TACUA
APRIL 15 - 18 SAN
ANTONIO
ANNUAL CONFERENCE
* No Prerequisites
2 1 . 5 C P E H O U R S - $ 3 9 5
M E S S A G E F R O M
Y O U R P R E S I D E N T
On behalf of the 2018-2019 TACUA Board, I would risk trends, IT, research, and becoming a
like to invite you to the 2019 TACUA Annual trusted advisor. With 21.5 CPE’s at just over $18
Conference. We could not be more excited about per credit hour, TACUA offers a great
our amazing slate of speakers as well as our conference experience with quality content at
spectacular location at the San Antonio River more than 50-75% less cost than other related
Walk. With great networking opportunities and conferences without having to leave Texas. I
extremely affordable pricing, this conference is a certainly hope you are able to take advantage of
perennial must attend. This year’s speaker slate
this opportunity. I look forward to seeing you in
includes a wide range of interactive sessions
beautiful San Antonio!
including topics on leadership, human deception,
Rob Carter
TACUA President
2 0 1 9 T A C U A O F F I C E R S
Brandon Morales, Treasurer Letty Charbonneau, Secretary Robin Woods, President Elect Ali Subhani Officer-At-Large, Carole Fox, Officer-At-Large Tahlia Pena, Officer-At-Large
University of Texas- Austin Lone Star College Texas A&M System Texas Woman's University Texas State University System Texas State Technical College
TACUA | 2
PAGE 3 TACUA ANNUAL CONFERENCE
Kevin Robinson is the Associate Vice President
for Audit, Compliance & Privacy at Auburn
University and a past president of the
Association of College and University Auditors
(ACUA).
Kevin also serves as an adjunct member of the
faculty in the School of Accountancy at Auburn
University’s Harbert College of Business. Kevin
currently teaches “Fraud Examination” annually
in the Masters of Accountancy Program.
Kevin is a frequent speaker on the topic of
occupational fraud, fraud prevention, internal
controls, risk management, and leadership.
Kevin is the primary author of the highly
popular monthly electronic newsletter “Case-in-
Point: Lessons for the Proactive Manager” which
discusses emerging risks in higher education. K e y n o t e S p e a k e r
He has also published articles in ACUA’s
“College and University Auditor” and has been
quoted in “The Business Officer” magazine, Kevin Robinson
“USA Today,” and other newspapers and
articles.
Stretch Your
Training Budget
Make your training budget go further while benefiting from quality
training.
PAGE 4 TACUA ANNUAL CONFERENCE
Described as the “Cream of the Crop” when it
comes to entertainers, Banachek is the world’s
leading mind reader. Having astounded
audiences across the globe, his talents are so
incredible that he is the only mentalist ever to
fool scientists into believing he possessed
‘Psychic powers’ then later reveal he was fooling
them.
Featured on CNN Live, NBC’s Today Show, and
numerous network TV specials, he is the
authority on creating the impossible.
Performers around the world such as Uri Geller,
David Blaine and Criss Angel seek his
performing expertise, while Fortune 500
companies, casinos and theaters seek him for his
outstanding performing abilities – a mind
blowing display of incredible feats, ESP &
impossible prediction. Banachek reduces cutlery
to a near liquid metal state and reads thoughts
that no one could possibly ever know. It’s an
exhilarating journey into the unknown.
W o r l d r e n o w n e d
m i n d r e a d e r Banacheck
Register prior to March 19, 2019 to get the discounted rate of $395. Registration
fee covers all conference sessions, breakfast and lunch during the conference,
and two evening receptions. Please make checks payable to TACUA and send to:
UT Austin Internal Audit
c/o Brandon Morales, TACUA Treasurer
1616 Guadalupe Street, Suite 2.302
Austin, TX 78701.
Complete the registration online prior to sending payment.
