Skip to main content

      Eric Rae is a partner in the Technology Risk Consulting group at KPMG LLP (Canada). He is highly experienced in Digital and Technology Assurance, Risk Services, Cybersecurity, Privacy, Blockchain, and emerging AI technologies. Eric has led numerous complex engagements covering a broad range of infrastructure, enterprise and security architecture, risk management, and attestation areas.

      Eric specializes in a broad range of KPMG services, including:

      • IT assurance, attestation, and audit services: IT control assurance and attestation (primarily CSAE 3000/1, SOC 1, SOC 2, and SOC 3), CSA STAR Level 2 attestation, lottery draw machine attestations, and IT audit support.
      • Cybersecurity, privacy, and compliance: Information security management systems (ISMS) and certification (ISO/IEC 27001/2, ITSG-33, NIST, NERC, etc.), privacy information management systems (PIMS) and certification (ISO/IEC 27701), cyber security design, maturity assessments, penetration testing, security operations, vulnerability management, supply chain security (SOC for Supply Chain), compliance management, Payment Card Industry Data Security Standard (PCI DSS) advisory support, and ethical AI risk management and attestation.
      • Technology governance, infrastructure, and cloud services: IT governance, cloud architecture implementation and assessment, identity and access management, IT infrastructure engagements (such as SIEM, IDS, and IAM), and policies and procedures.
      • Business resilience and continuity: IT business continuity and disaster recovery.
        Emerging technologies and innovation: Blockchain design and development, and financial audit support and decentralized finance (DeFi) considerations.
      1. Education and qualifications
        • Bachelor of Technology, Computer Systems: British Columbia Institute of Technology
      1. Areas of expertise
        • IT assurance, attestation, and audit services
        • Cybersecurity, privacy, and compliance
        • Technology governance, infrastructure, and cloud services
        • Business resilience and continuity
      2. Education and qualifications
        • Bachelor of Technology, Computer Systems: British Columbia Institute of Technology
      3. Accreditations
        • Certified Internal Auditor (CIA): Institute of Internal Auditors (IIA)
        • Certification in Risk Management Assurance (CRMA): Institute of Internal Auditors (IIA)
        • Certified Information Systems Security Professional (CISSP): International Information Systems Security Certification Consortium (ISC)2
        • Certified Information Security Manager (CISM): Information Systems Audit and Control Association (ISACA)
        • Certified Data Privacy Solutions Engineer (CDPSE): Information Systems Audit and Control Association (ISACA)