The Password - December 2011

ISACA - North Texas ChapterThePassword
The Newsletter of ISACA - North Texas Chapter
December 2011
In This Issue:


Letter From the President
Marvin Reader

Happy Holidays! December is here and our calendars are filling up quickly.  It was great to see all that attended the November meeting and I look forward to seeing many of you at our next luncheon CPE session.

Be sure to mark Thursday, December 8th on your calendar as the date to join your ISACA friends at our December meeting.  Our Programs Committee will be serving up a special sandwich with CobiT on the outside (pre and post lunch sessions) filled with a rich center (lunch session) of SSAE 16.  See below for details.

Of course to celebrate the holiday season, each attendee will receive a special gift from the chapter.  Note that our "location rotation" brings us to the Crowne Plaza in north Dallas/Addison this month (Click for Map)

Great news! Dallas will be hosting the North America Computer Audit, Control and Security (CACS) event in 2013. CACS is the world’s leading audit conference for IT audit, security, governance and risk professionals. It will be at the Hyatt Reunion downtown. This is a great honor for our chapter and we will need plenty of volunteers to help make this event successful. Stay tuned for more details.

IMPORTANT REMINDER - When you attend the monthly CPE luncheons, please take a minute to complete the survey that arrives in your email inbox the day of the meeting.  Your feedback is essential in providing direction to your ISACA North Texas Chapter.

Also, it's that time of year to renew your membership and update your CPE records. You can renew online at the ISACA International website.

Our Chapter Website continues to be the main source for up–to-the-minute news and events, so visit it often.  As always, just a quick reminder to register early for the December meeting as we expect attendance will be high!  Hope to see you there!

Thanks and Take Care

Marvin Reader, CISA
PricewaterhouseCoopers (PwC)
President - ISACA North Texas Chapter
President@isacantx.org


[Top]


Meeting Agenda for our December 8, 2011 Luncheon Meeting

This month, our meeting location is the Crowne Plaza(Click for Map) in north Dallas/Addison, located on Midway between Belt Line and Spring Valley. The meeting will address some of the standards and frameworks that many of you use and rely on, including the changes incorporated in CobiT 5, SSAE 16, and SOC.

You have until noon on Wednesday, December 7th to register for this meeting. In the event you are unable to attend after you've registered, please contact reservations@isacantx.org for assistance with canceling your reservation. This will help us keep our event registration fees reasonably priced.

Pre-Luncheon Session - 10:30 AM - 11:30 AM
CobiT 5
Josh Turcotte, Ernst & Young

CobiT 5 connects and encompasses many best practices. Josh will compare CobiT 4 to CobiT 5 and show the benefits of the new version.

Attendees will learn to:

  • Understand the differences between CobiT 4 and CobiT 5
  • Understand how Val IT and other ISACA frameworks are integrated into CobiT 5

Pre-Luncheon registration begins at 10:00 AM.

Luncheon Session - 12:20 PM - 1:20 PM
SSAE 16 – Everything you wanted to know but are afraid to ask
Kurt Hagerman, Managing Director, Coalfire

This presentation will review the prior SAS 70 standard, its intended use and how it was being misused and misunderstood. This will include a review of the old Sys and Web Trust reports. It will then go into the new SSAE 16 standard, explain the differences between the three SOC reports and include examples of when each is appropriate.

We will cover the SOC 2 in more detail, including how it addresses the previous Sys and Web Trust reports as well as why it is slow to be adopted.

Finally, we will cover the Trust Services Principles, what they are, how they can be made useful for IT audits and mapping them to established frameworks such as ISO and PCI.

Attendees will :

  • Understand why SSAE 16 is slowly being adopted
  • Understand the Trust Services Principles and how they can be used in IT audits
  • Understand the SSAE 16 standard

Lunch registration begins at 11:15 AM. Lunch is served at 11:45 AM.

Post Luncheon Session - 1:30 PM - 2:30 PM
Leveraging CobiT
Ted Sherril, Senior Director, Oracle Corporation

CobiT can be leveraged to identify areas for risk remediation and provide metrics to eliminate gaps. Ted will use real business examples of how organizations are using technology to automate controls that improve business and system availability.

Attendees will:

  • Understand which CobiT controls to use based on business requirements
  • Understand how automation tools can improve controls
  • See how businesses are using CobiT controls

For complete details, including CPE information and to register, click the buttons below.

