BEGIN:VCALENDAR VERSION:2.0 PRODID:-//ACUA - ECPv6.16.3//NONSGML v1.0//EN CALSCALE:GREGORIAN METHOD:PUBLISH X-WR-CALNAME:ACUA X-ORIGINAL-URL:https://acua.org X-WR-CALDESC:Events for ACUA REFRESH-INTERVAL;VALUE=DURATION:PT1H X-Robots-Tag:noindex X-PUBLISHED-TTL:PT1H BEGIN:VTIMEZONE TZID:America/New_York BEGIN:DAYLIGHT TZOFFSETFROM:-0500 TZOFFSETTO:-0400 TZNAME:EDT DTSTART:20250309T070000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:-0400 TZOFFSETTO:-0500 TZNAME:EST DTSTART:20251102T060000 END:STANDARD BEGIN:DAYLIGHT TZOFFSETFROM:-0500 TZOFFSETTO:-0400 TZNAME:EDT DTSTART:20260308T070000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:-0400 TZOFFSETTO:-0500 TZNAME:EST DTSTART:20261101T060000 END:STANDARD BEGIN:DAYLIGHT TZOFFSETFROM:-0500 TZOFFSETTO:-0400 TZNAME:EDT DTSTART:20270314T070000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:-0400 TZOFFSETTO:-0500 TZNAME:EST DTSTART:20271107T060000 END:STANDARD END:VTIMEZONE BEGIN:VEVENT DTSTART;TZID=America/New_York:20260827T130000 DTEND;TZID=America/New_York:20260827T140000 DTSTAMP:20261023T140558 CREATED:20260730T160705Z LAST-MODIFIED:20260826T224348Z UID:9657-1787835600-1787839200@acua.org SUMMARY:Guardians at the Gate: An Integrated Audit Approach for Evaluating and Maturing Third-Party Risks and Institutional Resilience DESCRIPTION:Guardians at the Gate: An Integrated Audit Approach for Evaluating and Maturing Third-Party Risks and Institutional Resilience \n \n \n Thursday\, August 27\, 2026 1:00 PM – 2:00 PM ET \n \n \n \n \n \n Register Today! \n \n \n \n \n\n \n\n \n\n \n \n\n \n\n \n \n \n\n\n \n\n \n\n\n\n\n\n\n\n\nUniversities increasingly rely on third parties to deliver critical academic\, research\, administrative\, clinical\, technology\, and student-facing services. As institutional operating models become more interconnected\, the risk perimeter now extends well beyond the organization’s walls — creating new exposure across cybersecurity\, privacy\, compliance\, financial performance\, operational resilience\, reputation\, and patient trust. Third-party risk is no longer a narrow vendor management review. It requires an integrated approach that incorporates governance\, risk management\, and controls across the full third-party life cycle — from selection and contracting to onboarding\, ongoing monitoring\, issue management\, and offboarding. \n\n\n\nAs a trusted advisor and in accordance with the IIA Third Party Topical Requirements\, it is important that the Audit Plan include an evaluation of third-party governance\, risk management\, and control processes across the third-party life cycle. This requires an integrated approach for assessing the risks and controls. \n\n\n\nThis webinar will provide ACUA members with a practical\, risk-based approach to evaluating and maturing third-party risk management programs\, aligned with The IIA’s Third-Party Topical Requirement and its intersection with the Cybersecurity Topical Requirements. \n\n\n\nParticipants will leave with practical considerations for building effective integrated audits\, improving stakeholder conversations\, and positioning internal audit as a strategic advisor in strengthening institutional resilience. \n\n\n\n \n\n\n\n\n\n\n\n \n\n\n\n\n\n\nAfter attending this webinar\, participants will be able to…\n\n\n\n\nDescribe third-party types and common risks to the organization\n\n\n\nIdentify assessment practices and standards for third-party governance\, risk management\, and controls\n\n\n\nDiscuss the intersection of Third Party and Cybersecurity Topical Requirements for assessing third-party life cycle risks and controls\n\n\n\nShare integrated audit practices for evaluating third-party life cycle stages (Selecting\, Contracting\, Onboarding\, Monitoring\, and Off-boarding)\n\n\n\nDiscuss practices for effectively translating emerging third-party risks into board and leadership insights\n\n\n\n\n\n\nDelivery Method: Group InternetField of Study: Specialized KnowledgeAdvance Preparation: NonePrerequisites are required: NoCost: $25 for non-membersRecommended CPEs: 1 \n\n\n\n\n\n\n\n\n\n\n\n\nResources\n\n\n\n\n\n\n\n\n\n\n\n\n\nHost Information\n\n\n\n\n\n\n\n\n\nJohan Lidros (CISA\, CISM\, CGEIT\, CRISC\, CDPSE\, ITIL-F\, HITRUST CCSFP)\n\n\n\nPresident \n\n\n\nEminere Group \n\n\n\n\n\nJohan Lidros is President of Eminere Group and an experienced IT risk\, cybersecurity\, privacy and governance advisor to higher education\, healthcare and regulated organizations. He helps internal audit\, compliance\, privacy\, IT\, and executive teams assess mature technology risks management\, cybersecurity governance\, third-party risk\, identity and access management\, cloud controls\, and privacy programs. Johan is known for translating complex technology risks into practical audit strategies\, actionable recommendations\, and leadership-ready insights. \n\n\n\n\n\n\n\n\n\n\n\nValla Wilson\, CIA\, CRMA\, CHIAP™\n\n\n\nBusiness Risk Assurance and Advisory Services Practice Director \n\n\n\nEminere Group \n\n\n\n\n\nValla Wilson is Eminere Group’s Business Risk Assurance and Advisory Services Practice Director. Valla has over 30 years of Internal Audit and Compliance\, Enterprise Risk Management\, Privacy\, Healthcare Operations\, and Executive Leadership experience. She previously worked for Anderson\, LLP providing Audit and Consulting services and has held previous Chief Audit