Technology Risk

EY Technology Risk Assurance services build trust in technology, controls and systems implementations; improve audit quality; and help organizations manage the complexities of the changing risk landscape.

As companies accelerate the adoption of technology across their business, understanding the risks arising from the implementation and use of advanced technologies is increasingly important to maintaining the reliability of processes and internal controls related to data integrity, security and privacy.

EY Assurance Technology Risk professionals identify, assess and help companies mitigate risks related to technology and automation in supporting audits of financial statements, internal controls over financial reporting, system and organization controls (SOC) reporting, and other attestation and certification services.

These technology assurance services enable organizations to navigate technological complexities with confidence, balance innovation with risk and make informed decisions that promote trust in the capital markets and the broader economy.

Featured thinking

How organizations are turning risk into resilience

Daryl Box, Jim Okas 14 Oct 2025

How EY can help

One man standing on the edge of a cliff at sunrise, Madeira

Featured

How to build trust and confidence in technology through assurance reporting

Assurance services

Assurance teams serve the public interest by promoting trust and confidence in business and the capital markets.

Read more

Our latest thinking

Building trust through assurance in an AI-driven world

AI demands new services for assurance. Trust in AI requires frameworks for validation of data sources and to provide transparency in AI decision-making.

Richard Jackson + 1

How boards can enhance technology oversight to unlock potential

Learn how corporate boards can enhance technology oversight

Lee Henderson + 2

Unlocking the potential of agentic AI: definitions, risks and guardrails

Explore agentic AI’s potential, how it differs from traditional systems, and why strong governance is key to managing its unique risks and capabilities.

Yvonne Zhu + 1

How AI assessments can enhance confidence in AI

Well-designed AI assessments can help evaluate whether investments in the technology meet business and society’s expectations. Read more.

Anne McCormick + 1

How responsible AI can unlock your competitive edge

Discover how closing the AI confidence gap can boost adoption and create competitive edge. Explore three key actions for responsible AI leadership.

Sinclair Schuller

Why cyber risk management matters for financial resilience

By embedding cyber risk management into financial planning, CFOs can enhance their organization’s cyber resilience. Read more.

Tunde Lawson + 1

Cyber and AI oversight disclosures: what companies shared in 2025

Find out what Fortune 100 companies disclosed in 2025 about cyber and AI oversight.

Pat Niemann

Technology assurance: assess risk, build trust and create resilience

Three actions to build confidence, transparency and resiliency while managing technology risk now and into the future. Read more.

Daryl Box + 2

Transforming compliance with advanced strategies and technologies

Learn how multinationals are approaching compliance challenges and driving advancements. Read the 2024 Global Integrity Report – US edition.

Liban Jama + 1

Strategic AI integration, governance and risk in finance

Businesses are preparing to incorporate AI into the finance function and anticipating how to manage risks. Read more.

Natalie Deak Jaros

How boards can embrace and oversee AI with curiosity and care

Lessons from the 2024 EY Board Strategy Summit: Board oversight of AI from

Dan Clifford

Why technology implementations call for proactive risk assessments

Technology risk management practices help identify, address and mitigate IT risks. Learn more.

Edward Campbell

The team

Daryl Box

EY Americas Assurance Technology Risk Leader

Driven leader. Champion of quality. Mentor. Husband and father.

Houston, TX, United States

Jim Okas

EY Americas Deputy Technology Risk Leader

Growth-oriented leader. Prioritizes quality and collaboration. Dedicated relationship builder. Mentor. Advocate for diversity. Devoted father and husband.

Iselin, NJ, United States

Brandon Miller

EY Global and Americas Technology Risk System and Organization Controls, Attestation and Certification Leader

Experienced, growth-minded leader. Helps clients establish and communicate trust in their processes, controls and operations. Mentor. Husband and father of two sons.

Des Moines, IA, United States

John McLain

EY Americas Technology Risk AI Leader and EY Americas Assurance AI Deputy Leader

Committed to providing actionable strategies and tangible outcomes. Avid outdoorsman. Ski enthusiast. Cherish moments with my wife, three sons and our dogs.

McLean, VA, United States

Jaime Kipnes

EY Global and Americas Technology Risk Cybersecurity Assurance Leader

Passionate leader focused on cybersecurity risk management where audit, technology and compliance intersect. Recognized diversity champion, coach and mentor. Proud mom.

New York, NY, United States

Edward Campbell

EY Americas Technology Risk Expanded Assurance Leader

Experienced IT risk professional. Avid traveler. Enjoys skiing in the winter and summers at the beach.

San Francisco, CA, United States

Stephanie Green

EY Americas Technology Risk IT Quality Leader

Accomplished technology risk professional. Champion of cross-functional collaboration. Navigator of complex technology challenges.

Houston, TX, United States

On the agenda (5)

Skip

west

CFO Agenda

Featured: How can CFOs uncover the material among the immaterial

EY Center for Board Matters

Featured: What audit committees are reporting to shareholders

Public policy

Featured: Seven key issues from President Trump’s first 100 days and what’s next

AccountingLink

AccountingLink

ESG Reporting

Featured: What remains in the wreckage of the Climate Disclosure Rule

east

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.