SACRAMENTO CONNECTIVITY Information Systems Audit and Control Association

February, 2003 Sacramento Chapter Volume 5 Issue 1

ISACA BOARD OF DIRECTORS

President STEVE MADEIROS, CISA (530) 756-3117

Vice President/Education LOUIS WALKER, CISA

Treasurer PATRICIA KUHAR, CISSP Dept. of Finance (916) 445-6201

Secretary/Newsletter CAROL STEICHEN, CISA CalPERS (916) 326-3485

Programs FAYE BORTON CalPERS (916) 795-0380

Seminars BALENCIA DOZIER, CISA Dept. of Water Resources (916) 654-1813

Membership MICHELLE TABARACCI, CISA Bureau of State Audits (916) 445-0255

Academic Relations GARY LITZSINGER, CISA Humboldt Bank (916) 677-1140

Auditor CHRIS WALLACE, CITP, CISSP Calif. Student Aid Commission (916) 526-8237

Past President MICHAEL PACH, CISA CalPERS (916) 341– 2241

Webmaster DAVID KAWADA CalPERS (916) 326 –3026

In this Issue: Page Board of Directors 1 Board Minutes 1 CISA Review Class 2 Articles, Training 2,3 Meeting Schedule 3

BOARD MINUTES The Board met on December 2, 2002 to discuss the following: < The Chapter’s tax return and audit is done. Cash

balance as of 1/31/03 is approx. $16,000. < CISA Review Class - materials have been

ordered, an updated schedule distributed, and potential instructors for the few remaining open classes will be confirmed soon.

< The Board installed Faye Borton to the vacant

Program Director position. < The Academic Liaison has scheduled a meeting

with CSUS to discuss the integration of CoBit into their audit curriculum.

< The Board agreed to waive Chapter dues for

students, since ISACA Intl. has lowered student dues from $60 to $25.

< The Board approved sending two Board members

to the West Coast Leadership Conference in July.

Chapter Website: www.isaca-sacramento.org

Input on page content is always welcome. Please contact webmaster, David Kawada.

2003 CISA EXAM 14 June , 2003

ISACA-SACRAMENTO CONNECTIVITY February 2003 Volume 5 Issue 1

Information Systems Audit and Control Association ISACA Chapter 76 P.O. Box 163011 Sacramento, CA 95816-9011

CISA Review Class The Sacramento Chapter’s CISA Review Class begins Tuesday, March 4, 2003 from 5 - 7 p.m. at CalPERS, 400 P Street, Sacramento in Conference Room #1170. See the Chapter website for the complete schedule. Oh, and did we mention that it’s FREE . . .? Standards Update A comprehensive standards PDF document containing all the standards, guidelines and procedures has been posted on the ISACA web site at www.isaca.org/standard/stdownload.htm. Research Projects in Progress with Target Completion Dates (Note: The dates provided do not reference a publication’s availability.) • OS/390 (Z/OS) project—first quarter 2003 • Wireless communication project—first quarter 2003 • Security and Risk Management in an Oracle Financial Environment—second quarter 2003 • Oracle database project—second quarter 2003 • Enterprise information integrity project—second quarter 2003 • Security and Risk Management in a PeopleSoft Environment—second quarter 2003 COBIT for Small to Medium-sized Enterprises A special version of Control Objectives for Information and related Technology (COBIT) for small to medium-sized enterprises (SMEs) is nearing completion. For this project, SMEs are not defined according to financial or staffing measurements. Rather, the strategic nature of IT to the business is evaluated, a self-assessment form has been developed and exceptions are reviewed. Enterprises in which the strategic nature of IT is relatively low, that fall within certain ranges on the self-assessment and do not have exceptions that might indicate a higher level of dependence on IT are considered SMEs. This project is being undertaken in response to comments received from SMEs that COBIT, in its complete form, is “too much” for them. SMEs operate with small IT staffs and simply do not have the resources to implement all of COBIT. They requested guidance on portions they should attend to or safely bypass. The project is being developed by the COBIT Steering Committee and is expected to become available by mid-year 2003. Adding a Dimension to COBIT® COBIT 3rd Edition© can be ordered through the Bookstore at www.isaca.org/bookstore.htm. It includes the new Management Guidelines and Implementation Tool Kit. Also review the COBIT home page to see case studies from many organizations around the world that are using COBIT.

ISACA-SACRAMENTO CONNECTIVITY February 2003 Volume 5 Issue 1

Information Systems Audit and Control Association ISACA Chapter 76 P.O. Box 163011 Sacramento, CA 95816-9011

2003 Conference/Training Week Calendar, USA03 Conference/Training Week Calendar, USA

2003 Conference/Training Week Calendar

IS Audit & Control

Training Week

North America CACS

Network Security

Conference Dates 5-9

May 2003

18-22 May 2003

6-10 September

2003 Location Minneapolis,

Minnesota, USA

Houston, Texas, USA

Las Vegas, Nevada,

USA CPE Hours Available

38 44 25

In addition to sessions already planned, ISACA has finalized the locations for additional IS Audit & Control Training Weeks in 2003. The closest one to Sacramento is Orange County, CA—27-31 October. As information becomes available, it will be posted to the web site at www.isaca.org/trainwk.htm Local ISACA chapter benefits include: • Access to affordable continuing professional education programs • Information exchange opportunities through regular chapter meetings • Chapter communications that inform of local events and opportunities • Leadership experience on local boards and committees • The opportunity to make a positive impact on the local business community

SEMINAR Firewall Security & Intrusion Detection

April 7 & 8, 2003

MEETINGS Chapter meeting – May 8, 2003

Member appreciation & election of officers

See the Chapter website for the complete meeting schedule.

To contact ISACA Headquarters…

Voice . +1.847.253.1545 Fax .... +1.847.253.1443 Web... www.isaca.org E-mail info@isaca.org