Crit Luallen
Auditor of Public Accounts
Commonwealth
of Kentucky


Division of Examination and Information Technology


BJ Bellamy
Veronica Bradley
Amy Fisher
Tony Hutchins
Gary Jones
Jenny Luscher
Stephanie Mattingly
Robert Poynter
Thomas Sparkman
Mark Sutton
Karen Tucker
Tiffany Welch

Email: Karen Tucker:

Karen performs administrative work for the division's director. She has been with the APA since October 1997; in state government since June 1989. She establishes time budgets and maintains tables on the mainframe, which are used to produce reports. She produces audit project status time reports for the agency and time reports for local government audits. She also produces personnel reports for staff, using P-1 and personnel master files, and ad hoc reports from Mainframe utility programs, JCL, and other data extraction reporting packages. One of her most important jobs is maintaining the APA's hotline database. She sorts and logs the incoming mail, handles verification of time sheets and travel vouchers, maintains a tickler file, and screens the director's phone calls. She maintains the division's files, schedules meetings, and takes notes/minutes, as needed.

Top of Page


Information Technology, Security Consultation and Training Branch




Email: Tony Hutchins:

Manager - IT Audit Branch

APA Audit Experience: With the APA from 1986 through 1989, and again from 1994 to present
Certifications: CPA; CISA

Tony graduated from the University of Kentucky, with a degree in Accounting. Prior to joining the APA, he worked for Humana, as an internal auditor, and as an auditor for the Kentucky Transportation Cabinet and Kentucky Housing Corporation. In total, he has 27 years of audit experience. He has a vast amount of experience in IT auditing.

Top of Page


Email: BJ Bellamy:

APA Experience: With the APA since July 1999; in state government since November 1986
Certifications: Global Security Essentials Certification (GSEC), Global Certification in Incident Handling (GCIH), and Global Certification in Forensic Analysis (GCFA) from the SANS Institute

BJ holds a Bachelor of Arts in Computer Science from Kentucky State University where he graduated Magna Cum Laude, with departmental honors. His present duties with the APA include, but are not limited to, information security and training, project management, and numerous studies of network security within the Commonwealth. He was named Chief Information Officer in July of 2001. BJ has been a member of the SysAdmin, Audit, Network, Security (SANS) GSEC Advisory Board since December 2001 and has been published numerous times in information technology industry publications.

Prior to working at the APA, BJ performed similar duties at the Department of Financial Institutions, Legislative Research Commission, and the Department of Information Systems.

Top of Page


Email: Veronica Bradley:

PAA IV - IT
APA Audit Experience: With the APA since June 1999
Certifications: CPA; CISA

Veronica graduated from the University of Kentucky, with a degree in Accounting. While at the APA, she has concentrated on IT audit procedures and has specialized in the areas of SAS and ACCESS program code review for newly developed investment programs. She is proficient in Seagate/Crystal Reporting, ACCESS and Excel. Experience also includes data extraction using mainframe utilities.

Top of Page


Email: Amy Fisher:

PAA III - IT
APA Audit Experience: With the APA since October 2000

Amy graduated from Eastern Kentucky University, with a degree in Finance. She also has 20 hours of Accounting from Sullivan University. She performs IT-related audit work. Experience outside APA includes 2 years with PriceWaterhouseCoopers. Amy is proficient in data extraction using mainframe utilities, Seagate/Crystal Reporting, Access, and Excel.

Top of Page


Email: Jenny Luscher:

Jenny Luscher
PAA Specialist - IT
APA Audit Experience: With the APA since June 1995
Certifications: CISA

Jenny graduated from Georgetown College, with a degree in Accounting. Her APA experience has been in IT auditing, with "specialties" identified as being data extraction using Mainframe utilities, Seagate/Crystal Reporting, Excel, and Access.

Top of Page


Email: Stephanie Mattingly:

Top of Page


Email: Robert Poynter:

APA Audit Experience: With the APA since December 2004

Robert graduated Summa Cum Laude from Berea College, with a Bachelor of Science Degree in Business Administration with an emphasis in Accounting and a minor in Spanish. He had two years of general accounting experience after graduation at a transportation company in South-Central Kentucky.

