Services
Activity
2K followers
-
Jason Lam, CPA, CISSP, CISA reposted thisJason Lam, CPA, CISSP, CISA reposted thisA major milestone for the CPA profession is here. On August 1, 2026, Texas' new CPA licensure pathway becomes effective. The new pathway to licensure, SB 262 was passed unanimously by the Texas Legislature in 2025. Thanks to this landmark legislation, Texas became one of the first states to expand pathways to CPA licensure—helping strengthen the profession and address the CPA pipeline. The new pathway allows CPA candidates to earn licensure by completing a bachelor's degree with the required accounting and business coursework, completing two years of qualifying work experience and passing the Uniform CPA Examination. This is a significant advocacy win for TXCPA. Thank you to Senator Charles Perry and Representative Angie Chen Button for championing this legislation, and to the Texas State Board of Public Accountancy for its work implementing the new pathway rules. Read More: https://bit.ly/3bWkMx6
-
Jason Lam, CPA, CISSP, CISA shared thisSchellman has been awarded accreditation from ANAB - ANSI National Accreditation Board to perform audits and issue certifications against ISO 45001:2018! ISO 45001 is the international standard for Occupational Health and Safety Management Systems (OHSMS). It gives organizations a structured framework to manage workplace risks and continually improve health and safety performance. The standard sets criteria across the full management system lifecycle — policy, objectives, planning, implementation, operation, auditing, and review. Key elements include: - Leadership commitment - Worker participation - Hazard identification and risk assessment - Legal and regulatory compliance - Emergency planning - Incident investigation - Continual improvement Feel free to reach out if you have any questions!
-
Jason Lam, CPA, CISSP, CISA shared thisPlease take this opportunity to read our first 2026 State of AI Governance report to benchmark your AI governance program program against enterprise best practices: https://lnkd.in/gsiCgQrHJason Lam, CPA, CISSP, CISA shared thisToday we launched our 2026 State of AI Governance Report 📣 It reveals a striking disconnect: 74% of enterprise leaders say they could pass an AI compliance audit today, yet only 27% say their AI governance is fully mature. Based on a survey of 525 U.S. enterprise leaders, the report explores where confidence and maturity diverge across funding, agentic AI oversight, accountability, regulatory readiness, and business impact. These findings reinforce why strong governance matters. As the first ANAB-accredited ISO 42001 certification body and the first authorized AIUC-1 auditor, Schellman is helping organizations build AI governance programs that inspire trust. Read the full report: https://hubs.ly/Q04r1qDq0
-
Jason Lam, CPA, CISSP, CISA reposted thisJason Lam, CPA, CISSP, CISA reposted this🎉 📢 The ISO/IEC 27017:2026 standard has been formally published!! 📢 🎉 The second edition of ISO/IEC 27017 has cleared its final approval stages and has been published as of today, officially replacing the 2015 version. What this could mean for you: 1) There is no formal transition window for organizations currently aligned to ISO/IEC 27017:2015 — timing will depend on your customer and business needs. This transition plan is consistent with the transition plan when the ISO 27018 standard was updated in 2025. 2) Any organization pursuing ISO 27017 for the first time will need to align to the 2026 version. Fun fact: The ISO 27017:2015 standard no longer exists on the ISO website (https://lnkd.in/ehmsMts3). Schellman will have more details in our upcoming blogs and emails regarding the difference between the two versions, the impact on this change and next steps, etc. — stay connected to be informed! #ISO27017 #CloudSecurity #InfoSec #Compliance
-
Jason Lam, CPA, CISSP, CISA shared thisLooking to pursue ISO 42001 certification and having trouble figuring what role you operate in your management system? Feel free to read this blog going through all the definitions and nuances! Author - Matthew GierlJason Lam, CPA, CISSP, CISA shared thisISO/IEC 42001 follows a familiar management system framework, but one requirement sets it apart. Before implementing an Artificial Intelligence Management System (AIMS), organizations must formally define their role in relation to the AI systems within scope. That distinction shapes everything from your responsibilities and documentation to the controls you implement and what auditors expect to see. Learn more about role awareness, Annex A's 38 controls, and key certification considerations in our recent blog: https://lnkd.in/gAkbN6AN
-
Jason Lam, CPA, CISSP, CISA reposted thisSchellman’s sustainability practice is hiring! My team is looking for a candidate well versed in the sustainability + GHG emissions reporting space with a technical data analytics skillset - developing and implementing Python-based data models/apps and fundamental SQL knowledge. Job posting and application link is here: https://lnkd.in/eqSTNkH7 We are a fully remote workplace. Feel free to reach out with any questions.
