Upcoming events in Belgium:

Inside this edition: - ISACA Belgium Board decisions - page 3 - ISACA Belgium Past Events overview - page 4 - ISACA Member Benefits update - page 9 - ISACA Academic Relations page 10 - ISACA Belgium at INFOSECURITY BELGIUM 2012 - page 11 Word from the ISACA Belgium Chapter President: Dear ISACA Belgium member, It were again very exciting times with another success for ISACA at the INFOSECURITY Belgium 2012 exhibition (see more in this newsletter). We had the honor to receive our ISACA International President Mr. Ken Vander Wal, who gave an excellent keynote presentation at the first day of this event, and also answered a lot of questions from participants. As announced in the previous Newsletter, by the time you read this article, ISACA International has released the new COBIT 5 framework (http://www.isaca.org/cobit). This is an ideal moment for ISACA Belgium to support its members by reaching out to the Belgian community with press releases, special information events and workshops. As you know, ISACA Belgium will organize a special event around COBIT 5 free for members this Wednesday April 25 th. In this event, we are honored to have Mr. Erik Guldentops as one of the founding fathers of COBIT, who will talk about the history of COBIT. This free event will be followed by our ISACA Belgium Annual General Assembly. The 2 following days ISACA Belgium will organize 2 parallel workshops on the audit and governance views on COBIT 5. These are my last words as ISACA Belgium Chapter president in this newsletter. As a new Board will be elected at our upcoming AGM, a new ISACA Belgium president will be elected, since I have reached the maximum term of 2 times 3 years as president of this chapter. It has truly been a privilege and a pleasure to work with the Board of ISACA Belgium and with all of you as members. I would like especially to thank Peter Van Mol who is not only leaving this Board, but also the ISACA Belgium organization as his career takes another turn. I also want to thank Jean-Luc Allard for his contributions to the chapter and I hope that he will continue to support the chapter where possible. I wish the new Board of ISACA Belgium all the best and I will continue as past president- to give this wonderful ISACA Chapter all my support. Mr. Philip De Picker President of the ISACA Belgium Chapter Upcoming events in Belgium: Wednesday 25 th of April 2012 COBIT 5 launch in Belgium with guest speakers Erik Guldentops, Dirk Steuperaert & Greet Volders Location: Sheraton Brussels Hotel, Place Rogier 3, B-1210 Brussel Wednesday 2 nd Friday 4 th of May 2012 ISACA CISM Exam Bootcamp Location: PARK INN Brussels Midi, Place Marcel Broodthaers, 3-1060 Brussels Wednesday 9 th of May 2012 Service Oriented Architectures with guest speakers from Apogado and ISACA Location: still to be confirmed Wednesday 2 nd Friday 4 th of May 2012 ISACA CISA Exam Bootcamp Location: IIA ISACA Belgium, Rue Royale 109-111, 1000 Brussels Monday 14 th Wednesday 16 th of May 2012 ISACA CRISC Exam Bootcamp Location: PARK INN Brussels Midi, Place Marcel Broodthaers, 3-1060 Brussels Wednesday 23 rd Friday 25 th of May 2012 ISACA CGEIT Exam Bootcamp Location: PARK INN Brussels Midi, Place Marcel Broodthaers, 3-1060 Brussels Tuesday 5th of June 2012 COBIT 5 introduction course Location: PARK INN Brussels Midi, Place Marcel Broodthaers, 3-1060 Brussels Request For Newsletter Articles ISACA Belgium Chapter is inviting you to write an article for the next newsletter to be issued in June 2012. The deadline for submissions is Thursday 31 st of May 2012. Please forward your article to education@isaca.be and include a high definition picture of yourself. Page 1

