The President s Message 3. COBIT 5 Framework Released 6

Transcription

1

2 Table of Content Editor Absar Khan The President s Message 3 COBIT 5 Framework Released 6 ISACA Karachi Chapter Conducted Review Courses [ad] 7 ISACA Karachi Chapter Conducted Presentation [ad] 8 ISACA Karachi Chapter Endorsement & Discounts Details 12 ISACA Karachi Chapter Seminars & Workshops Details 13 ISACA Karachi Chapter Official Review Courses Details 14 ISACA International News & Alerts 15 o CPE Policy Updates for Year 2013 o Changes to CGEIT job practice & certification req. o Recognitions for ISACA Certification o CISA 35 th Anniversary o Join ISACA Knowledge Center Community ISACA International News & Alerts 16 o Double Century ISACA 200 Chapters o ISACA Webinar on 28 th March 2013 ISACA International News & Alerts 17 o o CRISC Won Best Certification Award form SC Magazine ISACA Journal App is available for iphone / ipod For Suggestions & Feedback Absar Khan Chair Communication & Publications, ISACA Karachi publications@isacakarachi.org ISACA Virtual Conferences 18 ISACA 2013 North America CACS 19 ISACA Book Store Update 20 Country Highlights 21 o o UBL Pakistan implements SAS Risk Management System Intel conducted National Science Fair in Pakistan ISACA Conference / Training Week Calendar [Mar-Apr] 22 Invitation for Chapter AGM Contacts of ISACA Karachi Chapter Board Members 24 This bimonthly newsletter focuses on ISACA Karachi Chapter s activities, achievements & announcements. It also highlights major news events happening in the IT/IS/Telecom/eBusiness/GRC & related sectors of Pakistan.

3 President s Message Dear Members, It has been an eventful and exciting two years. This is my last message before the new Board takes over from 01 April, 2013 for a term upto 31 March Upcoming Election A nomination committee headed by Ms.Huma Pasha (Immediate Past President) has been formed. Nominations for the Chapter Board have been sought from all of you for the new board term. We are looking forward to new and active members who can dedicate at least 10 hours a week to join this high level volunteer base. Active participation in helping in the Chapter s activities is a rewarding/grooming and learning experience. Outgoing Board I have been very fortunate in having a very active and enthusiastic Board that has worked hard in the various Chapter Activities during the last two years. ISACA e-learning Campus The CISA Online Review Course is available on the ISACA e-learning Campus. This interactive, web based course was developed to provide Certified Information Systems Auditor (CISA ) exam candidates and ISACA members with an efficient and cost-effective tool for exam preparation and performing information systems audits and reviews. For more information, please visit I would like not only to recognize the hard work put in by the outgoing board but also to thank each member for his dedicated work / professionalism and support during the last two years without which the regular activities could not have been performed. I would like to take this opportunity to recap some of the important accomplishments made by your Chapter in the following paragraphs. CISA Review Course Regularly conducted CISA review courses. The courses were conducted in the training Center of Ernst & Young Ford Rhods Sydat Hyder Chartered Accountants (which was provided to the chapter free of charge). This enabled us to not only improve our cash flows but also hire the most highly qualified teaching faculty to deliver the course. Later on, the last two courses were held in SKANS School of Accountancy. CISM & CGEIT Review Course For the first time your Chapter introduced the ISACA endorsed Official CISM & CGEIT review courses in the country. For this course (conducted at the same facility) we also hired highly qualified teaching faculty. Continue... ISACA Karachi Newsletter Jan Feb 2013 Edition Page 3 of 24