Venue
PAGE 5 TACUA ANNUAL CONFERENCE
A warm welcome awaits guests at this San Antonio hotel in the heart of the
beautiful riverside city, home to The Alamo; near the River Walk. Whether
traveling on business or pleasure, or perhaps a bit of both, we think you’ll enjoy
having this enviable location as your base while absorbing both the work side
and the fun side of San Antonio.
La Quinta Inn River Walk
Location : 303 Blum St, San Antonio, TX 78205
Reserve Your
Hotel Room
Today
Phone : 866-527-1498 (option 1)
Property: 0501
Group Code: TX Association of College
and University Auditors
Group Rate: $ 126
Make your reservation by
Note: Confirm the reservation agent is March 19, to secure the
searching for 'TX' and not 'TEXAS' when
making the reservation. group rate of $126/night.
Amenities include:
Complimentary full, hot breakfast
Free High-Speed Internet Access
Free Wireless High-Speed Internet Access
Free Local Calls
Business Center
Outdoor Swimming Pool
Spa
Fitness Center
PAGE 6 TACUA ANNUAL CONFERENCE
Sightseeing
It’s a quick walk to Texas’ number one attraction, The
Alamo. Walk along San Antonio’s delightful 2.5 mile
River Walk, ride a sightseeing boat, dine al fresco
along the river banks, see a film at our historic movie
palace, or enjoy a live production at the Ameson River
Theater. The city welcomes more than 20 million
visitors each year, and San Antonio is growing still, as
headquarters to several Fortune 500 companies.
Known as the home of chili, San Antonio’s Tex-Mex
dining is unbeatable. There’s a lot to see and do.
Local attractions:
River Walk
The Alamo
Fort Sam Houston
San Antonio Zoo and Botanical
Gardens
Six Flags Fiesta Texas
SeaWorld
Make your reservation by Come see
March 13th to secure the
group rate of $157/night.
what San
Antonio has
to offer!
P A G E 7 TACUA ANNUAL CONFERENCE
A T A G L A N C E
M O N D A Y T U E S D A Y W E D N E S D A Y T H U R S D A Y
7 : 0 0 A M 7 : 0 0 A M 7 : 0 0 A M
Enjoy a full complimentary breakfast at your own pace in the breakfast bar located on the first floor
8 : 0 0 A M
8 : 0 0 A M 8 : 0 0 A M
Risk Trends in Higher Moving the Pendulum of I Want YOU for IT Audit -
Education - Kevin Robinson Auditor to Trusted Advisor -
Mark Salamasick Chesney Cote
9 : 3 0 A M - 1 0 : 0 0 A M
Morning Break Morning Break
1 2 : 0 0 - 1 : 0 0 P M 1 0 : 0 0 A M 1 0 : 0 0 A M 1 0 : 1 0 A M
The Era of Data Privacy: A Tales from the Trenches: Using Data Analytics and
Open Registration Lessons Learned about
101 for Higher Education - Visualizations to Monitor
Jon Allen / Doug Welch Auditing Research - Sponsored Projects -
Toni Stephens Erin Baker
1 : 0 0 P M 1 1 : 4 0 A M - 1 2 : 0 0 P M
1 1 : 3 0 A M - 1 : 0 0 P M
Opening Remarks
Lunch Lunch Boxed Lunches
& Departures
1 : 1 5 P M 1 : 0 0 P M 1 : 0 0 P M
Leadership - Effective Leveraging of Internal Event Sponsors
Becoming an Auditor Assessing the Health of Audit Functions to Navigate the
of Influence- Student Wellness Title IX Conundrum -
Kevin Robinson Initiatives- Baker Tilly Gina Smith / Rob Carter
2 : 4 5 P M - 3 : 1 5 P M 2 : 3 0 P M - 3 : 0 0 P M
Afternoon Break Afternoon Break Afternoon Break
3 : 1 5 P M - 4 : 4 5 P M 3 : 0 0 P M 3 : 0 0 P M
Confronting Bias and Auditing Social Media
Cognitive Dissonance by Director's/Staff Roundtable Effectively-
Facing Deception- Ali Subhani / Ray Khan
Banachek
5 : 3 0 P M 5 : 3 0 P M
Opening Networking
Night Reception Reception
P A G E 8 TACUA ANNUAL CONFERENCE
S C H E D U L E Monday, April 15
N O O N Open Registration
1 : 0 0 P M Welcome & Opening Remarks
Rob Carter, 2019 TACUA President
1 : 1 5 P M Leadership - Becoming an Auditor of Influence
Kevin Robinson, AVP for Audit, Compliance & Privacy - Auburn University
Internal auditors are only as successful as their ability to influence the behavior
of others. This session will look at ways human behavior is influenced and how
we can use these concepts to become more influential on campus.
