ISACA Kentuckiana Chapter

8th Annual Louisville Metro InfoSec Conference

bdthomas — Wed, 21 Jul 2010 18:37:06 +0000

The Early-Bird Discount to the 8th Annual Louisville Metro InfoSec Conference has expired, however as an ISACA member you have a professional discount of 50% off General Admission. Your ticket price will be $49!.

Here are the terms:

Register before September 1, 2010 at http://www.regonline.com/2010_lmic
Select the registration type – ISACA Member
Enter the code ISA-3850

ISACA-Kentuckiana Day at the Races

bdthomas — Fri, 14 May 2010 18:22:24 +0000

ISACA Kentuckiana Chapter and Archer Technologies presents ISACA Day at the Races

Image from Wikipedia

Presenter:
Archer Technologies

Topic:
Investing in an Enterprise Governance, Risk & Compliance Strategy and Architecture

Getting Started with Enterprise GRC (Governance, Risk and Compliance)
Developing a GRC Strategy Roadmap
Enabling Cost-Cutting Initiatives with Governance, Risk and Compliance Management Technology

Networking	11:30 – 12:00
Lunch and Presentation	12:00 – 1:30
Handicapping Overview	1:30 – 2:00
Track Opens	1:30
First Post Time	2:45

When:
Friday, May 21, 2010

Where:
Churchill Downs
Triple Crown Room

Please RSVP by May 18, 2010 to meetings@isacaky.org
This event is free and open to the public, but reservations are required.

About Archer
Archer delivers enterprise governance, risk and compliance solutions.
To implement a strategic, efficient and sustainable governance, risk and compliance (GRC) program, organizations need integrated technologies, expert resources and a unified view into business processes across IT, Finance, Operations and Legal domains. In January 2010 RSA, The Security Division of EMC, acquired Archer Technologies to deliver on this vision through the industry’s most powerful eGRC ecosystem—one that brings together people, processes and technologies to enable best-in-class GRC programs on a global scale. Widely recognized as the industry-leading solution in eGRC, the Archer SmartSuite Framework is leveraged by more than six million licensed users and a client list that includes one in four of the Fortune 100.

Enterprise governance, risk and compliance solutions from Archer Technologies include Policy, Threat, Enterprise, Risk, Business Continuity, Incident, Loss Event, Vendor, Audit and Compliance Management. To learn more, visit http://www.archer.com.

About ISACA
With more than 86,000 constituents in more than 160 countries, ISACA® (www.isaca.org) is a leading global provider of knowledge, certifications, community, advocacy and education on information systems (IS) assurance and security, enterprise governance of IT, and IT-related risk and compliance. Founded in 1969, ISACA sponsors international conferences, publishes the ISACA® Journal, and develops international IS auditing and control standards. It also administers the globally respected Certified Information Systems Auditor™ (CISA®), Certified Information Security Manager® (CISM®), Certified in the Governance of Enterprise IT® (CGEIT®) and Certified in Risk and Information Systems Control™ (CRISC™) designations.

ISACA offers the Business Model for Information Security (BMIS) and the IT Assurance Framework (ITAF). It also developed and maintains the COBIT®, Val IT™ and Risk IT frameworks, which help IT professionals and enterprise leaders fulfill their IT governance responsibilities and deliver value to the business.

About Churchill Downs
Churchill Downs
700 Central Ave.
Louisville, KY 40208
Phone: (502) 636-4400

Directions:
http://www.churchilldowns.com/visit-us/maps-directions

ISACA Kentuckiana Chapter Meeting (April 2010)

mgreenfield — Thu, 15 Apr 2010 19:15:09 +0000

TOPIC:
Protecting your business with Technology.

Implementing Controls
Preventing Identity Theft
Avoid Technology Mistakes
Recommendations

WHEN:
Friday, April 23th 2010
11:30 – 12:00 Networking
12:00 – 1:00 Speaker

WHERE:
Waterfront Plaza (Directions)
10 Floor east tower
321 W Main Street
Louisville, KY

COST: FREE – 1 Hour of CPE (Jimmy Johns provided for lunch)
Please RSVP to meetings@isacaky.org before April 21, 2010 at 5pm.
Please include your selection of sandwich from Jimmy Johns listed below:

#1 PEPE® Real applewood smoked ham and provolone cheese garnished with lettuce, tomato, and mayo.

#2 BIG JOHN® Medium rare shaved roast beef, topped with yummy mayo, lettuce, and tomato.

#3 TOTALLY TUNA® Fresh housemade tuna, mixed with celery, onions, and our tasty sauce, then topped with alfalfa sprouts, cucumber, lettuce, and tomato. (My tuna rocks!)

#4 TURKEY TOM® Fresh sliced turkey breast, topped with lettuce, tomato, alfalfa sprouts, and mayo. (The original)

#5 VITO® The original Italian sub with genoa salami, provolone, capicola, onion, lettuce, tomato & a real tasty Italian vinaigrette. (Hot peppers by request)

#6 VEGETARIAN Layers of provolone cheese separated by real avocado spread, alfalfa sprouts, sliced cucumber, lettuce, tomato, and mayo. (Truly a gourmet sub not for vegetarians only..peace dude!)