Executive\, Chief Compliance Officer\, Chief Privacy Officer\, and Board leadership roles in healthcare and higher education industries. Valla helps organizations strengthen governance and risk management; conduct quality internal audit and consulting engagements; improve compliance program effectiveness; and enhance leadership reporting. URL:https://acua.org/event/guardians-at-the-gate-an-integrated-audit-approach-for-evaluating-and-maturing-third-party-risks-and-institutional-resilience/ CATEGORIES:Webinar ATTACH;FMTTYPE=image/png:https://acua.org/wp-content/uploads/2024/10/ACUA-Resource-Webinar-Image.png END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20261029T130000 DTEND;TZID=America/New_York:20261029T140000 DTSTAMP:20261023T140558 CREATED:20261006T161438Z LAST-MODIFIED:20261014T170757Z UID:10194-1793278800-1793282400@acua.org SUMMARY:Who Goes There? Unmasking Identity and Access Management (IAM) in a Spooky Distributed Environment DESCRIPTION:Who Goes There? Unmasking Identity and Access Management (IAM) in a Spooky Distributed Environment \n \n \n Thursday\, October 29\, 2026 1:00 PM – 2:00 PM ET \n \n \n \n \n \n Register Today! \n \n \n \n \n\n \n\n \n\n \n \n\n \n\n \n \n \n\n\n \n\n \n\n\n\n\n\n\n\n\nSecure identity and access management (IAM) is critical to protect systems and sensitive information by ensuring that only authorized individuals receive the appropriate level of system access. But do you really know who is lurking in your systems? In a distributed environment\, complex role structures and distributed ownership of access controls can make it difficult for IAM audits to identify access risks and evaluate whether access is appropriately governed. Whether you are an experienced IT auditor or dress up like one\, this session will equip you with the knowledge to conduct effective IAM audits within distributed environments. We will provide insights into the key components for conducting IAM audits in distributed environments\, leading practices and strategies to consider\, common challenges to avoid\, and a real-world example of an IAM audit conducted within a distributed environment. \n\n\n\n\n\n\n\n\n\n\nAfter attending this webinar\, participants will be able to…\n\n\n\n\nIdentify the critical elements of an effective IAM audit within a distributed environment\n\n\n\nRecognize common challenges and pitfalls in IAM audits within distributed environments\n\n\n\nExplore a practical IAM audit example\n\n\n\n\n\n\nDelivery Method: Group InternetField of Study: AuditingAdvance Preparation: NonePrerequisites are required: NoCost: $25 for non-membersRecommended CPEs: 1 \n\n\n\n\n\n\n\n\n\n\n\n\nResources\n\n\n\n\n\n\n\n\n\n\n\n\n\nHost Information\n\n\n\n\n\n\n\n\n\nAshley Romero\, CISA\n\n\n\nCyber Risk Services Senior Consultant \n\n\n\nBaker Tilly \n\n\n\n\n\nAshley is a Senior Consultant with Baker Tilly\, a national accounting and advisory firm. Her experience includes conducting information technology (IT) and cybersecurity audits\, advisory reviews\, risk assessments\, and IT regulatory compliance assessments (e.g.\, NSPM-33\, HIPAA\, NIST). Her clients primarily include higher education institutions\, real estate organizations\, and research institutions. Ashley is a Certified Information Systems Auditor (CISA) and is involved with the Institute of Internal Auditors (IIA). \n\n\n\n\n\n\n\n\n\n\n\nAmanda Guessford\, CPA\, CISA\n\n\n\nCyber Risk Services Manager \n\n\n\nBaker Tilly \n\n\n\n\n\nAmanda Guessford is a Manager\, Certified Information Systems Auditor (CISA)\, and Certified Public Accountant (CPA) with Baker Tilly\, a national accounting and advisory firm. She has 8 years of experience providing cybersecurity and IT regulatory compliance assessments (e.g.\, NSPM-33\, CMMC\, HIPAA\, HITRUST\, FISMA\, NIST\, OMB A-123\, IT SOX)\, risk assessments\, internal control reviews\, and process reviews to assist organizations in achieving their internal audit objectives and enhance their cybersecurity posture. Her clients have included higher education institutions\, not-for-profit organizations\, and research institutions. Amanda has presented on multiple occasions for national and regional events hosted by organizations such as ACUA\, IIA\, and NCURA\, including presenting at previous AuditCon events. Additionally\, Amanda has presented numerous webinars for both ACUA and Baker Tilly\, which can be found on the Baker Tilly website. \n\n\n\n\n\n\n\n\n\n\n\nMatt Abraham\, CISA\n\n\n\nCyber Risk Services Senior Consultant \n\n\n\nBaker Tilly \n\n\n\n\n\nMatt is a Senior Consultant with Baker Tilly\, a national accounting and advisory firm. His experience includes providing information technology (IT) and cybersecurity risk advisory\, internal audit\, internal control solutions\, and IT regulatory compliance assessments (e.g.\, CMMC\, NIST\, IT SOX) to assist organizations in achieving their internal audit objectives and enhance their cybersecurity posture. His clients have included higher education institutions\, research institutions\, and not-for-profit organizations. Matt is a Certified Information Systems Auditor (CISA). URL:https://acua.org/event/who-goes-there-unmasking-identity-and-access-management-iam-in-a-spooky-distributed-environment/ CATEGORIES:Webinar ATTACH;FMTTYPE=image/png:https://acua.org/wp-content/uploads/2024/10/ACUA-Resource-Webinar-Image.png END:VEVENT END:VCALENDAR