eNews - January 2010
The President’s Letter
The November meeting was successful, and we received some
great feedback from the survey. The Dallas Chapter
leadership really appreciates meeting participants taking
the time to complete the survey; your comments provide us
with opportunities to improve our future meetings.
January’s meeting will be a joint meeting between the IIA
and ISACA and revolve around Enterprise Resource Planning
(ERP). The CAST meeting will discuss Business Process
Improvement, presented by Cindy Hart from Protiviti.
The pre-meeting will cover Project Management Controls for
ERP Implementation and will be presented by David Dominguez
from Grant Thornton. The lunch speakers will be Paul
Shultz and David Cargile from Protiviti, and will cover
Leveraging ERP Systems for Control Testing and Cost
Reductions. The post-meeting topic is ERP
Implementation – Risk Management Best Practices, presented
by Mark Nadolny, CFO, and Vanessa Hewitt, Director of
Internal Audit, from Susan G. Komen for the Cure. The
January meeting will be held at the Renaissance Richardson
Hotel. I look forward to seeing all of you at the
meeting.
Don’t forget to register for our upcoming SMART (Seminars
on Mastering Audit Real-world Techniques) seminar
scheduled from February 9th through 11th. The
seminar will cover Oracle Security Auditing and will be
presented by Tanya Baccam, Baccam Consulting, LLC.
Additionally, registration is now open for the Fraud
Summit on March 25th and 26th at the University of Texas at
Dallas (UTD). Seating is limited for this conference
and has historically sold out well in advance, so please
take advantage of the early registration special now through
January 31, 2010. This special price is $200 for one
person or $600 for four people.
Thank you again for you participation and helping to make
the Dallas Chapter of the IIA a huge success.
Thanks,
Tom Keils
2009/10 President – Dallas Chapter IIA
president@dallasiia.org
214-880-3560
|
Next Meeting - Thursday, January 7, 2010 Renaissance Richardson
Hotel
Enterprise Resource Planning (ERP)
Joint Meeting with North Texas ISACA
(Information Systems Audit and Control Association)
Meeting 12:00pm - 1:30pm
Registration begins at 11:30pm
Proactively Managing ERP Risks
Paul Shultz, Managing Director, Protiviti, Inc. David Cargile, Director, Protiviti, Inc.
Objectives: How would you know if you are missing
high risk ERP areas in your audit plan? Is it too late to minimize
your risk before the next ERP project or major upgrade goes live?
Are better tools and approaches available that could save you time
and money and return better results? During this session, the
presenters will address these questions and more, discussing a
framework for ERP risks, Internal Audit’s role related to these
risks, and potential ROI / cost-saving opportunities for process and
security control design that should be considered by organizations
throughout their ERP lifecycles.
Paul Shultz is a Managing Director in Protiviti’s Dallas office
and leads the Protiviti global Enterprise Application Solutions
business. For 30+ years, he has led systems integration,
business process improvement, and large scale technology-fueled
transformations in a variety of industries specializing in consumer
products, industrial and high tech manufacturing, and services
firms. Paul is responsible for developing and deploying
overall Enterprise Application Solutions (EAS) strategy as well as
managing firmwide ERP vendor alliances. He was formerly a CIO
in a publicly traded energy enterprise and has led major national
and regional consulting practices in large and mid-size
consultancies. Paul graduated from Baylor University with a
BBA in Economics and an MBA in management. He serves as the
Board President of Gilda’s Club of North Texas (psycho-social cancer
support for the whole family) and is chair-elect of the steering
committee of the Baylor Business Network of Dallas. Paul is
still married to his college girlfriend, dreams of a career as a
professional golfer, and has two older sons.
David Cargile is a Director in Protiviti’s Dallas office, where he
has provided assurance and risk management consulting services to
clients in a variety of industries for over 15 years. David
has focused his efforts in managing large-scale, complex projects,
including application controls implementations, regulatory
compliance efforts, and information mining. David is part of
Protiviti’s national EAS leadership team, responsible for leading
and coordinating methodology development, team training, and
go-to-market strategy for the EAS service offering and is heavily
involved in Protiviti’s strategic alliance with SAP. In
addition, David is the firm’s practice leader related to SAP GRC
Access Controls. David earned his BBA in Accounting and Information
Systems from Baylor University. He is a Certified Public
Accountant (CPA) and a Certified Information Systems Auditor (CISA).
