April Chapter Meeting

When:  Apr 21, 2021 from 16:00 to 19:00 (ET)
Associated with  Detroit Chapter

4:30 pm - 4:45 pm: Introduction/Community Discussion
This entire event is worth (2) CPEs

4:45 pm - 5:45 pm: Webinar Topic and Speaker
Future of Third Party Security
Mitushi Pitti – Director, KPMG Cyber Security Services Practice
Jonathan Dambrot – Principal, KPMG Cyber Practice, Global Third Party Security

With the security threat landscape evolving rapidly, cyber professionals face an alarming set of new vulnerabilities, especially in third-party security. The changing business and technology landscape is placing added pressure on third- party programs. KPMG has developed an interesting point of view on the overall third party security transformation journey and where the future of third party security is headed to. What got the organizations thus far will not help further to mature their third party programs and derive the right value from the investments and expenditure being made on building, managing, running the third party programs. There is a need to look at this through innovative lens which will help maximize the value.

5:45 pm - 6 pm: Break/Networking

6 pm -  7 pm: Webinar Topic and Speaker
Challenges Auditing DevOps
Jenina Brown – Exp Manager, IT Assurance – Grant Thornton

The rate of change in IT continues to increase which has led to the rise of agile software Development and Operations to support business demand. Organizations are presented with the challenge of balancing security and compliance risks while ensuring the benefits of DevOps is realized. Procedures for acquiring, developing, and maintaining software also vary within organizations and the structure of the system environment, software development techniques, and third party service providers present challenges for Auditors using a standard approach to evaluate risk. Grant Thornton will provide examples of challenges in the approach to auditing DevOps, discuss the impact to the audit engagement, and tailoring the testing approach to align with the organization’s deployment methodology.