Event Details

Register

Copies of the presentations for this meeting will be made available at www.isacantx.org/index.cfm/Presentations,
before the meeting if possible.

Rick Nietubicz

Rick Nietubicz, MBA, CISA, CGEIT, PMP, ITIL, Six Sigma, ISO 20000
Research Now
VP of Programs - ISACA North Texas Chapter
Programs@isacantx.org


[Top]


Welcome To Our New and Returning Members

We want to welcome our new and returning members - those that have joined/rejoined ISACA and our North Texas Chapter in the last 30 days. We hope to see each of you at our monthly meetings.

By the way, the North Texas Chapter, with 1649 members (11/30/2011) a 5% growth in membership since this time last year.

Name
Company
Name
Company
Andre E. Anton Exigo Fabrice T. Mulangu KPMG
Babatunde Joseph Ayeleso, CISA,CRISC (T) Accenture Firas Nawwaf Mustafa Student
John J. Barger, CISA (T) Bank of America Patrick William Parker, CISA (T) Verizon
Renis Cama, CISA,CRISC (T) PwC Carla Wilson Patrolia, CISA (T)  
Andrew A. Carrigo, CISA PwC Morgan Peterson (T) Ernst & Young
Samuel Chamberlin, CISA Coalfire Systems Martin J. Poipoi, CISA Fannie Mae
Michael John Gordon   Scott Preston GM Financial
Soumya Harikar, CISA (T) Morgan Stanley Chuck Springer, CISA (T) IBM

(T) = Transfer from another ISACA chapter

Laurie Flandrau

Laurie Flandrau, CISA
GM Financial
VP of Membership - ISACA North Texas Chapter
membership@isacantx.org

Special thanks to Armanda Moore for compiling these details for the newsletter.


[Top]


Want To Get Published? We'd Like to Hear From You

In today's hectic and challenging business environment, where we are faced with so many different sources of information, e.g., websites, blogs, tweets, listservs, social networks, RSS feeds, etc, competing for our attention, it is increasingly challenging to create a meaningful and relevant newsletter that members have the time and inclination to read. Despite this, the feedback from the annual chapter survey tells us that the newsletter is generally still well received and wanted. However, we'd like to make it even better, and that is where you come in.

When we compare ourselves to other award-winning chapter newsletters, one area where we have room for improvement is sharing the work experiences of our chapter members. With over a thousand members in a broad range of industries of varying sizes, we have a vast source of experience. Some of you work in best practice audit groups, others are in less mature organizations that are still developing. All of you have something you can share with other chapter members.

We'd like to hear from any member that is willing to write a brief article for the newsletter that would be of interest to fellow practitioners, e.g.:

These are just a few ideas and not meant to be all inclusive.

In addition, if you have any ideas for other content you'd like to see, let us know.

If you'd like to write an article or have ideas for the newsletter, please send them to newsletter@isacantx.org.

Matthew C. Smith

Matthew C. Smith, CISA
Capital One
Newsletter Coordinator - ISACA North Texas Chapter
newsletter@isacantx.org


[Top]


Current Job Postings

The word is getting out - that firms and recruiters can post their available audit and security-based openings on our JOBS Board, without charge. Help bring jobs and job seekers together by promoting job postings. Your fellow ISACA members will appreciate it.

As of December 2, 2011, we have 7 opportunities posted on the jobs board, as summarized below. See our website regularly for any updates and for complete details. Please note that positions may have been filled or new positions added prior to the newsletter publication, so always check the jobs board directly for the most current status.


Company: GameStop
Position: Director of Audit & Compliance North America
Location: Grapevine, TX
Salary: DOE
Contact: Anna Castillo , 817-722-7891 , annacastillo@gamestop.com , Click here for job details


Company: Textron
Position: IT Technical Auditor
Location: Ft. Worth, TX
Salary: DOE
Contact: Trevor Collins , 401-621-2150 , tcollins@textron.com , Click here for job details


Company: Compass Technology Group
Position: IT Audit Manager
Location: Irving, TX
Salary: Up to $120k + bonus
Contact: Christine Conwell , 214-295-6396 , cconwell@compasstgp.com , Click here for job details


Company: Molkentine Professional Search, Inc
Position: IT Audit Senior (2-4 Years) (Roll Out)
Location: Dallas, TX
Salary: $70K - $80K
Contact: Jon Molkentine , 817-265-2291 , Jobs@molkentinesearch.com


