Newsletter ISACA Malaysia Chapter. Issue # 27 October 2013 I N S I D E T H I S I S S U E : President Message 1

Transcription

1 ISACA Malaysia Chapter Newsletter I N S I D E T H I S I S S U E : President Message 1 Events Calendar, Oct-Dec Trainings Calendar, Annual General Meeting 3 BOD 2013/14 4 Previous Events IT Governance, Assurance & Security Conference Upcoming Events 8 Members Social Events 9 ISACA Updates 10 Message From The Editor 10 Issue # 27 October 2013 President Message Time really flies and soon 2013 will be over and we will be welcoming the New Year. ISACA Malaysia Chapter has been busy since our AGM in May 2013 and we have conducted most of the planned trainings and events. Our 12 th MNCC/ISACA IT Governance, Assurance and Security Conference held on the 18 th and 19 th of June 2013 was a major success, where we had over 120 delegates. This year, the Chapter has organized 3 workshops Audit, Security & Control of Virtualization & Cloud Computing, Introduction to Penetration Testing and Audit & Security Compliance for Unix I am very happy to say that the response has been very good and all 3 workshops had full house turnout. In addition, we had organized (together with IIA Malaysia) Technology Governance for the Auditor, in September 2013 and COBIT 5, earlier this year. As part of our continuous effort to provide training programs in different relevant areas to our members, we have the Interpreting and Analyse your Data via Data Analytics (A Practical Approach) on 20 th and 21 st November Please continue to support our training events and recommend them to your colleagues who are non ISACA members. Registration is open and the brochures can be downloaded from In addition to our training events, the Chapter has collaborated with external parties to promote IT Governance, Assurance and Security to members and non-members. On 2 nd July 2013, we organized a seminar with Bursa Malaysia on Risk Management and Controls in Relation to Online Trading and a total of 165 participants from the Investment, Stockbroking and Futures industry attended. As for social events, we have kick started our celebration until the year end by organizing the Thor Movie Night on 31 st October 2013 and subsequently followed by the mega year end celebration night on 29 th November As in previous years, all the above social events are free for our members. We had also recently conducted an Evening Talk on Cyber Attacks A Business Perspective on 9 th September 2013 and is planning for one more Evening Talk in November On membership, I am pleased to announce that the local Chapter has hit the 700 mark and as of to date, we have 752 members. The challenge we are facing is to retain our existing members while recruiting new members. I hope all of you will continue to renew your membership for 2014 and also encourage your colleagues, friends and staff to join ISACA. Finally, I would like to thank all members for your confidence and support in us. The current BOD will be working hard to plan and execute new plans in 2014 while continuing to improve our existing programmes and events. We had a good response in the recent survey conducted for our members and I would like to thank members who participated in the survey. We will take note of the suggestions or feedback and continue to improve the Chapter. S. Retnendran President, ISACA Malaysia Chapter 2013/14

2 Newsletter Page 2 Events Calendar, Oct - Dec 2013 ISACA Malaysia Chapter has lined up some interesting workshops and social events from now until end of December Please find below the details with the CPE points offered. Event Dates CPE * Movie Night: Thor The Dark World 31 Oct Interpreting and Analyse your data via Data Analytics (A Practical Approach) Nov Plan ahead for the upcoming knowledge gaining events and social events. * ISACA Members Year End Celebration 29 Nov * Evening Talk TBD 3 * Free for members. Requires registration as there are limited seats. Trainings Calendar, 2014 Tentative Dates 1. Introduction to Penetration Testing *11-12 Mar Audit, Control & Security of Virtualization *15-17 Apr 2104 and Cloud Computing 3. Auditing PDPA *20-21 May IT Governance, Assurance & Security Conference *Jun st Century Auditing Workshop *Jul Advance IT Auditing *12-13 Aug Online System Application Review *23-24 Sep 2014

