South Texas ISSA "Mock Audit" Workshop June 10, 24 & July 1, 8 2024

South Texas ISSA

What: Instructor Led Training (8 CPE Hours)

When: June 10, 24 & July 1, 8 2024 (four sequential sessions)

Hours: 11:30 am CDT – 1:30 pm CDT

(lunch will be provided)

Instructor:

Dr. Tom Duffey, ITEGRITI Director of Security and Compliance (Education) & South Texas ISSA Education Director

Location: Microsoft Corporation

750 Town and County Bld, Suite 1000

Houston, TX 77024

(832) 252 - 4300

ISSA Members: $80, includes 8 CPEs

ISSA Non-Member: $160, includes 8 CPEs

(Seating is limited)

Prerequisites:

• Knowledge of basic security and cloud computing concepts

• Familiarity with general cybersecurity principles

Required Equipment:

• Participants will need to bring a laptop computer to participate in this training

Skills Training Description: These discrete sessions, spanning multiple weeks, will cover auditing/inspection basics, focusing on multi-level evidence preparation and evaluation (completeness and applicability). "Mock Audit" attendees will better understand the audit process, personnel roles, and what the before, during, and after entails.

This workshop will benefit security and compliance professionals working in auditable fields or those who are interested in them (e.g., utilities, O&G, finance, healthcare, etc.) that want some hands-on experience learning about audit preparation and mock audits. Topics covered will include:

• Introduction to auditing

• Level 1 evidence (documentation)

• Level 2 evidence (implementation)

• Auditing interviews (knowledge)

Note: The four sessions are meant to be taken in sequence. Each week, class exercises will be accompanied by participant "homework" to be completed between sessions and due the next session, simulating audit/inspection data requests.

Instructor Bio:

“Dr. Tom” Duffey, ITEGRITI Director of Cybersecurity and Compliance (Education) & South Texas ISSA Education Director

(CISSP, CISM, CISA, C|CISO, CGRC, CDPSE, C|EH, CCNP-S, FITSP-M, GCIP, MCSE, PMP)

Dr. Tom specializes in critical infrastructure cybersecurity and regulatory compliance for the defense, healthcare, and energy (utilities and oil & gas) sectors. He brings over 30 years of experience in different roles to the table and is passionate about protecting operational technology (OT) and the Internet of Things (IoT) for various industries. Tom’s diverse consulting, training, and project management experience also includes supporting multiple military branches (U.S. Army, Navy, Air Force, Marines, Army Reserve, and Air National Guard) at numerous CONUS and OCONUS facilities across the globe.

Dr. Tom leads OT/IT/IoT critical infrastructure protection education delivery efforts for multiple ITEGRITI clients and is part of local boards and leadership. Teaching and learning are two of Dr. Tom’s biggest passions. Along with contributions to numerous security thought leadership efforts, including a World Economic Forum whitepaper, and leading two domain rewrites for the EC-Council C|CISO Body of Knowledge. Dr. Tom earned his Doctoral degree in Computer and Information Security. His dissertation explores the Impact of NERC CIP regulatory compliance on security and risk. He currently participates in multiple NERC efforts and serves in other supporting roles, including ISSA South Texas Education Director, InfraGard Houston Energy Cross-Sector Council Programs and Education Director, ISACA Greater Houston Chapter Deputy Education Director, ISA Houston Deputy Education Director, and NERC Supply Chain Working Group Vice Chair.

Questions: Contact "Dr. Tom" Duffey, ISSA South Texas Education Director ([email protected])

Please Note: ***Registration closes Sunday, June 9, at 8:00 AM Central***

Also Note: Members, please verify your email address on file with ISSA. This is where all course correspondence will be sent to members for CPEs.

Host or Publisher South Texas ISSA