4 President s Message Endorsements The Chapter endorsed events conducted by various organizations such as the PICG, Quest Consulting,, Risk Associates etc. The details of these are available in the newsletter. Awards Won: 1. Chapter s website award In current tenure we won ISACA Best Website Award 2011, which is the recognition of our hard work regarding revamping of chapter s website. No doubt this is a great achievement as compared to the websites of other chapters in the region. 2. Best Newsletter of the year Award: As a chapter president, it was an honor for me to receive Best Newsletter Award from Mr. Emil D Angelo President ISACA International who presented Best Newsletter of the Year Award in the award ceremony in Las Vegas, USA. 3. ISACA Global Certification Award: We are very proud that ISACA International awarded 5 chapters worldwide for 2012 certification incentive program, which also included our Chapter. Chapter Newsletters We regularly published bimonthly Newsletters which enabled us to remain in touch & interact with our members, as through this publication we informed members not only about the upcoming local & international events but also highlighted the activities held in GRC/IT/IS/Telecom and related sectors of the country. Coverage of each chapter activity & event were delivered to each chapter member through this newsletter which not only enabled every single member of the chapter well-informed and upto-date, but also enabled readers across the globe about your chapter. You would be delighted to know that I got positive responses and appreciative replies from members of other chapters. Continue... Earn Over 70 FREE CPE ISACA Certified Members Can Earn Over 70 FREE CPE Credits Certified members have numerous options in order to obtain their FREE continuing professional education credits through: Journal quizzes Monthly esymposia quizzes Local Chapter volunteer activities Mentoring Learn more about FREE CPE T0xNjA0NjY3JnA9MSZ1PTEwMj AwOTA1OTgmbGk9NzE2ODg3M g/index.html ISACA Karachi Newsletter Jan Feb 2013 Edition Page 4 of 24

5 President s Message Discounts to members Discounts were given for chapter members for around 16 courses, the details of which have been given in the newsletter.. Workshops/seminar/presentations Twelve workshops/presentations/seminars were conducted. Tenure activities in a glance Course/Seminar/Workshops held in the board term ( ) are also covered in this edition of our newsletter. Chapter AGM I cordially invite all of you to attend chapter AGM which will be held on 28th March A formal invitation has been ed to all chapter members. Details are also mentioned in this edition of our newsletter. Although the term of our board has successfully completed, but if required, please do not hesitate to contact me, as every single member of our Chapter is important to us and we feel proud to serve the members & resolve their issues. Last but not the least; I again thank all the Board members for serving the Chapter by giving their precious time and Voluntary efforts with devotion & dedication. Thank you. Waqar A. Khan. President, ISACA Karachi Chapter. 24 th March, ISACA Karachi Newsletter Jan Feb 2013 Edition Page 5 of 24

6

7 The Karachi Chapter of ISACA is the only accredited body authorized by ISACA to conduct Official Review Courses in Karachi

8 ISACA Karachi Chapter Conducted this Presentation on 13 th March 2013 ISACA Karachi Newsletter Jan Feb 2013 Edition Page 8 of 24

9 ISACA Karachi Newsletter Jan Feb 2013 Edition Page 9 of 24

10 ISACA Karachi Newsletter Jan Feb 2013 Edition Page 10 of 24

11 ISACA Karachi Chapter Presentation On : Windows Client & Server Platform (Enhancements in Identity, Access & Security Capabilities) 13 th March 2013 Avari Towers, Karachi ISACA Karachi Newsletter Jan Feb 2013 Edition Page 11 of 24

12 ISACA Karachi Chapter Tenure at a glance Endorsement & Discounts offered to members during the board term Course / Workshop Name Conducted by Hold on Discount CPE Implementing Information Security & Quest Consultant Jan % discount 14 CPE Achieving ISO 27001:2005 Certification Open Source Security Information & Event Quest Consultant Feb % discount 14 CPE Management BS Business Continuity Quest Consultant Apr % discount 14 CPE Management Standard" Implementing Information Security & Quest Consultant May % discount 14 CPE Achieving ISO ISO-27001:2005 Information Security RISIMS Consultants May % discount 31 CPE Management Systems BS Business Continuity Quest Consultant Jul % discount 14 CPE Management Standard Implementing Information Security & Quest Consultant Sep % discount 14 CPE Achieving ISO Open Source Security & Event Mgmt. Quest Consultant Oct % discount 14 CPE BS Business Continuity Quest Consultant Dec % discount 14 CPE Management Standard ISO-27001:2005 Information Security RISIMS Consultants Jan % discount 31 CPE Management Systems Implementing Information Security & Quest Consultant Jan % discount 14 CPE Achieving ISO Open Source Security & Event Mgmt. Quest Consultant 1-2 Mar % discount 14 CPE Implementing Information Security & Quest Consultant Apr % discount 14 CPE Achieving ISO BS Business Continuity Quest Consultant 5-6 Apr % discount 14 CPE Management Standard PCI Workshop Risk Associates 4-July % discount 14 CPE BS Business Continuity Management Standard Quest Consultant Jun % discount 14 CPE ISACA Karachi Newsletter Jan Feb 2013 Edition Page 12 of 24

