Home |
About Us |
Meetings & Seminars |
Newsletters |
Contacts |
Membership Info |
Links | Area
Jobs |
Reference | more...
|
The Kentuckiana Chapter |
2006-2007 Meeting and Seminar
Schedule
[2007-2008 Meetings]
[Old Meeting Archive]
Mark the following dates on your calendar for the meetings of the Kentuckiana Chapter. See individual meeting notice for location. Note: Past meetings are listed for reference purposes.
PayPal payment now
accepted
(See more PayPal information below list of meetings):
Date |
Speaker and Topic |
CPEs |
|
2006-2007: |
|
September 29, 2006 Cost: $15 |
ISACA Chapter Meeting
Time: 11:30 sign-in and networking; 12:00-1:00 Lunch and presentation Speaker: Andrew Tanner, Ernst & Young About Andrew... Andrew J. Tanner (MBA/CISA) Ernst &Young - Senior Manager Andrew attended Michigan State University for his undergraduate studies, where he obtained his Bachelor of Arts in Professional Accounting. Subsequently, Andrew was accepted into the Eli Broad Graduate School of Management at Michigan State University, where he obtained his MBA in Management Information Systems with a specialization in Supply Chain Management. Upon completion of his undergraduate and graduate studies in December 1998, Andrew accepted a position from Ernst & Young to join their Technology and Security Risk Services (TSRS) practice. In Andrew’s seven plus years at E&Y, he has managed engagements in many areas including Access Management, IT Audit, ERP Integrity, Process / Control Design, and Data Analysis. The majority of his clients are in the Manufacturing / Automotive Industry, and he has also performed work in Financial Services, Health Care, Retail, IT Services, and Higher Education industries. Andrew was appointed as the E&Y Data Analysis Leader for Detroit and Toledo in 2003, and has recently been appointed as the Data Analysis Advisory Services leader for E&Y’s North Central Area. Andrew is also the TSRS North Central Area Champion for Segregation of Duties Enterprise Management. In this role, he has assisted in the development of methodologies and tools that are used across the firm, and serves as an advisor to all client teams in the area.
Topic: Enterprise Wide Segregation of Duties
(SOD) Segregation of Duties Enterprise Management SOD has recently become a common topic of conversation among top executives, primarily due to Sarbanes-Oxley. Although many organizations have included SOD as a key control activity, their level of design, operation and documentation are typically not meeting today’s compliance standards. In the cases where SOD control activities are effectively designed and operated, organizations often experience high costs of operation and compliance. SOD Enterprise Management is an approach to addressing organizational control and compliance requirements, while optimizing operational efficiencies through standardization and automation.
Location: Lunch Buffet. Cost is $15. Payment can be made at the time of the luncheon meeting or in advance via PayPal (use payment button in left column).
RSVP to: |
1 |
November 17, 2006 Cost: $20 |
ISACA Chapter Meeting
Time: 11:30 sign-in and networking; 12:00-1:00 Lunch and presentation Speaker: Bill Baldwin, Humana, Inc. About Bill... Director, Acquisitions Integration at Humana, Inc. Louisville Native; 36 years with Humana; 33 years in Information Technology; Masters Degree in Business Admin.; Masters Degree in Health Services Mgmt.
Topic: IT Strategy for Mergers and Acquisitions
Location: Cost is $20. Payment can be made at the time of the luncheon meeting or in advance via PayPal (use payment button in left column).