Job Postings zoekt een Interne auditor Delta Lloyd Life is op zoek naar een ervaren medewerker die als Internal Auditor mee wil instaan voor het uitvoeren van de interne auditmissies op een onafhankelijke en objectieve manier, teneinde bij te dragen aan het risicobeheer van de organisatie. Je houdt inleidende interviews met het management, je verzamelt en analyseert gegevens teneinde de concrete draagwijdte van de audit te bepalen. Je definiëert het gedetailleerde werkplan. Je documenteert het auditwerk (de interviews, werkdocumenten) en stelt het auditverslag van de audit op door de vaststellingen en aanbevelingen van de audit te hernemen. Je valideert het verslag met de geauditeerden en realiseert de follow-up van de auditaanbevelingen, teneinde je te verzekeren van hun correcte implementatie. Wanneer je werkt bij Delta Lloyd Life, kies je niet alleen voor een toffe job, maar werk je verder aan je loopbaan. Als ervaren medewerker krijg je bij ons alle ruimte om je talenten verder te ontplooien en je expertise verder uit te bouwen. Via onze Development & Business School kan je kiezen voor opleidingen op maat. Via onze interne mobiliteit kan je doorstromen naar andere functies binnen onze organisatie. Je staat, samen met je collega s, garant voor een kwalitatieve service. Je beschikt over een Master en een CIA-erkenning (Certified Internal Auditor). Je beschikt over een relevante ervaring van minimum 3 jaar en hebt een goede kennis van de levensverzekeringen. Een goede IT-kennis is een bijkomende troef. Je kan je vlot uitdrukken in het Frans en het Engels. In je adviezen geeft je blijk van gezond verstand en assertiviteit waardoor je vlot met alle hiërarchische niveaus omgaat. Enige werkdruk is voor jou geen probleem. Je houdt van een uitdaging en neemt je verantwoordelijkheid. Je bent ondernemend, pragmatisch en je staat voor een integere aanpak die getuigt van respect. Kortom je kan je vinden in onze kernwaarden (Team Spirit, Responsibility & Commitment, Open Communication, Entrepreneurship en Integrity) en staat voor een proactieve, klantgerichte en collegiale aanpak. Beloning en waardering Werken bij Delta Lloyd Life betekent een uitgebreid pakket aan primaire en secundaire arbeidsvoorwaarden. Dankzij onze gunstig en flexibel werkrooster kan je bovendien een goede balans vinden tussen werk en privé. Bovendien blijft werken voor Delta Lloyd Groep uitdagend. Niet alleen de verloning voor je werkzaamheden is goed, we vinden het ook belangrijk dat je op andere manieren de waardering krijgt die je verdient. Daarom krijg je van ons alle gelegenheid om bij te leren en verder te groeien. Ben je geïnteresseerd? Stuur dan een brief met uw motivering en curriculum vitae naar: Delta Lloyd Life NV Human Resources - Recrutering (recruitment@deltalloydlife.be) Fonsnylaan 38 1060 Brussel Voor meer info: www.deltalloydlife.be Page 2

ISACA Belgium Board Decisions The ISACA Belgium Board meets on a monthly basis and will provide insights to its members in the newsletter: A/ ISACA Belgium presence on Twitter The board has decided to activate an official Twitter account #ISACA_BE for the Belgian ISACA Chapter, based on the numerous activities and the accounts used by other chapters in Europe. You can now follow ISACA news and updates via Twitter : http://twitter.com/isaca_be B/ ISACA Belgium Chapter activities follow up As of 2012, the board has approved the use of FIKKET and SURVEYMONKEY as cloud tools to simplify and automate the registration and evaluation process for ISACA Belgium Chapter activities, but in a secure manner: Fikket.com is a free online event registration tool which ISACA uses for inviting members to register Surveymonkey.com is a survey research tool which ISACA uses for measuring satisfaction of participants of the local ISACA events. These tools provide ISACA Belgium with better and faster information regarding actual registrations, attendance and the quality of all our local chapter activities. C/ ISACA Belgium Nominating Committee The board has received the formal results from the ISACA Belgium Nominating Committee: Gunnar Mortier and Philip De Picker have formally applied for re-election in the board, but will have to take a new function. Peter Van Mol and Jean-Luc Allard did not apply for re-election in the board, thus allowing 2 new people to join the ISACA Belgium board. Peter Houtmeyers and Sanjay Vaid have applied formally and were selected by the nominating committee. Both will be proposed as new board member at the upcoming AGM on Wednesday evening 25 th of April 2012. Marc Vael has formally applied for the position of new president for ISACA Belgium in succession of Philip De Picker. His application was reviewed and selected by the nominating committee and he will be proposed as new president at the upcoming AGM on Wednesday evening 25 th of April 2012. The different functions within the board will be decided after the ISACA Belgium AGM election. The ISACA Journal features articles on topics of immediate interest to the IT audit, IT governance, IT risk and information security community. This bi-monthly journal is provided free to all ISACA members. Visit the Apple App Store and search for "ISACA Journal" to download the free app on your iphone, itouch or ipad. Page 3

