April AGM Chapter Meeting In Person: Multiple Speakers and Topics 8 CPE

When:  Apr 18, 2024 from 08:00 to 18:00 (MT)
Associated with  Denver Chapter

Come join us for 8 hours for up to 8 hours of CPE!!

Agenda & Speakers:

8:30 AM-9:00 AM  Check In (no breakfast provided)
9:00 AM-10:50 AM - Leveraging Compliance to Build a Culture of Security
Blaise Wabo
Healthcare & Financial Services Leader 
A-LIGN 

Blaise is the Healthcare and Financial Services Director| Knowledge Leader at A-LIGN. With over 12 years of experience in Security Compliance and Risk Management, Blaise has a very unique background as a CPA, CISA, CITP, CCSFP and CCSK. Blaise has performed over 500 SOC 1/2 examination reviews and over 500 HITRUST/HIPAA assessments for Global 1000 and Fortune 500 clients in various industries. As a thought leader, Blaise is a sought-after speaker and has delivered several speaking engagements at well-renowned conferences such as HIMSS, HITRUST and ISACA. Blaise has also written dozens of blogs and whitepapers on the topics of Security Compliance, Telemedicine, HIPAA Security law, Blockchain technology and Third-Party Risk Management. Blaise is also the Diversity, Equity and Inclusion Network Chair at A-LIGN and manages the A-LIGN Denver office with over 30 employees. Blaise serves his community by volunteering at the Junior Achievement - Rocky Mountain, and at the Food Bank of the Rockies. Blaise also serves on the Board of Directors of ISACA Denver where he is actively involved in the professional mentorship program with college students. Prior to joining A-LIGN, Blaise was a Senior Accountant at Century Payments, Inc., and an Advisory Associate at KPMG.

Abstract:

In the fast-changing world of cyber threats, developing a security culture is essential. By applying strategic compliance effectively, organizations can experience a cultural transformation, placing security at the heart of their values.

This session, led by A-LIGN's Healthcare & Financial Services Leader/Director Blaise Wabo, will provide insights into current security trends, threats, and the critical role of compliance in organizational security. The discussion will also explore practical approaches for promoting a security-conscious culture and how compliance can drive cultural change.

Learning objectives:

1. Obtain insights into the current security trends, threats, and challenges.

2. Understand the pivotal role compliance plays in ensuring organizational security.

3. Explore practical methods and approaches for fostering a security-conscious culture.

4. Learn how compliance initiatives can serve as catalysts for broader cultural transformation within organizations.

5. Gain knowledge about successful implementations through case study analysis.

 
11:10 AM-12:00 PM - CSET Training
Kelsey Strub
Cybersecurity Advisor 
Cybersecurity and Infrastructure Security Agency

Kelsey servers as a Cybersecurity Advisor for the Cybersecurity and Infrastructure Security Agency (CISA).

Cyber Security Evaluation Tool (CSET): the Ransomware Readiness Assessment (RRA). CSET is a desktop software tool that guides network defenders through a step-by-step process to evaluate their cybersecurity practices on their networks. CSET—applicable to both information technology (IT) and industrial control system (ICS) networks—enables users to perform a comprehensive evaluation of their cybersecurity posture using many recognized government and industry standards and recommendations.
12:00 PM-1:10 PM - Lunch and ISACA Denver Chapter Annual Update
1:15 PM-2:05 PM - SOX Hot Topics

Nina Currigan
Partner, Technology Assurance 
KPMG 
 

As a Partner in KPMG’s Technology Assurance practice in the Denver office, Nina leads a team of professionals that specialize in risk and compliance services. She helps clients evaluate their risk management programs through internal audits, external audits, and SOC 1 and SOC 2 reports. She is also passionate about being an advocate for KPMG’s strong culture, and am proud to serve as a Culture Champion at the firm.
Summary:  Nina Currigan, KPMG Technology Assurance Partner, will lead a discussion over SOX hot topics, particularly related to Information Technology (IT) risks and controls.  Emerging and evolving areas of SOX focus for IT auditors include precision of user access reviews, manual journal entry risks and controls, and SOC 1 challenges and solutions.