RSVP to: |
1 |
November 18 and 19, 2006 Cost: $300 ISACA, IIA and ISSA Members |
CISM Review Course
Time: 9:00 am to 6:00 pm both days Subject: CISM Review Course To support the development of new certified professionals, the Kentuckian Chapter is sponsoring a CISM review course. This is a weekend "cram" style format on Saturday, November 18 and Sunday November 19 from 9 am to 6 pm both days. The course will use ISACA provide materials provide in hard copy to the students. The instructor recommends that students also purchase the following materials available from the ISACA bookstore
These materials are available through the ISACA International Bookstore at www.isaca.org Although the instructor will not be using these manuals extensively, it will definitely help them with the material. Instructor: Jay Ranade, CISA, CISM, CISSP, CBCP Jay is an internationally renowned expert on computers, communications, disaster recovery, IT Security, and IT controls. He has written and published more than 35 IT-related books on various subjects ranging from networks, security, operating systems, languages, and systems. He also has an imprint with McGraw-Hill with more than 300 books called "Jay Ranade Series". He has written and published articles for various computer magazines such as Byte, LAN Magazine, and Enterprise Systems Journal. The New York Times critically acclaimed his book called the "Best of Byte". He is currently working on a number of books on various subjects such as IT Audit, IT Security, Business Continuity, and IT Risk Management. Jay has consulted and worked for Global and Fortune 500 companies in the US and abroad including American International Group, Time Life, Merrill Lynch, Dreyfus/Mellon Bank, Johnson and Johnson, Unisys, McGraw-Hill, Mobiltel Bulgaria, and Credit Suisse. He is a member of the ISACA International's Publications Committee" Questions? Contact Melissa Perry at melissaperrycpa@yahoo.com |
14 |
December 12, 2006
Cost: $20 |
ISACA Chapter Meeting
Joint Meeting with the IIA Time: 11:30 sign-in and networking; 12:00-1:00 Lunch and presentation
Topic: Presentation Skills for
Auditors Speaker: Michael Vincent, IT Internal Audit Manager, Humana , Inc. About Michael... Michael Vincent is currently Information Technology Audit Manager at Humana Inc., a Fortune 200 health benefits company based in Louisville, KY. Michael’s role at Humana Inc. is to ensure that stockholder equity is appropriately protected by managing risks within Humana’s Information Systems infrastructure. Michael has lead projects and programs using Carnegie Melon’s Capability Maturity Model Software Development Lifecycle application development methodology. Michael has also lead dozens of projects and programs involving risk based and compliance audits such as Sarbanes-Oxley. Michael has over 10 years IT, IT Audit, and management experience in the transportation and health care industries, including key roles at Humana Inc. and United Parcel Service. Michael graduated with a Bachelor of Arts Degree in Biology and a Masters Degree in Business Administration from the University of Louisville. Michael holds a Project Management Professional (PMP) certification from the Project Management Institute and a Certified Information Systems Auditor (CISA) certification from the Information Systems Audit and Control Association.
Location:
Menu selections: Cost is $20. Payment can be made at the time of the luncheon meeting or in advance via PayPal (use payment button in left column). Please RSVP with menu choice before close of business on 12/05/2006 to kyisaca@isauditor.net |
1 |
January 9, 2007 Cost: $20 |
ISACA Chapter Meeting
Joint Meeting with the IIA Time: 11:30 sign-in and networking; 12:00-1:00 Lunch and presentation Topic: Technology Risks - The Game Has Changed As technology continues to play an ever increasing role in our lives, the risks related to technology require that we take a new look at how we are address these new risks. Networks have made it possible to work from home or on the road, however that same ability also puts our information assets at greater risk. Other risks that technology has brought are phishing, hacking and identity theft, just to name a few. New auditing requirements are needed, and are being developed to address these and other risks that result. Bob's presentation will attempt to address what the role of the auditor should be to limit risk in this world of ever-increasing technology.
Speaker: Robert M. Boyle, CISSP, CISA, CCP About Robert... Bob is with Strothman and Company, and serves as the firm’s Technology Services Partner providing consulting and technology auditing services to his clients. He assists his clients by working to improve and increase the use of technology in their business. He reviews and evaluates many different aspects of clients’ current use of technology and consults with them to help improve their success. Prior to joining Strothman and Company, Bob held the position of Financial Auditor and moved into the position of EDP Auditor for the First Bank of Louisville where he developed the first comprehensive review of the technology department. He was responsible for performing program testing of bank applications. After leaving the bank Bob served more than 20 years as the Director of Global Risk Management Services for PricewaterhouseCoopers, LLP (formerly Coopers & Lybrand), where he was responsible for the delivery of risk management and IT Audit services in the Kentuckiana area. Bob has had significant involvement in both local and national community and professional organizations. In 1977 Bob helped to form the EDP Auditor’s Association Chapter in Kentucky (Now called ISACA). He also served on the ISACA International Board of Directors for several years during the mid 1990s. He has also been involved in several technology groups including the IS Management Association along with several others. Bob grew up in Louisville, Kentucky with three brothers. Growing up in a family with a handicapped sibling, Bob has always been conscious about how easy it is to take the simple things in life for granted. Bob currently serves as Treasurer for the Council on Mental Retardation which advocates for the rights of the mentally handicapped. Bob resides in Louisville, Kentucky with his wife Delores and their three children, Stephanie, Robby and Emily. Location:
Bristol Bar and Grille Cost is $20. Payment can be made at the time of the luncheon meeting or in advance via PayPal (use payment button in left column). Please RSVP with menu choice before close of business on 01/04/2007 to kyisaca@isauditor.net |
1 |
February 16, 2007 Cost: $20 |
ISACA Chapter Meeting
Time: 11:30 sign-in and networking; 12:00-1:00 Lunch and presentation
Topic: Enterprise Risk Management
(ERM) Enterprise Risk Management (ERM) can be defined as an organization’s competency to manage uncertainty, more effectively minimizing threats and maximizing opportunity. ERM is characterized by systematic management practices to assess and monitor risk, and improve the way that risk is managed - supported and enabled by the appropriate risk management framework. A practical approach to ERM will be presented that focuses more on leveraging a company’s existing infrastructure over creating a new one. This approach is more likely to produce early success and value, and help increase the chances for broad acceptance and support for risk-focused initiatives into the future.
