ITPAC Consulting

What ITPAC Consulting does

ITPAC Consulting, LLC is an independent, founder-owned IT consulting boutique based in Lincoln, Nebraska, providing advisory and implementation services across three regulated verticals: financial services (community banks and credit unions), healthcare (hospitals and providers), and institutions. The firm was founded by Denise Mainquist, a Certified Information Systems Auditor (CISA) and former Qualified Security Assessor (QSA) with 16 years of pharmaceutical industry experience, and operates with a lean 1-10 person team supplemented by contracted specialists for larger engagements.

The firm's core offerings center on IT audits, regulatory compliance, and IT controls work delivered against established frameworks including FFIEC (for banks), HIPAA/HITECH (for healthcare), PCI DSS (for card-handling entities), SOX/MAR, and ISO 9001. Service lines span gap and risk assessments, policy and procedure development, controls testing and remediation, vendor management oversight, SDLC/validation, and compliance training. The technology stack is human-delivered professional services rather than a proprietary software platform; the underlying 'technology' is the consultant's expertise in applying these control frameworks to client environments.

ITPAC's business model is direct, sales-led professional services: customized engagements scoped to each client's regulatory and compliance requirements, with pricing not publicly disclosed. Go-to-market relies on a regional Midwest footprint, repeat referrals from a visible roster of Nebraska community banks and rural hospitals, and inbound demand generated through blog content, an email newsletter, educational videos, webinars, and the founder's social media presence. The firm is bootstrapped with no external investment, no parent company, and no subsidiary structure.

Name

ITPAC Consulting

Legal name

ITPAC Consulting, LLC

Website

https://itpacconsulting.com

Company type

Private

Operating status

Operating

Headcount range

1–10 employees

Short description

ITPAC Consulting is a founder-owned boutique IT advisory firm in Lincoln, Nebraska, providing IT audits, regulatory compliance, and controls services to community banks, hospitals, and institutions across the Midwest.

Ownership category

akta.pro rank

Product category

IT Compliance and Audit Consulting

NAICS

Management Consulting Services (54161), Other Scientific and Technical Consulting Services (54169), Computer Systems Design and Related Services (54151)

SIC

Services-Management Consulting Services (8742), Services-Engineering, Accounting, Research, Management (8700)

akta.pro primary industry

Risk, Compliance & Internal Controls Consulting (BPAHACAJ)

akta.pro secondary industries

Compliance Technology, GRC Platforms & Controls Automation Advisory (BPAHAFAO), IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK), Enterprise Architecture & IT Operating Model (BPAHAEAB)

Keywords

• IT compliance consulting
• IT audit services
• FFIEC IT assessments
• HIPAA compliance consulting
• PCI DSS compliance

Headquarters

HQ city

Lincoln

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Others

Revenue model

1. IT Consulting Services: Professional consulting services for IT project management, IT audits, defining controls, improving compliance to regulations, and managing information technology projects. Services are delivered across Financial Services, Healthcare, and Institutions sectors.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels5 records

Core offering

ITPAC Consulting is an independent boutique consulting firm delivering practical advice and solutions for IT project management, IT audits, controls definition, and regulatory compliance. The firm serves financial services (banks and credit unions), healthcare (hospitals and providers), and institutional clients with engagements covering FFIEC assessments, HIPAA/HITECH compliance, PCI DSS, SOX controls, vendor management, security management, and IT project management. Services are customized to each client's business, regulatory, and compliance requirements and delivered by the founder with supplemental contracted specialists as needed.

Product overview

ITPAC Consulting is an independent consulting firm (not a software/SaaS company) that provides practical advice and solutions related to IT project management, audits and controls. The firm offers a portfolio of consulting service offerings including IT Assessments for Banks (FFIEC Framework), HIPAA/HITECH Compliance Services, IT Controls Review (SOX/MAR), Payment Card Industry Data Security Standard (PCI DSS) Services, Compliance Training, Vendor Management Services, Software Development Life Cycle Services, Project Management Services, Security Management Services, and Quality Management Services. The firm primarily serves three industries: Financial Services (banks and credit unions), Healthcare (hospitals and healthcare providers), and Institutions. Services are delivered by founder Denise Mainquist and contracted resources as needed for specialized expertise.

