Karsten Thomas

Specialization

• Audit and Advisory regarding IT Systems, IT Processes and Business Processes in ERP-Systems, Internal Control Systems (ICS)
• Audit and Advisory regarding IT Governance, IT Compliance, IT Risk Management
• Regulatory Assurance regarding VAIT/BAIT/KAIT/ZAIT, DORA (Digital Operational Resilience Act)
• GoBD-Compliance
• Data privacy
• Information Security Management
• Audit of (and with) Artificial Intelligence
• Data analytics
• Certified Information Systems Auditor (CISA)
• Certified in Risk and Information Systems Control (CRISC)
• Certified Data Privacy Solutions Engineer (CDPSE)
• ISO 27001 Auditor

Special

• Member of working group „Technologization in Statutory Audits“ at Institut der Wirtschaftsprüfer in Deutschland e.V. (IDW)
• Member of working group „IT Audit of Insurance Companies“ at Institut der Wirtschaftsprüfer in Deutschland e.V. (IDW)
• Member of working group „Audit of Artificial Intelligence (AI)“ at Institut der Wirtschaftsprüfer in Deutschland e.V. (IDW)
• Member ISACA (Information Systems Audit and Control Association)