2 : 4 5 P M Afternoon Break
3 : 1 5 P M Confronting Bias and Cognitive Dissonance by Facing Deception
Banachek
This session will demonstrate the trappings of cognitive bias. In this interactive
session, attendees will be shown the ramifications of basic predilections in
order to tighten critical thinking skills.
Banachek was tested by scientists over a four year span, to be confirmed as an
authentic psychic, only to reveal that it was a hoax to expose predilections. He
has subsequently become one of the words foremost experts on deception,
skepticism, and cognitive bias. Banachek is respected as the greatest
Mentalist/Mindreader in the world.
Session cosponsored by:
5 : 3 0 P M Opening Night Reception
Heavy hors d'oeuvres. Drink tickets provided courtesy of
P A G E 9 TACUA ANNUAL CONFERENCE
S C H E D U L E Tuesday, April 16
7 : 0 0 A M Breakfast
Risk Trends in Higher Education
8 : 0 0 A M Kevin Robinson, AVP for Audit, Compliance & Privacy - Auburn University
It has been said that higher education faces more unique and diverse risks than
any industry today. This session will take a fast paced look at various risks
facing higher education and consider some new risk topics that may be
emerging.
9 : 3 0 A M
Morning Break
P A G E 1 0 TACUA ANNUAL CONFERENCE
S C H E D U L E Tuesday, April 16
1 0 : 0 0 A M The Era of Data Privacy: A 101 for Higher Education
Jon Allen, CISO & Interim CIO - Baylor University
For the last ten years there have been occurrences that brought privacy
discussions to the forefront. Up until 2018 those discussions quickly quieted
and little changed in practice or regulation for most organizations. 2019 is
poised to have significant change applied to organizations around privacy.
Understanding the base concepts of privacy and what the different control
mechanisms for change are crucial in this quickly evolving space.
Jon Allen is the CISO and Interim CIO at Baylor University. He has been
working in information technology and information security for over twenty
years. Jon is a member of the Educause Effective Practices committee, and the
SANS EDU advisory council. He has presented at RSA, Educause, Treasury
Institute PCI workshop, SEAT and IANS on topics ranging from PCI compliance
to InfoSec in the age of Cloud and Agile IT.
Doug Welch, Chief Privacy Officer - Baylor University.
Doug Welch, JD, CPA, is the Chief Privacy Officer at Baylor University. After
serving 10 years as Associate General Counsel and 2 years as Chief Compliance
Officer, in July 2019, Doug accepted the challenge of establishing a
comprehensive privacy strategy for the university in the midst of 3 data
systems conversions. Currently the lone inhabitant of the Privacy Office, Doug
is working on coordinating the diffuse privacy functions across campus,
establishing privacy compliance programs, conducting privacy assessments and
gap analysis and chairing the University Privacy Committee. Doug is a member
of the National Association of College and University Attorneys, the
International Association of Privacy Professionals and the Educause Higher
Education Chief Privacy Officer workgroup. Doug is a graduate of Baylor
University (BBA-Accounting) and Texas Tech University School of Law. Prior to
arriving at Baylor, he worked for 3 years in public accounting, 2 years for the
federal courts and 13 years in private law practice.