He currently serves on the Board of Directors for Junior Achievement
of Dallas, which is focused on helping young people succeed in a
global economy.
1 Hour Continuing Education
CAST Meeting 10:30am - 11:30am
Registration begins at 10:00am
Business Process Mapping
Cindy Hart, Manager, Protiviti, Inc.
Objectives: Business processes are typically designed around a company’s
mission, business goals, and objectives. They function as the
backbone that supports and enables an enterprise to conduct its
business. The learning objectives for this session include:
- Identify the critical components of a process
- Discuss the various types of process maps along
with the benefits and uses for each type of process
map
- Use best practices in documenting processes
through process maps and process narratives
Cindy Hart is a Manager in Protiviti’s Dallas office with over 9 years of
business experience working with a variety of organizations to enhance their
business performance through internal audit, risk management, operational
effectiveness, and enhanced governance. Cindy focuses much of her time in
the areas of Internal Audit and Sarbanes-Oxley compliance across a variety
of industries. Cindy is also a Certified Investments and Derivatives Auditor (CIDA).
1 Hour Continuing Education
Pre-Meeting 10:30am - 11:30am Registration begins at 10:00am
Auditing Project Management Controls
David Dominguez, Manager, Grant Thornton
Objectives: The learning objectives for this session
include the following:
- Project Management Office (PMO) Overview
- PMO Governance and Guidelines
- Aligning the Project Management Body of
Knowledge (PMBOK) with Control Objectives for
Information and related Technology (COBIT) standards
- Case Studies
- Project Management Audit Recommendations
David Dominguez is a Manager in Grant Thornton’s Business
Advisory Services. He has considerable managerial and
technology leadership skills expanding across program management,
information systems and technology, and information technology (IT)
audit. In addition to his 17 years of technology experience,
David’s experience expands across program management of
international solution implementations and rollout of large scale
development efforts, internal and external audits, IT security and
controls assessments, and design and rollout of IT business
processes and security controls. His background includes
experience in technology, not-for-profit, retail,
telecommunications, healthcare, and public sector. David is a
Certified Information Systems Auditor (CISA) and Project Management
Professional (PMP).
1 Hour Continuing Education
Post-Meeting 1:30pm - 2:30pm
Risk Management Best Practices
Mark Nadolny, CFO, Susan G. Komen for the Cure® Vanessa Hewitt, Director of Internal Audit, Susan G. Komen for the Cure®
Objectives: Organizations who implement enterprise
resource planning (ERP) software face a number of challenges.
Without the right oversight, strategy and tools, implementations can
lead to insufficient end user training, inadequate change
management, poorly designed business processes, and other problems
that can lead to higher over-all cost of ownership. Join Mark
Nadolny and Vanessa Hewitt as they discuss how Susan G. Komen for
the Cure managed the risks of their ERP implementation.
Mark Nadolny, Chief Financial Officer for Susan G. Komen for the
Cure®, is responsible for all financial matters affecting the
world’s largest breast cancer organization. Since inception,
Komen for the Cure has invested more than $1.3 billion, making it
the world’s largest source of private funds for breast cancer
research and community programs involving awareness, education,
screening, treatment and direct services for breast cancer.
Prior to joining Komen, Nadolny spent more than 13 years at
Blockbuster, Inc., most recently as an area Senior Vice President of
Operations. Throughout his tenure at Blockbuster, Nadolny held
several other senior leadership roles across the company, including
financial planning, store finance and accounting, supply chain and
merchandising. Prior to Blockbuster, he served as Controller for
Santa Fe Minerals, General Auditor for Santa Fe International and
Senior Auditor for Arthur Anderson & Company.
A long-time passionate supporter of the breast cancer cause, Nadolny
served as the Blockbuster team captain for the Susan G. Komen Dallas
Race for the Cure® for many years. Additionally, he was a board
member and officer of the Boys & Girls Clubs of Collin County.
Nadolny earned his Bachelor of Science in accounting from Marquette
University in Milwaukee and is a Certified Public Accountant. He is
married and has three sons. In his spare time, Nadolny enjoys
running, reading and travel.
