Managing DR Planning and Testing, IT Business Continuity Planning and Storage Management.

Coordinate the 2018 DR Test

Organise and support a forum of key internal Stakeholders (including the internal Disaster Recovery team, Service Management and architects) on DR activities and progress as part of the project.Represent the project DR programme to project management, technology and business committees.Manage NPP (New Payments Platform) DR requirements across the project.Direct and assist in outsources and internal teams to complete DR documentation.Assist in the completion of Operational Readiness evidence for all disaster recovery and business continuity elements.Prepare key project documentation (ie DR Strategy, Master DR Testing Strategy and DR Test Reports) requirements and get documents approved.Manage the execution of NPP DR tests, including internal and four outsource vendor support.Also assisted in SAT testing, implementation management and hypercare desk.

Manage DelPHI DR requirements across the project. Assist in definition of DR Scope and obtain formal MPL signoff. Direct and assist in scope streams to complete DR documentation.Obtain MPL acceptance and sign-off of the above documents applicable to in-scope DelPHI streams.Manage the execution of DelPHI DR test, including authorising communication across DelPHI and MPL and if necessary the alignment of resources outside of DelPHI Streams to assist with the test.

Coordinate the DR testing program for the group.Publish the annual DR testing calendar for the group.Developed DR Testing Strategy and Cloud Testing Strategy.Annual policy review and update.Implementation of a DR Capability Scorecard for the organisation.Coordinated DR Steering Committee.Provided input to projects on DR design and issues.Oversaw the planning and preparation for the major power works at the mainframe data centre that had the potential to disrupt operations.Cleared outstanding PHIAC and audit issues.Liaise with the Business Continuity team on areas of interest.Presented disaster recovery as part of the Security Week presentations.

Assist in document revision in support of the Annual Site DR test.Support in preparations for the Annual Site DR test.Represent disaster recovery issues in the Architectural Roundtable.Assist technology project in achieving DR sign-off for migration into production.

Development of a Business Continuity Plan template to be used operational locations and fit within the existing R3 (Ready, Respond & Recover) framework for crisis and event management.Prepare overall approach for the deliverables for form the Business Continuity Management enhancement program, including liaison points with the iM Disaster Recovery Planning.Construct a Business Impact Analysis Tool for use in operational locations.Visit operational locations in Australia, Asia, Europe and Africa and conduct risk workshops, BIA workshops and develop base Business Continuity Plans with the assistance of local and Regional R3 leads.Develop an approach for implementing Business Continuity Plans for Global Business Service Centres.Preparation of updates to Steering Committees.Participate in exercising Group Crisis Management Exercise.Participate in the evaluation of providers of IT services for data centre services.

Business Continuity Planning (BCP) Project. The development and implementation of BCP’s for key business processes for Global Business Services (GBS) globally. This project includes under-taking Business Impact Analysis (BIA) workshop, plan development, integration with WorleyPar-sons R3 framework.

Assist assigned technology development projects to identify, quantify and manage risks.Assist assigned technology support teams to identify, quantify and manage risks business as usual technology risk registers.Assist the technology component of a major bank change initiative with identification, quantification and management of risks.Develop technology risk escalation process to present technology risks to business Stakeholders.Develop risk profiling for reporting for business Stakeholders for their technology services.Conduct training with project and technology support teams in relation to risk management.Conduct training with other risk staff on areas of expertise.

VictoriaResponsibilities:Market development for new clients in the state of Victoria and assist in the development of clients in NSW.Advise on component relating to elements of Business Continuity Management frameworks and associated risk assessment and treatment for:Crisis Management;Business Continuity Planning;Disaster Recovery Planning; andEmergency Management.Conduct training for certification examinations on behalf of the Business Continuity Management Institute (Singapore).

Worked on an individual client in the superannuation / investment management sector to undertake:Revise the BCM Framework and underlying methodology for Senior Management approval.Integrate Business Continuity Planning with the corporate Risk Management Process.Develop drill schedule and supporting templates for a three year programme.Assist with implementation of the revised BCM framework into underlying organisational processes.Development of templates and tools to assist in Crisis Management, BCP and DRP planning.Revise BIA's for the organisation.Assist in coordinating Crisis Management and DRP drills.

Development of DRP Framework and underlying methodology for Senior Management approval. Framework was adopted as a global standard.Development of underlying policy in to support the DRP framework.Assist with implementation of DRP framework into underlying team processes.Review and update corporate BCM policy to align with DRP Framework.Development of templates and tools to assist in DRP and BCP planning.Revise BIA's for IT teams.Development of a BC Plan for IT team and validate by conducting a desktop exercise.Assist in coordinating mainframe, AS/400 and windows based DR tests.Provide assistance to IT projects in planning for DRP.Assist in revision of IT risk management policy.