Speaker: Jimmy Parker , CPA, CIA, CMA, CFM About Jimmy... Jimmy Parker is the Enterprise Risk Management (ERM) Champion for Ernst & Young’s North Central Area. Jim is a Senior Manager in the Business Risk Services practice of Ernst & Young’s Detroit, Michigan office and currently leads enterprise risk management projects, internal audit engagements and Sarbanes-Oxley Section 404 readiness efforts for SEC clients. Prior to his current position with Ernst & Young, Jim was a Manager with the Internal Audit Services group within the Enterprise Risk Services practice of a Big 4 firm in Chicago, Illinois, specializing in internal auditing, systems auditing and risk management for manufacturing, financial services and public sector clients. He also conducted control self-assessment workshops and performed quality assurance reviews. Jim presently facilitates the Enterprise Risk Management course for the Institute of Internal Auditors. Jim holds a Bachelor of Science degree in Accounting from the University of Maryland (Summa Cum Laude) and a Master of Business Administration degree from the University of North Carolina at Wilmington. He is a Certified Public Accountant, Certified Internal Auditor, Certified Management Accountant, Certified in Financial Management, Certified in Control Self-Assessment and a Certified Information Systems Auditor candidate (test passed). Location:
Masterson’s Cost is $20. Payment can be made at the time of the luncheon meeting or in advance via PayPal (use payment button in left column). Please RSVP with menu choice to kyisaca@isauditor.net |
1 |
February 27 and 28, 2007 Class now full |
"Securing and Auditing Active Directory" by MIS Training
Institute
Time: 8:00 am to 5:00 pm both days
Location: Subject: Securing and Auditing Active Directory
Who Should Attend: Mark your calendar and sign up ASAP for this two-day course on Active Directory because space is limited and these spots will go fast. In this seminar you will gain the skills you need to perform a detailed audit of an Active Directory network. The agenda for this course includes the following topics (detailed course description on second page):
For both days of this seminar, lunch is included and will be provided to you. In addition, you will receive a 250-page course manual to keep and a CPE certificate of completion to evidence your attendance. Instructor: Franklin Smith, SSCP, CISA Randy Franklin Smith, president of Monterey Technology Group, is an internationally known speaker and writer on Windows, Active Directory and Internet Information Server security topics. Mr. Smith serves as contributing editor for Windows IT Pro and as technical editor for Security Administrator. The winner of the APEX Award of Excellence for his writing, his articles have also appeared in Information Security Magazine. He is the primary instructor and course developer for MIS Training Institute's Windows platform security programs. Mr. Smith also performs security reviews for clients ranging from small, privately held firms, to Fortune 500 companies. In addition, he regularly trains internal audit staff and "Big 4" accounting firm consultants on how to audit Windows 2000 and Active Directory. He is a member of the ISSA, ISACA, Technology Association of Georgia, and Center for Internet Security, and was recently granted Microsoft MVP status.
