUST, PCI, HIPAA, SOC, MAR, CMS, JCAHO reports) and assists with performing qualitative and quantitative impact assessments based on physical, technical, and administrative safeguards as well as contractual requirements; conducts additional information gathering and risk assessments with external points of contact, as-needed; documents and reports results. Assists with the review of inherent risk assessment results and the stratification of engagement risks, and assists with the development of assurance plans (e.g., on-site audit, contract review, financials assessment, purchasing data analysis) to address relevant risk areas and to ensure proper controls are implemented.