ISACA Central UK chapter logo

 

2008 GOLD Website Award




Home » Events » Event Details

ISACA Central UK - Chapter Meeting 

Half Day Event - incl AGM

 

PwC, Donington Court, Pegasus Business Park, Castle Donington, 

East Midlands,  DE74 2UZ 

(See  map)

 

Wednesday 18 May 2011

12:00 – 17.00


 

AGENDA

12:00

Registration and lunch

13:00

Introduction  and AGM

13:15

Social Networking Security

Mathieu Gorge, VigiTrust

14:00

Comprehensive Security, Risk and Compliance Management at the Database Level

George Fyffe, Application Security Inc

14:45

Tea/Coffee

15:00

Information Risk - An Artisan's View

Ralph Smith, HMRC

15:45

Project Management – Auditing of Projects and Project Assurance

Harish Medhekar and Christian Hilpert, PwC,

16:30

Close

 For more details on the individual sessions, please see the speaker notes below

The CPE credit for this meeting will be 4.5 hours

 

This chapter meeting is free to ISACA members.            

To state your intention of attending this meeting and to ensure that adequate catering arrangements can be made, please email:events@isaca-central.org.uk or use the link on the Contact Us page. 

Project Management – Auditing of Projects and Project Assurance                        

Guest Speakers: Harish Medhekar and Christian Hilpert, PwC

Projects are likely to be a significant investment and it is often critical for the business to get it right the first time. The Project Assurance is aimed at helping businesses to successfully complete their projects and provide confidence to senior stakeholders, project teams, internal and external auditors that the right things are being done to achieve the project objectives throughout the project's lifecycle.

Harish Medhekar:
Harsh has worked in PwC Project Assurance at PwC for over 5 years in the Midlands team. Harish is a Project Assurance specialist who guides clients in delivering successful projects. He has led a number of client engagements to provide independent assurance about the governance and management of large IT projects. His clients range from small manufacturing companies to large local government and central government organisations.

Christian Hilpert:
Christian has worked in PwC Project Assurance at PwC in the Midlands for 10 months now and prior to this spent 6 years in industry as a project manager.
During that time he has helped clients across many industries and sectors conducting a range of project and programme reviews to identify key areas of risk, solve problems and provide challenge to the teams and stakeholders. Christian uses his industry experience to deliver a balanced view and provide real solutions and recommendations that clients can benefit from.

Comprehensive Security, Risk and Compliance Management at the Database Level 

Guest Speaker: George Fyffe, Application Security Inc

This session will cover:
1) the growing threat to our data
2) who is attacking our data and how are they doing it?
3) a defensive strategy

George Fyffe is the Director of EMEA Operations with Application Security, Inc. He brings a proven track record in revenue generation and strategic partnership development to the AppSec team. As Director of EMEA Operations, George is responsible for driving revenue growth in Europe through a combination of direct sales and channel partnerships with European based resellers and service providers.

Prior to joining Application Security, Inc., George spent more than four years leading the Boldon James security business in the UK, where he drove the company’s expansion in both the militaryand commercial security software markets. Previous to his role within Boldon James, George worked with the Protek Group, where he held the title of Professional Service Director. His focus was on the provision of worldwide services to the systems management and security marketplace. George was also on the Protek Group Board for eight years.

Over the past 25+ years, George has established an accomplished career in systems management and security. Before joining the Protek Group, he held senior management positions at United Utilities where he was instrumental in the expansion of the United Utilities International business, as well as holding technical architecture posts in the UK. Earlier computing expertise was earned at ICL Fujitsu where George worked on Operating System design.

Information Risk - An Artisan's View

Guest Speaker: Ralph Smith, HMRC

This session seeks to provide an overview of the key steps in assessing and managing information risk; highlighting common pitfalls and explaining the process in accessible, everyday terms. What are the components of risk? How to gauge severity and determine priorities? What to worry about and what not? What does good look like?

Ralph Smith has worked as a systems analyst and computer auditor for over 30 years. His experience includes local and central government accounting as well as a number of top UK companies. Since 2006, he has been working to improve information systems security management for a UK Government department. He has advised EU and Third Country governments on information systems audit practice and governance. His training and consultancy venture offers risk, governance and information systems audit products. Ralph holds CISA, CGEIT and CRISC certifications.

Social Networking Security

Guest Speaker: Mathieu Gorge, VigiTrust

Social networks have revolutionized the way we interact in our business and private lives. Whether you use FaceBook, Twitter, LinkedIn or other social media you need to be aware of the dangers of these new communication channels. This talk covers the risks associated with social networking especially in a business context. Attendees will learn about privacy risks, network and information security risks, identity related threats and other social threats. Recommendations on how to securely use social networks will be made and attendees will get the opportunity to interact during the Q&A.

Mathieu Gorge is the CEO and founder of VigiTrust. He has been in the security industry for over 10 years and is an expert on key legal aspects of corporate security such as compliance with international data protection laws and security frameworks. He is a regular speaker at international security conferences (RSA, ENISA, ISACA, ISSA) and a well respected figure in the security industry in North America and EMEA. Mathieu is also a regular contributor to the Compliance Authority, the ISSA Journal and TechTarget. He can be reached at mathieu.gorge@vigitrust.com  .

 Meeting presentation slides and other excellent resources are available here (for Central UK Members only)





Warning and Disclaimer. These web pages are designed to provide information about the ISACA Central UK Chapter and other information useful for those involved in information systems auditing or security. All effort has been made to make these web pages as complete as possible, but no warranty or suitability is implied. The information is provided on an "as is" basis. The ISACA Central UK Committee and its web service providers shall have no liability nor responsibility to any person or entity with respect to any loss or damages arising from the information contained on these web pages. Full Website Disclaimer and Privacy Policy