Name: Luong Nguyen Hoang AnCurrent Title: Experienced Senior AssociateNationality: VietnameseHome office:4th Floor, Saigon Tower29 Le Duan Street, District 1Ho Chi Minh City, VietnamTel: 84-8-38230796 (ext 3334)Mobile Phone: 84-0-1284077757Fax: 84-8-38251947Professional qualifications:

Bachelor of Computer Science, Nottingham University. Master of International Business, Nottingham University. Certified Information Systems Auditor (CISA). Certified Information Systems Manager (CISM). Member of Information Systems Audit and Controls Association (ISACA). Member of Vietnam Information Security Association.

1 | P a g e

Education

2003 - 2006 Can Giuoc High School2006 - 2008 International University, Viet NamBachelor in Computer ScienceMain Modules: Computer Architecture, Computer Graphic, Database System, Digital Multimedia, World Wide Web, Introduction to AI, Programming, Skill for Communication Information, Software Engineering, Unix, IT & Design.

Nottingham University 2008 – 2010Bachelor in Honor (BSc (Hons)) in Computer ScienceMain modules include : Algorithm and Data Structure, Internet and Web Services, Software Engineering Group Project, Large Scale Systems Design, Machine language, Mathematics for Computer Scientists 2, Dissertation, Computer Communications and Networks, Compilers, Digital Business and Communication, Computer Security and so on. 2010 - 2011Master in Science (MSc) in International BusinessMain modules include: Business economics ,International Business Environment ,International Business Strategy, International Marketing, International Accounting ,Managing Organization ,International HRM and so on.

Working experience history

Spring 2007: became a member of Student Council in International University in Vietnam. 05/2009 - 09/2009: used to work as a junior software engineer in Infovalley Company, Malaysia. 2009 - 2011: was one of the co-founders of Vietnamese Cultural Society in Nottingham University,

Malaysia Campus, Malaysia. From 07/2011 until now: working for PwC Vietnam.

2 | P a g e

Key Qualifications

Hoang An is currently a Senior Associate in the IT Risk Assurance in PwC Vietnam. He has more than 04 years professional experience in IT system and control review, business process review, IT internal audit, technical review, vulnerability assessment and penetration testing, IT Governance and ERP advisory. Each year, he directly involves in more than 10 projects related to IT auditing and advisory for both foreign invested companies and state owned enterprises. He also has experience to work with many complex systems such as SAP, Oracle EBS, Microsoft Dynamics Solomon, JD Edwards, Sun System, Core Bank systems, OLAS, Fast Accounting, PeopleSoft, AIX, Window Server, Smart bank, Finnone, BFO, Misa, CMMS...

He is also responsible for evaluating and drawing the first conclusion and recommendation on the effectiveness of the IT General controls, Internal Control as well as Application Controls of these above information systems. During the time working for PwC, he has experienced in many different business sectors such as Finance Company, Bank, Manufacturing, Telecom, Textiles, Insurance and Supermarket...

Also, he has involved in his first Advisory job in 2012 when taking part in the ERP Vendor Selection and Project Management Service for Ton Dong A. Furthermore, in the beginning of 2014 up to now, he has joined his second Advisory job which the nature is similar to his first Advisory job is ERP Vendor Selection and Project Management Service for Ton Hoa Sen. Next, he used to work for ANZ Bank as an IT Risk and Governance Specialist.

Before joining PwC, he had experienced in working as a web developer for Infovalley company, Malaysia. He was also one of the co-founders of Vietnamese Cultural Society in Nottingham University - Malaysia Campus, Malaysia.

3 | P a g e

Relevant Experience

Part I: Quality Assurance Service for ERP Implementation Project

Project: ERP Vendor Selection and Project Management ServiceClient: Ton Dong A

Ton Dong A requested to PwC to provide the ERP Vendor Selection and Project Management Service during ERP implementation phase. He is the engagement project associate of this project. His tasks include reviewing contracts, evaluating vendors and preparing draft reports for Project Manager related to Infrastructure field.

(06/2012 – 06/2013)

Project: ERP Vendor Selection and Project Management ServiceClient: Ton Hoa Sen

Ton Hoa Sen requested to PwC to provide the ERP Vendor Selection and Project Management Service during ERP implementation phase. He is the engagement project associate of this project. His tasks include reviewing contracts, evaluating vendors and preparing draft reports for Project Manager related to the IT, BI and Procurement field.

(02/2014 up to now)

Part II: Secondment

Project : SecondmentClient: ANZ bank

He has been worked for ANZ as an IT Risk and Governance Specialist. He performed the following activities: 1. Consolidated Vietnam Application Inventory Fulfill the application inventory including:

Consolidate the list IT application that ANZ Vietnam being used as well as investigate their critical parameters.

Contact with application owner for getting the confirmation. Upload relevant documents to local IS&TA website.