1 1 : 3 0 A M Lunch
P A G E 1 1 TACUA ANNUAL CONFERENCE
S C H E D U L E Tuesday, April 16
1 : 0 0 P M Assessing the Health of Student Wellness Initiatives
Kim Ginn, Principal - Baker Tilly
Safety and self-care are essential to students’ academic success and personal
effectiveness. As such, higher education institutions of all sizes should make
student wellness a key priority by offering formal programs that support
students in maintaining social, emotional, physical, intellectual, and spiritual
wellness. Institutions face various risks when addressing student wellness,
including a myriad of applicable laws and regulations, increased prevalence of
mental health needs and alcohol and drug issues, complex academic and social
environments, and under-addressed wellness needs of various groups of
students. Many institutional areas are responsible for different facets of
student wellness, including student affairs, academic affairs, student health
services, counseling services, residence life, Title IX administration, athletics,
legal affairs, and safety and security. This presentation will focus on helping
internal auditors understand the myriad risks related to student wellness and
consider different methods for evaluating the effectiveness and efficiency of
their student wellness infrastructure and initiatives.
Kimberly has more than 18 years of experience assisting organizations with
enhancing their business processes, reducing costs, designing robust and
compliant infrastructures, and navigating myriad federal regulations that affect
higher education, research institutions, academic medical centers and not-for-
profit organizations. Prior to joining the firm, Kimberly worked as an internal
auditor for the Department of Defense Office of Inspector General conducting
contract, procurement and environmental audits.
John Kiss, Director - Baker Tilly
John Kiss is a Director in Baker Tilly’s higher education and research
institutions industry consulting practice, as well as its national risk, internal
audit, and cybersecurity services practice. These practices provide services in
the areas of enterprise risk management and institutional compliance
programs, internal audit, financial and operational risk management,
construction audit, fraud investigation, cybersecurity and technology risk
consulting, and organizational governance. In addition to his extensive work
with higher education and academic medical center clients, John serves the
healthcare, financial services, federal, manufacturing, not-for-profit,
government contracting, and professional services industries.
John holds a BA in Information Systems Management and a MS in Accountancy
from Wake Forest University. John has presented at conferences of the
Association of College and University Auditors, the Institute of Internal
Auditors, the College and University Professional Association for Human
Resources, Big 12 Internal Audit Conference, and other not-for-profit
associations.
P A G E 1 2 TACUA ANNUAL CONFERENCE
S C H E D U L E Tuesday, April 16
2 : 3 0 P M Afternoon Break
3 : 0 0 P M Breakout Session
Director's Roundtable and Staff Roundtable
Please email Rob Carter topics that you would like to discuss during the
session. Rob's email address is [email protected]
*Gather your new friends and head out to dinner. (Dinner is not included in the
conference registration cost.)
P A G E 1 3 TACUA ANNUAL CONFERENCE
S C H E D U L E Wednesday, April 17
7 : 0 0 A M Breakfast
Moving the Pendulum of Auditor to Trusted Advisor
8 : 0 0 A M Mark Salamasick, Executive Director of Audit - UT System
This session will address opportunities to become an improved business
partner through building a Trusted Advisor relationship. Included will be
examples of trusted relationships and how to get there. Mark will present an
Internal Auditor Trusted Advisor Maturity Model that will assist you in
developing your roadmap for the future and moving the pendulum. Mark will
also address what skills are required to be successful in your partnership to
management. Attendees will learn:
- How to overcome the challenges in becoming a Trusted Advisor
- Maturity model for Internal Audit Trusted Advisor
- What skills are required to improve relationship management
- What types of audits present the best opportunity to improve audit
relationships
Mark Salamasick is the Executive Director of Audit at UT System. In this role he
assists the Chief Audit Executive in a supportive role to the institutions in
providing audit coverage. This role includes advancing progressive strategies
and initiatives outlined for the internal audit enterprise across the UT System.
