Speaker Biography

Micho Schumann, M.Sc., CISA, CISSP

Micho is a Senior Manager at KPMG in the Cayman Islands with over eleven years of experience in Information Systems auditing, security and consulting. Micho was previously with KPMG in Montreal for seven years. He is a Certified Information Systems Auditor (CISA), Certified Information System Security Professional (CISSP) and Systems Security Certified Practitioner (SSCP). He also holds a Masters degree (M.Sc) in Information Systems and a Bachelor of commerce (B.Comm) from Montréal’s École des Hautes Études Commerciales. Relevant Experience • In support of financial statement audits, Micho has led and conducted reviews of IT general computer controls and application controls for many Canadian, American and Caribbean based organisations.. The scope of the work included an assessment of specific application systems, physical and logical security controls, system development and program change controls, back-up and recovery controls, and business continuity planning. • Micho has managed and participated in SAS70 engagements with two Cayman Islands financial services organisations. Micho’s role in these engagements was to manage and perform the testing of IT related controls and create supporting documentation for the publication of the SAS70 certification reports. • Micho was part of an engagement team to perform a major pre-purchase due diligence review of a large Caribbean telecommunications firm. Micho’s role in the engagement was to provide management with a detailed review of current information systems processing environments, key processes and controls as well as provide insight into indentified issues and associate costs. • Micho has managed and performed architecture reviews focusing on security factors such as access points, firewalls, routers, server configuration, etc. The audits were performed by interviews with system administrators to understand the company needs and related policies governing the IT systems as well as in depth technical examination of servers (operating systems and application configuration), network protocols and network structure. • Micho has managed and performed security audits for companies that operate both Windows & Unix operating environments. The audits performed were done using various security tools and by manually verifying strategic settings and vulnerabilities directly on the servers. He has also managed and worked on multiple successful network and Web application penetration tests based on various operating platforms and technologies. • Micho has worked with utility companies, for information security engagements in both Canada and the Caribbean. • Micho has published a number of newspaper articles on information risk management discussing wireless security, online security and other information security subjects. • Micho is fluent (spoken and written) in English and French.

View next speaker