3 Page 3 ISACA@MY Newsletter AGM provided some key highlights for past 2012/13 events. Annual General Meeting, 15 May 2013 The 28 th Annual General Meeting ( AGM ) of the ISACA Malaysia Chapter was held on May 15, 2013 at Hilton Petaling Jaya Hotel, 2 Jalan Barat, Petaling Jaya, Selangor. The meeting began at 7:27pm and adjourned at 9:00pm. At the time of closing, 95 members attended the 28 th ISACA Malaysia Annual General Meetings. Key highlights from the AGM were: IT Governance Conference which attracted more than 120 participants 2. ISACA Malaysia hosted 2013 Asia Leadership Conference 3. 1 st SIG on Virtualization and Cloud Computing is performing well and generating revenue for the chapter 4. 2 nd SIG for Head of IT Audits has expanded to 12 members 5. ISACA Malaysia has been invited to speak and participant in UNITEN IT Governance programme and career talk at TAR College. 6. CISA and CISM exams would be conducted 3 times per year (June, September, December) 7. There was a surplus of RM19,948 for financial year ended December 31, There was an increase in membership level recognition: Silver level members (5 9 years): increase to 198 (May 2013) from 190 (May 2012), Gold level members (10 14 years): increase to 61 (May 2013) from 52 (May 2012), Platinum level members (15+ years): increase to 36 (May 2013) from 35 (May 2012). 9. Certified professionals increased to 486 (May 15, 2013) from 463 (May 13, 2012). There is a significant interest in CRISC certification and continued growth in CISA, CISM and CGEIT certified professionals.

4 Newsletter Page 4 Board of Directors 2013/14 Congratulations to the List of BOD 2013/14 with respective portfolio. The following are the line-up of Board of Director for ISACA Malaysia Chapter for 2013/2014: President : Retnendran Sivasupramaniam Vice President : Eddie Leng Siew Kheen Secretary : Bryan Wong Biing Yaw Treasurer Directors : Lee Chin Hon : Elissa Cher Geik Theng (GRA & Communications) : Michelle Lee (Chapter Relations & Publicity) : Kumaran Sinniah (Certification & Professional Development) : Kenneth Ho Wee Leong (Membership) : Goh Ser Yoong (Website) : Mohd Afrizan Husain (Academic, Admin & Research) Elected ISACA Malaysia Chapter Board of Directors 2013/14. BOD Retreat at Burasari Resort Phuket, July 2013 The Board of Directors 2013/14 had spent their days having meeting and discussion to strategize the plan for ISACA Malaysia Chapter member activities for 2013/14. Burasari Resort Phuket

5 Page 5 ISACA@MY Newsletter Introduction to Penetration Testing Workshop, May 2013 This training is designed to equip IT auditors and general auditors with the basic skills required for ISACA IS Auditing Procedure: P8 Security Assessment - Penetration Testing and Vulnerability Analysis. The workshop was delivered by Nurul Amin Bin Hamid who has vast technical experiences and skills in conducting the penetration testing IT Governance, Assurance and Security Conference, speakers and facilitators shared on leading management and technical perspectives of latest trends. IT Governance, Assurance and Security Conference, Jun 2013 ISACA Malaysia Chapter and MNCC collaborated for the 12 consecutive years to organize the IT Governance, Assurance and Security Conference. The Conference Committee, which started the planning for the event since January 2013, had set out to bring speakers and facilitators to share their knowledge on leading management and technical perspectives of the latest trends in IT governance, assurance and security. It has been a successful conference with over 120 delegates attending the 2 days event. Day 1 of the conference saw our esteemed speakers shared their knowledge and perspective in the realm of Big Data, where the big debate now and for the near future is maintaining the balance between personal privacy and monetizing private data. In addition, there were information, from new perspective of the legislative and compliance requirements, and sharing of the impact of fast moving technology, data leakages and security outsourcing. The Day 2 master classes provided in-depth sharing of Management and Technical topics. The Management topics were designed to provide practical sharing session on 1) Internal Auditing from the very basic necessity of IT auditing activities and 2) Understanding of fraud management from an auditing perspective. The Technical topics provided explanations on the practical technical aspects on current technology issues that impact governance, assurance and risk management from the virtualization and cloud computing angle, as well as sharing of Blackhats knowledge. Based on the feedback received, the delegates truly enjoyed and gained valuable knowledge to bring back to their organisations. Some lucky ones were even able to take away more than just the information and knowledge, i.e. the lucky draw prizes of walkmans, ipad mini and Microsoft Surface RT. Eddie Leng, Chairperson Organising Committee