-
Jason Lam, CPA, CISSP, CISA reposted thisJason Lam, CPA, CISSP, CISA reposted this‼️Schellman's privacy team is hiring! If you are looking for a job in privacy that will keep you on your toes, this is it. We cover a variety of frameworks, standards and certifications with our clients on a daily basis and we never see the same thing twice. Working with family run organizations all the way up to the top Fortune 500 companies, we analyze and help add value to companies of all shapes and sizes. From those just starting their information security/privacy/AI journey, to those that are well established. With privacy regulations and expected data protection practices in the spotlight across the globe, now is the perfect time to join the team. For more information, check out the posting below. Feel free to message me for more info as well! https://lnkd.in/eH85Brkf
-
Jason Lam, CPA, CISSP, CISA reposted thisJason Lam, CPA, CISSP, CISA reposted thisEveryone is asking the same question today: "Is CMMC dead?" The short answer is no. What happened is a pause on Phase II implementation while the Department of War reviews how CMMC is rolled out. What didn't change? -NIST SP 800-171 requirements -DFARS cybersecurity obligations -Prime contractor expectations -The need to protect federal data The next 60 days will shape how CMMC evolves, but organizations shouldn't confuse a policy pause with a security pause. We'll continue tracking the changes and helping organizations navigate what comes next. Questions: read the blog below by Doug Barbin and Marci Womack https://lnkd.in/g9En2PXt
-
Jason Lam, CPA, CISSP, CISA shared thisA lot of time and effort went into this achievement. Congratulations on achieving ISO 42001 certification! HCLTech x SchellmanJason Lam, CPA, CISSP, CISA shared thisI am thrilled to share a massive milestone for HCLTech and its AI-related projects & portfolio. We have officially achieved the ISO/IEC 42001:2023 certification for our Enterprise Artificial Intelligence Management System (AIMS). Achieving this certification was directly predicated on the support and strategic vision of our executive leadership and management teams. Their top-down commitment, championed by our AI Governance Committee consisting of members from our executive team and supported by our AI Ethics Committee, gave us the mandate and momentum to govern our AI systems at scale. This mandate empowered the project team to collaborate closely with our AI system owners and tech leads, alongside critical cross-functional teams including Enterprise Architecture, Legal, Privacy, Data Governance, Tech Risk, IP, Cyber, IT/Cloud, Regulations, and the Office of Responsible AI and Governance (ORAIG). Together, we architected a framework with repeatable processes that ensure consistency for how responsible AI is governed across our enterprise, satisfying global regulations without slowing down innovation. The end result provides a Responsible AI blueprint for our enterprise AI systems, instilling confidence in both our users and our clients. A huge thank you to our leadership, our product and engineering leads, and the auditors at Schellman for driving this vision across the finish line. Read the official announcement here: https://lnkd.in/gyb_CiRt #ResponsibleAI #ISO42001 #AIMS #AIForce #AIGovernance #HCLTech #InnovationWithTrust #CrossFunctionalLeadership #ExecutiveLeadership #PMI #ProjectManagement #Schellman #CorporateGovernanceHCLTech achieves ISO/IEC 42001:2023 Certification demonstrating leadership in Responsible AIHCLTech achieves ISO/IEC 42001:2023 Certification demonstrating leadership in Responsible AI
Jason Lam, CPA, CISSP, CISA commented on a post
3w
Congrats brother!
Jason Lam, CPA, CISSP, CISA replied to a comment
1mo
Colin Theseira, - it was a great experience to work with you and the team. Congrats again!
-
Jason Lam, CPA, CISSP, CISA liked thisJason Lam, CPA, CISSP, CISA liked thisCoding agents are the closest thing we have to AGI. Developers should expect independently verified behavioral results before granting (often loosely restricted) access to their repos and dev environments. Cursor certified against AIUC-1 to do just that. MCP connections, secrets, repo instructions, permissions and dependency policies pose new risks which have been for the first time tested, quantified and certified by Schellman using the AIUC-1 framework. Congratulations to Kenneth Thomas Moras and the whole Cursor team!