Vanessa Hewitt, Director of Internal Audit at Susan G. Komen for the
Cure®, has 16 years of professional experience, including more than
12 years of internal audit experience. This includes Committee
of Sponsoring Organizations (COSO) based risk assessment and
controls auditing in addition to her external audit experience.
Prior to joining Susan G. Komen for the Cure®, Vanessa was a Senior
Manager in the Business Advisory Services practice at Grant Thornton
for three years, where she led Enterprise Risk Assessments,
Sarbanes-Oxley implementation efforts, and redesigned and provided
outsourced and co-sourced internal audit services for her clients.
In addition to her experience in financial, operational, and
compliance auditing, she has also led forensic investigations,
business cycle process improvement initiatives, and solution
selection initiatives. Her financial and internal auditing
background includes experience with nonprofit, manufacturing, energy
services, healthcare, telecommunications, and oil & gas companies.
Vanessa also worked as a Manager in Halliburton’s Audit Services
group.
Vanessa received her Bachelor of Business Administration in
Accounting from Baylor University in Waco, Texas.
1 Hour Continuing Education
New Online Registration Requirements
A few months ago, the Dallas Chapter made a change to the CPE
process. After attending an IIA meeting, an online evaluation
is distributed via email. When you click the link to the
online evaluation, you can immediately prepare and print your CE
certificate for that specific meeting. We had an overwhelming
positive response to this process improvement, and want to keep
making improvements such as this to streamline our processes.
New this year, beginning with the August meeting, the Dallas Chapter
will require payment prior to confirming your registration.
Almost 90% of our attendees already pay through PayPal, so this is
not a change for them. If you need to pay by check, your check
must be received prior to the meeting (see details below). Our
goal is to reduce the wait time at the check in tables, improve
controls, and ease the reconciliation process on the back end.
As a friendly reminder and to provide clarification for our new
members:
- Registration
cutoff is 5:00 pm CST on the Friday before the meeting (unless
otherwise noted).
- Payment must be
received by the Friday before the meeting (unless otherwise noted).
Your registration is not confirmed until paid. We strongly
encourage you to pay via PayPal to confirm your registration.
If you are mailing a check, the envelope must be post marked 8 days
prior to the meeting (i.e., on Wednesday the week prior to the
Thursday meeting) to ensure we receive your payment on time.
If the envelope is not post marked within the required timeframe and
is received late, you will be notified by email that a) the meeting
is sold out or b) an additional $10 late fee per person will be
assessed. Only registrations paid by PayPal will be accepted
on Thursday and Friday prior to the meeting.
- If you miss the
deadline to register and space is available, you can attend the
meeting as a walk-in. Before coming to the meeting, please
check the website to see if we are accepting walk-ins since our
meetings tend to sell out.
- The deadline to
cancel your registration is 5:00 pm CST on the Friday before the
meeting (unless otherwise noted) to receive a refund. If you
do not cancel by the deadline, you may send a substitute in your
place after notifying reservations@dallasiia.org. The substitute will be
required to pay an additional $10 if they are not a member of the
Dallas Chapter.
- All walk-ins will
need to register at a separate table before the start of the
meeting. The walk-ins will be required to complete an on-site
registration form which will include name, company name, address,
and email address and can pay with cash or check made payable to the
Dallas Chapter of The IIA for the applicable amount.
Registration: Place and confirm your reservation via the
web site at http://www.dallasiia.org/Reserve_0110.htm.
The following are
the current rates for our monthly meetings:
May 2015 Social Meeting Prices:
|
- Dallas IIA Member $55
- Other IIA Member or Non-member $65
NO WALK-INs will be allowed. Price includes up to 2 CPE and game ticket; there is no prorated price for
attending just one of the meeting day sessions. |
We will keep you posted as we continue to make improvements.
If you have any suggestions, please feel free to contact any of the
officers of the Dallas Chapter. Thanks for your cooperation!
Meeting Location
Renaissance Richardson Hotel
900 East Lookout Drive
Richardson, Texas 75082
View Larger Map
Preferred Method:
Place and confirm your reservation via the
web site at
http://www.dallasiia.org/Reserve_0110.htm.
