News

E-News Archive

ISSA E-News

A bi-weekly publication from the ISSA International Board

August 30 , 2007

Join ISSA for the Annual Membership Meeting and Awards Presentation. Connect with the New ISSA International Board and Honor Industry Leaders. Register online.

In this Issue

Polls close this Friday
In Memory of Peter Hausmann
CISO Forum Announcement
Annual Meeting Announcement
Webcast reminder: Database Auditing for Security, Compliance, and Reputation Management
Upcoming events (September - October)

Polls close this Friday

Friday at midnight pacific time, polls will close and tallying will begin for this year's International Board Elections. Many thanks to each member who has taken the time to support the association by casting a vote. If you have not yet voted, please taken a moment to do so. If you have misplaced your ballot email message or believe you should have received a ballot, please get in touch with elections.support@issa.org or call for assistance.

Positions and Candidates

Vice President

Secretary/Director of Operations

Vernon C. Williams, CISSP PMP ISSEP CBCP IEM IAM

Treasurer

Dave Cullinane, CPP, CISSP

Directors

Write-in candidates

This year, our voting system allows for write-in candidates. If you know of a member in good standing of the ISSA who would effectively fill one of the roles above, you may submit your vote for that individual by entering their name when casting your ballot online.

Voting procedures

The polls are open, and electronic ballots are being distributed.

If you are a member in good standing as of the end of July, you are be qualified to receive a ballot. Trial memberships and student memberships do not qualify to receive a ballot, and one ballot will be issued per person.

Because ballots are delivered by email, it is necessary that your email address be correct in order to receive a ballot. If your email address has changed, please notify Elections Support by dialing (866) 349-5818 x103 (from within USA only), or +1 (206) 388-4584 x103 internationally, so we may issue you a ballot at your new address.

Missing your ballot?

If you did not receive a ballot by email, it is likely for one of three reasons:

If you are a student or trial member, you will not receive a ballot.
If your membership has lapsed, you will not receive a ballot.
If your email address on file is not current, we'll need an updated address (see above).

In Memory of Peter Hausmann

We are saddened by the news that Peter Hausmann of St. Paul, MN and a member of the Minnesota Chapter of ISSA, died in the collapse of the Interstate 35W bridge on August 1. Peter was an information security specialist for Assurity River Group. Our heartfelt condolences go out to his wife Helen and the couple’s four children Justina, Andrew, David and Theresa.

“It appears that his last efforts were heroic as he tried to rescue other victims involved in the bridge collapse,” reports Rick Ensenbach, President of the Minnesota Chapter.

Peter was born in Bonsteel, SD on October 12, 1959, the youngest of 5 children. After attending South Dakota University, Peter did missionary work in Kenya where he taught at St. Theresa’s boarding school for girls for three years. It was in Kenya that he met Helen. Following their marriage in 1990, they worked together educate orphans of AIDS victims.

For those who wish to honor Peter, a memorial fund for his family has been established at Anchor Bank St. Paul. Contributions should be made out to "The Hausmann Family" and sent to:

Anchor Bank St. Paul NA
West St. Paul Office
66 East Thompson Avenue
West St. Paul, MN 55118

CISO Forum Announcement

CISO Executive Forum
September 6-7th
Orlando, Florida

"CISO War Stories: What Works, What Made it Work, What Can Be Done Better"

If you are not familiar with this program, this event was created by a group of senior level IT security managers, who saw their positions evolving and gaining additional responsibilities within their organizations. With these additional responsibilities came the need for a forum to connect with their peers in addressing the unique challenges of the VP and C-level security managers. The September event will address: "CISO War Stories: What Works, What Made it Work, What Can Be Done Better" and include panel presentations from peers on "Making Compliance Sustainable", "Success with Vendor Audits", "Security Group Structure", and "eDiscovery."

Please call the ISSA CISO Forum Hotline at 503-213-4632 or log on to http://ciso.issa.org if you are interested in attending this program (please note as this is a peer-to-peer event and attendance is limited to VP or C-level security managers.)

Annual Meeting Announcement

Join ISSA for the Annual Membership Meeting and Awards Presentation. Connect with the New ISSA International Board and Honor Industry Leaders.

September 19, 2007
4:00 to 7:00 p.m.
South San Francisco Conference Center
San Francisco, CA

You are cordially invited to meet with Howard A. Schmidt, CISSP, CISM, ISSA International President and the International Board of Directors for an update on ISSA’s activities and plans for the future at the Annual Membership Meeting on Wednesday, September 19, 2007 from 4:00 to 7:00 p.m. PDT.

During the program, we will recognize a number of industry leaders for their outstanding contributions to ISSA and the information security profession. The awards will include:

ISSA Chapter of the Year
ISSA Security Professional of the Year
Communication Program of the Year
Organization of the Year
ISSA Hall of Fame

Following the presentations, you will have the opportunity to network with the ISSA International Board and honorees and enjoy refreshments.

The ISSA Annual Membership Meeting and Awards Presentation will be held in conjunction with the SecureWorld Expo at the South San Francisco Conference Center. Please register online by September 14.

Webcast Reminder: Database Auditing for Security, Compliance, and Reputation Management

Compliance with regulatory obligations such as Sarbanes Oxley, HIPAA, PCI and GLBA are forcing companies to implement segregation of duties and adopt increasingly onerous database monitoring, security, and reporting policies. Sensitive and valuable information assets and privileged users in particular, must be monitored to demonstrate the existence of detective controls while proving the efficacy of preventative controls. Database Auditing, or Activity Monitoring for Security purposes, provides a deterrent to security threats as well as reporting for detection of data privilege abuses, data breaches, and evidence for holding privileged users accountable.

This presentation discusses how "Big 4" audit firms and interpretations of compliance obligations are being translated into specific directives for database security and auditing. [More]

Upcoming events

Information Security Compliance and Risk Management Institute 2007: Advanced Information Security Learning and Knowledge Development

September 17-18; Seattle, WA

Pre-announcement: International PCI-DSS Conference

October 11; Brussels, Belgium