6 Newsletter Page 6 IT Governance, Security & Assurance, Jun 2013 From top left Chairperson s opening remarks Keynote speaker Dr. Sonny Zulhuda Day 1 attentive delegates Speakers Nickson (Panel Chairman), Murari, SAC Wong, Shoaib, Hamid & Jason Attentive delegates and speakers / facilitators in action. Day 2 Master Classes in action Speakers Surendran, Amin & Earl Management Track Technical Track Bursa Malaysia Seminar, 2 Jul 2013 ISACA Malaysia Chapter jointly organized a seminar with Bursa Malaysia on Risk Management and Controls in Relation to Online Trading and a total of 165 participants from the Investment, Stockbroking and Futures industry attended. The half-day seminar was held on 2 nd July 2013 at Istana Hotel, Kuala Lumpur. The speakers were Mr. Chionh Chye Kit of Macquarie Securities, Singapore and Mr. S. Retnendran, President ISACA Malaysia Chapter. The seminar covered areas pertaining to risk management in relation to Online Trading including control and security of the Online Trading infrastructure Seminar jointly organized with Bursa Malaysia

7 Page 7 ISACA@MY Newsletter First time ISACA Malaysia Chapter conducted a training event outside Klang Valley. IT Audit and IT Security Training, Cahya Mata Sarawak, Aug 2013 Cahya Mata Sarawak (CMS) had requested ISACA Malaysia Chapter to conduct an inhouse IT Audit and IT Security training for period August This is the first time we have conducted a training event outside Klang Valley and CMS had graciously opened to our East Malaysia members ( invitations were sent to members registered in East Malaysia). The class was attended by 20 participants who were keen to embark on IT audit for their own organization. The class was conducted by Lee Chin Hon, who is a seasoned trainer. The feedbacks from the participants were very encouraging and were glad to attend the training at their home base in Kuching, Sarawak. ISACA Evening Talk: Cyber Attacks - A Business Perspective, 9 Sep 2013 ISACA Malaysia Chapter recently organized a free Evening Talk to its member for the topic of Cyber Attacks A Business Perspective on the 9 th September Mr. Saurabh Sarawat and Mr. Victor Lo who are both seasoned Information Security experts was invited to speak on the 3 hours talk. The Evening Talk attracted over 50 participants and was well received with the participants. Audit and Security Compliance for UNIX Workshop, Sep 2013 A grueling two full days of knowledge transfer and rubber meets the road practical hands-on session featuring some of the most current compelling issues on UNIX security and how to address them has attracted a strong full house crowd of 21 participants to attend. The workshop was delivered by Dr. Suresh Ramasamy, who heads the Privacy Strategy department in a telecommunication company and is a seasoned UNIX trainer as well as security expert. SIG2 meetings for networking and knowledge sharing on IT Assurance, Security and Governance related topics." Special Interest Group SIG2 (Heads of IT Audit) Meeting, 18 Oct 2013 The SIG2 meeting, held at the ISACA Malaysia Secretariat, was attended by 9 the invited guest, presented and lead a roundtable discussion on the topic of PDPA These SIG2 meetings are held every 2-3 months. All Heads of IT Audit (or designates) are welcome to join this group for networking and knowledge sharing.

