Monday March 7, 2016 8:30-9:45 A.M
Total Page:16
File Type:pdf, Size:1020Kb
Monday March 7, 2016 8:30-9:45 A.M. Opening Comments and North American Awards GS 1 A Call to Arms: The Role of the Chief Audit Executive in the (Ongoing?) Cyber War The Honorable Theresa M. Grafenstine, CIA, CGAP Inspector General House of Representatives In this session, participants will: Receive an overview of classic breach tactics. Describe what good security and controls look like. Discuss how the U.S. House of Representatives’ Office of the Inspector General has taken a proactive role in helping the House to address cyber threats. Identify tactics and strategies every internal audit function can and should take to be in a better position to respond if and/or when a breach occurs. The Honorable Theresa Grafenstine was named inspector general of the U.S. House of Representatives (House), having been unanimously appointed by the House Speaker, Majority Leader, and Minority Leader. Over the past 23 years, she has served in the inspector general community in both the legislative and executive branches of the Government. As the inspector general, she is responsible for planning and leading independent, non-partisan audits, advisories, and investigations of the financial and administrative functions of the House. Grafenstine is also an active volunteer in support of the IT, governance, internal auditing, and accounting professions, and currently serves as on the board of directors and on the finance committee of the American Institute of Certified Public Accountants (AICPA). She also serves as international vice president and audit committee chair for ISACA. In addition, she provides financial oversight as the audit committee chair of the Pentagon Federal Credit Union, with over $19 billion in assets and 1.2 million members. Monday March 7, 2016 10:15-11:15 A.M. GS 2 Navigating a Cyber Security Crisis Kelly Barrett Vice President, Internal Audit & Corporate Compliance The Home Depot In this session, participants will: Learn steps to take after a data security breach including customer and associate communication, navigating regulatory implications, press releases, and communications with Board of Directors. Hear about setting up an effective Incident Response Team. Explore best practices for data security and privacy governance. Gain an understanding of internal audit’s role in mitigating the risk of a data security breach and in the breach response if one occurs. Kelly Barrett joined The Home Depot in January 2003 as Vice President, Corporate Controller. In this role, she was responsible for all of the Company’s internal and external financial reporting including its filings with the Securities and Exchange Commission, as well as the Company’s Financial Controls and Financial Systems. In 2004, she led the world’s largest finance SAP implementation, an $80 million project and co-led the Company’s successful first year compliance with Sarbanes-Oxley 404. In October 2005, she was named Vice President, Internal Audit. As Vice President, Internal Audit, she has the responsibility for one of the Company’s Leadership Programs that serves as a pipeline of talent for The Home Depot. She is also responsible for developing and executing an Audit Committee risk-based audit plan and the Company’s Enterprise Risk Management function. In April 2007, she also assumed responsibility for Corporate Compliance. Prior to joining The Home Depot, she served as Senior Vice President and Chief Financial Officer for Cousins Properties Incorporated, where she enjoyed a very successful career for more than ten years. Cousins Properties Incorporated is a real estate investment trust based in Atlanta and traded on the NYSE. Before joining Cousins, she was an Audit Manager at Arthur Andersen in Atlanta where she worked for seven years. Kelly graduated from Georgia Tech in 1986 with highest honors and first in her class, earning a Bachelor of Science in Industrial Management. She is a Certified Public Accountant. In April 2006, she was inducted into the Georgia Tech College of Management’s Council of Outstanding Young Alumni which recognizes alumni for their career achievements and contributions to Georgia Tech and society. She serves on the Board of State Bank Financial Corporation, the publicly traded holding company for State Bank and Trust Company, one of Georgia’s best-capitalized banks. Kelly also serves on the Board of the YMCA – Metro Atlanta including the Executive Committee and Finance Committee; she was the volunteer Treasurer. She was recognized as the YMCA Volunteer of the Year in 2010. Kelly also serves on the Board of The Girl Scouts of Greater Atlanta where she is the Chair of the Audit Committee. Previously, Kelly served on the Board of Partnership Against Domestic Violence, where