ISACA Belgium Past Events Overview Round Table Auditing Virtual Environments (Saturday February 4 th 2012) The night before this ISACA event a lot of snow had fallen all over Belgium and a lot of people did not make it to the event (or did not take the risk to try). Luckily our speaker, Mr. Aman Bahr from Lancelot Institute, had already checked in the day before into the hotel where the ISACA event was organized so he was not effected by the weather at all. During the ISACA event, the audience received an appetizer about the subject as it is so vast it is normally presented in a 4-day course. The presentation focused on the VMWare solution and soon the speaker got in an interactive dialogue with other virtualization specialists in the audience. The speaker focused on the risks of cloud computing as flagged by certain organisations and structured the audit program along the lines presented by ISACA before diving deep into the technicalities of VM. At the end the appetizer had succeeded: the audience understood that only the top of the iceberg was shown and they needed much more exploring to do before auditing virtual environments. Round Table BYOD Bring Your Own Device (Thursday February 16 th 2012) In the first part of the event, Mr. Gérôme Billois and Mr. Chadi Hantouche from Solucom, who came over from Paris, introduced the concept which is hardly new, but which gets a lot of attention recently. The speakers claimed that BYOD is an unstoppable evolution. Then the speakers gave an overview of related risks and how they can be mitigated. After the break, Mr. Paul De Cooman presented BELTUG (Belgian Telecom User Group) and what the organization is about (also the current partnership with ISACA Belgium) and he presented a number of activities in relation to BYOD. Page 4

Page 5

Round Table Business Continuity Management (Tuesday March 6 th 2012) Again a full house at this ISACA Belgium event. In the first part of the event, Mr. Werner Verlinden, VP BCM ReedElsevier, gave an overview of the history of the BCM standards within BSI in the UK. Then Mr. Chris De Blende, senior manager at PwC, presented the new BCM standard ISO 22301 and stated that this was a big step forward in standardizing continuity efforts and invited the audience in applying this at their own pace. Both received a number of questions from the audience. After that presentation, Mr. Marc Vael, VP ISACA Belgium, presented the ISACA knowledge on BCM with references to the Knowledge Center on the ISACA website. After the break, Mr. Peter Van Mol and Mrs. Ellen Verbruggen presented a large DRP move project at Atos Worldline where they explained the learning curve, their principles and the practical lessons learned from such a DRP project. Both received so many questions from the audience that the event ran out of time and the discussions had to be stopped. This was again a sign of much interest in the topic and a very high appreciation by the participants. Round Table Physical Security Penetration Testing (Wednesday March 14 th 2012) This was a special workshop since it dealt with the unusual ISACA topic of physical security. Luckily ir. Yvan De Mesmaeker from ECSA provided a proper overview of the topic and he gave a lot of practical examples referring to many known incidents in Belgium. It reminded the audience how fast we forget such painful physical incidents. Mrs. Annick Loks from ISACA than gave a short overview of ISACA materials on physical security, but this was a rather short list concluding that ISACA has not a lot of proper knowledge around this topic. Page 6

Event An evening with Mr. Ken Vander Wal, international president ISACA (Tuesday March 24 th 2012) After a short introduction, Mr. Ken Vander Wal presented his views on ISACA and COBIT 5 in an informal face to face debate format at the beautiful meeting room of Atos Worldline in Evere. Not only did he gave a proper overview of his career and how ISACA and COBIT helped him, but he also gave an insight in the development of COBIT, with recognition from the international board of ISACA for the participation and efforts by the ISACA Belgium members (of which 3 were in the audience at this event) actively participating in COBIT in general and COBIT 5 specifically. Obviously at the time of this event, COBIT 5 was not yet released but the date was confirmed in April. Also at this event, many questions came from the audience in terms of support for COBIT5 and certification around COBIT5. Mr. Vander Wal received so many questions from the audience that the event finished just on time. All presentations can be found on www.isaca.be Page 7