Detailed Course Description:
In this detailed seminar you will discover how to tell if your administrators are really reviewing security logs as often as they say they are and get pointers on detecting lax account management. CANCELLATION POLICY No refunds will be offered for cancellations received after January 31, 2007. To cancel, you must notify Kentuckiana ISACA in writing in advance. Any cancellation before February 1, 2007 is entitled to a full refund and will not incur any fee or penalty. Questions? For any questions regarding this event, please e-mail kyisaca@isauditor.net. Alternatively, you may contact Matt Smith at 502.774.7236. |
15 |
March 16, 2007 Cost: $20 |
ISACA Chapter Meeting
Time: 11:30 sign-in and networking; 12:00-1:00 Lunch and presentation Topic: Database Auditing and Compliance Speaker: Scott Hays, Database Brothers About Scott... Scott Hayes is a well known DB2 UDB performance expert. He is a regular speaker at International DB2 User Group conferences, IBM DB2/Data Management conferences, and is frequently sought asa guest speaker for regional DB2 user group meetings. Scott has authored several published articles on DB2 UDB performance, is an IBM DB2 GOLD Consultant (an elite, exclusive group of IBM recognized top DB2 advocates), has obtained Advanced IBM DB2 Certifications, and is widely regarded by the worldwide DB2 community as the top performance expert for DB2 ondistributed (UNIX, Linux, and Windows) platforms. Scott graduated from SUNY Geneseowith a Management Science Major and Computer Science Minor, and –as he was recently reminded during a conference presentation -he is , not was, an Eagle Scout. Scott started Database-GUYS Inc (DGI) in May of 1998 as a DB2 UDB performance consulting company. As clients quickly embraced his methods, metrics, techniques, teachings, and tools,DGI was transformed into a software company providing best of breed tools (Wise-GUY™, Space-GUY™, Pool-GUY™, SQL-GUY™, Connection-MINER™, and Flight Deck for DB2 UDB –now owned by BMC Software) and consulting services for DB2 UDB. Thiscompany was sold to BMC Software on June 20, 2003. During his two year tenure at BMC Software, Scott was Director of Product Marketing and continued to provide field consulting services, training, education, and sales assistance for BMC customers. Scott also contributed ideas to the BMC Software development team to ensure that SmartDBA®for DB2 UDB had valuable features and functions. In July 2005, Scott started Database-Brothers Inc (DBI) to enable him to optimally serve the DB2 UDB and Oracle database communities with deeply focused attention. And, as he'll tell you at conferences, he likes signing his own expense reports too. Location:
Masterson’s Cost is $20. Payment can be made at the time of the luncheon meeting or in advance via PayPal (use payment button in left column). Please RSVP with menu choice to kyisaca@isauditor.net |
1 |
April 20, 2007 Cost: $20 Student Cost: $5 |
ISACA Chapter Meeting
Time: 11:30 sign-in and networking; 12:00-1:00 Lunch and presentation Topic: The Convergence of Enterprise Risk and Regulatory Controls The Convergence of Enterprise Risk and Regulatory ControlsWith the majority of U.S. corporations now facing the escalatingcosts associated with compliance with federal, state and Industry regulations, it is important for organizations to look into how they manage risk vscompliance with specific regulations. Simply complying with regulations does not properly ensure security over confidential and proprietary information. Restructuring an organization's Risk Management strategyaround an established security program will help cut costs associated with regulatory compliance and help ensure a easier and cleaner review from external auditors. Another benefit of adopting a security standard is the subtle change in corporate culture which brings Information Security from the background and integrates it into the daily life of all employees. Speaker: Collin Wayne Buechler, Shavlik Technologies About Collin... Collin Wayne Buechler, a senior consultant with ShavlikTechnologies LLC'sEnterprise Risk Management Group, specializes in enterprise risk management solutions, business risk assessment, and regulatory and technical reviews of information security. Collin is well versed in SAS70 third-party audits, PCI, GLBA, HIPAA, FERPA and Sarbanes-Oxelycompliance efforts. He specializes in consulting services within the Financial and Public Utilities Industries. About Shavlik Technologies... It is the third party consultant’s job to help the client embrace adopting a security standard in order to improve overall risk management and understanding concerning Information Security, and as a side effect of this process become compliantwith the regulations over their industry Shavlik Technologies, LLC is a recognized leader in network security products and technology solutions used worldwide. In addition, Shavliks Professional Security Services provide security risk assessment and recommendations for enterprise network environments. Location:
Masterson’s Cost is $20. Payment can be made at the time of the luncheon meeting or in advance via PayPal (use payment button in left column). Please RSVP with menu choice to kyisaca@isauditor.net |
1 |
May 11, 2007 Cost: $20 Student Cost: $5 |
ISACA Chapter Meeting
