Jean-Sébastien Trudeau, Msc, Crisc Email and Phone Number

Review of the ITGC (general computer controls) environment and IT processes:• Assessment of IT processes (mainly change management, operations, access to programs and data, and project development);• Review of IT Project management and implementation activities (project initiation, analysis and design, testing and quality assurance, data conversion, go-live, documentation and training);• Review of automated application controls (input controls, application security and access rights definition) and segregation of duties;• Documentation and evaluation of key management processes related to IT Management;• Identification of recommendation points to reduce risk exposure.Security assessment: • Review of the logical security over data, settings, user access rights, data ownership, physical security, business security planning, technical architecture, etc.;• Review of security and controls surrounding multiple ERPs (SAP, JDE, Oracle Financials, BAAN), and surrounding operating systems (UNIX, AS400, Window NT) and databases (Oracle, SQL2000);• Identification of recommendation points to reduce risk exposure.Application environment assessments:• Review of automated application controls (input controls, application security and access right definitions);• Review of segregation of duties within SAP;Diagnostic of the ITGC (general computer controls) environment within the context of a SOX 404 certification:• Review of client documentation of internal controls;• Evaluation of control design and operating effectiveness;• Evaluation of compliance with documented policies and procedures;• Identification and documentation of control deficiencies;• Documentation of the impact of deficiencies on the certification conclusion.Specialties: IT Audit, IT security assessment