Stephen Head

About Stephen Head

Stephen W. HeadMBA, CPA, CISSP, CISM, QSA, PCIP, CMA, CFE, CISA, CDPSE, CGEIT, CRISC, CBCP, CMMC RP/RPA, MCSE, CHP, CHSS, CITP, CGMA, CPCUStephen has over 40 years of broad-based security, audit and technology experience as an information security director, audit manager and executive management consultant. Stephen provides practical, relevant guidance to C-Suite Executives, helping them bridge the gap between technology and business to meet the challenges of today’s rapidly changing environment. Stephen is the author of the internationally recognized Internal Auditing Manual and the 1,600 page definitive work: Practical IT Auditing; both published by Thomson Reuters. He co-authored the AICPA’s Statement on Auditing Standards No. 94, has written numerous test questions for the CPA, CISSP, CISA, CISM, CIA, CMA, and CGEIT examinations; and taught undergraduate and graduate level courses in information security. He has managed over 250 organizational assessments to ensure compliance with SOX 404, GLBA, ISO 27001/2, PCI DSS, and HIPAA regulatory requirements.Stephen served as Chair of the ISACA Standards Board from to 2001, where he was responsible for publishing professional guidance followed by over practitioners worldwide; and later served as ISACA’s International Vice President from 2001 to 2002. He held a similar relationship with the AICPA National Office for over 10 years and was appointed to two senior level positions, serving on the AICPA Information Technology Executive Committee from to 2003, and as a Commissioner on the AICPA National Accreditation Commission from 2001 to 2004. He has been prominently featured in the Journal of Accountancy and other national and international periodicals.Specialties: Stephen has broad-based experience as a cyber risk thought leader and executive management consultant spanning a variety of industries ranging from insurance and banking to manufacturing, energy, consumer products, and government.

Experience

1. Author

   Thomson Reuters

   Oct 2003 — Present

   Author of the internationally recognized Internal Auditing Manual and the 1,600 page definitive work: Practical IT Auditing.

Education

• Catawba College

  B.A., Triple Major in Accounting, Economics, Business

  1975 — 1978

• Wake Forest University School of Business

  MBA, Management

  1984 — 1986

Skills

• Business Continuity Planning
• Iso 27001
• Privacy Regulations
• Cisa
• Pci Dss
• Internal Controls
• Risk Management
• Payment Card Industry Data Security Standard (Pci Dss)
• Hipaa
• Computer Security
• Network Security
• Enterprise Risk Management
• IT Audit
• Management
• Vulnerability Assessment
• Fraud
• Executive Management
• Disaster Recovery
• Information Security
• Consulting
• Instructor-Led Training
• Leadership
• Governance
• Business Process Improvement
• Business Process
• Regulatory Requirements
• Information Security Management
• IT Strategy
• Certified Fraud Examiner
• Internal Audit
• Risk Assessment
• Internal Audit Transformation
• Sarbanes-Oxley Act
• Security Audits
• Financial Services
• Operational Risk Management
• Auditing
• Glba
• Business Continuity
• Internal Control Implementation