Differentiator

Problem solved

Functional benefit

Products and services

• IT Assessments for Banks (FFIEC Framework) Compliance assessments for banks and credit unions regulated by state, FDIC, OCC, NCUA, or GLBA, including governance reviews, electronic banking assessments, policies and procedures development, and vendor assessments.
• HIPAA/HITECH Compliance Services Services including gap assessment, facilitated risk assessments, HIPAA Security Rule workshops, consulting/remediation assistance, policy and procedure development, and business associate assessments for hospitals and healthcare providers.
• IT Controls Review (SOX/Model Audit Rule) Services for companies regulated by Sarbanes-Oxley (SOX) or Model Audit Rule (MAR), including developing internal controls framework, testing existing controls, streamlining controls/compliance environment, and implementing best practices.
• Payment Card Industry Data Security Standard (PCI DSS) Services PCI compliance services including gap assessments and consulting remediation assistance for businesses that store, process, or transmit credit card data.
• Vendor Management Services Vendor assessment and oversight services including data center and process audits at global IT service provider sites and disaster recovery testing oversight.
• Software Development Life Cycle Services Services including software quality assurance testing standards, FDA 21CFR Part 11 compliance, and managed user acceptance testing and validation reporting.
• IT Project Management Services IT project management including scope, risk assessment, documentation and testing of IT controls for SOX compliance and software releases.
• Security Management Services IT Security Officer role assistance including researching requirements, responding to incidents, and creating incident response plans.
• Quality Management (ISO 9001) Services ISO 9001 Quality Management System implementation including on-line manual creation, training, and preparation for official assessment.
• Compliance Training Training services covering monitoring of internal controls, IT operations procedures, ISO 9001 concepts, records retention procedures, and PCI training for banks and businesses.

Quantifiable outcome

• Standardizing SOX controls across 28 countries saved a multinational company $1M in assessment costs
• +2 more outcomes

Named customers14 records

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Scale indicators1 record

Recent moves5 records

Expansion highlights3 records

Direct peers

• Coalfire: Specialized cybersecurity advisory and PCI QSA firm offering PCI DSS, HIPAA, and FFIEC-aligned assessments. Directly comparable to ITPAC's PCI DSS, HIPAA, and information security services for organizations that handle regulated data.
• LBMC: Mid-market accounting and business advisory firm with a strong healthcare and financial-services IT risk practice. Comparable to ITPAC in serving hospitals, banks, and credit unions with HIPAA, FFIEC, and internal controls engagements.
• Schellman & Co. Specialized compliance and IT audit firm providing PCI DSS, SOC, ISO, and HIPAA assessments. Closely comparable to ITPAC in offering multi-framework compliance assessments for mid-market and regulated buyers.

Broad incumbents

• Eide Bailly LLP: Regional accounting and advisory firm serving community banks, credit unions, and hospitals across the Midwest and Mountain West. Overlaps directly with ITPAC's FFIEC, HIPAA, and SOX IT controls practice among mid-sized regulated buyers.
• Plante Moran: Large U.S. accounting and consulting firm with an IT risk and compliance practice covering financial services, healthcare, and manufacturing. Competes with ITPAC on IT audits, internal controls, and IT project risk work for mid-market clients.
• Crowe LLP: Top-10 U.S. accounting and advisory firm with a financial-services IT risk practice including FFIEC IT examinations, cybersecurity, and SOX IT controls. Competes with ITPAC for community and regional bank IT assessment work.
• Wipfli LLP: Top-20 U.S. accounting and consulting firm with a strong community-bank and healthcare technology risk practice. Competes with ITPAC on FFIEC IT assessments, HIPAA/HITECH work, and outsourced CIO services for mid-market financial institutions.
• Sikich LLP: Mid-market professional services firm offering IT risk, cybersecurity, and compliance services to financial services, healthcare, and manufacturing clients. Overlaps with ITPAC's multi-framework IT audit and controls offerings for regulated buyers.
• BKD CPAs & Advisors: Large U.S. accounting and advisory firm with a dedicated IT risk and FFIEC practice serving community banks and credit unions. Directly competes with ITPAC for community-bank IT audit and SOX engagements, but at materially larger scale and broader service portfolio.

Emerging players

• Linford & Co. Boutique IT audit and cybersecurity firm specializing in PCI DSS, SOC, and IT general controls assessments for small and mid-sized organizations. Closely comparable in size and service mix to ITPAC's PCI and IT controls practice.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xtwitter.com/denisemainquist
• Facebookfacebook.com/profile.php
• LinkedInlinkedin.com/company/itpac-consulting-llc

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about ITPAC Consulting