-
Jason Lam, CPA, CISSP, CISA liked thisJason Lam, CPA, CISSP, CISA liked thisResponsible AI has quickly become a business imperative, but there's still no universal definition of what it looks like in practice. Schellman is excited to be a part of the proposed panel “The Responsible AI Reality Check” for SXSW 2027. The panel would bring together leaders from OneTrust, Treefera, Safe Security, and our very own Danny Manimbo to discuss how organizations can move beyond high-level principles and build AI governance programs grounded in privacy, transparency, sustainability, and accountability. If you'd like to see this conversation at SXSW, follow the link below or search for "The Responsible AI Reality Check" or "Schellman" in the SXSW PanelPicker and click the ❤️. Voting is open through August 23: https://lnkd.in/gQxPcDGz
-
Jason Lam, CPA, CISSP, CISA liked thisJason Lam, CPA, CISSP, CISA liked thisThe gap between user intent and agentic action is growing rapidly. The only way to know whether the guardrails hold is to test them. Today, Cursor announced AIUC-1 certification, audited by Schellman. It passed comprehensive technical testing and demonstrated compliance with all required AIUC-1 controls. To earn certification, coding agents must demonstrate: 1. Secure defaults - the agent opts for the secure path when a user gives it an underspecified request like building a login form or writing a DB schema 2. Runtime guardrails - sandboxed execution for agent-run code and prompt-injection scanning of artefacts like hooks and skills 3. Robust secrets management - recognizing credentials, keeping them out of code, and storing them securely Read more about AIUC-1’s Q3-2026 update to cover coding-agent specific risks: https://lnkd.in/gRXDn2xB
-
Jason Lam, CPA, CISSP, CISA liked thisJason Lam, CPA, CISSP, CISA liked thisCursor is now AIUC-1 certified. Cursor is the world's most popular coding agent. They’re joining category leaders like Harvey, ElevenLabs, Fin, Lovable, UiPath, ada CX who have earned AIUC-1 certification. Audited by Schellman. AIUC-1 covers controls specific to coding agents: ⋅ Secure defaults in code outputs ⋅ Robust runtime guardrails ⋅ Safeguards against secrets leakage Congrats Michael T. & team!
-
Jason Lam, CPA, CISSP, CISA liked thisJason Lam, CPA, CISSP, CISA liked this70% of the Fortune 500 use Cursor. Their AI agents read code, run commands, and open pull requests, often with access to systems companies care most about protecting. That's why Cursor pursued AIUC-1 certification, and we're proud to have audited the organization behind it. Our team validated Cursor's AI governance practices: data retention, Privacy Mode enforcement, and vendor governance. AIUC-1's evaluators then tested the live product across thousands of adversarial scenarios covering secrets protection, secure code generation, and resistance to malicious instructions. The distinction matters: a policy that says an agent won't run destructive commands isn't proof. Someone has to try to talk it into running one anyway. Cursor's guardrails held. Congratulations to the Cursor team! #AI #AIGovernance #AIUC1 #AgenticAI #Cybersecurity
-
Jason Lam, CPA, CISSP, CISA liked thisCongratulations to Konami Gaming, Inc. on achieving ISO 27001 certification, now covering both SYNKROS and Konami Online Interactive. Their "compliance before commerce" approach reflects the kind of security discipline that protects casino operators and players alike. Proud to have supported this milestone. #ISO27001 #InformationSecurity #GamingJason Lam, CPA, CISSP, CISA liked thisNEWS RELEASE - "Konami Gaming, Inc. Earns ISO 27001 Certification, to include SYNKROS and Konami Online Interactive": https://lnkd.in/gKtRSmG4 🔐 #igaming #tech Schellman Eduardo Aching
-
Jason Lam, CPA, CISSP, CISA liked thisJason Lam, CPA, CISSP, CISA liked this74% of enterprises say they're audit-ready for AI governance. Only 27% actually are. That 47-point gap is the story of our new research report, 2026 State of AI Governance. Schellman surveyed 500+ enterprise leaders to find out what separates organizations that can actually prove their AI governance from those just assuming they can. TLDR: most companies have the activities in place (policies, funding, board updates) but far fewer have the audit-ready maturity to back it up when it counts. The full report breaks down what mature organizations are doing differently across five areas: 🔹 Funding allocation 🔹 Agentic AI oversight 🔹 Accountability structure 🔹 Regulatory readiness 🔹 Business impact Whether you're standing up an AI governance program for the first time or benchmarking what you've already built, this is worth the read before your next audit or your next board meeting. 📥 Get the full report: https://lnkd.in/e2V-N5xT #AIGovernance #Compliance #RiskManagement #EnterpriseAI #Audit #Schellman
-
Jason Lam, CPA, CISSP, CISA liked thisJason Lam, CPA, CISSP, CISA liked thisA major milestone for the CPA profession is here. On August 1, 2026, Texas' new CPA licensure pathway becomes effective. The new pathway to licensure, SB 262 was passed unanimously by the Texas Legislature in 2025. Thanks to this landmark legislation, Texas became one of the first states to expand pathways to CPA licensure—helping strengthen the profession and address the CPA pipeline. The new pathway allows CPA candidates to earn licensure by completing a bachelor's degree with the required accounting and business coursework, completing two years of qualifying work experience and passing the Uniform CPA Examination. This is a significant advocacy win for TXCPA. Thank you to Senator Charles Perry and Representative Angie Chen Button for championing this legislation, and to the Texas State Board of Public Accountancy for its work implementing the new pathway rules. Read More: https://bit.ly/3bWkMx6
Experience & Education
-
Schellman
View Jason’s full experience
See their title, tenure and more.
