SACRAMENTO CONNECTIVITY

Transcription

1 Information Systems Audit and Control Association SACRAMENTO CONNECTIVITY May, 2001 Sacramento Chapter Volume I Issue 9 ISACA BOARD OF DIRECTORS President MICHAEL PACH, CISA (916) Vice President/Education STEVE MADEIROS, CISA CalFED Bank (916) Treasurer PATRICIA KUHAR, CISSP Dept. of Information Technology (916) Secretary BALENCIA DOZIER, CISA Dept of. Water Resources (916) SACRAMENTO CHAPTER In this Issue: Page Board of Directors 1 Website 1 President s Message 2 CISA Exam!!! 3 Monthly Meetings 4 Articles 5 Past President/Programs GARY LITZSINGER, CISA CalFED Bank (916) Membership/Programs MICHELLE TABARACCI, CISA Bureau of State Audits (916) Newsletter & Seminars DEBRA GONZALEZ (916) Auditor CHRIS WALLACE CalSTRS (916) Our Chapter Website: If you have any input on page content, please contact Ken Huettl. Webmaster KEN HUETTL, CISA (916)

2 PRESIDENT S LETTER Greetings to everyone! There is only one more Chapter meeting scheduled before the Board breaks for summer planning sessions. We'd like to show our appreciation by hosting lunch at the meeting - either a buffet, or lunch vouchers from the cafeteria. The choice will depend on the response and the lead-time required by the caterers. On the agenda for the Chapter's final meeting are Board elections and brainstorming for possible events and activities for next year. Drawings for prizes are on the agenda, too. While Chapter activities will subside over the summer months, the new Board will be conducting planning sessions to make ISACA more responsive to members' professional and educational needs. That's why it's so important that we get your feedback. Your ideas and input drive the speakers for the Chapter meetings and the nature of the seminars we present. Take advantage of May's Chapter meeting to express your ideas for next year! Regarding the election slate, it's proposed that next year's Board be comprised of the same members as currently exist, with the exception of Seminars and Newsletter. Carol Steichen, newly employed at Internal Audits, is nominated for seminars; Balencia Dozier, in addition to her responsibilities as Chapter Secretary, is also nominated for the newsletter; and, Kumar Sah, an IT auditor for the Bureau of State Audits, is nominated to assist with Chapter programs. Finally, the CISA Review class is continuing, and candidates are making progress. We've had some excellent instruction, which should pay dividends at exam time. The exam is scheduled for June 9. See you all at the Chapter meeting on May 8 th, at #1160, from 11:45 to 1:00. Michael Pach, President ISACA-Sacramento

3 2001 CISA EXAM SATURDAY, 9 JUNE 2001 THE ISACA BOARD OF DIRECTORS WISHES YOU THE BEST OF LUCK ON THE C.I.S.A. EXAM! CISA QUIZ 1. Which of the following is the MOST important reason for the IS auditor to be involved in the system development life cycle process? A. Evaluate the efficiency of resource utilization. B. Develop audit programs for subsequent audits of the system. C. Evaluate the selection of hardware to be used by the system. D. Ensure that adequate controls are built into the system during development. 2. Which of the following statements pertaining to program evaluation review technique (PERT) is FALSE? A. The initial step in designing a PERT network is to define project activities and their relative sequence. B. An analyst may prepare many diagrams before the PERT network is complete. C. PERT assumes a perfect knowledge of the times of individual activities. D. PERT assumes that activities can be started and stopped independently. 3. The editing/validation of data entered from a remote site would be MOST effectively performed at the: A. central processing site after application program processing. B. central processing site during application program processing. C. remote processing site after transmission to the central processing site. D. remote processing site prior to transmission to the central processing site. 4. Data flow diagrams are used by IS auditors to: A. order data hierarchically. B. highlight high-level data definitions. C. graphically summarize data paths and storage. D. portray step-by-step details of data generation.

4 MONTHLY MEETINGS May 8 Room 1160 June 9 Member Appreciation New Board Installation CISA Examination Sacramento, location: Lincoln Plaza Building 400 P Street Sacramento, California For additional information contact Mike Pach. CISA QUIZ ANSWERS: 1. The correct answer is: D. Ensure that adequate controls are built into the system during development. 2. The correct answer is: C. PERT assumes a perfect knowledge of the times of individual activities 3. The correct answer is: D. remote processing site prior to transmission to the central processing site. 4. The correct answer is: C. graphically summarize data paths and storage Information Systems Audit and Control Association U.S. Postage ISACA Chapter 76 P.O. Box Sacramento, CA

5 Wanted: Volunteers - Global Information Repository Needs You The most crucial need, is for a large contingency of member volunteers to review and select the best web-based world-wide resources available on GIR subjects of interest. While this is the most advantageous aspect of the GIR, it is the most onerous. Since becoming operational in 1999, the GIR has been developed and augmented through the efforts of a volunteer board, some individual volunteers and ISACA personnel. Through their efforts, the GIR has grown to contain content over a wide range of about 90 topics. However, in order for the GIR to take the next step, and expand even further, the services of ISACA member and chapters are needed. Types of Assistance Needed There are three types of volunteer assistance needed, each requiring differing commitments of time to accommodate the varying schedules of ISACA members and chapters: Referrals - This service consists of simply advising ISACA (at gir@isaca.org) of interesting web sites or other web content you have encountered in your own searches which might be applicable to one (or more) of the GIR topics. Review and Evaluation - The individual or chapter involved at this level is asked to review pertinent web sites and evaluate them for the appropriateness for the GIR, their timeliness, the credibility of their information/sponsor and their pertinence to the need of ISACA's members. Task Force Manager - The Task Force Manager assumes ownership of an entire subject area on the GIR, and is responsible for dividing up assignments and overseeing the activities of those involved in the review and evaluation process in this subject area. This function could be accomplished on a chapter level, as well as by an individual. Here's How to Volunteer If you'd like to refer some web sites or other web content for potential inclusion in the GIR, please forward your recommendations via gir@isaca.org. If you'd like to volunteer to serve in a review and evaluation capacity, or as a Task Force Manager, please gir@isaca.org or use the form posted on the ISACA web site ( You will be contacted by a member of the GIR Board or ISACA personnel with instructions. If you have questions, or just need more information before determining how you'd like to volunteer, please gir@isaca.org. Individuals working on the GIR can earn up to a maximum of 10 continuing education hours to be used toward satisfying CISA continuing education requirements. These hours are earned as part of an individual's contribution to the IS audit and control profession. The members of the GIR Board for 2000/2001 are: Kevin Weston CISA, Board Chair, USA Ivy Chang CISA, USA Alex Dermedgoglou CISA, Australia Urs Fischer CISA, Switzerland B. Charan Kumar CISA, Kuwait Daniel Ramos CISA, Argentina Ron Riba, ISACA Staff Liaison, USA