Preparing for Your IT Examination

There is a big misconception that an IT examination is a technical security assessment focused solely on computer systems, the network, and logical controls. While the technological components and the IT department are most definitely included in the examination, it doesn’t start and end there. An IT examination has an enterprise-wide reach that covers technology as well as operations, including core processing, and all forms of information assets; physical and logical security; administrative, technical, and physical controls. Information and cyber security along with business resiliency, incident response, and outsourced third-party risk management are also key elements of the examination.

How exams are conducted has changed since the pandemic of 2020. Today, it is not uncommon for the examination to be a “hybrid” that includes an offsite review and an onsite presence. The scope and focus of the exam may also vary depending on the complexity of the institution and past examination results. To be adequately prepared for your next IT examination, whether you are a seasoned professional or new to the examination process you should attend this presentation.

What You’ll Learn

• IT examination basics
• Regulatory requirements
• Controls and security management
• Current hot spots
• Regulatory guidance

Who should attend
Senior management, operations, audit, compliance officers, IT staff, and anyone else responsible for preparing for and overseeing the examination program.

Presenter Bio
Susan Orr is a leading financial services expert with vast regulatory, risk management, and security best practice knowledge and expertise.

As an auditor and consultant, Orr is dedicated to assisting financial institutions in implementing appropriate policies and controls to protect confidential information and comply with regulatory mandates and best practices. Her expertise as an auditor and former examiner provides her the knowledge and expertise to conduct comprehensive IT general control and data security reviews and assist de novo institutions in the vendor selection process, preparing policies and procedures, and instituting controls. She also consults for numerous security providers and vendors helping them align products and services to meet institution regulatory mandates. Orr is a Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), and Certified Risk Professional (CRP).

Registration Options

Live Access, 30 Days OnDemand Playback, Presenter Materials and Handouts $279

• Available Upgrades:
  • 12 Months OnDemand Playback + $110
  • 12 Months OnDemand Playback + CD + $140
  • Additional Live Access + $75 per person