Contact:
Pamela Krakosky
reservations@dallasiia.org |
May 2015 Social Meeting Prices:
|
- Dallas IIA Member $55
- Other IIA Member or Non-member $65
NO WALK-INs will be allowed. Price includes up to 2 CPE and game ticket; there is no prorated price for
attending just one of the meeting day sessions. |
|
Reservations & Payment must be received by 5:00 PM on Friday,
January 1, 2010.
Registration Cancellation Policy
Current Cancellation date:
5:00p Friday, May 8, 2015
- You can cancel online until the current cancellation date and
receive 100% refund. If you do not cancel by the deadline, you
may send a substitute in your place after notifying
reservations@dallasiia.org.
- The substitute may be required to pay an additional fee
which would depend on their membership status (Member, Student
Member or Non-Member). To cancel your registration after the
cancellation date, please send an email to
CANCEL@dallasiia.org .
We Now Accept Credit Cards - Online Only

The IIA Dallas Chapter, in conjunction with PayPal, will now
accept payment online for the monthly luncheons. There is no change in the cost
to you for the lunch. We accept VISA, MasterCard, Discover, American Express, or
eCheck. Note that some corporate-issued cards are not accepted by PayPal. This
service is only available online at the time the reservation is made. This can
be used to pay for individual or group reservations. Follow the instructions on
our web site. If you properly cancel a reservation before the meeting, the
Chapter will either return the funds to you or reserve you for the next meeting. Any questions, contact
the Registration Chair at reservations@dallasiia.org.
After you place your reservation online, you will see the
link to pay via PayPal if desired.
Chapter News
CIA Programs
Register Now!
The next CIA review course will be held February 12-15, 2010 and
taught by Dr. Glen Sumners of LSU. Courses will be held at The
University of Texas at Dallas. Registration details can be
found at
http://dallasiia.org/CIA_Review_S10.htm.
Next Ceremony to Honor New CIA’s, CCSA’s, CGAP’s, and CFSA’s
The Dallas Chapter will be honoring new CIA’s, CCSA’s, CGAP’s,
and/or CFSA’s and handing out their certificates at the January 7,
2010 meeting at the Renaissance Richardson hotel. Instructions on
how to register for the meeting will be sent to the honorees via
email. If you are receiving a certificate but are unable to
attend, please contact Toni Messer at
tmesser@utdallas.edu.
Check Out Our New Certifications Web Page
For information about the CIA exam and review courses, see our
new website at
http://dallasiia.org/CIA.htm
Frequently Asked Questions
Q: I haven’t received my
certificate yet – where is it?
A: The IIA sends out
certificates to a Dallas Chapter representative each quarter. Those
taking and passing the exam, including satisfying all requirements,
between July and September 2009 should be received in November 2009
and presented in December. Those passing between October and
December 2009 should be received by the Chapter in January/February
2010.
If you do not receive your
certificate by September 2009, contact the IIA’s certification
department:
certification@theiia.org, or call (407)937-1100.
Q: How do I register for the exam?
A: Exam registration can be
completed via the following link:
https://i7lp.integral7.com/durango/do/login?ownername=iia&channel=iia&basechannel=integral7

Thank You!
Internal Auditing Education Partnership students at the
University of Texas at Dallas (UTD) were fortunate enough to be
welcomed into the corporate offices and internal audit groups of
Southwest Airlines and Burlington Northern Santa Fe (BNSF) railways
during October. Students from UTD were able to experience
these two companies by participating in a site visit. Students
took tours of the facilities and learned about the history of the
business. Each company did an overview of their company as a
whole and then went into detail in regards to the internal audit
department. Students were able to gain a better understanding
of the daily operations by asking questions throughout the visit.
For the fall semester, the student chapter had the privilege of
having great companies come out to the campus and speak to our
members. Many thanks to Weaver and Tidwell, Microsoft, Calpine,
PricewaterhouseCoopers (PwC), BNSF, and Southwest Airlines for their
support of our program.
If you are interested in recruiting on campus or assisting the
program in any way, please contact Mark Salamasick at 972-883-4729
or
mark.salamasick@utdallas.edu. We are always looking for
additional site tours for our students and welcome sponsors for our
Wednesday receptions. There are a number of students available
for full time and internship opportunities, and a website is
available with student resumes at
www.utdallas.edu/orgs/iia.