9 : 3 0 A M Morning Break
Tales from the Trenches: Lessons Learned about Auditing Research
1 0 : 0 0 A M Toni Stephens, Chief Audit Executive - University of Texas at Dallas
Once upon a time in a land called Texas, universities began doing research.
University researchers brought in lots of money to the universities. Regulators
began enacting laws to govern the research funds. Auditors were brought in to
provide assurance that these funds were being effectively managed and funds
were being spent in accordance with these laws. As the great state of Texas
grew, so did research, and now it’s not only one of the highest risks at a
university, it’s one of the most valuable audits on the audit plan.
Learn how to audit research happily ever after by listening to tales and lessons
learned from auditing research. After attending this session, you will be able to:
• Understand common research risks
• Provide audit procedures for common research risks on university campuses
• Learn the updated Yellow Book Standards when auditing federal research
and how they can be executed.
Toni Stephens, CPA, CIA, CRMA, is the CAE at UT Dallas. She received her
accounting degree from Texas A&M University and has over 30 years of higher
education audit experience.
P A G E 1 4 TACUA ANNUAL CONFERENCE
S C H E D U L E Wednesday, April 17
1 1 : 3 0 A M Lunch
1 : 0 0 P M Effective Leveraging of Internal Audit Functions to Navigate the Title IX Conundrum
Gina Smith, Chair - Cozen O’Connor’s Institutional Response Group
The institutional implementation of Title IX and related regulations represents a complex
conundrum for colleges and universities. Compared to traditional university siloed
responsibilities - academics, student life, athletics - Title IX requires an integrated
institutional commitment that runs across all departments and institutional verticals.
As internal auditors, we are positioned to leverage our skills and relationships to
internally and neutrally assist in the evaluation of the nature and range of risks. Internal
audit is positioned to assist institutional leadership with what has emerged as the most
effective platform for sustainability in the the Title IX arena – a holistic approach that
integrates institutional values with the regulatory framework in the context of regular
and measurable training and outcome metrics. At our university, we strive to be trusted
advisors and facilitators of change. This session will dive into these considerations, what
holistic integration may look like, and how we as auditors can be leaders in this change.
Gina Maisto Smith, Chair of Cozen O’Connor’s Institutional Response Group, focuses her
practice on the institutional response to sexual and gender-based harassment and
violence, child abuse, and other forms of harassment, discrimination, and criminal
conduct. Gina provides consulting, counseling, and legal advice on all aspects of the
institutional response to misconduct. She assists institutions in designing effective
institutional responses that integrate the complex federal and state regulatory
framework with the unique dynamics of trauma and the impacts of interpersonal
violence on individuals and communities. Gina regularly advises educational and child-
serving institutions including public and private K-12 schools and colleges and
universities about policies, changes in the law, and investigations into allegations of child
abuse and sexual misconduct, including sexual violence. She regularly conducts training,
policy audits and assists in the development of policy and the design and implementation
of internal operating procedures. Before entering private practice, Gina spent nearly two
decades in the Philadelphia District Attorney’s Office where she investigated numerous
cases, handled more than 100 jury trials, and developed unmatched experience in the
investigation and prosecution of sex crimes, child abuse, and domestic violence. Gina has
handled several high-profile institutional crises and was recently recognized as one of
The Business Journals’ Influencers, recognizing 100 executives who are having an impact
on business and legal matters in communities across the nation. Ms. Smith’s complete bio
can be found here https://www.cozen.com/people/bios/smith-gina-maisto.
Rob Carter, Director of Internal Audit & Management Analysis - Baylor University
Rob Carter is the Director of Internal Audit & Management Analysis at Baylor
University, a private Christian University and nationally ranked research
institution located in Waco, TX. Over the past 20 years, Rob has worked within
public accounting, publicly traded companies, and higher education with
extensive audit experience over a broad range of areas. Rob has also served on
the board and as president of TACUA and the Kansas City IIA.
