MELVYN A. BOWER

			EDUCATION:				EXPERIENCE:

CISA,Certified Information Systems Auditor,		5 years sytems development
Information Systems Audit and Control Association 	3 years computer installation management
							7 years end user management									15 years IS/It and comprehensive audit

AREAS OF PROFESSIONAL COMPETENCE

Mr. Bower has been in the Information Systems and Technology and related fields for over 30 years and has completed many systems development projects;  reviews, audits and assignments of all phases of the systems development life cycle.  As a Senior Manager and Director of both Audit and IS/IT Audit in the public sector, Mr. Bower developed the ability to manage staff, control contracts and budgets, ensure efficient use of project resources, develop audit issues into clear, concise and timely reports with a focus on strategies and  value added to the client.  He has successfully planned the audit program for a number of public sector departments. Specific areas of expertise are:

AUDIT & REVIEW

Comprehensive Audit:		efficiency and effectiveness reviews;
				identifying opportunities for improving economy/productivity;
	management control framework evaluation.

Management Review:		assessment of management concepts, policies, and procedures;
	reviewing organizational structures, roles, and  responsibilities;
	monitoring and assessing major projects.

Information Technology		evaluating Informatics functional management;
Audit				monitoring systems under development;
	evaluating the security and integrity of information systems;
				and data centres.

Audit Support			audit planning, strategic and operational;
	course development;
	defining roles and responsibilities;
	advisory services.

CONSULTING

Program Management-		policy and procedure development;
Operations and Support		organizational design and development;
	productivity improvement and performance measurement.

Systems Development:		functional and business /specifications/requirements;
	access, security and control design;
	pilot and acceptance testing;
	quality assurance.

Other Specialties:		project management - planning, budgeting, monitoring and control;

BACKGROUND INFORMATION

Career History					Professional Activities

1998 - present - Owner, Information Systems Audit		The Information Systems Audit and
and Consulting(ISAC)					Control Association(formerly EDP Audit 
							Assoc.)
1994 - 1998 - Director, IS/IT Audit, Human Resources 
Development Canada,					Past Director, National Capital Tennis 
							Association
 1992 - 1994 - Director, Operations, Information 
Management Group, Realty Services, Public Works Canada	Past Member, Gloucester Recreation Board

1991 - 1992 - Acting Director, Management Audit, 		Past Chair, Beaconhill South Recreation 
Public Works Canada					Centre Board

1981 - 1990 - Manager, EDP Audit, Management Audit,	Language  Capabilities
Public Works Canada						English and French

1977 - 1981 - Project Manager, Special Projects, 		Citizenship
Source Deductions Division, Revenue Canada Taxation		Canadian

1975 - 1976 - Senior Program Officer, Taxroll Division,
Revenue Canada Taxation

1973-1975 - Bilingual and Bicultural Exchange Program,
Revenue Canada Taxation

1969-1972 - Installation Manager, Computer Service Division, 
Revenue Canada Taxation

1966-1969 - Senior Programmer, Systems Development Division,
Revenue Canada Taxation

Relevant Recent(past 5 years)Experience (Projects)

Preliminary Survey of FIS Mark ! ,Financial and Administrative Services  Human Resources Development Canada			

Directed internal and external resources in a  System Under Development Audit of the Financial Management System used by Human Resources Development Canada including planning, execution and reporting of recommendations.

Audit of the Regional Computer Centre, Quebec Region(Montreal), Human Resources Development Canada			

Directed the Audit of the Regional Computer Centre using a mix of internal and external resources, including planning, execution and reporting of recommendations.

Audit of Infrastructure and Technical Support, Systems, Human Resources Development Canada				

Directed the Audit of Infrastructure and Technical Support using a mix of internal and external resources, including planning, execution and reporting of recommendations.

Risk Assessment of a System Under Development - Income Security Program Redesign, Human Resources Development Canada 	

Directed a group of consultants in the risk assessment of the Income Security Program Redesign project. This was the largest capital systems project in the Federal Government at the time. There were multiple risk assessments done over a period of several years including one done in partnership with the Office of the Auditor General of Canada. This included planning, execution and reporting of recommendations.

Follow-up Review of the Audit of Infrastructure and Technical Support, Human Resources Development Canada			

Directed a group of internal and external resources in following up on the more significant recommendations/findings of the previous audit, namely on the network subject.

Update of the Annual EDP Audit Plan and Strategy, Internal Audit Bureau, Human Resources Development Canada		

Directed a group of internal and external resources in producing the EDP Audit Annual Plan and Strategy. This included using risk ranking tools , focus group sessions and various other methodologies and software.

