In high-risk, regulated environments, testers must help to make sure that the
product — and their testing — satisfies auditors and regulators. It’s often said
that testing reduces risk — but can testing reduce risk when testers are not
responsible for designing the product, writing the code, or managing the
project?
Testers aren’t responsible for any of those things, but there is definitely one
kind of risk that the tester can defend against, and that’s the risk of oblivion to
problems that matter. In this presentation, Michael Bolton will help you to
develop ideas for test strategy in regulated contexts, and he’ll help you to
understand the tester’s role and its relationship to the rest of the team.
Agenda
- 17:00 drinks and nibbles
- 17:30 Main speaker
- 18:15 Panel
Speaker

Michael Bolton, has over 30 years of
experience testing, developing,
managing, and writing about
software. For over 20 years, he has
led DevelopSense, a Toronto-based
testing and development
consultancy
Panelists

Jason Wood, ISACA Auckland Board
Chair and Past President; and
Managing Director of Triple Ledger
Limited
Jason is a New Zealand
Chartered Accountant and USA Certified Public Accountant with a strong
background in auditing/assurance, risk and compliance, emerging technologies
(AI, blockchain), and financial services. He has over 29 years of international
business experience in Professional Services firms, in planning, conducting, and
quality reviewing complex information technology audits. Jason has an in-
depth understanding of financial, operational and information technology
risks, controls, and processes; and the implementation of cost-effective
internal controls to minimise risk and maximise value. Experienced at
presenting audit findings, reports, and strategies to executives and audit
committees, he is a people-focused leader who provides supervision and
coaching to team members that enables their individual growth. He is a proven
client-focused leader that knows the importance of managing clients’ needs
and expectations (both internal to the audit firm and external to the client).
Jason is also the Chair and Past President of the Information Systems Audit and
Control Association (ISACA) Auckland Chapter.
Moderator

Tatum Crisp, ISACA Auckland President and Head of Technology Risk at Westpac NZ
Tatum, an experienced people leader, boasts two decades of expertise in technology and cybersecurity risk. As the Head of Technology Risk at Westpac NZ, she oversees a team of highly specialized risk professionals. Before joining Westpac, Tatum held risk related roles at ASB, Sovereign (now AIA), Barclays Bank, and PWC. Her extensive experience spans both the New Zealand and United Kingdom financial services sectors. Notably, she currently serves as the president of the Auckland Chapter for ISACA.
Beyond her professional accomplishments, Tatum is deeply passionate about fostering a robust and sustainable risk culture. Her keen interest lies in understanding how behaviours and habits influence decision-making and risk-taking.