P A G E 1 5 TACUA ANNUAL CONFERENCE
S C H E D U L E Wednesday, April 17
2 : 3 0 P M Break
Auditing Social Media Effectively
3 : 0 0 P M Ali Subhani, Director Audit Services - Texas Woman's University
With the increased integration of social media into our daily lives we are far
better connected than the generations from the past. However, this
interconnectivity allows ‘news’ to spread around the world in seconds. What
does this mean for your organization? Learn how you can evaluate whether
your organization is effectively utilizing these emerging forms of
communication while still having processes in place to minimize harm to the
organization’s reputation. After attending this session, participants will be able
to:
• Have an awareness of critical risks associated with the use of social media
• Have an inventory of controls that can be implemented specific to social
media
• Perform an organizational review related to social media
• Have an awareness of configuration settings that could have personally
impact your privacy as a social media user
Ali Subhani is the Chief Audit Executive at Texas Woman's University. Prior to
joining the institution, he served as the IT Audit Manager for the University of
Texas at Dallas. He is a Certified Internal Auditor, Certified Information
Systems Auditor and a GIAC Systems and Network Auditor.
Ray Khan, Senior Analytics Auditor - Texas Woman's University
Ray Khan is the Senior Data Analytics Auditor at Texas Woman's University. He
is a Certified Fraud Examiner and a Certified Data Analyst. Ray received both
his Bachelor's and Master's degrees in Accounting from University of Texas at
Dallas.
5 : 3 0 P M Networking Reception
Hors d'oeuvres and drink tickets
P A G E 1 6 TACUA ANNUAL CONFERENCE
S C H E D U L E Thursday, April 17
7 : 0 0 A M Breakfast
I Want YOU for IT Audit
8 : 0 0 A M Chesney Cote, Audit Manager - Texas A&M University System
The presentation will provide non-IT auditors with information to assist them in conducting
basic IT audits. In addition, common themes identified in IT audits will be discussed.
Chesney Cote is an Internal Audit Manager for the Texas A&M University System Internal
Audit Department where she manages a team of auditors on audit projects in a variety of
subject matters. Chesney is a member of the department’s IT committee and manages the
Data Analytics team. She also serves as the Chapter Achievement Program chair for the
Brazos Valley Chapter of the IIA. She received her Bachelor of Business Administration
degree in Accounting and her Master of Science degree in Management Information Systems
from Texas A&M University in 2010. Prior to joining the A&M System Internal Audit team in
2012, Chesney worked for Ernst & Young LLP in Houston as an IT auditor for the Advisory
Services practice. Chesney is a CPA and a CISA.
1 0 : 0 0 A M Break
Using Data Analytics and Visualizations to Monitor Sponsored Projects
1 0 : 1 0 A M Erin Baker, Data Analytics Program Manager - University of Texas System
Review risks to sponsored projects, discuss data analytics tests used in a sponsored project
risk rating tool to monitor those risks, and walk thru dashboards of risk rating results.
Erin Baker is the Data Analytics Program Manager with the University of Texas System
Administration internal audit team. In this role, she provides data analytic related services
and support to internal audit departments around the System, including developing tools for
use with their data, establishing a formal training curriculum, and assisting with data
acquisition and analytics during audits. Erin has BBAs in both Finance and Accounting from
the University of Texas at Austin and San Antonio, respectively. Erin was first introduced to
the power, and fun, of data analytics at Frost National Bank. She has also been a one-woman
audit shop for a home health care company, where she developed scripts for operational,
financial, compliance, and administrative purposes.
Erin Baker is a CIA, CIDA, and a CFIRS.
1 1 : 4 0 A M Closing Remarks
Boxed Lunches & Departures
Boxed lunch available by request only. Please indicate you would like a boxed lunch to be
provided during the registration process.
We will
See y'all at
A Huge Thank You
To Our Event
Sponsors
TACUA
R E G I S T E R T O D A Y