(Note: All lunches will be box lunches and will include a bag of chips + cookie)
BIO:

Brian Jackson MCSE, MCITPEA, CCNA, CISA
Senior Technology Manager

Certified Ethical Hacker (CEH) Training (May 13-14th)

bdthomas — Wed, 31 Mar 2010 03:04:57 +0000

SOLD OUT!

CEH Overview:

The Certified Ethical Hacker (C|EH) is a professional certification provided by the International Council of E-Commerce Consultants (EC-Council.)

An Ethical Hacker is one name given to a Penetration Tester. An ethical hacker is usually employed by an organization who trusts him to attempt to penetrate networks and/or computer systems, using the same methods as a hacker, for the purpose of finding and fixing computer security vulnerabilities. Illegal hacking (i.e.; gaining unauthorized access to computer systems) is a crime in most countries, but penetration testing done by request of the owner of the targeted system(s) or network(s) is not, except in Germany.

A Certified Ethical Hacker has obtained a certification in how to look for the weaknesses and vulnerabilities in target systems and uses the same knowledge and tools as a hacker.

http://www.eccouncil.org/certification/certified_ethical_hacker.aspx

Course Overview:

ISACA Kentuckiana is planning on a hands on CEH Mini training. The class will be two days of hands on training. You will complete labs related to the material and a general overview of the training. TAKING THIS CLASS ALONE WILL NOT PREPARE YOU FOR THE EXAM. Class is limited to 16 people only. Lunch and light snacks will be provided

Instructor:

Click for details

http://www.solutient.com/EthicalHacking

ISACA Kentuckiana Chapter Meeting (March 2010)

mgreenfield — Tue, 16 Mar 2010 13:19:31 +0000

TOPIC:
Making the case for Microsoft Virtualization
In this session we will discuss why MaximumASP picked Hyper-V over all Microsoft’s competitors. This will be a no holds barred discussion about Hyper-V from a customer’s perspective: how provisioning servers took 3 days, then 15 minutes, then 1 minute and the true dollars and cents that were saved. No Microsoft marketing fluff. Just the good, the bad, and the learning pains we have gone through building a virtual datacenter.

A tour of the data center will be available after the presentation. Partcipants will be required to sign a waiver prior to the tour.

MaximumASP, based in Louisville, Kentucky, was founded in 2000 as an outsourcing firm for Windows-based hosting services. MaximumASP was named by Microsoft as its 2009 Hosting Solutions Partner of the Year. The company currently hosts more than 50,000 domains for customers in over 120 countries. With a strong focus on hosting solutions that combine advanced monitoring and management tools, MaximumASP has become a top choice for Microsoft developers seeking a robust hosting platform for mission-critical web applications. For more information visit www.maximumasp.com.

WHEN:
Friday, March 26th 2010
11:30 – 12:00 Networking
12:00 – 1:00 Speaker

WHERE:
MaximumASP
2080 Nelson Miller Parkway (map)
Suite 100
Louisville, KY 40223
866.925.4678

COST: FREE – 1 Hour of CPE (Jimmy Johns provided for lunch)
Please RSVP to meetings@isacaky.org before March 24, 2010 at 5pm.
Please include your selection of sandwich from Jimmy Johns listed below:

#1 PEPE® Real applewood smoked ham and provolone cheese garnished with lettuce, tomato, and mayo.

#2 BIG JOHN® Medium rare shaved roast beef, topped with yummy mayo, lettuce, and tomato.

#3 TOTALLY TUNA® Fresh housemade tuna, mixed with celery, onions, and our tasty sauce, then topped with alfalfa sprouts, cucumber, lettuce, and tomato. (My tuna rocks!)

#4 TURKEY TOM® Fresh sliced turkey breast, topped with lettuce, tomato, alfalfa sprouts, and mayo. (The original)

#5 VITO® The original Italian sub with genoa salami, provolone, capicola, onion, lettuce, tomato & a real tasty Italian vinaigrette. (Hot peppers by request)

(Note: All lunches will be box lunches and will include a bag of chips + cookie)
BIO:
Dominic Foster is Chief Technology Officer of MaximumASP, a Microsoft Gold Certified Provider of web hosting and managed IT services, as well as the star left wing for a two-time Stanley Keg winning ice hockey team in Louisville, Kentucky. Foster, known in certain circles as the Punk Rock CTO, joined MaximumASP in 2000 and currently has more than ten years experience designing, implementing and administering Windows technologies. New product and emerging technology research and development are primary responsibilities with key areas of focus on Virtualization, and IIS. Foster also oversees a systems engineer team responsible for maintaining more than 48,000 domains for customers in over 60 countries.

Foster’s expertise and active involvement in early builds of both technologies was a large factor in the success of MaximumASP’s partnership with Microsoft as the first to offer hosted accounts on Hyper-V and IIS 7. Foster, topped by his signature funky hair, has been a valued speaker at conferences, user groups and various interviews with online publications for his no-nonsense, unbiased opinions.