Top of Page


Examinations Branch



Email: Tiffany Welch:

Top of Page


Technology and Audit Support Branch



Email: Mark Sutton:

Technology Branch Manager
APA Experience: With the APA since January 1987
Certifications: Certified Public Accountant (CPA), A+ Certified Professional by CompTIA, Certified Professional Manager (CPM), and Global Security Essentials Certification (GSEC) from the SANS Institute

Mark graduated from Eastern Kentucky University, with a Bachelor of Business Administration degree in Accounting. Prior to becoming part of this division, he was an auditor in the Division of Financial Audit for eight (8) years in positions ranging from Auditor to Auditor-in-Charge, where he audited state agencies. He has been in network administration for eight (8) years.

Mark manages the network for the Auditor of Public Accounts, as well as, managing the workload of the technology branch staff. He develops short and long-range technology plans to address the future technology needs of the APA. Mark functions as the information technology liaison for the APA and works with applicable state agencies and vendors. He is responsible for reviewing/evaluating and purchasing appropriate goods/services. Mark helps to identify staff training needs and provides training as needed.

In addition, Mark provides support to APA computer users, both locally and those that dial in. He maintains, monitors, and troubleshoots servers, printers, workstations, backups, and dial-ins. He installs, "ghosts," replaces, configures, and/or troubleshoots hardware and software. He helps administer and maintain network security, users' rights, and the building's security system. He performs security tests and reports incidents, as necessary.

Top of Page


Email: Gary Jones:

Technology Branch Supervisor
APA Experience: With the APA since September 2001
Certifications: Microsoft Certified Systems Engineer (MCSE), Network+ Certified Professional by CompTIA (Net+), and Global Security Essentials Certification (GSEC) from the SANS Institute

While in the Marines, Gary attended Computer Science School in Quantico, Virginia. He received a degree in Computer Science, with the option in Computer Programming. He received his Microsoft Certified Systems Engineer for Windows 2000 from Sullivan University. He has approximately five (5) years experience in computer programming in ADA, Cobol, HTML, and Visual Basic. He has approximately four (4) years of experience in LAN administration. He worked with the Military Police while in Camp LeJeune, performing database entries.

Gary investigates any suspect event of intrusion into the APA's network, which includes gathering information about the intrusion and related events, forwarding this information to the GOT Security Services ISS and our CIO. Additionally, he gives advice to the IT Auditors on different methods and tools to use to evaluate the security of the Auditee's network. Gary evaluates, researches, and tests new products related to Security of the network. He also sends all recommendations of software and training to management for approval.

His overall responsibilities include providing support to APA computer users, both locally and those that dial in. He maintains, monitors, and troubleshoots servers, printers, workstations, backups, and dial-ins. He installs, "ghosts," replaces, configures, and/or troubleshoots hardware and software. He helps administer and maintain network security, users' rights, and the building's security system. He performs security tests and reports incidents, as necessary.

Top of Page


Email: Thomas Sparkman:

APA Experience: With the APA since April 1998
Certifications: Microsoft Certified Systems Engineer (MCSE), Network+ Certified Professional by CompTIA (Net+)

Tom received his Microsoft Network Engineer diploma from Sullivan University and graduated with Suma Cum Laude honors and a President's Cup Award. Subsequently, he earned a degree in Computer Science, with emphasis in Information Technology, again graduating Suma Cum Laude and a President's Cup Award. Tom has taught networking classes at Sullivan University. Tom creates, designs, and maintains the APA's Public website and internal Portal applications, data, and content. He also evaluates, researches, and tests new products related to the APA's websites. Tom formats and publishes audit reports and press releases to the Public website, as well as handling all web site related issues.

His overall responsibilities also include providing support to APA computer users, both locally and those that dial in. He maintains, monitors, and troubleshoots servers, printers, workstations, backups, and dial-ins. He installs, "ghosts," replaces, configures, and/or troubleshoots hardware and software. He helps administer and maintain network security, users' rights, and the building's security system. He performs security tests and reports incidents, as necessary.

Top of Page


www.auditor.ky.gov 2008 ©
Office of the Auditor of Public Accounts,
Commonwealth of Kentucky. All rights reserved.
105 Sea Hero Rd Suite 2
Frankfort, Kentucky 40601
Telephone: 502.573.0050
Facsimile: 502.573.0067
www.auditor.ky.gov
Auditor Alerts | Privacy Statement | APA Affirmative Action Plan | Affirmative Action Report
Directions to the APA (Detailed) | Directions to the APA (Overview) | Directions to the APA (Text Version) | Site map