13 ISACA Karachi Chapter Tenure at a glance Workshop / Seminar / AGM Conducted during the board term Event Venue Date CPE Hrs Chapter AGM 2011 ICAP 31-Mar CPE Presentation on Cisco UCS ICAP 28-Jun CPE Students Awareness Session UIT 14-Oct CPE Seminar on Information Security IBA 29-Oct CPE Seminar on Information Security MAJU 22-Nov CPE Annual Members Event ICAP 15-Dec CPE Workshop on PCI-DSS Security Marriot Hotel 22-Feb CPE Chapter AGM 2012 ICAP 29-Mar CPE Workshop on How IT adds Value Marriot Hotel 06-Jun CPE Workshop on Improving Business Marriot Hotel 20-Dec CPE Performance Presentation on Windows Client & Avari Towers 13-Mar CPE Server Platform Chapter AGM 2013 & Elections ICAP 28-Mar CPE ISACA Karachi Newsletter Jan Feb 2013 Edition Page 13 of 24

14 ISACA Karachi Chapter Tenure at a glance Official Review Courses for CISA/CISM/CGEIT Course Venue Date CISA/CISM/CGEIT Review Course E&Y FRSH 21-Feb-2011 CISA/CISM/CGEIT Review Course E&Y FRSH 08- Sept 2011 CISA/CISM/CGEIT Review Course SKANS 01-Mar2012 CISA/CISM/CGEIT Review Course SKANS 03-Sep-2012 CISA/CISM/CGEIT Review Course SKANS 04-Mar-2013 ISACA Karachi Newsletter Jan Feb 2013 Edition Page 14 of 24

15 CPE Policy Updates For Year 2013 CPE policy updates The CPE policies for all ISACA certification programs have been updated to reflect the following changes and/or policy clarifications that went into effect 1 January 2013: 1. Clarifications have been included regarding how CPE hours are earned for various qualifying activities. 2. Modifications have been made to reflect how CPE credit is to be earned and recorded. CPE hours can now be reported in one-quarter hour increments (rounded down to the nearest quarter hour). 3. All appeals resulting in reinstatements related to revocations that are more than 60 days old require a US $50 reinstatement fee. This reinstatement fee is in addition to any back or current certification maintenance fees needed to make the certified individual compliant with the CPE policy. Changes to CGEIT job practice and certification requirements The CGEIT job practice areas have changed, effective with the June 2013 exam. Additionally, the CGEIT certification requirements have changed effective for those who test in June 2013 and later waivers will no longer qualify toward the five (5) year experience requirement. Recognitions for ISACA Certification SC Magazine has named CISA, CISM and CRISC as finalists for the Best Professional Certification Program. Programs are defined as professional industry groups offering certifications to IT security professionals wishing to receive educational experience and credentials. CISA, CISM, CGEIT and CRISC were included on the list of the Highest Paying certifications in Foote Partners November 2012 Update to the IT Skills and Certifications Pay Index (ITSCPI). To make this list, a certification has to be averaging a pay premium in excess of the equivalent of 10 percent of base salary. Additionally noted in this survey, CISA, CISM and CRISC credentials are earning premiums that place them in the top 7 percent of all 268 certifications currently being reported. CISA 35 th Anniversary The CISA certification program was established in 1978, and over time, has grown to become a globally recognized certification for IS audit, control, assurance and security professionals. The next CISA exam will be held on 8 June. Individuals interested in taking the CISA or other ISACA certification exams in June must register by 12 April ISACA International News & Alerts CISA milestone ISACA has certified its 100,000th CISA since the certification s inception. Being CISA-certified showcases your audit experience, skills and knowledge, and demonstrates your capability to manage vulnerabilities, ensure compliance and institute controls within an enterprise. Join ISACA Knowledge Center Community There are many benefits to joining a community in the Knowledge Center, including the opportunity to become a topic leader. Each topic area contains all available ISACA resources on that specific topic, including documents, events and ISACA Journal articles. In addition, when ISACA members join the community, they can participate in discussions, add documents and links, and contribute to wikis. With more than 10,000 unique members, the Knowledge Center is a meeting place to interact with other ISACA members worldwide, browse more than 100 topics, find resources and connect with members. Featured topics include two of the Knowledge Center s most recent additions: Big Data and COBIT 5 Use It Effectively. ISACA Karachi Newsletter Jan Feb 2013 Edition Page 15 of 24