Company: Novation
Position: Auditor III, Senior Auditor (Data Analysis)
Location: Irving, TX
Salary: DOE
Contact: Tim Reiter , 972-830-0971 , treiter@vha.com , Click here for job details


Company: McKesson Corporation
Position: Risk Control Group IT Manager
Location: Carrollton, TX
Salary: DOE
Contact: Kate Caulfield , Kate.caulfield@mckesson.com , Click here for job details


Company: ConCentra Healthcare
Position: Senior Security Engineer
Location: Addison,TX
Salary: $102k-$125k
Contact: Sarah Kirsch , 972-364-8255 , Sarah_Kirsch@concentra.com , Click here for job details


Interested in positions outside the DFW area, even world-wide? ISACA International maintains a Career Center that hosts hundreds of available opportunities. Just select Career Center from the left-hand menu options at www.isaca.org.


[Top]


Monthly Luncheon Meeting Dates for 2012

Mark these dates on your calendars now to ensure you don't miss a meeting:

MonthDateMain Session
January January 5, 2012
Joint Meeting with Dallas IIA
February February 9 2012 ..
March March 8, 2012 .
April April 12, 2012 .
May May 10, 2012 .
June June 14, 2012 .

Refer to the Current Events to view details of session topics.

Rick Nietubicz

Rick Nietubicz, MBA, CISA, CGEIT, PMP, ITIL, Six Sigma, ISO 20000
Research Now
VP of Programs - ISACA North Texas Chapter
Programs@isacantx.org


[Top]


ISACA North Texas Linked-In Group

Did you know the North Texas Chapter has a group on Linked-In? Catch the latest news from the ISACA NTX chapter and your fellow chapter members. Get updates as they happen, get information about professional development and jobs in the area, post questions or comments about an IT audit, security, etc. topic, network with colleagues and give your feedback/input on existing discussions. We look forward to connecting with you on Linked-In!

To access the group go to http://www.linkedin.com/groups?mostPopular=&gid=1360787

Get Linked-In!

Angel Jones

Angel Jones, CISA
Fiserv
Marketing Coordinator - ISACA North Texas Chapter
marketing@isacantx.org


[Top]


November Luncheon Winners

Following each monthly luncheon meeting, we give away four $50 gift cards to popular merchants in the area, typically Home Depot, Lowe's, Macy's, Nordstrom and/or Best Buy.

November's winners are shown below. The next winner, at our December 2011 meeting, could be you!

October 2011 Winners

November 2011

Door Prize Winners
Mark Schimek - Richard Cole - Carol Sullivan - Mark Hurst

To be eligible for the drawing, you must have checked in and paid at the registration table prior to the luncheon and be present at the time of the drawing. Walk-ins who have paid and registered are also included in the drawing. Our luncheon speaker typically draws the names from the basket to ensure objectivity, and the lucky winners are subsequently photographed for posterity.

Brittany George Teare

Brittany George Teare, CISA
Weaver
Hospitality Coordinator - ISACA North Texas Chapter
hospitality@isacantx.org


[Top]


News from ISACA International

World Congress: INSIGHTS 2012 - Registration Now Open

ISACA´s World Congress: INSIGHTS 2012, taking place 25-27 June 2012, is an event unlike any other. Designed for progressive IT and business leaders, the conference addresses topics at a strategic level, giving you the insights you need to develop strategies for effective integration of business and technology.

Registration is now open! Join us in San Francisco.

More information and program details will be posted regularly as the information becomes available, so check back often!

2012 North America CACS - May 6-10, 2012

Register today for ISACA's 2012 North America CACS! Be a part of the world-leading audit conference for IT audit, security, governance and risk professionals. This world-class event will be located in Orlando, Florida, May 6-10, 2012.

Earn up to 44 CPE hours!

Check the ISACA web site frequently as additions are being made often.

ISACA’s CISM Designation Named 2012 SC Magazine Awards Finalist for Best Professional Certification Program

ISACA has been named a finalist in the 2012 SC Magazine Awards US for exemplary professional leadership in information security. Its Certified Information Security Manager (CISM) designation was acknowledged in the Professional Award category for Best Professional Certification Program.

