ISACA Wellington is inviting participation from its members. Thanks to our members, our last ThinkTank session "What is the meaning of Governance" was lively, thought provoking and covered a lot of ground.

This article was originally published at IIA IT Audit Magazine (April 2008)

Knowing the basics of an effective identity and access management strategy can help auditors provide recommendations that enhance an organization's information security posture.

This article was originally published at IIA IT Audit Magazine (Vol. 10, March 10, 2007)
Reviews of an organization's change control environment will help internal auditors detect critical system failures and risks before they occur.
Francis Kaitano, CISSP, MCSD, MCAD.Net
Senior Consultant, Enterprise Risk Services Deloitte New Zealand

Attached are notes from the first chapter think tank, where we considered the definition of governance.

Members are invited to propose a think tank topic, which can be on anything relevant to assurance, security, and governance, including issues that you are personally tackling in your organisation.

The format of think tanks is that the proposer presents a topic or issue for 5 to 10 minutes followed by discussion. This is a superb opportunity to exchange ideas and experiences and to essentially bring a collection of brainpower to bear on a subject.

March 2008

For immediate release.

The Standards Board is mandated to review and update guidance every three to five years. The IS Auditing Guideline G9 Audit Considerations for Irregularities and Illegal Acts has been updated in track changes and posted for a 30 day exposure period. Please submit your comments on the revised IS Auditing Guideline before the 15 April 2008 deadline.

Four interactive presentations will examine how to blend PCI compliance with other audit and regulatory requirements, look at new and future requirement changes, examine PCI DDS and discuss what to look for in a PCI vendor.

New e-Symposium Instructions: Click http://isaca.brighttalk.com to access the new ISACA e-Symposium site.

The following are some IT audit, IT Governance, Project Management and IT security related certifications you might be interested in.

Please note this list is not intended to be comprehensive and it is just for your reference only.

3 ISACA certified qualifications are included in this list too.

May's lunchtime session will take place on Friday 30th May.

We will have a speaker from New Zealand Police talking about Forensics and Evidance handling proceedures.

Any questions you'd like to raise before hand to our speaker, please place a comment here, or email evants@isaca-wellington.org