Thomas J. Loring, CISA
Partner, Wipfli Advisory LLC
As a partner in Wipfli’s risk advisory services practice, Thomas Loring performs a variety of functions in internal controls, information technology (IT) and information security. He performs technology auditing in all areas of IT-related controls, including IT department organization and administration, daily operations, software change management, logical security and physical security. Tom regularly performs System and Organization Controls (SOC) 1 and SOC 2 examinations, IT general control reviews, information risk assessments and consulting for clients in a wide variety of industries, including financial institutions, third-party data processors, statement printers, data centers and more.
Credentials
- Certified Information Systems Auditor (CISA)
- HITRUST Certified CSF Practitioner
Professional memberships and activities
- Information Systems Audit and Control Association (ISACA) - Member
Recent Insights
Articles
Don’t cut corners on your SOC audit. You’ll risk harming your business.
Mar 20, 2026
Understanding SOC exam exceptions and management letter comments
Feb 25, 2020
Areas of Focus
- SOC 1 and SOC 2 examinations
- Internal controls
- Information security
- Risk assessment
Education
University of Southern Maine - Portland, Maine- Master of business administration degree
- Bachelor of science degree in business administration with a concentration in accounting