Chapter Home | Training & Events | Careers | Members Only | IIA Home  

CFIIA Half Day Seminar including Lunch

Monday, May 10, 2010, 11:30 - 5:00 and 5:00 - 7:00
4.0 CPE hours
50.00 Members | 60.00 Non-Members | 10.00 Students
Contact: Tom Zimlich
 
Crowne Plaza (Downtown Orlando)

MAY 10, 2010

HALF DAY TRAINING  (12:00 - 5:00)

SOCIAL EVENT (5:00 - 7:00)

 
May 10th CFIIA Event
 
   


Business Continuity

Jose’s presentation will provide a high-level refresher of Business Continuity and its general components (Business Resumption, Crisis Management, Disaster Recovery), but will mainly focus on the full lifecycle of a mature Business Continuity program.  While discussing each phase of the lifecycle, Jose will touch on the purpose, key tasks, typical outputs / deliverables, and common challenges encountered by many companies.  Jose will also touch on the importance of planning, corporate governance, process design, enterprise risk assessments and business impact analysis, strategy design and selection, documenting the business continuity plan, implementation and testing the plan, and training personnel.  Lastly, Jose will also use a Capability Maturity Model to relay what various business continuity programs look like on the spectrum from “Ad Hoc,” all the way to “Optimizing.”

About the Speaker....

Jose Behar - Manager, CIO Solutions

Prior to joining Protiviti’s CIO Solutions practice in January of 2005, Jose developed his technical experience while working at Perry Ellis International, in Miami, Florida.  There he was a part of the MIS team and was involved in a variety of projects, some of which included: software implementation, data management, warehouse layout design reconfiguration/optimization, and data mining.  While at Perry Ellis, Jose also engaged in business process re-engineering projects, with specific focus on gaining efficiencies and producing more quality outputs.

 At Protiviti, Jose has provided services geared towards creating technology risk solutions.  Some of the areas that he has focused on are Business Continuity Management, Sarbanes-Oxley compliance, IT General Computer Controls, System Implementation Reviews and IT Audit.  He has also assisted Protiviti teams in verifying the integrity, reliability, and performance of critical IT business processes and controls for our clients.  In doing so, Jose focused on identifying, defining, determining underlying causes, and prioritizing risks.


 Identity Management

Description

What is Identity Management and how do I know if I need it?  How can my organization achieve true role-based access?  With the use of a real-life example, these questions and many more will be answered.

Topic for discussion will include

  •   What is Identity Management?
  •  Why the Big Push for IDM Systems?
  • Password Management
  •  Account Management
  • Role Management
  • Compliance Management

 Case Study – Healthcare / Insurance Company

  • The Pain Points
  • The Solution
  • The Benefit

About the Speaker....

Willy Alvarado - Senior Manager, Technology Consulting

Willy is a Senior Manager with Protiviti’s Technology Consulting division. He has over eleven years of consulting experience in a broad range of industries and services. He currently focuses on enterprise applications, information security / privacy, and IT audit.  He has key skills in the following areas: Payment Card Industry (PCI), Identity Management (IDM), and enterprise system design and implementation. 

 Willy graduated from the University of Florida with a BS Industrial & Systems Engineering and a MBA.  He currently serves on the Information Systems and Operations Management Advisory Board at the University of Florida.  He previously served on the Board of the local ISACA chapter from 2003 – 2007. 

 Willy currently lives in Kissimmee, Florida with his wife, Toni, son, Alex, and daughter, Gianna. He enjoys playing golf, basketball, and volleyball as well as watching pro and college sports (Go Gators!).  He is actively involved in the Knights of Columbus and the Family Life Ministry at Holy Redeemer Catholic Church. 

 


IT Risk Assessment


What is an IT Risk Assessment and how would my organization benefit from performing one? Tom will discuss the benefits and the methods for preparing for and executing an IT Risk Assessment as well as how to react to the results of the assessment.

About the Speaker....

Thomas Zimlich - Senior Manager, Deloitte & Touche, LLP

Tom has extensive experience in the identification and evaluation of risk and controls, specializing in the design, implementation, and testing of internal controls.  He is a Certified Information Systems Auditor (CISA) and has over 17 years of information technology related experience. Tom has led projects including information technology (IT) risk assessments, IT & business process control assessments,  pre/post implementation reviews, and business continuity assessments for internal/external audit clients. Prior to joining Deloitte, Tom filled various information technology consulting roles in the application development lifecycle.


Data Privacy

Data privacy issues continue to be a hot topic in the news.  This presentation will tell you why it matters to your company and how to start a data privacy initiative. 

 Topics for discussion will include:

  • Identity theft background
  • Recent data breaches
  • Legal background
  • How to assess your company's risk
  • Key steps in a starting a data privacy initiative

About the Speaker....

Rick Whitefoot - Manager, IT Audit, Darden Restaurants

Rick manages the IT audit function at Darden Restaurants here in Orlando.  He has over twenty years of information technology experience in various positions across the entire software development lifecycle.  He transitioned to IT auditing about four years ago and focuses on general computing controls to meet Sarbanes-Oxley requirements, IT risk assessments, information security and privacy issues. 

 Rick graduated from the University of Michigan - Dearborn with a BS in Industrial & Systems Engineering.  He is also a Certified Information Systems Auditor.

 

 

 


All contents of this Web site, except where expressly stated, are the copyrighted property of this IIA affiliate.
Chapter Home | Training & Events | Careers | Members Only