+ 0 Votes I would consider: robo_dev 5 years ago Some of the audit firms (e.g. PWC or Deloitte) could do a good job for you. Assuming that you already have some relationship with a firm for external audit, I would consider looking at what IT risk management services they may offer. If price is a concern, then consider both the big-guys like Deloitte and also the smaller firms like Jefferson Wells. In this economy there are some hungry consultants out there.... + 0 Votes Thanks JJFitz 5 years ago Thank you. I will look into your suggestions. You are correct about the recession "advantage".