Discipline Lead for the BCM and DRP service lines.Consulting and project managing BCM assignments with Global and Australian based companies (from BIA to testing, including template development).Provided BCM benchmarking studies against relevant standards for corporate and government bodies.Provide internal support for BCM and DRP projects for WorleyParsons globally.Develop light version BCM templates for SME clients.Undertake BCM training for Standards Australia (SAI), the Continuity Forum and the Australian Government.Developed business relationships with clients and insurance industry groups.

Develop methodology for the application controls (and general methodology) assessment within the Sarbaines Oxley Project for ANZ.Devise an approach to bring together business, technology and risk & control expertise to identify and access application controls within the Sarbaines Oxley Project.Make presentations to Line and Senior Management.Create a framework, training materials and related tools for assessment for applications controls for the Group, including a liaison role with NZ.Liase with external auditors on approach and progress.

Coordinate testing program, including mainframe, AS/400, Unix and Windows platforms.Compete Disaster Recovery components for project under development for Unix, Windows, communications, e-commerce and high availability systems. DR Components includes:Conducting Business Impact Analysis (BIA),Risk assessment of the environment, DRP Strategy development, Test coordination, Test reporting to Stakeholders and establishment of DR Plan.Conduct risk awareness sessions, BIA and rehearsals for technology teams.Specific key projects that have a direct relationship to the position being sought involved the DR Planning in relation to the following projects:Project Manager responsible for the coordination of the DRP Stream for the integration of the ANZ and National Bank of New Zealand.Redevelopment of ANZ Investment Banking (ANZIB) systems. Individual projects related to the implementation/major upgrade of systems for Foreign Exchange (FX), Capital Markets (Front & Back Office), FX Options, Credit Risk and various FX dealing bid systems, which facilitated FX trading to ANZ and non-ANZ customers through broker arrangements.Replacement of the entire Australian telling network (733 branches) with a new GUI based system. This included the review and testing five infrastructure layers of the centralised environment.Integration of communications and systems in the ANZ and ING Joint Venture ING Australia (INGA). This overall project was split into a number of individual projects relating to the relocation of systems an overall communications strategy between the two partners.

Manage team of consultants in Melbourne and Sydney, including resource scheduling, revenue forecasting and performance reporting.Undertake risk assessments of IT environments in support of financial statements audit and independent review for Commonwealth and State Agencies in the Health and Emergency Services sectors.Conduct a focussed risk assessments and develop risk mitigation strategies for a major customer in the entertainment industry. The DR planning for the implementation of a new workflow and image management process for loan applications for a major Banking client. The implementation was used by their Small to Medium Enterprise (SME), Mortgage and Credit Card market segments. This has been presented to the AFF as a case study on the development and testing of client server environments.Development of a DR Plan for the business management of the recovery of an outsourced IT environment for a major finance and insurance company.

There are three basic responsibilities for my position:Manage client relationships for clients in greater Victoria, Darwin and Port Moresby.Conduct “IT general controls reviews” (ie IT risk and security reviews) in support of financial audit clients.Manage members of the Control Assurance service line, including file review, scheduling, billing, performance management and counselling.Specific key projects that have a direct relationship to the position being sought include:Conduct and manage IT general controls reviews in the manufacturing, finance, manufacturing, health, insurance, energy, food and services industries.Two assessment of information technology environment as part of a due diligence process for company purchases (manufacturing and banking industries).Secondment with an international internal audit team form to provide IT audit support for an automotive multinational.

My basic responsibilities for my position:Assess the IT risk in relation to all projects under development within the Bank.Specific key projects that have a direct relationship to the position being sought include:Assessed the IT risk associated with the implementation of a Credit Risk system within Global Wholesale Financial Services (GWFS).Assessed the IT risk associated with the implementation of a Market Risk system within GWFS, this also included conducting a data integrity verification process that help contribute to the obtaining the lowest capital adequacy ratio of all of the major Australian banks.Assessed the IT risk associated with the prototyping of a Customer Relationship Management (CRM) system, ie the data mining of customer information with a view to ascertain their propensity to purchase a product from the Bank.

Specific key projects that have a direct relationship to the position being sought include:Performed a legal compliance review of the Trustee business, this included the development of an assessment framework, with the assistance of the corporate legal department, conducting the fieldwork and documentation of findings for Senior Management and External Audit.As a result of the above review I was invited to participate in the re-engineering of all business and technology systems within the Trustee business. My primary role was to advise on risk and compliance issues.Review of product development business cases.Developed data interrogation software in support of internal audit reviews and as a service for Ernst & Young in support of their financial audit process.Was the Network administrator for the Novell LAN for the Internal Audit, Investigations and Executive business groups.

Appendix 1 Courses AttendedBasic Audit Training Courses (Audit Office 1985 & 1986)Computer Assisted Audit Techniques (Audit Office 1986)Introduction to SAS (Audit Office 1988)EDPAC (EDP Auditors Association 1988 1990 1994)Auditing in a Micro Computer Environment (Audit Office 1989