Johnson Lambert

Johnson Lambert is a nationally recognized public accounting and advisory firm with more than 40 years of experience delivering audit, tax, and consulting services to insurance entities, nonprofit organizations, and employee benefit plans. Johnson Lambert’s advisory professionals help organizations design, implement, and strengthen third-party risk management programs that address cybersecurity and operational risks arising from vendor and service provider relationships. The firm understands that reliance on third-party service providers does not reduce an organization’s ownership of its risks, and works with clients to ensure robust vendor governance is in place throughout the entire third party relationship.

As artificial intelligence becomes increasingly embedded in vendor operations, Johnson Lambert helps organizations assess the risks introduced by third-party AI systems — including model risk, data governance concerns, algorithmic bias, and regulatory compliance obligations under the NAIC Model Bulletin on AI, the NYDFS Circular on AI Systems, and the NIST AI Risk Management Framework (AI RMF).

Our teams are experienced to support clients across the full third party risk lifecycle, including:

• • Third Party Service Provider Assessments — vetting, onboarding, and continuous monitoring of vendor relationships
• • AI Risk Assessments and Governance — evaluating third-party AI systems for model risk, data integrity, algorithmic bias, and regulatory compliance
• • SOC Report Services — issuing and interpreting SOC 1, 2, 3, + and Cybersecurity SOC reports as part of vendor oversight programs
• • Cybersecurity Assessments — control evaluations aligned to NIST 800-171 and CSF 2.0
• • Enterprise Risk Management (ERM) — integrating vendor risk into enterprise-wide risk frameworks and board reporting

We tailor every engagement to your organization’s unique risk profile and industry obligations, ensuring full alignment with all applicable regulatory frameworks.