About Robert
“Our clients sleep better when their operations are safer, more efficient, and in compliance. When that’s the case, their whole business runs with more confidence.”
Robert leads our Risk Management practice, offering System and Organization Controls (SOC) and data security services, and his deep experience in technology consulting and audit services helps organizations of various sizes across multiple industries strengthen their internal controls and provide peace of mind to their customers and prospects. Before joining Barnes Dennig, he managed an Information Systems Risk Management practice for PWC.
In addition to being a CPA, Robert has earned the designation of Certified Information Systems Auditor (CISA) and Certified Information Technology Professional (CITP). He has extensive experience helping enterprises manage risk through technology audits and service & organization controls (SOC) reporting.
In 2025 and 2026, Robert was named to Forbes’ Best-in-State CPAs List, alongside eight other standout directors from Barnes Dennig who have all made a strong positive impact on the profession and our community.
He is an AICPA peer review program SOC Specialist, one of the first professionals in Ohio to earn the designation, which enables him to work as a quality control inspector for other CPA firms and the AICPA.
Robert is passionate about and deeply respected in the SOC reporting and information security field. His expertise includes PCI, HIPAA, HITRUST, SOC, and GDPR compliance: in addition to being an instructor for the AICPA’s SOC School, where he trains other organizations on key aspects of planning, executing, and reporting on SOC for service organizations. He also drafted the first HMIS attestation guide. A regular contributor to Barnes Dennig’s Ask the Experts SOC Reporting video series, he helps companies understand the ins and outs of SOC reporting, including what they need to get started, the power of readiness assessments, and the different types of SOC reporting.
With his wide range of expertise in the space, Robert has helped improve information systems for large-scale public companies like Apple and small local non-profits using QuickBooks.
Robert graduated in 1992 with Distinction from Indiana University, earning a B.S. in Accounting and a concentration in Sociology. He is a frequent presenter for the AICPA and ISACA, and has served on many local boards of directors, including formerly serving as president of the Cincinnati and Atlanta chapters of ISACA. He’s also participated in the HITRUST Academy. In 2026, Kennedy Heights Arts Center honored him with the Kennedy Award for his leadership as Board Treasurer (especially during COVID), financial stewardship, and commitment to helping the arts organization grow and thrive.
When he’s not helping clients develop greater peace of mind by identifying and mitigating risks, he loves traveling with family and friends. When he’s not doing that, he tries to be mindful not to overshare his excitement for his local soccer team, pickleball, latest read, or new favorite podcast (his current top picks include The Happiness Lab, Total Soccer Show , and Smartless).
Membership
Speaking Engagements
Payroll Data, AI, and Risk: Why SOC Reporting Matters
Who Audits the Auditors? Why Peer Review Matters for SOC Reporting
AI and Your SOC Report | What You Need to Know Now
What Type SOC Report Do You Need?
SOC Reporting Basics | What Do You Need to Get Started?
SOC Reporting Readiness Assessment & Gap Analysis
SOC 2+ Reports | What They Are and How They Work
Working with Barnes Dennig’s SOC Reporting Team
SOC Reporting for PE-Owned Companies
SOC Reporting for Data Centers
Cybersecurity Careers | SOC Reporting
SOC 3 Reports | What They Are and How to Use Them
Barnes Dennig Ask the Experts Series | SOC Reporting
SOC Readiness Assessments – Barnes Dennig Ask the Experts
DIY SOC Reporting #2 | Description Criteria
DIY SOC Reporting #3 | Sub-Service Organizations
DIY SOC #4 – Which Type of SOC Report Is Right for You?
DIY SOC Reporting #5 | Section 5 of the SOC Report
DIY SOC #6 | SOC Reporting Security Criteria
Can SOC Audits Be Conducted Remotely?
How SSAE 21 Impacts Your SOC Report
Let’s Talk Technology for ESG Measurement
Cybersecurity: How to Protect Your Non-Profit and Donors
Cybersecurity for Non-Profits – Tools, Strategies & Resources
SOC Reports – 3 Things You Need to Know – Ohio CPA Firm
SOC 2 and SOC Plus | Ask the Experts | Barnes Dennig
SOC Reporting Careers – Unlocking the Power of Certifications
HECVAT – What It Is and Why It Matters
The Risk of Ransomware – And How to Fight Back
Navigating Risk: A Panel Discussion
How GDPR Changes the Way You Do Business in the EU
Barnes Dennig at Pondurance Winter 2018 Quarterly Security Briefing