8 Newsletter Page 8 Interpreting & Analyse Your Data via Data Analytics (A Practical Approach) Nov 2013 We hear you and we understand that big data is a big thing. Businesses, from a multi-billion dollar company to a simple e-business setup have been processing millions of data per day. Processing such significant amount of data has been a complex and challenging task as sources of data can be structured and unstructured. Information, of which being the processed data, could come from various combinations of transactions and business areas. If these set of data is being analysed and by turning processed data into valid, reliable and Members Survey, Sep 2013 ISACA Malaysia Chapter has recently conducted a survey to determine our valued members' needs by offering event programs that better meet our members' interests. The answers were reviewed by the Board to better serve our chapter members. timely information, it could be used as a more convincing supporting facts in decision making. This workshop is aimed at providing participants the basic essentials on how to analyse data i.e. the basic data analytic concepts and methods or steps in conducting data analysis. In addition, participants will be exposed to hands-on experiences in using data analytic tools. Our trainer will share examples and experiences on how data analytics can be used in real life situations or scenarios. Upcoming Event! Lucky Draw: Ten lucky members will receive a RM100 voucher each. CISA Review Class, 20 Oct 30 Nov 2013 CISM Boot Camp, Nov 2013 ISACA Malaysia Chapter is organizing CISA Review Class and CISM Boot Camp over the weekends. Both classes focus exclusively on the essential areas covered in the CISA and CISM exams to assist and enhance the candidates study process. These classes cover the core sections and series of sample exam questions. Participants will receive handout materials provided by ISACA. The trainers have the relevant qualified certifications and are experience with technical skills and knowledge of the specific domain(s). Preparation for CISA and CISM exams.

9 Page 9 Upcoming Members Social Events, Oct Dec Movie Night! Movie Night: Thor The Dark World, 31 Oct 9.00pm, Cathay Cineplexes, Mutiara Damansara PJ Faced with an enemy that even Odin and Asgard cannot withstand, Thor must embark on his most perilous and personal journey yet, one that will reunite him with Jane Foster and force him to sacrifice everything to save us all. It is another great night for members to associate and networking besides unwinding from their busy schedules. ISACA@MY Newsletter Year End Celebration! ISACA Members Year End Celebration, 29 Nov 2013 This yearly gathering event provides an opportunity for ISACA IT professionals to share common professional interests, consume information, exchange expertise and experience, and build new understanding through collaboration. ISACA Web Site. ISACA Knowledge Center A networking venue for IT professionals to share common interests. Build new understanding through collaboration. Consume information in the form of hundreds of documents and publications ready to download. Connect with colleagues, exchange expertise and engage in Wikis.

10 Newsletter Page 10 ISACA New Arrivals COBIT 5 COBIT 5 for Assurance COBIT 5 for Information Security COBIT 5 for Implementation COBIT 5: Enabling Processes COBIT 5 for Risk Configuration Management: Using COBIT 5 Securing Mobile Devices Using COBIT 5 for Information Security Transforming Cybersecurity: Using COBIT 5 Cybersecurity: The Essential Body of Knowledge Ethics in Information Technology, 4th Edition ISACA elibrary Explore ISACA most popular benefit! The elibrary is a searchable collection of content from most ISACA published books and more than 350 additional titles all available free to ISACA members. Message From The Editor It is with great enthusiasm that the revised format and content of newsletter is released with the updates from the AGM May 2013 onwards. Sincere appreciation to the Board of Directors 2013/14 who have contributed the write ups on the events organized. This newsletter will continue to be one of the communication to all ISACA members. We welcome ISACA s IT Professional to share common professional interest by contributions of news, announcements, obituaries and essays on new trends technologies, teaching methodologies, research challenges, etc. in line with the CISA, CISM, CGEIT, CRISC, COBIT and ISACA knowledge centres. Looking forward on members contributions towards the next half yearly release of newsletter. Elissa Cher Geik Theng, GRA & Communication Director 2013/14 ISACA Malaysia Chapter Unit 916, 9 th Floor, Block A, Damansara Intan, No.1, Jalan SS 20/27, Petaling Jaya, Selangor. Chapter Admin: Seelan Tel/Fax: Mobile: officeadmin@isaca.org.my