Learning Objectives:  During this session, participants can expect to cover the following:

 

Understand common technology audit focus areas
Understand evolving expectations related to User Access Reviews
Identify manual journal entry risks and controls
Review emerging areas of focus related to SOC 1 Reports
2:15 PM-3:00 PM - Cybersecurity and Infrastructure Security Agency Services
Kelsey Strub
Cybersecurity Advisor 
Cybersecurity and Infrastructure Security Agency 
 

Kelsey servers as a Cybersecurity Advisor for the Cybersecurity and Infrastructure Security Agency (CISA). She is a Cyber Leader with Program Management skills and extensive experience leading diverse Cyber Teams in Network Operations, Cyber Transport, Client Support, Voice, Satellite Communications, RF Technology, and Mobile Telecommunications. She leads by example ensuring both cyber security and system protection vulnerabilities are minimized.
3:10 PM-4:00 PM - Ethics, AI and Organizational Risk
Dawn Gregg
Professor of Information Systems 
University of Colorado Denver 
 

Dr. Dawn G. Gregg is a Full Professor at the University of Colorado at Denver and is the Interim Associate Dean of Programs for the Business School. She also acts as the Director of Assurance of Learning for the Business School. Prior to her current role she has served as the Discipline Director for the Information Systems Area, Associate Dean of Programs and as the Administrative Director of the Bard Center for Entrepreneurship. She received her Ph.D. in Computer Information Systems and her M.S. in Information Management from Arizona State University, her M.B.A. from Arizona State University West, and her B.S. in Mechanical Engineering from the University of California at Irvine. While at CU Denver, she founded and was CEO of Developing Minds Software. Prior to her doctoral studies, she was employed for nine years as a research and development engineer. Her current research focuses on how to organize and maintain Web-based content so that it can be used to better meet business and special education needs. Her work has been published in numerous journals such as MIS Quarterly, the International Journal of Electronic Commerce, IEEE Transactions on Systems Man, and Cybernetics, Communications of the ACM, and Decision Support Systems. Specialties: Higher Education Management, Special Education Data Tracking, Service Oriented Architecture, Online Auctions, AI/Expert Systems, Decision Support Systems, Web Data Management (Data Quality), Web Development, , Electronic Commerce, Web 2.0 Programming Languages (Java, C++, Visual Basic, PHP, JavaScript, HTML/Dynamic HTML)

Ethics, AI, and Organizational Risk

 This talk will explore how ethics, artificial intelligence (AI), and organizational risk intersect. We'll start by stressing why ethics matter in AI development, covering issues like bias, transparency, and accountability. You'll learn how to integrate ethical practices into your organization and reduce risks when using AI. Real-life examples will highlight ethical challenges and motivate you to promote responsible AI.

Learning Outcomes:

 Understand key ethical principles for AI development and deployment.

Identify common ethical risks associated with AI in organizations.
Understand the legal implications of AI deployment.
Learn strategies to mitigate ethical risks and build responsible AI practices.

 
4:10 PM-5:00 PM - Third Party Risk Management

Kim Oldham
Consulting Senior Manager 
E&Y 
 

Kimberly Oldham is a Sr. Manager in the Risk Advisory practice of Ernst & Young LLP. As a member of this group, Kimberly has experience helping clients identify opportunities to increase the efficiency and effectiveness of business processes while decreasing their exposure to risk. Her professional experience includes process improvement, internal audit, and SOX compliance experience for global enterprises. Additionally, Kimberly has experience performing external audits, focusing on risk management, information technology processes and controls analysis and reviews; application control reviews, and business process analyses.

Agenda:

Defining third-party risk management (TPRM)
TPRM and integrated risk management
EY’s TPRM framework
AI and TRPM
Effectively responding to TPRM questionnaires received

Learning Objectives:

After this presentation, participants should understand the basic concepts of third-party risk management and how organizations are moving towards addressing third-party risk as part of a integrated risk management program. We will discuss a framework on how third-party risk can be assessed against. Participants should also understand how TPRM programs are evolving with the use of AI to make assessments more effective and efficient. Last, as organizations are ramping up more robust TPRM programs, their suppliers/customers may be receiving more and lengthier questionnaires so we will discuss a few leading practices on how to effectively triage and respond. 

 
5:00 PM-6:00 PM - Networking and Happy Hour
past_event
More information

Location

Wellshire Event Center
3333 S. Colorado Blvd
Denver, CO 80222

Contact

Don Mapes
3038194393
don.mapes@rubinbrown.com

Related Content