Contact Mark Salamasick for password access to the resumes.

Above: UTD IAEP students pause for pictures during a recent site
visit at Southwest Airlines.

Above: UTD IAEP students during a recent site visit to BNSF Railways
Attention: Internal Auditors in Transition
Several internal auditors in transition within the Dallas chapter
have formed an IIA Mirroring Group. What is a Mirroring Group?
It’s a group of professionals seeking job opportunities in the same
industry. The purpose of the Mirroring Group is to share job leads,
assist with contacts at target companies, share networking events
and CPE classes, and provide support and motivation.
We would like to extend an invitation to anyone who is currently
looking for employment to meet with us on January 7th (the day of
our next IIA meeting) at 2:30 pm at the Richardson Renaissance
hotel, following the Post Meeting. We will meet in the same room as
the Post Meeting. If you have any questions, please email any of
the following IIA members: Helen Dickey at
bad2he@verizon.net; Marc
Winandy at
marcwinandy@yahoo.com; or Liz Kinloch at
lkinloch@aclordi.com.
Hope to see you there.
New Ways to Network
 During
the month of September, the Dallas IIA launched a Facebook
and LinkedIn group. Brought to you by the membership committee,
these tools will allow you another avenue to grow your online
network, communicate with other Dallas IIA members, and stay on top
of current chapter events. LinkedIn is geared to professional
networking; Facebook is used for both professional and social
networking.
- If you already have a profile at either one of these
websites, you can join the Dallas IIA group by searching for it.
- If you don’t have a profile but would like to set one up,
visit www.linkedin.com and
/ or www.facebook.com and
follow the instructions.
- If you have questions contact
membership@dallasiia.org
Membership Updates
The Dallas IIA Chapter would like to extend a warm
welcome to our new members who joined the Chapter last month:
October 2009 New Members |
Ugunda Bush
Ann Carpenter
Jan Coker
Kelly DeCook
Kevin Dunning
|
Rich Fedock
Stacey Gutsell
Craig James
Terri Keck-Yates
Maurice Lopez
Courtney Murphy
|
Eileen Marie Senen
Michael Spencer
Walter Van Hoozer
Pablo Williams
Gary Yarbrough
|
New Membership Information Booth
Did you know that approximately 10% of event attendees are
non-members? We have recently added a membership
information booth for future monthly meetings so non-members can
stop by and receive information or ask questions related to IIA
membership. If you would like to know more about the many
benefits of joining the Dallas Chapter, please stop by and speak
with one of our membership committee members or pick up a brochure
from the table. The booth will be located in the registration
area that is marked by a “membership information” sign. We
look forward to meeting you!
Please look for the monthly eNews (electronic newsletters) as a
source of information for future events within the Dallas Chapter
and other internal audit related news. If you have any questions
regarding your membership or need additional information about the
Dallas Chapter, please feel free to contact the Membership Chair (membership@dallasiia.org).
If you are looking to become more involved in the Dallas Chapter and
help give back to the internal audit profession, please contact Jay
Blanchard at
jayblanchard@ti.com.

INTRODUCING THE IIA’S RECRUIT-A-COLLEAGUE MEMBERSHIP PROGRAM
As a member of The IIA, you already know the value you receive, and now we’re giving you an incentive to tell your
friends and colleagues about it! With the new, year-round Recruit-a-Colleague membership program from The IIA, the more
friends and colleagues you recruit to become members, the more chances you have to win free training and professional
development! For complete program details, visit
www.theiia.org/Recruit.
Report Your Speaking and Writing
It's time again for the survey to determine which IIA Dallas
Chapter members have submitted articles or spoken since November 1,
2009. Each
speaking engagement on internal auditing that a Dallas Chapter
member completes will earn the Chapter 1 credit per CPD hour. Each
full article, Roundtable article, Fraud Finding, etc. submitted that
meets basic editorial guidelines will earn 5 credits. For each full
article published 20 credits are earned. Each internal audit related
article published in any other trade or professional journal that is
authored by a chapter member is 5 credits.
