August Meeting
Thursday the 7th
Plano Convention Centre
Lunch Meeting 12:00pm
Registration begins at 11:30am
The GAIT Series from the IIA and how it impacts
Internal Auditors
Ed Hill, Managing Director - Protiviti
 This
presentation by Edward Hill will cover each of the IIA's Guide to the
Assessment of IT Risk (GAIT) and will also present a case study on a
potential use of the GAIT for Business and IT Risks in scoping an audit.
Ed was a principle author of the GAIT series. There are three
publications, in this series, "The GAIT Methodology" (the first in the
series), provides a methodology to help organizations identify the key
IT General Control Processes needed for an efficient and effective scope
of work for Sarbanes 404 compliance. The second "GAIT is the GAIT for IT
General Control Deficiency Assessment" that provides an approach for
assessing ITGC deficiencies identified during the annual assessment of
internal controls over financial reporting. And third "GAIT for Business
and IT Risk" which focuses on identifying the critical aspects of IT
processes that are essential to the management and mitigation of
business risk.
Ed Hill is a founding Managing Director of Protiviti. Prior to that,
he spent over 20 years in a Big Five accounting firm, 14 of which were
managing IT audit and risk consulting engagements. He is currently the
global leader of Protiviti's IT audit practice, which includes IT Risk
and Control work related to Sarbanes-Oxley (SOX) compliance projects. Ed
spends a majority of his time leading Protiviti's efforts around its IT
internal audit practice and the IT portions of SOX engagements. He
manages many different types of Information Technology engagements
including internal audit services, IT SOX compliance, security reviews,
application controls reviews, information technology due diligence
assessments, technology infrastructure analysis and reviews, and has led
several projects to develop a comprehensive risk based internal audit
plan. Ed is active in the Institute of Internal Auditors and is
currently Chairman of the IIA’s Advanced Technology Committee.
1 Hour Continuing Education
Make your Reservation On line!
Pre-Meeting - 10:30am - 11:30am
IT Internal Audit: The Evolving Role of a
Technologist
Maanasa Jain, Sr. Manager – PricewaterhouseCoopers LLP
 The
stereotype of the traditional IT Internal Auditor creates a persona
of someone who is deeply technical and has an expertise within the
confines of the IT department. Similar to the overall internal audit
profession, the role of the IT Internal Auditor has been evolving
into a more strategic role. Both management and mature Internal
Audit organizations are beginning to expect IT Auditors to be
strategic technology controls advisors, thereby increasing the
perceived value of the profession.
Maanasa Jain is a Dallas-based Senior Manager in the Systems and
Process Assurance practice of PricewaterhouseCoopers. She has over 11
years of combined experience in auditing and consulting within the
business process and information technology fields. For the past four
years, Maanasa has been focused on Sarbanes-Oxley compliance efforts,
both from an external audit perspective as well as serving in an
advisory capacity for non-audit clients. She has led engagements to
assist clients with Sarbanes readiness for multi-billion dollar
companies. Maanasa has also assisted clients though major business
changes including business process and IT controls redesign for several
high-technology, retail and consumer products companies. Most recently,
Maanasa has been speaking to several companies in the marketplace
regarding AS5 and its impact on their organizations. She is one of the
local market leads for internal controls optimization.
Maanasa has a B.B.A. in Management Information Systems from Texas A&M
University. She is also a Certified Information Systems Auditor (CISA).
1 Hour Continuing Education
Make your Reservation On line!
Post-Meeting 1:30pm - 2:30pm
7 Deadly Sins of SAS 70’s
Chris Mitchell, Principal – KBA Group LLP Risk Advisory Services
 In
this presentation Mr. Mitchell plans to discuss, In Plain English,
the following:
- Who needs a SAS 70 assessment?
- What are the steps in the SAS process?
- Preliminary preparation for a SAS 70 assessment
- Common issues found during a Type II assessment
- Benefits of a Type II vs. Type I SAS 70
Chris Mitchell has over 13 years of risk advisory, finance and IT
consulting experience. He has held the titles of Internal Audit
Director, Senior Program Manager and Managing Consultant at various
companies in industries including financial services,
telecommunications, software development, manufacturing and government.
His practice focuses on assisting clients with 404 implementations, Type
I & II SAS 70, risk assessments, leading internal audit teams and making
cost-effective recommendations to enhance internal controls, maximize
efficiency and minimize exposure to loss and regulatory risk.
Chris received his Bachelor of Accounting degree from the University
of Texas at San Antonio and his MBA in Information Technology from the
University of Texas at San Antonio. Chris is a CIA (Certified Internal
Auditor), a CISA (Certified Internal Systems Auditor) and a CCSA
(Certified Control Self-Assessor).
1 Hour Continuing Education
Make your Reservation On line!
This meeting is being held at
Plano Convention Centre
located in Plano at the corner of Spring Creek Parkway and Jupiter Road
 |