16 ISACA International News & Alerts Double Century! ISACA 200 Chapters ISACA is happy to announce that we are now 200 chapters strong! With the formation of ISACA's newest chapter the Lusaka (Zambia) Chapter ISACA now has 200 chapters in 82 countries! We would not be the incredibly successful global organization we are without all of you. Check out these tips for chapters, a list that will eventually boast 200 helpful items for our chapters. Many thanks and congratulations to all of you for helping ISACA reach this important milestone. ISACA Webinar will be conduct on 28 th March 2013 Webinar: Digital Forensics & E-Discovery: A Primer for Information Security and Audit Professionals Presented by: Andrew E. Neal, CISM, CRISC, Regional Director, Forensic Technology and Advisory Services, TransPerfect Legal Solutions. ISACA Members Earn Free CPE Date: Thursday, 28 March 2013 Time: 12PM (EDT) / 11:00AM (CDT) / 9:00AM (PDT) 16:00 (UTC) To Register for this webinar: Click Attend (in the box below) and create a BrightTALK ISACA Channel account (please do not use your ISACA login credentials). If you already have a BrightTALK account, log in with your BrightTALK credentials and click Confirm Attendance. Please note: There is an option to add to this event to your Outlook calendar once you have registered. Additionally, please note that this platform does not currently support Firefox or Safari browsers. We suggest you test your system ahead of the event to ensure your ability to participate. If you are viewing from behind a corporate firewall, you may need to ask your IT administrator whether streaming media is blocked. Test your system. Test your system ISACA Karachi Newsletter Jan Feb 2013 Edition Page 16 of 24

17 ISACA International News & Alerts CRISC Won Best Certification Award from SC Magazine ISACA s CRISC Certification Wins Best Professional Certification Award from SC Magazine Rolling Meadows, IL, USA (27 February 2013) ISACA, a global association of more than 100,000 IT security, assurance and governance professionals, has won the Best Professional Certification Program Award from SC Magazine for the Certified in Risk and Information Systems Control (CRISC) credential. The 2013 SC Awards were presented in conjunction with the RSA Conference. SC Magazine is proud to recognize ISACA as a leader in the information security industry, said Illena Armstrong, vice president of editorial, SC Magazine. ISACA s certification program is a great model for the entire information security industry. The 2013 SC Awards winners are chosen by a panel of security professionals from the private and public sector, selected by SC Magazine s editorial team for their information security leadership and knowledge. The panel conducted indepth analysis and considered many factors such as applicable research, analyst reports and reviews to narrow down the field of hundreds of submissions to the top finalists. Through this comprehensive analysis, ISACA s CRISC certification was chosen as this year s winner in the Best Professional Certification Program category. The annual SC Awards, now in its 16th year, showcase the leading solutions, services, certifications & professionals. SC Magazine distinguishes the achievements of the security professionals in the field, the innovations happening in the vendor and service provider communities, and the important work of government, commercial and nonprofit organizations. A list of winners is available at: This award is an honor and a testament to the big impact CRISC has made in its first three years, said Allan Boardman, CISA, CISM, CGEIT, CRISC, CA (SA), ACA, CISSP, chair of ISACA s Credentialing and Career Management Board. Employers are looking for candidates with the CRISC credential as proof of a strong background in risk and control, and employees are seeking the credential to differentiate themselves and boost their value to their organizations. All of ISACA s certifications are globally recognized in many industries, and independent studies consistently rate ISACA s designations among the highest paying certifications that an IT professional can earn. These factors all contribute to the high demand for CRISC certification. CRISC, established in 2010, has already been earned by nearly 17,000 professionals. To earn the certification, candidates must prove at least three years of relevant experience and pass the CRISC exam. The next exam will be administered worldwide on 8 June ISACA Journal App is available for your (iphone & ipod) Enjoy the ISACA Journal in a format that s as mobile as you are! The ISACA Journal App is packed with the latest complete ISACA Journal print magazine issues, plus the latest ISACA Journal Author Blog and ISACA Now blog postings. You'll now be able to access the Journal s managerial and technical articles and other ISACA information for professionals involved in IT audit, governance, security and assurance on the go. This app includes issues beginning with volume 2, New issues will be available for download bimonthly. You'll also receive real-time updates from ISACA.org, including: - Journal Author Blog postings - ISACA Now blog postings ISACA Karachi Newsletter Jan Feb 2013 Edition Page 17 of 24