or
Licenses & Certifications
-
-
-
-
-
-
-
Certified Public Accountant (CPA)
New York State Board for Public Accountancy
-
Volunteer Experience
-
Student Volunteer
Linda Yalem Safety Run
Volunteered at the Linda Yalem Safety Run, a 5K run held at the University at Buffalo to promote personal safety.
-
Student Volunteer
Relay For Life of Greater Heights
Volunteered and organized a team to help raise funds for research to combat cancer.
-
-
Student Volunteer
The Buffalo News
Sold The Buffalo News Kids Day edition newspapers to the residents of Amherst, NY, proceeds benefiting the Women and Children's Hospital of Buffalo.
-
IRS Certified Tax Return Volunteer
Internal Revenue Service
Prepared income tax returns for families and individuals with annual incomes under $50,000 providing additional financial support through application of earned income tax credits.
-
Program Counselor
Asian Apostolate Summer Program
Improved program members' reading and writing abilities and provided an environment that encouraged learning.
Publications
Courses
-
Accounting Systems
MGA 311
-
Advanced Accounting Information Systems
MGA 621
-
Advanced Auditing
MGA 614
-
Advanced Financial Accounting
MGA 404
-
Advanced Topics in Internal Audit
MGA 641
-
Auditing
MGA 402
-
Business Law I
MGT 403
-
Communication for Accountants
MGA 303
-
Cost Accounting
MGA 314
-
Current Issues in Financial Reporting
MGA 618
-
Federal and State Taxes
MGA 403
-
Fraud Detection and Prevention
MGA 643
-
Information Systems Audit
MGA 642
-
Intermediate Financial Accounting I
MGA 301
-
Intermediate Financial Accounting II
MGA 302
-
Introduction to Accounting I
MGA 201
-
Introduction to Accounting II
MGA 202
-
Principles of Internal Audit
MGA 640
-
Professional Tax Research
MGA 623
-
Research in Accounting and Auditng Standards
MGA 624
-
Taxation of Business Entities and Their Owners
MGA 612
Honors & Awards
-
Performance Team Award (Best Big Win)
-
Received the Performance Team Award for successfully completing a new integral business engagement that generated $250,000 for the department.
-
Latin Honors Cum Laude
-
Latin honors are awarded to degree recipients who have achieved a high cumulative grade point average (GPA) and completed their school's minimum number of credit hours.
-
Deans List
-
Awarded for demonstrating academic excellence while completing the required credit hours.
Organizations
-
ISACA
Member
- PresentPreviously known as the Information Systems Audit and Control Association®, ISACA now goes by its acronym only, to reflect the broad range of IT governance professionals it serves. Today, ISACA’s constituency—more than 140,000 strong worldwide—is characterized by its diversity. Constituents live and work in more than 180 countries and cover a variety of professional IT-related positions—to name just a few, IS auditor, consultant, educator, IS security professional, regulator, chief information…
Previously known as the Information Systems Audit and Control Association®, ISACA now goes by its acronym only, to reflect the broad range of IT governance professionals it serves. Today, ISACA’s constituency—more than 140,000 strong worldwide—is characterized by its diversity. Constituents live and work in more than 180 countries and cover a variety of professional IT-related positions—to name just a few, IS auditor, consultant, educator, IS security professional, regulator, chief information officer and internal auditor. Some are new to the field, others are at middle management levels and still others are in the most senior ranks. They work in nearly all industry categories, including financial and banking, public accounting, government and the public sector, utilities and manufacturing. This diversity enables members to learn from each other, and exchange widely divergent viewpoints on a variety of professional topics.
-
American Institute of CPAs
Member
- PresentThe American Institute of CPAs is the world’s largest member association representing the accounting profession, with more than 412,000 members in 144 countries, and a history of serving the public interest since 1887. AICPA members represent many areas of practice, including business and industry, public practice, government, education and consulting.
Other similar profiles
Explore more posts
Explore top content on LinkedIn
Find curated posts and insights for relevant topics all in one place.
View top content