January Meeting
Thursday the 13th
CityPlace Conference Center
Lunch Meeting 12:00pm
Registration begins at 11:30am
White Collar Cybercrimes
Mark Loveless, Senior Security Analyst -
BindView
Corporation
White collar cybercrime is quickly becoming a worldwide phenomenon,
with thousands of corporations affected by malicious attacks. These
attacks can range from denial-of-service and direct network assaults,
to strikes against internal vulnerabilities with small office/home
office installations and rogue wireless access points, servers or
workstations.
White collar cybercrime also includes the largely publicized
methodologies employed by Russian crime rings that threaten cyber
attacks if extortion demands aren’t met. One Russian outfit brought down
several high-profile online UK gaming sites, including
www.sportingoptions.com. By creating and blasting a variety of viruses
and worms, they threatened to essentially shut down the sites if their
payment demands weren’t met.
The influx of white collar cybercrime has prompted the need for
precautionary measures that protect organizations against internal and
external IT assets. During this session with Mark Loveless, participants
will hear about the key tactics used by white collar cybercriminals,
including how to develop and maintain comprehensive security policies to
strengthen the overall security of IT infrastructures.
As a senior security analyst with BindView Corporation, Mark
Loveless, AKA "Simple Nomad", works on the company’s highly
regarded RAZOR Research Team. He is also the founder of the Nomad
Mobile Research Centre (NMRC), an international group of hackers that
explore technologies.
Loveless has spent years developing and testing security strengths
for a broad range of computer systems. He has authored numerous papers,
tools and articles, all dealing with the security -- and insecurity --
of computer security. Loveless is a frequently sought lecturer at
security conferences and industry events around the globe. He has been
quoted in print, online and television media outlets regarding computer
security and privacy.
Make your Reservation On line!
Pre-Meeting 10:30am
Internal Audit and
Business Continuity Planning
Dan Bailey, MBCP
Protiviti
This session explains how an Internal Audit program adds value to an
organization's business continuity planning process. It also outlines
information that is available to the internal auditor as well as proven
approaches to conducting a business continuity audit.
Dan Bailey is a Senior Manager in the Dallas office. He worked
for First American Corporation prior to joining Protiviti in November
2003, where he was responsible for the Enterprise Business Continuity
Program. He's worked in a variety of industries; Insurance, Financial
Services (banking and real estate), Technology Services, and Data
Management. He has been actively involved in the Information Technology
field since 1984 and has been specifically focused in the business
continuity field since 1991. Dan received his Certified Business
Continuity Professional (CBCP) and Master Business Continuity
Professional (MBCP) certifications from DRI International in 1999 and
2002 respectively. He also serves as a Commissioner on DRI
International's Certification Commission.
Dan's focus at Protiviti is primarily in the Technology Risk, but
more specifically in the Business Continuity practice. He has managed
and executed engagements for Alliance Data Systems, BEI Technologies,
Carreker Corporation, CRIIMI MAE, Fremont Investment & Loan, Intuit, RHI
International, and Weider Nutrition.
Make your Reservation On line!
Special Pre-Meeting: Join a Focus Group on XBRL
Glen Gray, PhD, CPA, (an IIA Researcher and professor in the
Accounting and Information Systems at California State University) will
be attending our January meeting and would like to arrange a focus group
(about 12 members) discussion to explore reactions and concerns of
internal auditors to XBRL. XBRL is an emerging standard for tagging
financial information for electronic transmission, manipulation and
storage. See recent article on the subject at:
http://www.theiia.org/itaudit/index.cfm?fuseaction=forum&fid=5551.
The focus group will NOT go deeply into XBRL technology. The
discussions would be divided into two parts. The first part would focus
on how auditors currently manipulate (extract, consolidate, transmit,
etc.) data and what are the issues/problems/concerns with these current
activities. The second part will then focus on the participant’s
reactions and thoughts regarding XBRL’s expected uses and benefits
related to data manipulation and the issues/problems/concerns that
surfaced in the first part of the focus group.
Glen is not looking for XBRL experts. He is more interested in
peoples’ reactions to what proponents of XBRL believe are the main
benefits of XBRL. He would like a mix of people for the focus group –
both from the level of technology experience and the overall number of
years of experience.
The focus group is scheduled for two hours (9:30 – 11:30) prior to
our January 13 luncheon meeting at CityPlace. Each participant will
receive two hours of CPE. Contact Dave Hallo at
David.Hallo@kaneb.com if you
are interested in participating. If you have already contacted Dave to
join the focus group, you do not need to contact him again.
Post-Meeting 1:30pm
Changing Internal Audit Practices in the New
Paradigm: The Sarbanes-Oxley Environment
Glen Gray, Ph.D., CPA
Glen Gray, Ph.D., CPA, an IIA Researcher and professor in the
Accounting and Information Systems at California State University,
will be making a presentation on his most recent IIA Research
Foundation report entitled: “Changing Internal Audit Practices in the
New Paradigm: The Sarbanes-Oxley Environment.”
In his report, Glen explores how the Sarbanes-Oxley Act of 2002 is
impacting internal auditors, public accounting firms, and public
companies – all of which play a vital role in shaping the internal audit
environment. He has found that it is truly a paradigm shift for those
companies and accounting firms that implemented major changes in their
organizations and how they do business. Included in his presentation
will be:
- An overview of the Sarbanes-Oxley Act and its impact on the
profession.
- Individual case studies that summarize the impact of the
Sarbanes-Oxley act on parties affected, as well as the interactions
that occur.
- Illustrations of how unprecedented opportunities have arisen for
internal auditors to increase their visibility, status, and value in
their companies.
Make your Reservation On line!
 
This meeting is being held at
CityPlace Conference Center
2711 North Haskell Street
Dallas, Texas 75204 |