Electronic Delivery Network Review, Human Resources
Development Canada				

Directed a group of internal and external resources in the Review of the Electronic Delivery Network suite of pilot applications looking into subjects such as Direct application and deposit of Employment Insurance benefits, New Brunswick pilot of Teleapp(a voice response application) and Imaging Documents in Montreal. This included planning,  execution and reporting of recommendations in the form of risk assessments.

Post Implementation Review of the Finance and Administrative Systems LAN MOU, Human Resources Development Canada		

Directed a consultant in the review of the MOU transferring LAN administration from Financial and Administrative Services to Systems, Operations. This included use of focus groups.

Risk Assessment of the Corporate Management System, Human Resources Development Canada				

Directed a group of consultants in the review and risk assessment of Human Resources Development Canada, Corporate Management System. This included planning, execution and reporting of recommendations through a risk assessment report.

Finance and Administration Business Centre Review, Human Resources Development Canada

Directed a group of internal resources in the review of the Finance and Administration Business Centre . This included planning, execution and reporting of recommendations on how to make things more effective and efficient. Surveys, interviews and focus groups were the main tools used.

Network Review, Systems, Human Resources Development Canada   

Directed a group of external consultants in the review of Human Resources Development Local and Wide Area Network. This review was done for the ADM, Systems and was a blueprint for stabilization of the networks.

CANNET  Internet Security Review, Human Resources Development Canada 									

Directed a group of consultants in the review of Internet security for the Can Work Net application within HRDC. This included a review of policy, environment, as well as penetration probes to determine how secure the data was on the web-based application and infrastructure.

Risk Assessment Of Year 2K, Human Resources Development Canada

Instrumental in spearheading the Year 2k project in HRDC from an Audit perspective as well as participating in the risk assessment of the year 2K as part of a team of internal and external resources. The review included the initial planning, execution and reporting of the risks associated with the Departments approach to preparing for the year 2K and the required changes to infrastructure, programs and processes.

Assessment of Compliance With The Management Boards Decision On Systems July/95							

Participated as a consultant to the Audit team which included internal and external resources engaged in the planning, execution and reporting relative to the compliance to the Management boards Decision of July 1995. Main function included planning and field work for the Quebec Region.

Cross-Sectional Review of Information Technology Centres	

Participated as a consultant to the Audit team which included internal and external resources engaged in the planning, execution and reporting relative to a cross- sectional review of Information Technology Centres. Main functions included the planning, and field work for the Quebec Region.

Other Consulting Assignments 

Data Integrity Review of Human Resources Management System-PWGSC

Planned, executed and reported on the data integrity of the Human resources Management System at PWGSC. This was done by a series of focus group sessions and interviews along with detailed testing of critical data elements. A report was produced and discussed with senior management within the Human resources branch as well as GTIS. Finally a presentation was prepared a given to senior management board of Human Resources Branch.

Year 2000 Review of a Risk Management Plan for Canadian Food Inspection Agency

Planned, executed and reported on a Risk Management Plan prepared for CFIA by another contractor. The objective was to review it with a critical eye and to provide feedback regarding its compliance with TBS CRM/CP Guide and the SEI Continuous Risk Management methodology and Taxonomy. As well they requested suggestions which could serve to add value to the original Plan.

Year 2000 Concurrent Audit for Indian and Northern Affairs Canada

Planned, executed and reported on the state of readiness and risk assessment of Y2K within Indian and Northern Affairs Canada. The review included such things as the Infrastructure, both hardware, software, embedded systems, applications and facilities as well as contingencies and regulatory matters.

Year 2000 Audit of the Canadian Radio-television and Telecommunications Commission

Planned, executed and reported on the state of readiness and the risk assessment of Y2K at the Commission. The review included such things as the Infrastructure, both hardware, software, embedded systems, applications and facilities as well as contingencies and regulatory matters.

Year 2000 Review at Transport Canada

As part of a team, planned, executed and reported on the state of readiness and risks associated with all inventories including government and department wide mission critical applications, hardware and software for office automation purposes, mission critical business function contingency plans.

Year 2000 Review of HRDC’s Government Wide Mission Critical Application LMSS

Planned, executed and reported on two separate occasions on the risks associated with the contingency plans relative to the above application. The risk assessment used consisted of four risk categories,  Management and Organization, Business, Project and Technology.

Other General References

Mr. James Martin, Director General, Internal Audit Bureau, Human Resources Development Canada
Telephone 953-0821, e-mail james.martin@hrdc-drhc.gc.ca

Mr. Dave Dixon, Managing Partner - retired, KPMG, Ottawa, Ontario, Telephone 613-256-4052.

Mr. Joe Clark, Director, IS/IT Audit, Internal Audit Bureau, Human Resources Development Canada, Telephone 953-1297, e-mail joe.clark@hrdc-drhc.gc.ca

References for the above projects will be given upon request.