"Being accountable and reliable to my team and my client to provide quality service is a principle I live by."
Brian Lok has been with MSECB since 2022 and has conducted numerous audits for ISO/IEC 27001:2022.
He is a highly skilled professional with extensive experience, a strong educational background, and a passion for auditing.
His auditing expertise and dedication make him an invaluable asset in any organization, contributing to its success and growth.
We are honored to have him as part of MS Auditor’s Network!
MSECB Auditor for ISO/IEC 27001:2022.
About Brian Lok
Brian Lok is an Assurance Manager with BDO USA and has 7+ years of IT audit and advisory experience. Mr. Lok has a Bachelor of Accounting, and a Master of Professional Accounting with an emphasis in Internal Audit and Data Analytics. In addition, he has been involved in more than 100 engagements (SOC, SOC Readiness, ISO, SOX, SOX Advisory, etc.).
Brian Lok worked with large public companies, as well as start-up and mid-size companies in a variety of industries, including technology, financial services, retail and governmental organizations. His experience includes ISO certification services; pre and post-system implementation audit, SOC 1/2/3 pre-assessment/examination, BSI C5, and Internal Audit.
His professional designations:
- Certified Information Systems Auditor (CISA)
- Certified ISO/IEC 27001 Lead Auditor
Brian's experience in auditing
My favorite part of being an auditor has always been seeing my clients satisfied with our services provided and watching them come back time after time for the high-quality services they are looking for and expecting us to deliver each time.
Completing an audit of high quality and satisfying the clients is a team effort. Thus, I believe in sharing my experience and knowledge with my team to grow together personally and professionally to ensure no one is left behind.
The challenges I have encountered in being an auditor are staying relevant to the latest technologies and understanding how various organizations apply the technologies to strengthen their control environment. The rapid changes in technology industries and complex architectures may result in new security risks, and it is important to have a great understanding to apply the audit methodology to provide assurance for our clients and become their trusted advisors.
Looking ahead to the future, understanding how evolving technologies will impact the security posture and identifying the mitigation strategy to protect various types of data provides an exciting opportunity for us to further help our client navigate the complex environment to minimize the risk posture.
Brian's experience with MSECB
BDO serves its clients by partnering up with MSECB to leverage its platform and signing authoring. It has been a pleasure to work with MSECB in providing various ISO services to our clients. MSECB has been working diligently with BDO to meet any client deadlines to provide quality services. Other auditors and clients should know that MSECB is always there to support and answer any questions.
Build endless connections and professional networks by joining our team of over 500 MSECB Auditors.
We welcome you on board!