ISACA Kentuckiana Chapter Meeting (Feb 2010)

bdthomas — Fri, 05 Feb 2010 03:03:02 +0000

TOPIC:
Corporations spend millions of dollars every year to ensure against external security threats, but what about internal threats? Statistics show that companies lose more assets to internal fraud than intrusion hacking. A good deal of those losses have resulted from a single employee with too much application access, where that employee is performing several high risk processes in an uncontrolled environment. This session will describe the methods used to detect, mitigate and control segregation of duty issues.

WHEN:
Friday, February 26th 2010
11:30 – 12:00 Networking
12:00 – 1:00 Speaker

WHERE:
The Council on Developmental Disabilities
1151 S. 4th Street (map)
Louisville, KY 40203
http://www.councilonmr.org/
(502) 582-1995

Parking is available across the street in the old Winn-Dixie lot.

COST: FREE – 1 Hour of CPE (Pizza provided for lunch)
Please RSVP to meetings@isacaky.org before February 24, 2010 at 5pm.

BIO:
Nancy Burns, CISA, has worked in Information Technology for 39 years, the past 21 years at Brown-Forman Corporation. Over her career, she has held several management positions in IT including technical support, network management, telecommunications, operations and IT auditing. Her experience with segregation of duty issues began with the Sarbanes-Oxley Act where she managed a large project to mitigate over 15,000 SoDs. Today, Ms. Burns is Brown-Forman’s IT Compliance Analyst, which includes the monitoring and resolution of SoDs, as well as control compliance and testing.

ISACA/IIA Student Reception (Feb 2010)

bdthomas — Tue, 29 Dec 2009 21:25:17 +0000

The Accounting and CIS student reception is scheduled for February 22, 2010 at the University Club at the University of Louisville from 4 to 6 PM. Students from all of the local colleges are encouraged to attend. This reception is jointly sponsored by the IIA and ISACA.

All ISACA and IIA members are encouraged to attend to meet and mentor students.

ISACA Kentuckiana Chapter Meeting (Jan 2010)

bdthomas — Fri, 11 Dec 2009 22:18:19 +0000

TOPIC:
Database and Vulnerability Management

WHEN:
Friday, January 22nd 2010
11:30 – 12:00 Networking
12:00 – 1:00 Speaker

WHERE:
Waterfront Plaza (Directions)
10 Floor east tower
321 W Main Street
Louisville, KY

SPEAKER(s):

Mark R. Trinidad, Application Security, Inc.

Mark R. Trinidad is a Product Manager at Application Security, Inc. He is responsible for the direction of AppDetectivePro, all scanning technology, and the vulnerability knowledgebase for all products.

Over the years, Mark has established trusted partnerships with IT auditors and security professionals, working with them to understand how database audit and security controls fit into audit and compliance frameworks. He has spoken at various ISSA, ISACA, and OWASP chapters around the country, is a frequent DefCon attendee, and an active committee member of the ISACA and ISSA New York Metro chapters.

Mark holds a BS in MIS and Marketing from Drexel University.

ISACA Kentuckiana Holiday Social (Dec 2009)

bdthomas — Tue, 08 Dec 2009 16:50:43 +0000

You are invited to celebrate another great year with us at the 2009 Kentuckiana Holiday Social. Come network with us in a casual and relaxed atmosphere.

Hors d’oeuvres to be served: Cheese Sticks, Chicken Fingers,
Spinach Artichoke Dip, Classic Potato Skins

Cash bar available.

WHEN:
December 17th 2009 (Thursday) from 6:00-8:00pm

WHERE:
Fox and Hound (Click for Map)
302 Bullitt Lane
Louisville, KY 40222
502-394-7620

Please RSVP to meetings@isacaky.org before EoB December 15th, 2009

ISACA Kentuckiana Chapter Meeting (Nov 2009)

bdthomas — Mon, 09 Nov 2009 15:44:30 +0000

TOPIC:
Solving Problems That Don’t Exist
Building better security practices

WHEN:
Friday, November 20th 2009
11:30 – 12:00 Networking
12:00 – 1:00 Speaker

WHERE:
Waterfront Plaza (Directions)
10 Floor east tower
321 W Main Street
Louisville, KY

COST: $5 (Pizza will be served) – RSVP Closed

SPEAKER: Rafal M. Los, Solutions Specialist (HP)

ABOUT:

In today’s enterprise, Web Application Security has come front and center for security managers as well as the business. The reason many well-funded, well-backed programs fail is because they miss the fundamental rule of problem solving – understand the problem. The secret to success is simple – understand your business context and build a program around that.

How can you develop an actionable, business-risk driven program for your enterprise? Understanding your role within the business is key, followed by successful identification of a cornerstone upon which to base the program. Evaluating data value, application visibility and business exposure one step at-a-time, and assigning real, measurable risk are the necessary steps to making sure your program is well-grounded in business value. Participants will be given a strong foundation to succeed, so they don’t end up solving problems the business doesn’t have.