ISSA E-News

A bi-weekly publication from the ISSA International Board

July 5, 2007

In this Issue

Webcast Reminder: Database Auditing for Security, Compliance, and Reputation Management
MIS Training Institute’s IT Security World 2007 Conference & Expo
RSA Conference Europe - registration now open; early birds save! (Oct 22-24)
Be ready to vote: update your email address
SecureWorld Expo 2007
July Journal
Other upcoming events (August - September)

Webcast Reminder: Database Auditing for Security, Compliance, and Reputation Management

Compliance with regulatory obligations such as Sarbanes Oxley, HIPAA, PCI and GLBA are forcing companies to implement segregation of duties and adopt increasingly onerous database monitoring, security, and reporting policies. Sensitive and valuable information assets and privileged users in particular, must be monitored to demonstrate the existence of detective controls while proving the efficacy of preventative controls. Database Auditing, or Activity Monitoring for Security purposes, provides a deterrent to security threats as well as reporting for detection of data privilege abuses, data breaches, and evidence for holding privileged users accountable.

This presentation discusses how "Big 4" audit firms and interpretations of compliance obligations are being translated into specific directives for database security and auditing. [More]

MIS Training Institute’s IT Security World 2007 Conference & Expo

What You Really Need to Know to Secure Your Organization

September 17-19, 2007
The Fairmont Hotel
San Francisco, CA

Featuring presentations from leading organizations such as AT&T, The Home Depot, Department of Defense, JP Morgan Chase, Johnson & Johnson, Electric Power Research, Limited Brands, Lockheed Martin, FBI, Microsoft Corp. and more!

For full details and to register online, visit http://www.misti.com/itsecurityworld.

RSA Conference Europe - registration now open; early birds save!

ISSA members save even more – book by July 27th -

Information security. It's essential to your organisation’s success and survival. With an estimated two billion security incidents reported to date, it’s critical that you stay ahead of information security threats and informed about the latest solutions, products and trends.

London Calling

For the first time, RSA Conference Europe is being held in London (Oct.22-24): Europe’s largest financial centre and the European headquarters of 33% of the Fortune Global 500. The ExCeL London campus, near Canary Wharf, has six onsite hotels to suit all budgets, great road and public transport links plus London City Airport is just 10 minutes away by car or taxi.

www.rsaconference.com/2007/europe

This 3-day experience is unparalleled in scope, in quality, in reputation. Join the community, and become part of the future of information security.

RSA® Conference Europe delivers extraordinary opportunities to expand your knowledge and enhance your skills. Combining 100 tutorials, keynotes, class-track sessions and special interest groups with an Exhibition showcasing the very latest security innovations, this intensive 3-day event gives you the opportunity to:

Gain fresh insights into the latest security best practices and trends
Listen to keynote sessions delivered by the industry’s most respected leaders and innovators, including Bruce Schneier, internationally renowned Security Technologist and CTO of BT Counterpane
Attend sessions across 10 tracks including Authentication, Hackers and Threats, Developing with Security, and Wireless
Visit the RSA Conference Exhibition to discover the latest products, services and solutions
Network with your peers and join the RSA Conference community

Register NOW and Save

If you register for a Full Conference pass by 27th July you can take advantage of the Early Bird discounted registration rate. In addition, ISSA members receive a further £75 discount. To claim this discount, quote registration code ISSA07 when registering at www.rsaconference.com/2007/europe

Be ready to vote: update your email address

Because this year's elections will be done electronically, it is critical that any member wishing to vote have a current email address on file with International. Keeping your account up-to-date is simple using the Your Profile page on the International website. If you know you'll be changing email addresses soon, please take a moment now to be sure you have an active website account with a password you remember. If you do not, an option is available at the login form to reset your password. If you've lost both your password and your email address, please contact member support for assistance.

SecureWorld Expo 2007

SecureWorld Expo is a security conference built for and by key decision makers, like you, from the largest enterprises, government and educational institutions throughout the nation.

SecureWorld Expo Fall 2007 Dates

SAN FRANCISCO · September 19 - 20
DETROIT · October 9 - 10
SEATTLE · October 30 - 31
DALLAS · November 14 – 15

www.secureworldexpo.com

ISSA MEMBERS also are offered an $80 discount off the $195 two day conference pass which includes access to the Conference Sessions, Conference Breakfast Keynote, Exhibits & Open Sessions (Includes Lunch) and 12 CPE Certificate of Attendance.

Introducing the new SecureWorld+ Extended Training

With the SecureWorld+ Pass, you get an additional 6 hours of intense training worth 16 CPE credits and full access to the complete SecureWorld program which includes all conference sessions, lunch each day, conference reception, keynotes and exhibits.

ISSA MEMBERS Register Today for the NEW SecureWorld+ Extended Training for only $495! Register on-line using code ISSNWS2 and you save $100 off the $595 fee!

SecureWorld+ Topics Include:

How To Complete A Risk Assessment In 5 Days Or Less
Crack The Case – Hands-On Computer Forensics Training
ISO 17799 Self Assessment Process
Security Metrics Workshop

Don’t miss SecureWorld 2007!

July Journal

This month's journal features Preparing for the Inevitable Security Breach, by Cezar Drugescu and Rafael Etges, and covers topics ranging from VoIP to encryption to penetration testing. Be sure to check out a new column debuting this month, Uptight Security Officer.

Read the journal online (members only)

E-News Archive