Inside Auditing September 7, 2012

Transcription

1 Please join the Coastal GA Chapter of the IIA on Thursday, September 20, in the Student Union building, Room C, at Savannah State University for a 1-hour CPE program as George Bishop, Director of IT Assurance Services for Hancock Askew & Company, presents The New Service Organization Controls Reporting Landscape What You Need to Know About SOC 1, SOC 2, and SOC 3. Lunch and Social 11:30 Program/Speaker 12:00 1:00 Director of IT Assurance Services, Hancock Askew & Company, LLP (770) gbishop@hancockaskew.com George Bishop is the Director of IT Assurance Services for Hancock Askew & Company LLP, a full service regional accounting firm with offices in Atlanta and Savannah, Georgia. In this role he leads the firm s IT internal audit, risk advisory, and Service Organization Controls (SOC) reporting services. He has over seventeen years of experience providing financial, operational, and information technology audit services. Advising and assisting many leading organizations from a range of industries has enabled George to develop a deep understanding of business processes, operational control, and risk management principles. George began his career with Coopers & Lybrand (now PricewaterhouseCoopers LLP) as a financial auditor, leading financial statement audits of both public and privately held companies. Later with PwC and with Ernst & Young LLP, he focused on IT Assurance Services, directing large engagement teams during IT and business process control projects, and served as an international Audit Quality Reviewer and as a leader in the development of SOC examination methodologies and training programs. More recently George led his own successful IT Advisory practice. Currently George helps Hancock Askew clients identify and evaluate IT risk, implement cost-effective controls and monitoring strategies, improve execution and performance, and provide assurance to their customers and other external parties. Some example areas Page 1 of 12

2 where he and Hancock Askew provide assistance include SSAE 16/SOC examinations, IT risk management and internal audit co-sourcing and augmentation, compliance examination readiness assessment and remediation, and design and execution of controls testing programs (e.g. for Sarbanes-Oxley). George holds a master s degree in Professional Accountancy from Georgia State University and a bachelor s degree in Management from Georgia Tech. He is both a Certified Public Accountant (CPA) and Certified Information Systems Auditor (CISA). The cost is $20 for members, $25 for non-members, and $12 for students and retirees. The cost for IMA and GSCPA members is $20. Lunch will be served. We will meet in the Student Union building, Event Room C (2 nd floor), at Savannah State University. (See campus map) From I-16: Take Exit 165 to merge onto GA-204 West toward 37th Street/Abercorn Street (.9 miles). Turn right onto Martin Luther King, Jr. Boulevard (.3 miles). Turn left onto W Victory Drive (2.7 miles). Turn right onto Skidaway Road (1.0 miles). Take slight left onto La Roche Avenue (.1 miles). Take the first left onto N Tompkins Road/Tompkins Heights. The guard at the entrance gate can give further directions to the Student Union building. Parking is available in front of or on the side of the Student Union building. The deadline for registration is Monday, Sept. 17th at 12:00 p.m. Payment is due the day of the event. Please make checks payable to the Coastal GA IIA. Cancellation must be made within 72 hours of the event or registrant may be charged the full amount for the event. You may register for the meeting by visiting the Coastal Georgia Chapter s website at Page 2 of 12

3 President s Message Coastal Georgia Chapter Members: I cannot believe it s already September! Kids are back in school, football is underway, and it is time to kick-off our Chapter year! This month, George Bishop, Director of IT Assurance Services for Hancock Askew & Co., LLP, will discuss The New Service Organization Controls Reporting Landscape What You Need to Know about SOC 1, SOC 2, and SOC 3. Join us on Thursday, September 20, at the Savannah State University s Student Union. Please see the meeting announcement in this newsletter for more information. Wendy McMillan I would like to welcome our newest chapter member, A ja Hollins-Wallace with the City of Savannah. Welcome A ja! If you are interested in hearing a particular speaker or topic, please contact Lora Jex, Programs Chair. Please remember to RSVP at our website no later than Monday, September 17, at 12 pm, to ensure we have an accurate headcount for catering. Lastly, I want to encourage each of you to find a way to get involved with our chapter. It may be as simple as coming to our monthly meetings or volunteering on an ad hoc committee. Sincerely, Wendy McMillan, CIA, CFSA, CRMA President Institute of Internal Auditors, Coastal Georgia Chapter Page 3 of 12

