Asim Ku

Led, supervised and mentored junior IT auditors; assured the quality of IT audit activities performed by audit teams. Conducted preparation of a the regulation, which laid out the principles for the external auditors should be followed in IT audits of Turkish financial institutions (still in effect in Turkey). Ensured the quality and compliance of penetration tests performed in Turkish banks by external auditors, evaluated the vulnerabilities, monitored and reported efficacy of remedial activities.

Planned and conducted IT audits of several major financial institutions in Turkey; reported the findings directly to the highest board of Turkey’s banking authority. Examined and reported the effectiveness and compliance of IT general controls, with a focus on risk management, IT security and business continuity. Performed off-site monitoring of several financial institutions regulated by Turkey’s banking authority.

Participated in the IT examinations of Turkish banks performed in accordance with COBIT. Monitored findings of the IT audits reports; evaluated the efficacy of remedial activities and maturity levels of IT processes; reported the findings with associated business risks to the Supervision Board.

Research Thesis on "Effectiveness of Cyber Security Regulations in the US Financial Sector: A Case Study" Coursework: Information Security Risk Analysis, Network Security Analysis, Law of Computer Technology, Cybersecurity in Critical Infrastructures, Defensive Hacking, Privacy in Digital Age

Thesis on “Early Warning System For Banking Sector Using Pattern Recognition Technique: The Turkish Case (1997-2001)”

Coursework: Computer Networks, Data Communication, Programming Languages, Computer Programming, and Software Engineering Concepts