Anurag Sharma is a Partner at Withum with over 19 years of experience and is the Market Leader of Withum’s Risk Advisory and Assurance Services practice.
His areas of expertise include Cybersecurity Assessments (NIST Cybersecurity Framework), SOC Suite of Services (SOC 1, SOC 2 and SOC for Cybersecurity), Corporate Governance, Sarbanes-Oxley Section 404 compliance, and ISO/IEC 27001 Consulting.
Anurag helps lead the Firm’s System and Organization Controls (SOC) practice based out of the Princeton, NJ office. He is a regular speaker on Cybersecurity and SOC-related topics at many State CPA Societies, including NJCPA, PICPA, CTCPA, FICPA, the AICPA and other organizations.
Anurag has authored many articles dealing with Cybersecurity challenges faced by small and medium businesses (SMB) and has been frequently quoted in NJBIZ, Boston Business Journal and PEI Private Fund Management Magazine. He is also designated as a SOC 1, SOC 2 and SOC for Cybersecurity specialist by the Oversight Task Force of the AICPA Peer Review Board.
Learn more about my professional experience and how I spend my time outside the firm.
Education:
Professional Affiliations:
Share What is a SOC 1 Certification? Unlike ISO 27001, SOC1 is not a certification but is a type of audit report issued by a Certified Public Accounting (CPA). SOC (System and Organization Controls) audits are Internal Control Audit engagements that are performed for Service Organizations (organizations that provide certain functions for other entities on…
Share What is the Difference Between SSAE 18 and Soc 1? Is there a difference? How do these two compare? SSAE 18 is the auditing standard applicable for both SOC 1 and SOC 2 reports. SOC (System and Organization Controls) audits are Internal Control Audit engagements that are performed for Service Organizations (organizations that provide…
Share As you may have heard, the AICPA’s Assurance Services Executive Committee (ASEC) released the Guide – Reporting on an Entity’s Cybersecurity Risk Management Program and Controls on May 1, 2017. Since this is a relatively new type of SOC audit, we thought we’d provide some clarity into the frequently asked questions we get around…