Time: 11:30 sign-in and networking; 12:00-1:00 Lunch and presentation Topic: Spreadsheet Compliance ComplianceSarbanes-Oxley legislation and the risks of noncompliance are powerful motivators for internal auditors and financial professionals to take the time to educate themselves about the far-reaching consequences of spreadsheet errors and to learn about best practices in spreadsheet management and control.Mobius, a leading provider of integrated content and compliance solutions, will discuss the issue of spreadsheet compliance, offering tips basedon real-world experience to help you reduce the risks and costs of spreadsheetmanagement.In this informative briefing, you will learn:·How to recognize what the risks are·How to establish strong controls that will track every change toevery spreadsheet·How to dramatically improve productivity wherever spreadsheetsare used in your organization. Speaker: Kevin Kaide from Mobius About Kevin... Kevin Kaide, Director Spreadsheet Compliance, has been with MobiusManagement Systems, Inc. since 1998. He has worked with hundreds of organizations to determine requirements andimplement technology solutions that improve business process andreduceoperational costs. For the past 18 months, he has focused on thebusinessissues and best practices relating to the use and management ofspreadsheets and solutions to automate and sustain the required controls. Mobius Management Systems, Inc. is a leading provider of comprehensive software solutions for enterprise archivingand records management. For twenty-five years, Mobius has defined and led the market for software that stores, indexes, and distributes diverse documents, reports and images--in any format from any source.Mobiussolutions have achieved industry-wide recognition for their ability to support high-volume, high-performance, simultaneous-access requirements in distributed environments that range from the desktop to the mainframe.Mobiusprovides the most comprehensive and scalable solutions for managing the entire life-cycle of documents, records and content in any format, from any source.Mobiusensures the integrity and long-term availability of these critical corporate assets to support compliance, legal processes and mission-critical business operations. Location:
Masterson’s Cost is $20. Payment can be made at the time of the luncheon meeting or in advance via PayPal (use payment button in left column). Please RSVP with menu choice to kyisaca@isauditor.net |
1 |
May 12-13, 2007
If paid after April 27, 2007: IIA Member Cost: $425 Non-IIA Member Cost: $475 Student Cost: $250 |
ISACA CISA Review Course
Time: 9 am to 6 pm both days Topic: CISA Review Course To support the development of new certified professionals, the Kentuckian Chapter is sponsoring a CISA review course. This is a weekend "cram" style format on Saturday, May 12 and Sunday May 13 from 9 am to 6 pm both days. The course will use ISACA provided presentation materials also provided in hard copy to the students. The instructor recommends that students also purchase the following materials available from the ISACA bookstore:
These materials are available through the ISACA International Bookstore at www.isaca.org Although the instructor will not be using these manuals extensively, it will definitely help them with the material. The instructor will also provide his own copyrighted material which consists of 1200 one-line CISA exam Axioms which greatly enhance success rate for the exam. Instructor: Jay Ranade, CISA, CISM, CISSP, CBCP Jay is an internationally renowned expert on computers, communications, disaster recovery, IT Security, and IT controls. He has written and published more than 35 IT-related books on various subjects ranging from networks, security, operating systems, languages, and systems. He also has an imprint with McGraw-Hill with more than 300 books called "Jay Ranade Series". He has written and published articles for various computer magazines such as Byte, LAN Magazine, and Enterprise Systems Journal. The New York Times critically acclaimed his book called the "Best of Byte". He is currently working on a number of books on various subjects such as IT Audit, IT Security, Business Continuity, and IT Risk Management. Jay has consulted and worked for Global and Fortune 500 companies in the US and abroad including American International Group, Time Life, Merrill Lynch, Dreyfus/Mellon Bank, Johnson and Johnson, Unisys, McGraw-Hill, Mobiltel Bulgaria, and Credit Suisse. He is a member of the ISACA International's Publications Committee" Jay also teaches this class for the New York Metropolitan Chapter of ISACA. Location:
Hyatt
Regency Louisville Registration: Payment for seminar can be via PayPal or by check. Please contact Melissa Perry for an invoice to pay by check. Early registration fees have been discounted by $50.
Fees on or before April 27th 2007:
Fees on or after April 28th 2007, if space available: CANCELLATION POLICY No refunds will be offered for cancellations received on or after April 28, 2007. However, your fee can be rolled over to a future event by the chapter or to another individual. To cancel, you must notify Kentuckiana ISACA in writing in advance. Any cancellation before or on April 27, 2007 is entitled to a full refund and will not incur any fee or penalty. Questions? For any questions regarding this event, please e-mail kyisaca@isauditor.net. Alternatively, you may contact Melissa Perry at melissaperrycpa@yahoo.com
|
16 |
Click here to see prior year meetings
(maintained for historical purposes)
PayPal payment now accepted
Click the "pay now" button for the meeting you wish to pay for. If you already have a "PayPal" account, simply verify the amount; enter your log-in and password. If you don't already have a "PayPal" account, you will need to fill in the information for new members (similar to other e-commerce web sites such as Amazon). Once you have completed the transaction, you will be sent an e-mail receipt by PayPal and be returned to the Kenticukiana ISACA web site. The local chapter also receives an e-mail that tells us you have paid. All information is exchanged via HTTPS protocol (secure and encrypted) and remains with PayPal.
The Paypal Payment ID is PaypalISACA@ISAuditor.net ("Paypal" and "ISACA" run together) if you pay directly from yourPayPal account (bypassing the payment buttons provided on this page).
Last updated August 27, 2007
You are visitor
since September 23, 2004