Page 8

ISACA Member Benefits Update A/ ISACA Virtual Learning Events COBIT 5 overview Presented by: Ken Vander Wal, ISACA International President, CISA, CPA Derek Oliver, Director & CEO Ravenswood Consultants Ltd, CISA, CISM, CRISC, CITP, FBCS, FISM, MInstISP John Lainhart, CISA, CISM, CGEIT Join this 1 hour webinar on Thursday 3 rd of May 2012. 5 essential facts about COBIT 5 Presented by: Rob Stroud, ISACA Board Member Join this 1 hour webinar on Thursday 10 th of May 2012. Auditing is a social activity Communication Basics to Improve Client Relationships and Audit Products Presented by: Stanley Rabe Join this 1 hour webinar on Tuesday 22 nd of May 2012. B/ New ISACA Publication Incident Management and Response Incident response is a key component of an enterprise business continuity and resilience program. The increasing number and diversity of information security threats can disrupt enterprise business activities and damage enterprise information assets. A sound risk management program can help reduce the number of incidents, but there are some incidents that can neither be anticipated nor avoided. Therefore, the enterprise needs to have an incident response capability to detect incidents quickly, contain them, mitigate impact, and restore and reconstitute services in a trusted manner. This white paper examines incident response from security, risk, privacy and assurance perspectives; identifies some key issues to be considered in an incident response program; and outlines where the COBIT 4.1 framework can be applied to the development of an effective incident response capability. ISACA Academic Relations ISACA Belgium is connecting to academia in our country active in the applied research of Business/IT Alignment, IT Compliance, IT Audit, IT governance, IT Risk Management, IT security and related domains. The purpose of these connections is to search for joint interests in development of Bachelor or Master Thesis activities or Industry Projects (dependent on your school's terminology) based on or comparing other methods with our ISACA assets and more specifically COBIT 5. We believe this is a good collaboration offer to students, researchers and their academic promotors, since the work done in such projects will lead to innovative thinking, critically challenging of, and identification of use cases, of the internationally renowned ISACA frameworks within applied research contexts that matter to our country, industries, and SMEs. It will also offer students and researchers a coached experience (by senior ISACA members) in the skill of applying frameworks in reallife situations, and from there contribute to the maturity of our graduating students. In case of interest, please contact Mr. Hans Van Mingroot, ISACA Belgium Academic Relations at education@isaca.be, or any member of the ISACA Belgium Board. Page 9

Page 10 http://sc2012.eventbrite.com

ISACA Belgium at INFOSECURITY BELGIUM (Wednesday 28 th & Thursday 29 th of March 2012): some impressions ISACA Belgium was again in 2012 present at this 10 th edition of INFOSECURITY BELGIUM 2012 with its own booth in the large exhibition hall in Brussels Heizel, with Laurence as our professional ISACA hostess. This year, we offered to visitors the opportunity not only to learn about ISACA, but also to get access to older ISACA certification manuals in order to get a better understanding of the ISACA knowledge required for the certification exams. This was a big success and our booth was visited by more than 200 visitors. More than 50 visitors left their business card as they were interested in one of the four ISACA certifications or in COBIT. Since the official launch date was known just in that week of INFOSECURITY BELGIUM 2012, we did not hesitate to make some more publicity for the COBIT5 framework as well. Since Mr. Ken Vander Wal was invited by ISACA Belgium to Brussels specifically to deliver his keynote on the first day on COBIT 5, he also took the time to visit our booth and was very impressed by the exhibition as a whole, and also our simple ISACA Belgium stand. Page 11

The keynote on COBIT 5 by ISACA s International President Mr. Ken Vander Wal was a big success. Page 12

During the INFOSECURITY BELGIUM 2012 exhibition, Mr. Ken Vander Wal supported by Mr. Dirk Steuperaert from ISACA Belgium had a meeting with the famous Belgian IT journalist Mr. Guy Kindermans from DataNews on COBIT 5. During the INFOSECURITY BELGIUM 2012 exhibition, Mr. Ken Vander Wal met with Mr. Frank Robben, CEO of Smals and responsible for the ehealth project in Belgium. Interestingly enough Mr. Ken Vander Wal is also involved as Chief Compliance Officer for the US Health Information Trust Alliance (HITRUST), which obviously led to an interesting conversation on the Belgian and the US approaches on automating and securing healthcare information and the compliance with local privacy legislation. Page 13

Page 14

Page 15