4 Certification News FAST APPROACHING - Closing Date for CRMA Professional Experience Recognition The Professional Certifications Board of The Institute of Internal Auditors (IIA) has announced the closing date for the Professional Experience Recognition (PER) period for the Certification in Risk Management Assurance (CRMA ). The CRMA is one more mark of professional distinction for internal audit practitioners. Earning the CRMA will assist you in demonstrating your ability to: Provide assurance on core business processes in risk management and governance. Educate management and the audit committee on risk and risk management concepts. Focus on strategic organizational risks. Add value for your organization. In North America the PER period will close on September 30, PER candidates must have applied and paid the application fee by this deadline. All qualifying documentation must be submitted by no later than October 31, Individuals interested in obtaining the CRMA during the PER must achieve a minimum of 155 points on the application in the areas of education, certifications held, and experience in the five domains of CRMA. Additional information on CRMA PER requirements can be located on The IIA s global website. Administration of the CRMA exam will begin in the 3rd quarter of Page 4 of 12

5 Certification News (continued) CIA 2013 Transition IIA Global Headquarters announced earlier this year the impending changes to the Certified Internal Auditor (CIA ) program scheduled for As the result of findings from a Job Analysis Study (JAS) for the CIA program conducted in 2011, the Professional Certifications Board (PCB) and the Board of Directors of The IIA have approved two key changes to the program. The JAS determined that the body of knowledge related to the profession of internal auditing has changed since the last exam content update in 2004, and therefore needs to be adjusted to reflect those changes. The first change will impact the exam structure, reducing the program from four to three exam parts. With the reduction in parts, The IIA will be eliminating the recognition credit provision previously applicable to Part 4. The final change consists of a realignment of the exam content outline and question count for each part. Below is a brief overview of the new outline: Part 1 Exam: Internal Auditing Basics Duration: 2.5 hours Question Count: 125 Part 2 Exam: Internal Audit Practice Duration: 2.0 hours Question Count: 100 Topical focus areas include: Topical focus areas IIA Mandatory Guidance include: Internal Control and Risk Managing the Internal Tools and Techniques for Audit Function Conducting the Audit Engagement Managing Individual Engagements Fraud Risks and Controls Part 3 Exam: Internal Audit Knowledge Elements Duration: 2.0 hours Question Count: 100 Topical focus areas include: Governance Risk Management Organizational Structure and Business Processes Communication Leadership IT/Business Continuity Financial Management Global Business Environment Page 5 of 12

6 Certification News (continued) The new content and three-part exam structure are scheduled to be implemented by mid The IIA is currently working to finalize the transition process for those who are currently in the CIA program and do not complete the program prior to the implementation of the new structure. Additional details related to the transition process can be found on The IIA's global website. Page 6 of 12

7 The Date: Friday, October 19 Institute of Internal Auditors and Wesleyan College Time: 11:15 a.m. 1:15 p.m. Place: Wesleyan College, Taylor Amphitheater (Park in Lot A, next to Taylor Hall, corner of Forsyth + Tucker Rds.) So You Think You (Don't) Want to be an Auditor? Was your auditing class a blur of abstract concepts and numerous forms? Do the concepts of vouching and tracing make your eyes glaze over? Do you think that all auditors do pretty much the same thing? Let five auditors give you a different view. On Friday, October 19th from 11:15 1:15, students from all Middle Georgia colleges will have the opportunity to network with audit professionals from different fields and hear first-hand about what their jobs entail. Auditors involved in fraud and forensic auditing, IT auditing, Enterprise Risk Management, and Internal Auditing will give a day in the life presentation and answer any questions you may have. All are welcome to join us for light lunch refreshments and hear any or all of the speakers. RSVP's are encouraged. A DAY IN THE LIFE OF AN AUDITOR SPEAKER SCHEDULE (all times approximate) 11:20 Will Hanley, Manager, KPMG (Forensic Advisory Services) Fraud and Forensic Auditing 11:50 Matt Jones, Manager, Thigpen, Jones, Seaton & Co. IT Auditing 12:20 Todd Giddens and Tim Veal, Partner and Owner, Nichols, Cauley, and Associates Enterprise Risk Management 12:50 Randy Pearman, Associate Director of Internal Auditing, Georgia Institute of Technology Internal Auditing and Fraud Examination If you plan on attending any of the sessions, please RSVP to MiddleGeorgiaIIA@gmail.com Kara Kostiuk, Academic Relations, IIA Middle Georgia For more information about the IAA, please visit: Page 7 of 12