To report your writing and speaking go to
http://dallasiia.org/Speaking.htm and complete the provided form
by December 31, 2009.
Seminars
2009 - 2010 Seminars
Updated 10/15/09
Dallas Chapter Seminars
The Dallas Chapter of The IIA is pleased to announce SMART
Training Courses for the upcoming year and beyond. Our goal is
to provide high quality training at a low cost for our members
(starting at $150 for 1 day courses).
We have been busy these past couple of months planning and
organizing to bring you the following hot topics and outstanding
speakers. We are still working hard to finalize the schedule
but we wanted to get this to you as soon as possible so that you
could plan your training.
 |
SMART Training Courses
(Seminars on Mastering Audit Real-world Techniques) |
COURSE NAME |
INSTRUCTOR(S) |
CONFIRMED DATES OR EST. TIMEFRAME |
DFW LOCATION |
Oracle Security Briefings and Training |
Tanya Baccam, Baccam Consulting |
February 9-11, 2010
Registration is now open |
Southwest Airlines |
Risk Based Auditing: A Value Add Proposition |
Glyn Smith, CooperGroup, Principal |
TBD (2 days) |
Brinker |
Advanced Operational Auditing |
Glyn Smith, CooperGroup, Principal |
TBD (2 days) |
7-Eleven |
SQL Server Security Briefings and Training |
Tanya Baccam, Baccam Consulting |
TBD (2 days) |
Sabre |
We are able to
bring these seminars to you for a low cost because IIA-member
companies are providing their offices for the training sites. If
your company is interested in hosting a course and receive free
registrations, please contact Pamela Krakosky at
pkrakosky@verizon.net to
find out more details. And if you would like to recommend a course
topic and/or instructor, please contact Pamela. |
Oracle Security Auditing
Class size is limited to the first 50 paid registrants!
Date: |
February 9 - 11, 2010 (Tuesday through Thursday) |
Time: |
8:30 am – 4:30 pm; check in begins at 8:00 am |
Location: |
Southwest Airlines - MAP
University for People Room 108 and 109 2702 Love Field Dr.
Dallas TX 75235
Directions |
Cost: |
$600 and includes training materials, continental breakfast, lunch,
snacks and beverages. Payment is due at time of registration. We
recommend that you pay through PayPal to confirm your registration. |
CPE Credits: |
21 Credits |
Prerequisites: |
No prerequisite is required. |
Experience Level: |
All levels |
Register: |
http://dallasiia.org/Seminar_Reserve_020910.htm Please contact Pamela Krakosky at
pkrakosky@verizon.net if you
have any questions.
|
Overview: |
The Oracle Security Auditing course focuses on understanding,
identifying and mitigating risk to Oracle databases. Specifically, risks
prevalent in Oracle 8i, 9i, 10g and 11g are discussed. The course starts
by covering foundational information, including an introduction to SQL.
Once the foundation is built, students explore the Oracle environment
and how to identify weaknesses. Hands-on exercises give students the
opportunity to not only hear about the vulnerabilities, but understand
and mitigate the risk for the vulnerabilities. Oracle specific security
solutions will also be discussed including database auditing, TDE
encryption, virtual private databases, label security, database vault,
audit vault, FGA, total recall, configuration scanning, ASO and data
masking. Multiple tools, queries and techniques will be explored in
order to obtain a comprehensive understanding on how to audit Oracle
databases.
