November 2008
Central Maryland ISACA Chapter 

Fall Seminar

Topic: Auditing Technical Applications - A HANDS-ON SEMINAR
Limited to 10 attendees only.

Presented by: Canaudit, Inc.

Many Canaudit clients are surprised and impressed with the speed, depth, and professionalism of our audits. Our secret is in the use of specific tools and techniques that enable an auditor to quickly identify and quantify risk. In this workshop, we share our tools and techniques with audit and security professionals. Participants will learn to use a bevy of safe and sane tools that can be used to automate the documentation of the environment and the auditing of specific technologies. In this hands-on workshop, we will focus on audits of the network, the Windows environment, the UNIX and LINUX environment, the Internet, and web applications. The participants in this session will learn how to load and use the software tools in our portable lab. They will learn to identify and eliminate the false positives that often cloud remediation efforts. They will also learn how to present the technical information in exit interviews in a manner that can be easily understood. Report presentation and automating post-audit follow-up are also included.

Audience: This workshop is intended for IT Auditors and security professionals with at least two years experience. They should have an understanding of network and operating system auditing. There are no prerequisites.

NOTE: Each participant will require a laptop computer with local administrative access rights.

Dates: Monday-Wednesday, November 3-5, 2008

Place: The Conference Center at the Maritime Institute
            692 Maritime Blvd
            Linthicum Heights, MD 2190
            (410) 859-5700

 Planned CPEs: 24

Time:
Registration: 7:30 – 8:00
Seminar 8:00 – 5:00 (buffet luncheon and breaks included)

Payment/Registration:
Prepayment and pre-registration are required. Please follow the following links to:

REGISTER AND PREPAY WITH A CREDIT CARD. (Google Checkout)

REGISTER AND PAY BY CHECK or call Joanie Miller at (717) 664-8037 by Friday, October 10th . Make checks payable to ISACA-CMC. Please include the registrant’s name with the check and mail to:

Cancellation Notice: Full refunds will be given if registration is cancelled prior to Friday, October 17th . Refunds will not be given after that date. Attendance is transferable. ISACA Central Maryland Chapter reserves the right to cancel this event if there is not sufficient participation. Participants will be notified the week of October 13th in the event that the seminar has been cancelled. Paid registrations will be refunded.

Hotel Accommodations:

For those living outside of commuting distance to the Conference Center, hotel reservations can be made at the Maritime Institute hotel at the ISACA group rate of $130 per night, which includes dinner and breakfast. To make reservations, call Maritime at (410) 859-5700, press 7 for hotel reservations and then book your room under the ISACA group’s 3-day Auditing Automated Applications seminar arriving Sunday, November 2nd and leaving Tuesday, November 4th. Hotel guests also receive free shuttle service from the BWI airport and the BWI Amtrak train station, but need to call the Maritime hotel to schedule pickup.

Instructor Bio:

Chris Schroeder, Senior Manager, Technical Audit and Security Services

Chris Schroeder is a senior manager of Technical Audit and Security Services at Canaudit and a team leader of the Canaudit Penetration Team and Lightning Strike Force. He is internationally recognized as an expert in the Windows NT and 2000 environments. Chris is a published author on many security related topics including network security. He has an impressive track record in his chosen specialties of network penetration and vulnerability assessment, operating systems audits, network audits and forensic investigations. Since joining Canaudit, Chris has developed new audit and security techniques that have enabled Canaudit to become one of the preeminent audit consulting and security firms in the United States. Chris' pioneering work in wireless LAN security has set the standard for others to follow. 

As a former United States Marine, Chris has a unique insight when performing physical security audits. In fact, Chris along with Canaudit's President, Gordon Smith have written a physical security guide which is available at the Canaudit website www.canaudit.com. In addition to physical security, Chris has performed many forensic audits and has been studying the legalities of the new Patriot Act. 

As an experienced seminar leader and conference speaker, Chris draws on his vast experience with network security, penetration audits and electronic commerce to easily translate complex technical issues into language readily understood by participants at all levels. Because of his experience in web designing and extranet security consulting, Chris skillfully assists Canaudit clients with e-commerce applications and implementation of e-business solutions. 

Chris is not only a highly proficient instructor, but he has also developed several Canaudit courses. His latest contribution, "Control and Security of Web Applications" is one of Canaudit's most popular courses. Chris enjoys the security field, particularly the rapidly changing environment and the challenges it poses. He is constantly adapting and testing new security exploits in his efforts to further the audit and security professional body of knowledge.

Seminar Description: Link