In order to achieve and maintain the certification, Grant Thornton demonstrated a systematic and ongoing approach to managing information security risks that affect the confidentiality, integrity, and availability of firm and client information within the IT environment.