|
Objectives: |
I. Foundations
a. Policies/procedures
b. Physical security
c. Finding databases
II. SQL Foundations
III. Oracle Foundational Architecture
IV. Oracle-specific Security Solutions
V. Main Attack Vectors
VI. Authentication Methods
a. Database
b. Operating System
c. Other options
VII. Profiles
VIII. User Accounts and Passwords
a. Finding passwords
b. Developer risks
IX. Roles
X. Listener Security
XI. Network Security
XII. Operating System Security
|
XIII. Application Security
a. Locating sensitive data
b. Identifying applications that use the database
c. Application vulnerabilities and their impact on the database
XIV. Patching
XV. Backup and Recovery
XVI. Encryption
XVII. Links
XVIII. Triggers
XIX. Access and Privileges
a. Stored Procedures, Libraries, Directory Objects and more
b. Tables and Views
XX. Parameters
XXI. Restricting Tools
XXII. Auditing/Logging
a. Basic Auditing
b. Fine Grained Auditing
c. Other Oracle Audit Logs
XXIII. Summary
a. Resources
|
Instructors: |
Tanya Baccam, Baccam Consulting, LLC
Tanya has extensive experience performing audits and assessments,
including application reviews, system audits, vulnerability and
penetration tests, as well as providing training for various topics,
including operating systems, applications, databases and software
development risks. She is skilled in reviewing the security architecture
for clients including assessing firewalls, applications, web sites,
network infrastructure, operating systems, routers, and databases. She
has conducted multiple network penetration engagements, vulnerability
assessments and risk assessments using an arsenal of tools, including
commercially available and open-source tools. She has developed and
reviewed policies and procedures, as well as developing and provided
security awareness training. Tanya has been responsible for conducting,
scheduling and managing numerous security assessment engagements.
During her career in Information Technology, Tanya has become an
expert in network and application security services. She has functioned
in management, training and consulting roles. She has vast experience
including support of Novell, UNIX, Windows, and Oracle platforms. Tanya
is a Senior Certified Instructor and courseware author for SANS (SysAdmin,
Audit, Network, Security) where she has developed and delivered training
related to PCI, security auditing, incident handling, hacker exploits,
database security, web application security and perimeter protection, as
well as being an authorized grader for some of the GIAC certifications.
She is also as a member of ISACA (Information Systems Audit and Control
Association).
|
What to Bring: |
A laptop in order to complete the hands-on exercises. The laptop
should meet the following specifications to get the most from the
exercises:
- CD-ROM drive
- A minimum of 3 gigabytes of free hard disk space
- A minimum of at least 1 gigabyte of RAM
- Windows XP Professional SP 3 or higher
- Administrator privileges or the capability to install and run tools
|
Deadline: |
January 29, 2010 is the last day to register. Payment must be received by this date to confirm your registration. |
Cancellation: |
There is a $50 cancellation fee per registrant on cancellations
between January 25 and January 29, 2010. Refunds will not be granted
after January 29, 2010, however, substitutions are permitted by
notifying Pamela Krakosky.
|
Location:
Southwest Airlines
University for People Room 108 and 109
2702 Love Field Drive
Dallas TX 75235
Directions
View Larger Map
The 5th Annual-UTD/Dallas Chapter
Fraud
Summit
Co-Sponsors:
 
Thursday, March 25, 2010
FRAUD WORKSHOPS - CHOOSE FROM ONE OF THREE
- Deloitte—Advanced Fraud Interrogation Methods
- Jim Ratley—Interview Techniques for Auditors and Investigators
- Glyn Smith—Best Practices in Ethics and Compliance and How to
Audit
$250 per person – seating is limited to the first 50 registrants for
each session. You may only choose one of the three sessions to
attend.
8 hours CPE credit
Location: UTD-Richardson
Time: 8:00PM-5:00PM
Register online by March 1,
2009
Friday, March 26, 2010
FRAUD CONFERENCE - HOT TOPICS & SPEAKERS
- One of our keynote speakers is Jim Ratley, the President of the
Association of Certified Fraud Examiners
- Join us to hear two leading experts discuss the new fraud
landscape in the aftermath of the global financial crisis
- Participants will choose from a variety of breakout sessions to
hone their fraud-detecting skills and practically apply what they have
learned
- Advanced fraud techniques and case studies for those looking for
more than just the basics
$200 per person if paid by January 31st and $600 for four people if paid
by January 31st.
$250 per person if paid between February 1st through March 1st.
Seating is limited
8 hours CPE credit
Location: UTD-Richardson
Time: 8:00AM-5:00PM
Register online by March 1,
2009
Proceeds benefit the IAAAF and Internal Audit Program at UTD.

Register Early as space is limited!
 
Employment Opportunities
North Texas Tollway Authority (11/10/09)
INTERNAL AUDIT MANAGER
Be a part of a Dynamic Team….Come join the movement!
