Dim comm As New SqlCommand("update SYS_USER set SUS_NAME=@NAME, SUS__DEP_ID=@DEP_ID, SUS_ENDWORK=@ENDWORK where SUS_ID=@SUS_ID")
comm.Parameters.Add("@NAME", SqlDbType.VarChar,  40 ).Value = PR.SUS_NAME
comm.Parameters.Add("@DEP_ID", SqlDbType.Int).Value = PR.SUS__DEP_ID
comm.Parameters.Add("@ENDWORK", SqlDbType.DateTime).Value = PR.SUS_ENDWORK
comm.Parameters.Add("@SUS_ID", SqlDbType.Int).Value = PR.SUS_ID
' вот что-нибудь типа
Debug.Print(comm.ТекстКомандыСоВставленнымиЗначениямиПараметров)

Dim strSQL As String = "update SYS_USER set SUS_NAME=@NAME, SUS__DEP_ID=@DEP_ID, SUS_ENDWORK=@ENDWORK where SUS_ID=@SUS_ID"
' создаём команду
Dim comm As New SqlCommand(strSQL)
comm.Parameters.Add("@NAME", SqlDbType.VarChar,  40 ).Value = PR.SUS_NAME
comm.Parameters.Add("@DEP_ID", SqlDbType.Int).Value = PR.SUS__DEP_ID
comm.Parameters.Add("@ENDWORK", SqlDbType.DateTime).Value = PR.SUS_ENDWORK
comm.Parameters.Add("@SUS_ID", SqlDbType.Int).Value = PR.SUS_ID
' логгируем
strSQL = strSQL.Replace("@NAME", PR.SUS_NAME)
' ... и так далее
Debug.Print(strSQL)

Public Shared Function ExecuteNonQueryCommand(ByVal strSQL As String) As Integer
      Debug.Print(strSQL)
      If Not CNNIsOpen() Then ReOpenCNN()
      Dim intRow As Integer =  0 
      Dim CM As New SqlCommand(strSQL, cnnCNN)
      Try
         intRow = CM.ExecuteNonQuery
      Catch ex As SqlException
         WriteSQLErrorMessage(ex, strSQL)
      End Try
      Return intRow
End Function

Public Shared Function ExecuteNonQueryCommand(ByVal CM As SqlCommand) As Integer
      Debug.Print(CM.CommandText)
      If Not CNNIsOpen() Then ReOpenCNN()
      Dim intRow As Integer =  0 
      Try
         intRow = CM.ExecuteNonQuery
      Catch ex As SqlException
         WriteSQLErrorMessage(ex, CM.CommandText)
      End Try
      Return intRow
End Function