8 Chatham County Government Page 8 of 12

9 Shared Internal Auditor Position Savannah State University (SSU) and East Georgia College (EGC) are two units of the University System of Georgia. SSU desires to expand their internal audit function and EGC desires to establish a half-time internal audit director position. Each institution believes that an enhanced internal audit function will support the improvement of governance, risk management, compliance and internal controls and will increase responsiveness to the Board of Regents and leadership. This position reports to the President of East Georgia College on matters impacting EGC and to the University System of Georgia Chief Audit Officer. This position also reports to the SSU Director of Internal Audit on matters impacting SSU. (See job posting) For more information, please contact Elaine Campbell, Director of Internal Audit & Advisory Services at Savannah State at or campbele@savannahstate.edu. Page 9 of 12

10 SOUTH GEORGIA COLLEGE Director of Internal Audit Position Here's a great opportunity for someone to start their own audit shop at two units of the University System of Georgia that are consolidating into one institution effective This position will have the chance to support this consolidation effort and after the consolidation continue with improving governance, risk management, compliance and internal controls. The position reports to the institution(s) president(s) and also to the University System of Georgia Chief Audit Officer (John Fuchko). Contact Jeanne Severns (jeanne.severns@usg.edu) or John Fuchko (John.Fuchko@usg.edu) if we can answer any questions about this position for you. (See job posting) Page 10 of 12

11 Upcoming Events IIA Coastal Georgia Chapter Schedule of Meetings/Events Date Meeting Topic Location Time Speaker CPE Fee Thursday, 9/20/12 The New Service Organization Controls Reporting Landscape What You Need to Know About SOC 1, SOC 2, and SOC 3 SSU, Student Union building, Event Room C Campus map 11:30 1:00 George Bishop, Dir., IT Assurance, Services Hancock Askew & Company LLP 1 hour $20 members $25 non-members $12 students $12 retirees October 2012 Stay tuned for more exciting speakers! Dates are subject to change based on speaker availability. Other Meetings/Events of Interest Date Meeting Topic Location Time Speaker CPE Fee Friday, 9/21/12 The Atlanta Conference 2012 Bridging the Gap The Cobb Galleria 7:00 5:45 Various See link $275 members $275 non-members $75 students Page 11 of 12

12 CONTACT INFORMATION OFFICERS BEGINNING JUNE 1, 2012 President Vice- President Wendy McMillan, CIA, CFSA, CRMA The Savannah Bancorp, Inc. Jeanne Conrade, CISA St. Joseph s Candler Health System Treasurer Monica Woods, CIA, CFSA, CRMA Wendy.McMillan@savb.com conradeje@sjchs.org Monica.Woods@savb.com Secretary BOG, Past President BOG, Past President BOG BOG BOG The Savannah Bancorp, Inc. Susan Hacker, CPA Armstrong Atlantic State University Tara Daniel, CIA Memorial University Medical Center Kelly Crosby, CPA, CIA Savannah-Chatham County Public School System Bev Askey, CIA Georgia Ports Authority Al Holzinger Words to Deeds Doreen Chery, CPA, CIA St. Joseph s Candler Health System susan.hacker@armstrong.edu DanieTa2@MemorialHealth.com Kelly.Crosby@sccpss.com BPlachy@gaports.com al.holzinger@yahoo.com CheryD@sjchs.org Page 12 of 12