18 Join ISACA on 19 March from 9:00 AM to 4:00 PM CST (UTC 6) to: Connect with thousands of your peers from across the globe Earn 5 FREE CPE hours without the cost of travel Ask questions directly to industry experts and speakers Enhance your professional knowledge. Agenda Live Show: Date: 19 March 2013 Title: Enterprise Risk Management: Provide Security from Cyberthreats Show hours: 9:00 16:00 CDT (UTC-6) Join ISACA on 24 th April, 2013 from 7:45 AM to 4:30 PM EDT (UTC-4): Connect with thousands of your peers from across the globe Earn 5 FREE CPE hours without the cost of travel Ask questions directly to industry experts and speakers Enhance your professional knowledge Agenda Live Show: Date: Wednesday, 24 April 2013 Title: The State of Cyber Security 2013 Show hours: 7:45 AM to 4:30 PM EDT (UTC-4) Register today. ISACA Karachi Newsletter Jan Feb 2013 Edition Page 18 of 24

19

20 ISACA Book Store Update The ISACA Bookstore offers new tools for preparing for ISACA s 2012 certification exams: CISA Review Manual 2012 CISM Review Manual 2012 CGEIT Review Manual 2012 CRISC Review Manual Candidates Guide to the CISA Exam & Certification 2012 Candidates Guide to the CISM Exam & Certification 2012 Candidates Guide to the CGEIT Exam & Certification 2012 Candidates Guide to the CRISC Exam & Certification CISA Practice Question Database, CD-ROM or download CISM Practice Question Database, CD-ROM or download CISA Review Questions, Answers & Explanations Manual 2012 CISM Review Questions, Answers & Explanations Manual 2012 CGEIT Review Questions, Answers & Explanations Manual 2012 CRISC Review Questions, Answers & Explanations Manual 2012 COBIT 4.1 by IT Governance Institute COBIT Assessor Guide: Using COBIT 4.1 by ISACA COBIT Process Assessment Model: Using COBIT 4.1 by ISACA COBIT Self-assessment Guide: Using COBIT 4.1 by ISACA COBIT Self-assessment Guide: Using COBIT 4.1 (e-book) by ISACA Search the Bookstore online For the complete descriptions by product title or category. Online: Mail: Fax: Ways to Order these books Order online at Mail your completed order form with payment to: ISACA 1055 Paysphere Circle Chicago, IL USA Fax completed order form with credit card # & Expiration date to Contact ISACA Bookstore bookstore@isaca.org or ISACA e-library Center/Pages/eLibrary.aspx Phone: Call Monday Friday: 8:00 a.m. 5:00 p.m. Central Time (Chicago, Illinois, USA) ISACA Karachi Newsletter Jan Feb 2013 Edition Page 20 of 24

