Does it have to be a CPA - particularly? How about CISA (Certified Information Systems Auditor) or something of that sort? Try PWC -- Price Waterhouse Coopers -- they've got some fine CPAs and Other Certified Auditors out there. We hired them for internal audits, and they did a decent job. ~@~