Marriott Providence
1 Orms Street
Providence, RI 02904

Pre- and Post-Implementation Reviews:  Sanity Checks in the Systems Development Lifecycle

Implementing new systems has a unique and pervasive impact on how a company operates and manages their business.  Project Teams are tasked with the responsibility of getting these systems deployed by a specific date based on management's expectations, which frequently translates into shortcuts and bypassing steps that are viewed as time consuming.  The results can be costly both in dollars and resources.  By taking the appropriate steps during the implementation cycle, IT auditors can serve a valuable role in validating the effectiveness of defined procedures and controls help keep a project on track, on budget and on time.

This interactive session will discuss;

·           The value of pre- and post- implementation reviews in the systems implementation process;

·           The key risk areas any implementation review should focus on to provide the most effective information to all stakeholders;

·           Why timing of an implementation review is everything;

·           How the skill sets of IT audit can be effectively leveraged to help Project Teams meet their goals and management's expectations.

Rex Roberts, CISA

PricewaterhouseCoopers LLP 

Rex is a manager in the Hartford office Systems Process and Assurance (SPA) practice with more than 20 years of experience in information technology.  Rex has worked with clients in many industries to help evaluate the on-going effectiveness of key controls impacted by the implementation of new systems.  He has assisted clients by validating workflow and configuration controls that affect financial and operational data, post-implementation change control procedures and confirmed security designs to ensure appropriate segregation of duties are maintained. Rex has served as the engagement manager providing internal audit co-sourcing services for clients in the banking and insurance industries.  Rex works closely with audit management in the planning, staffing and execution of audits addressing all aspects of information technology, application and business controls and application management.  Rex has extensive experience with SAS 70 and other third party assurance controls audits for clients in the technology and financial services industries. Rex is also experienced in developing IT strategies and conducting business process reviews that help clients closely align their IT and operational needs with company business goals and objectives.  Rex is a Certified Information Systems Auditor (CISA), is Certified in the Governance of Enterprise IT (CGEIT), a member of the Information Systems Audit and Control Association and a member of the Institute for Internal Auditors.

Michelle Nolette

PricewaterhouseCoopers LLP 

Michelle is Senior Associate in our Systems and Process Assurance (SPA) practice in the Albany, New York office.   Michelle has ten years of extensive experience conducting 404, SAS 70 and IT general controls audits for clients various industries including utilities, manufacturing, government and banking.  She has also performed different specialized audits, including HIPAA compliance and technical security assessments for clients in the healthcare industry.  Michelle is well versed in IT control issues, such as Model Audit rule and Regulation AB that affect insurance and investment management companies and their business operations.  Michelle has technical experience with several ERP systems, including SAP, Oracle and JDEdwards, having conducted configuration and segregation of duties reviews in the pre- and post-implementation stages.  Michelle is an effective project manager capable of balancing multiple projects and priorities simultaneously while delivering high quality results that meet client needs.

See www.mapquest.com for directions.