The North Texas Tollway Authority is keeping pace with the regional
demand for transportation through expansion of North Texas' toll road
system and implementation of improved technologies. The NTTA, a
political subdivision of the State of Texas under Chapter 366 of the
Transportation Code, is empowered to acquire, construct, maintain,
repair and operate turnpike projects; to raise capital for construction
projects through the issuance of Turnpike Revenue Bonds; and to collect
tolls to operate, maintain and pay debt service on those projects.
The North Texas Tollway Authority is currently looking to fill an
Internal Audit Manager position. The purpose of this position is
to plan and perform audits and business process reviews that will
improve the relevance, reliability, control and timeliness of
information being reported to executive management. These are
accomplished by interacting with all levels of management and liaise
with external auditors. Other duties include general ledger and
business process reviews, internal control reviews and recommendations
for best practices, verifying compliance with accounting policies and
operational reviews of fund assets.
Requirements include a Bachelor’s degree in Finance, Accounting, or
closely related field with 5+ yrs Management and/or Senior level
Internal Audit experience. Master's degree preferred. Must
possess policy development and implementation skills with the ability to
make budgetary recommendations that are aligned with organizational
goals. Knowledge of International Standards for the Professional
Practice of Internal Auditing, along with excellent technical and
comprehensive abilities. Strong project management, government
accounting/analysis, or fund accounting experience a plus. Requires
current certification applicable to job (i.e. CIA, CPA, PMI, CMA, etc.).
Valid Texas Driver License required.
We offer a competitive benefit package which includes, but is not
limited to, Health and Life Insurance, Paid Vacation, Sick, and Personal
time, 401K, Educational Assistance and a free Non-Revenue Toll Tag.
Application Deadline: November 13, 2009
For more information on this position please visit our web site at
www.ntta.org.
The North Texas Tollway Authority is an Equal Opportunity Employer.

Northrop Grumman Corporation (10/30/09)

Northrop Grumman Corporation is a global defense company
headquartered in Los Angeles, CA. Northrop Grumman provides
technologically advanced, innovative products, services and solutions in
systems integration, defense electronics, information technology,
advanced aircraft, shipbuilding and space technology. With more than
120,000 employees, and operations in all 50 states and 25 countries,
Northrop Grumman serves U.S. and international military, government and
commercial customers. We are currently seeking a Auditor Specialist –
Location: Irving, TX.
Job Description: Auditor Specialist: Provide data
analysis support to auditors during sector and enterprise reviews,
annual planning, and investigations. Analysis typically performed
using Audit Command Language (ACL) to write programs to test the
effectiveness of controls. Position includes requirements
gathering, ACL script development, testing, and support of audit
applications. Consult with auditors on scope of work and provide
advice and recommendations based upon the results of the tests
performed. Perform data analysis to determine the feasibility of
potential automated tests and monitoring routines.
Conducts financial and operational audits by examining and verifying
accounting, or operational records and/or procedures of internal and/or
external organizations to determine the reliability and effectiveness of
financial and control systems, material assets, liabilities, surplus,
income, and expenditures. Examines records to ensure proper
recording of transactions. Prepares reports of findings and
recommendations to management. May include auditing activities
under Sarbanes-Oxley. Some travel required. Special
Skills/Certification Requirements: CPA/CIA desired.
Knowledge, Skills and Ability
Contributes to the development of new concepts, techniques, and
standards. Considered expert in field within the organization.
Demonstrates the skill and ability to perform complex tasks. Able to
communicate effectively and clearly present technical approaches and
findings.
Problem Solving
Develop solutions to complex problems which require the regular use of
ingenuity and innovation. Ensures solutions are consistent with
organization objectives.
Discretion/Latitude
Most assignments are complex and performed independently without
appreciable direction. Exercises considerable latitude in determining
objectives and approaches to assignment.
Liaison
Serves as consultant to management and special external spokesperson for
the organization on major matters pertaining to its policies, plans, and
objectives. Acts as an advisor to senior management and customers.
Basic Qualifications: Bachelors degree and ten (10) years directly
related experience, 8 years with Masters and 4 years experience in SAP, Audit Command Language (ACL) and ACL Direct
Link required.
Interested candidates should visit
http://horizonscareers.northgrum.com/; Job Posting Number: CO/094934
If you would like your employment opportunities to appear in this
space or in the newsletter, eNews, please contact Brent Lapeze at
advertising@dallasiia.org.
|