21 Country Highlights IT, IS, Telecom & related sectors UBL Pakistan implements SAS Risk Management System The Software and Services (SAS) announced on Friday the signing of a new strategic partnership with United Bank Limited (UBL) of Pakistan, as part of the bank's move to implement a more effective and improved enterprise risk management system, said a press release. It said the alliance complements the ongoing positive changes being witnessed across Pakistan's banking industry, like the introduction of internet, mobile banking and ATMs. UBL will utilize SAS Credit Risk Management for Banking, Market Risk & Operational Risk to establish a high performance risk framework that can help to adapt best banking friendly practices. The partnership also improves banking operation to enhance ratings, reduce finance costs and create a faster way to generate feedback from loan applications. UBL bank is planning to equip with SAS' cutting edge analytics, sophisticated data management and reporting capabilities that have been deemed essential for daily banking operations. The release said despite from maintaining a compliance with BASEL II regulations, UBL has strived for key ways to achieve business benefits within a comprehensive risk management strategy. Use of SAS can enhance UBL's application scoring, customer behavior analytics while also effectively managing data for better decision making. Through the partnership, UBL will be able to use SAS Credit Risk Management for Banking, Market Risk & Operational Risk to develop custom scorecards and credit risk models rapidly; investigate existing portfolio and analyze new applicants; accurately model capital requirements; optimize UBL's mix of customers in its portfolio and maintain a complete audit trail. The SAS spokesperson said our partnership with UBL reflects our drive to solve customer business problems and our commitment to a successful business future. UBL requires a world-class solution that is scalable to their expansion. SAS has been proven a solution expertise in more than 3,100 financial institutions around the world-wide and having such reputation of working closely with customers, creating requirements' understanding and providing a highly effective customized solutions. The BASEL II framework is a tool to create an international standard for banking regulators to control how much capital banks need to put aside to safeguard against the types of financial and operational risks. Aiming to maintain a continuous compliance with BASEL II standards, UBL will also integrate SAS for Enterprise Risk Management into its risk management procedures, which was previously separated from the bank's main business operations. Intel conducted National Science Fair in Pakistan Intel Pakistan conducted a National Science Fair, wherein the name of the winners of the competition were also announced, who would represent Pakistan at the Intel International Science & Engineering Fair (ISEF) 2013 to be held in Phoenix, Arizona, USA from May 12 to 17, The National Science Fair was wellattended by students from all over the country. The fair showcased more than 80 science projects submitted by young scientists, who qualified for a place in the National Science Fair after rigorous competition at district and provincial levels. The winners of the National Science Fair have qualified to compete in the International Science & Engineering Fair, showcasing their talent on an international platform for over $3 million in prizes and scholarships. "The huge numbers of students that qualified for the National Science Fair and the winners, who are proceeding to the International Science & Engineering Fair in Phoenix, are proof that Pakistan is home to an incredible amount of potential and talent," said Naveed Siraj, Country Manager, Intel Pakistan. The National Science Fair, organized every year by Intel Pakistan in collaboration with the Ministry of Education. Projects displayed at the National Science Fair were assessed by a panel of renowned judges. ISACA Karachi Newsletter Jan Feb 2013 Edition Page 21 of 24

22 ISACA International Up Coming International Conference / Training Week Calendar March 2013 April 2013 Virtual Conference Webinar Webinar Virtual Conference Oceania Funded Leadership Conference Enterprise Risk Management: Provide Security From Cyber threats North America Funded Leadership Conference The State of Cyber security 2013 Date March March March April April April 2013 Location Sydney, Australia Online Online Online Dallas, Texas, USA Online New 2013 ISACA conference and educational event dates have been released. For the latest information, please visit ISACA Karachi Newsletter Jan Feb 2013 Edition Page 22 of 24

23 The AGM will be followed by DINNER. Since this is a free event we would appreciate a formal confirmation via so as to enable us to make arrangements with the venue. Send your confirmation at info@isacakarachi.org

24 List of Board Members, ISACA Karachi Chapter Waqar Ahmed Khan (CISA/CISM/CGEIT/CRISC) President Muhammad Maad Chair IT Governance/COBIT Abdul Rasool Hoodbhoy Vice President Absar Khan Chair Communication & Publication Zain Ansari Secretary Faisal Abdullah Akhawala CISA Coordinator Muhammad Irfan Iqbal Membership Director Zahir Ali Quettawala CISM Coordinator Huma Pasha Immediate Past President Muhammad Kamran Chair Academic Relations Kamran Nishat Chair Special Projects Muhammad Asif Riaz Academic Relations Coordinator ISACA Karachi Newsletter Jan Feb 2013 Edition Page 24 of 24