Evans Bannor

Background

About Evans Bannor

A professional with a unique and varied mix of auditing, consulting, and training experience in topics ranging from Internal Controls and Information System Security to Grants Management and Compliance with Laws and Regulations. • Performed and managed assessments of ERP and Financial Management systems including both in-house developed and commercial software such as PeopleSoft, Oracle Financials, JD Edwards, PRISM and Momentum Financials • Performed and managed Grants Management Oversight and Compliance Reviews for Public Transportation Agencies including assessments of internal controls supporting Financial Management Systems (Financial Reporting, Grants Management, Procurement, Accounts Payable, Accounts Receivable, Cash Management, Budget, IT Controls. • Provided consulting on implementing Federal grants management requirements for transportation agencies including the preparation of Federal Financial Reports and Milestone Progress Reports. • Developed and provided training and case studies on Information System Controls, Federal Award Management, Indirect Cost Allocation Plans (ICAP, ICRP, CSCAP), FTA Compliance Requirements and compliance with 2 CFR Part 200. • Performed and managed information system audits in support of the A-123, CFO, GMRA and FISMA for Federal Agencies. • Performed and managed SAS 70, SSAE 16 and SSAE 18 readiness assessments and audits of service organizations. Experienced in SOC 1, SOC 2 and SOC 3 requirements. • Performed Vulnerability Assessments of networks, applications and supporting databases and infrastructure using tools such as Nmap, Nessus, App Detective Pro, Kismet, Wireshark, Kali Linux, etc. • Developed Certification and Accreditation/Assessment and Authorization Packages to support Federal Government Agencies including developing e-Authentication Risk Assessments, Security Categorizations, Risk Assessments, Security Plans, System Test and Evaluation (ST & E)/Security Control Assessments, Business Impact Assessment, Contingency Plans. • Performed and managed assessments of mainframe and distributive system environments including familiarity assessing IBM 0S90, Zos, RACF, ACF2, Top Secret, Red Hat Linux, Solaris, Windows, SQL Server, Oracle, and DB2.