she was the volunteer Treasurer and received its Legacy Society Award in 2013. In addition, Kelly serves on the Georgia Tech Board of Trustees and is the Chair of the Advisory Board of Georgia Tech’s Scheller Business School. She is also a member of the Atlanta Rotary Club and serves on its Executive Committee. She and her husband, Rick, reside in Marietta, Georgia and both are recovering avid runners who now enjoy cycling and yoga. Kelly has completed four marathons, including two Boston Marathons. Monday March 7, 2016 12:30–1:30 P.M. CS 1-1 Developing IT Governance: Achieving Balance Among IT, Operations, and Internal Audit Mary Jo Flynn, CIA, CCSA Director, Audit Management, Compliance UnitedHealthcare Susan Heichert Sr. Vice President and Chief Information Officer Allina Hospitals and Clinics In this session, participants will: Increase your understanding of IT governance. Learn from a case study how IT governance was implemented in a health care system. Understand the role of internal auditing in promoting and sustaining IT governance. Identify the role and responsibilities of operations in the governance process. Discuss the challenges in the development and implementation process. Mary Jo Flynn has 30 years of health care experience in a variety of leadership positions. She joined UnitedHealthcare in 2013 as a director of the compliance audit department, leading a team of compliance auditors, risk assessment, audit plan development and execution, and collaborating with operational leadership and personnel. Previously, she was the CAE at Allina Health, having spent 17 years in that organization in a variety of leadership roles in operations, compliance, and internal auditing. As Chief Audit Executive, she was responsible for risk assessment, audit planning, conducting engagements, and department management of regulatory, IT, financial, and operational audit teams. In 2015, Flynn was elected to the Board of Directors for the Association of Healthcare Internal Auditors (AHIA). Susan Heichert has served in various roles during 11 years at Allina Health, with a focus on implementation of the Electronic Health Records (EHR). She is a member of CHIME (College of Health Information Management Executives) and is a Fellow of the Healthcare Information and Management Systems Society (HIMSS). CS 1-2 Are you Leading or Managing Others? Katherine Findlay Vice President, Internal Audit Southwest Airlines In this session participants will: Identify the leadership skills essential to organizational success. Understand how to LEAD rather than "manage" others. Discuss the makeup and requirements of today's workforce. Hear practical advice for effectively leading teams and addressing important issues. Katherine Findlay joined SWA’s internal audit group in 1993 before moving into the finance organization as director of maintenance finance and budgets. Since that time, she has led both financial and operational groups, and returned to internal audit, which champions compliance and offers practical solutions to improve business operations and assist in corporate governance, in 2010. Findlay has received SWA’s prestigious “Leading by Example” and “Winning Spirit” awards. Prior to joining SWA, she was a financial auditor at Ernst & Young. Findlay is member of the University of Texas at Dallas (UTD) Internal Audit Education Partnership (IAEP) Advisory Board as an advocate for the profession, continuing to host students and visitors as they explore careers in internal auditing. CS 1-3 Technology Champions: Key Enablers for Internal Audit Phillip Billington Vice President, Internal Audit HCA Healthcare Sarah Myers Director of Marketing & Strategic Alliances Wolters Kluwer In this session, participants will: Understand how appointing a technology champion can further the technology strategy of your department. Gain insights into the activities technology champions are carrying out that have the largest impact on productivity. Learn additional best practices from real-life examples. Sarah Myers has worked closely with many organizations using TeamMate to enhance their audit processes through automation. She has conducted many audit technology implementation and training sessions across the U.S. Meyers has also demonstrated and lectured on audit automation at a numerous conferences, seminars, and meetings. Prior to joining Wolters Kluwer, she spent 18 years in audit and audit technology at PwC, and has been working with TeamMate since 1997. CS 1-4 Auditing Strategic Risks: Approaches to Fit Your Organization Ann Scovil Vice President GoDaddy.com In this session, participants will: Consider whether focusing on strategic risk is right for your internal audit function. Identify approaches to gaining a greater understanding of your organization's strategy and strategic