“ISACA is a great example of leadership for the entire information security industry with its strong policies and practices that have led to their selection as a finalist,” said SC Magazine Editor-in-Chief Illena Armstrong. “This category continually evolves as the industry learns best practices from each other, and it’s an honor to recognize ISACA’s efforts.”

Many talented information security professionals from end-user companies entered the Professional Award category, which is judged by a panel of renowned security professionals from many different industries. The panel conducts in-depth analysis and considers many factors in narrowing down the field to announce the finalists.

In its 15th year, the annual SC Awards showcase the best solutions, services and professionals while recognizing achievement and technical excellence. SC Magazine distinguishes the achievements of the security professionals in the trenches, the innovations happening in the vendor and service provider communities, and the fervent work of government, commercial and nonprofit organizations—all working to help improve global security.

“ISACA’s mission is to help IT professionals and their employers achieve trust in, and value from, information and systems, and a key component of that is effective information security,” said Allan Boardman, chair of ISACA’s Credentialing Board. “We are honored that the SC Magazine Awards program has recognized the CISM certification’s contribution to the industry.”

Winners of the SC Magazine Awards will be announced on Tuesday, 28 February 2012.

ISACA advances and attests IT skills and knowledge through four certifications: CISM, Certified Information Systems Auditor (CISA), Certified in the Governance of Enterprise IT (CGEIT) and Certified in Risk and Information Systems Control (CRISC). Additional information is available at www.isaca.org/certification.


Complimentary Resource for IT Professionals

The COBIT Process Assessment Model (PAM): Using COBIT 4.1 program is now posted here. This complimentary PDF is FREE for members. This e-book can also be purchased at the bookstore for non-members. Download Now

View a variety of other resources as well, free of charge, as an ISACA membership benefit.

Are YOU ready for COBIT 5? ISACA is currently working on updating the COBIT framework by the end of 2011 and having it published in early 2012. Check the ISACA website for details.


Complimentary Audit/Assurance Programs

The following new complimentary audit/assurance programs are now posted:


BENEFIT of Your ISACA Membership

As a benefit of your ISACA membership, the following upcoming online learning opportunities will be available in the near future:


ISACA Training Week - December 12-16 in Chicago

http://www.isaca.org/Education/Upcoming-Events/Pages/Training-Week-Chicago.aspx


ISACA Training Week - December 5-9 in Scottsdale AZ

Can´t make Training Week in Chicago? Then consider getting your EOY training in warmer Scottsdale AZ, with up to 38 hours of CPE.

http://www.isaca.org/Education/Upcoming-Events/Pages/Training-Week-Scottsdale-Arizona-USA.aspx


Free CPE Using Your ISACA Membership

As a benefit of your ISACA membership, ISACA International is making free CPE available in four different formats. In fact, you can secure up to 72 hours of CPE per year, as follows:

  • Earn one hour of CPE by taking and passing a quiz involving ISACA Journal. With six issues of ISACA Journal published each year, you can earn up to six hours of CPE, without charge.
  • Earn three CPEs for each of 12 e-Symposia per year. That's 36 CPE credits available to you. Just sign-up for and attend each e-symposium in its entirety and complete a short 10-question quiz at the end of each 3-hour event.
  • Earn up to 20 CPE by actively participating on an ISACA or ITGI board, committee, task force or as an officer of an ISACA chapter.
  • Earn one CPE for each hour of mentoring efforts directly related to coaching, reviewing or assisting an individual with CISA/CISM/CGEIT/CRISC exam (up to 10 CPE).

As always, read the full details at http://www.isaca.org/Certification/Pages/How-to-Earn-CPE.aspx.


Ali Sughani

Ali Subhani, CISA,CIA,GSNA
Univ of Texas at Dallas
Newsletter Committee - ISACA North Texas Chapter
newsletter@isacantx.org


[Top]


Questions? Comments? Corrections? Please advise us at newsletter@isacantx.org

The Password is a free copyrighted publication of the North Texas Chapter of ISACA. It is published periodically from August through June. It is an objective of the North Texas Chapter of ISACA to be a forum of free expression and interchange of ideas. Statements of position or expressions of opinion appearing herein are those of the authors and not, by the fact of publication, necessarily those of ISACA or the North Texas Chapter. Likewise, the publication of any advertisement is not construed to be an endorsement of the product or service offered unless specifically stated.
Copyright 2011 ISACA North Texas Chapter - all rights reserved