2. Review IT risk register and SBV regulation (Cir.01 and Cir.29) to generate appropriateness IT governance calendar Details:

Review our current standard IT risk register in combine with Cir.29 and Cir.01. Mapping the ANZ standard controls into the ANZ standard risks as well as mapping the ANZ

standards risks into the Cir.29 and Cir.01 requirement. Generate IT governance calendar to ensure risk are mitigated and regulatory compliance are

completed. Generate detail IT governance calendar with date driven for each of activities.

3. COBIT review pages. 4. Generated 4 IT Working Governance Calendars for ANZ.

(25/03 - 26/04/2013)

4 | P a g e

Part III: IT Internal Audit

Project: IT Internal AuditClient: Mekong Energy Company

He also involved in an IT Internal Audit Project for Mekong Energy Company in 2014. His main tasks for this project is to perform the IT General Controls for the below domains :

Overall IT control environment Access to program and data Change Management Computer Operations

Moreover, An has performed the security review for the client’s internal network, collaborated with the Team Manager to provide the troubleshooting of the client’s current email system and web server. Becoming the first person who provided the weaknesses of the client IT environments and also proposed the solution of these weaknesses.

(03/2014)

Part IV: Data Migration

Project: Data Migration CheckingClient: Groupama

An was joined as a member for this job in the end of 2013. His main tasks was to use the Excel to perform the data migration checking and verification by reconciling the following reports between the old system and the new system:

Payment Reserve Premium Reinsurance

He was also the person who created a first conclusion about these data migration results. Finally, he proposed the efficient method to the client in order to conduct the data migration in a more complete and accurately manner.

(11/11/2013 – 21/01/2014)

5 | P a g e

Part V: IT security review

Project: Internal Network Vulnerability Assessment

Client: Great Eastern Viet Nam

An played a role as the team member for this project in 03/2015. His main tasks are using the tool for scanning the client internal network; review the network configuration and list out the vulnerabilities that are existing in the client next. Next, An also research for the best practice solution for each vvulnerability in order to support the client to remediate their network vulnerabilities.

(03/2015)

Project: Data loss prevention

Client: Vinamilk

An played a role as the team member for this project in 05/2015. His main tasks are to identify all data leakage channels and create the list of risk register based on COBIT that can prevent the data from being lost in each channel .From that risk register, An directly tested for the compliance of this risk register. The result of this testing is the list of weaknesses that can be exploited to leak the data, An also be the one to write down the report that summary these weaknesses for the client remediation.

(05/2015)

Part V: IT Audit

System & Process Assurance (SPA) assignments in the Financial audit engagements

He has been responsible in the Auditing of IT general computer controls, Internal Controls and Application controls for many clients in different businesses. In these engagements, he play a role as the Team Member and also Team Manager to support Financial Audit team to gain reliance on the IT systems by interviewing client, collecting evidence and reviewing the following domains:

Overall IT control environment; Access to program and data Change Management; Computer Operations; Program development Information Security review at database, operating system, network and application level; Automated and IT dependent manual controls; SoD in application control in Core Systems; Internal Controls.

The Clients which An has performed the IT Audit belong to many different business sectors such as Finance (Mirae Asset), Bank (Calyon, Hong Leong, ANZ ), Manufacturing (Vinamilk, Scancom, Fujikura, ICP, Uni-President, Unilever, BAT, Electrolux, Kumho, Michelin, Nuplex, Crown, Viet Hung Food, De Heus ), Cosmetic (L’Oreal), Telecommunication (Hutchison), Textiles (Texhong), Insurance

6 | P a g e

(AIA, Groupama, Prudnetial), Finance Leasing (Sacombank Leasing, FE Credit), Supermarket (PATI) ,Terminal (SITV), v.v.

(07/2011 up to now)

Other skills:

Technical skills:- Learning about network, security and internet through BSc (Hons) in Computer Science

program as well as having knowledge about international business throughout MSc in International Business program.

- Experienced as a system analyst thought-out project assignment.- Experienced in Java, C++ and database system, Coq, Haskell, PhP, Ajax, JQuery, html, Adobe

Photoshop, Smart Draw, Microsoft Office, and Rational Rose.- Experience in using many Audit Tools such as ACE Tool, ACL.

Other skills:- Driving : full clean license- Ability to learn and adapt with new technology, hardworking and work well with team member.- Works well alone or with other partners.- Experienced in planning and coordinating software system development which provide

business value for business background systems.

Language Speaking skills Reading skills Writing Skills

Vietnamese Mother tongue Mother tongue Mother tongue

English Good Good Good

Certification

I, the undersigned, certify that to the best of my knowledge and belief, these data correctly describe me, my qualifications and my experience.

Staff member:

Signature _______

Date: 28th August 2015

7 | P a g e