Randy Romes

Principal
CliftonLarsonAllen, LLP

Randy is a Principal and founding member of the Cybersecurity Consulting team at CLA. Randy leads a team of technology and industry specialists providing IT audits and security assessments for clients in a wide range of industries and diverse operating environments and has provided independent security assessments and IT audits for higher education, financial institutions, health care and life sciences, non-profits, retail, and state and local government for over 25 years. He is responsible for the continuing development of the open-source, *nix, and Windows applications used in all the security audits, and he leads the firms PCI-QSA audit practice.

Randy has been an instructor of IT and Cybersecurity Risk Management at the CUNA Management School at the University of Wisconsin – Madison, the Graduate School of Banking at the University of Colorado in Boulder, ACUIA national and regional meetings, a variety of State Government Finance Officers Associations, numerous Leading Age national and state conferences, and the Minnesota Government IT Symposium. Randy is frequent speaker at national conferences and training events.

Randy has been a consultant at CLA for twenty-seven years and brings a strong background in computer technology, physics and education. He is a Certified Information Systems Security Professional (CISSP), a Certified in Risk and Information System Controls (CRISC) professional, a Certified Information Systems Auditor (CISA), a PCI-Qualified Security Assessor (PCI-QSA), and he has multiple Microsoft Certified Professional (MCP) certifications. He has a master’s degree in educational technology from the University of Saint Thomas, and a Bachelor of Science degree in education from the University of Wisconsin – Madison.