September 2008

Central Maryland ISACA Chapter

Monthly Meeting

The ISACA Central Maryland Chapter invites you to its kickoff-training event for the 2009 fiscal year. This event is a mix of social time and training as we again get started in Little Italy, Baltimore. Frank Aiello, will again be sharing his plethora of IT knowledge as he explores and discusses the "Security Risks, Vulnerabilities, and Trends of the Top Tens". Auditors, IT professionals, and internal control specialists will benefit from this session. The training session is conveniently located at Chiaparellis in Baltimore's Little Italy. Come join us for Great Conversation, Training, Food, and Fun!

Topics: Security Risks, Vulnerabilities, and Trends of the Top Tens

Speakers: Frank Aiello

Date: Wednesday, September 10, 2008

Place: Chiaparellis Restaurant, 237 South High Street,
Baltimore, Maryland 410-837-0309

[Map] [Driving Directions] [Hotels]

Planned CPE's: 3.0 (CPE is based on 50 minute increments)

Times: 

Menu:

A list of delectable Italian entrees to select from will be provided at the restaurant. Ice tea, soda, and hot beverages served during registration and presentation and wine added with our dinner. A la carte enchanting desserts will follow dinner. Cash Bar available to attendees.

REGISTER HERE AND PAY AT MEETING

REGISTER AND PREPAY WITH A CREDIT CARD. (Google Checkout)

Price:                                             

Members $35
Non-Members $60
Late Registrants Additional $20

(Member Prices are for all ISACA and ISSA members and members of the local chapters of the IIA, AGA, and CFE)

Presentation:
The following lists overlap, but Frank will not as he touches on the security risks, vulnerabilities, and trends of the top tens-twenties below.

SANS Top-20 2007 Security Risks http://www.sans.org/top20/
Client-side Vulnerabilities in: C1. Web Browsers C2. Office Software C3. Email Clients C4. Media Players

Server-side Vulnerabilities in: S1. Web Applications S2. Windows Services S3. Unix and Mac OS Services S4. Backup Software S5. Anti-virus Software S6. Management Servers S7. Database Software

Security Policy and Personnel: H1. Excessive User Rights and Unauthorized Devices H2. Phishing/Spear Phishing H3. Unencrypted Laptops and Removable Media

Application Abuse: A1. Instant Messaging A2. Peer-to-Peer Programs

Network Devices: N1. VoIP Servers and Phones

Zero Day Attacks: Z1. Zero Day Attacks

2008 Top 10 Nevis Labs Vulnerability Trends, http://www.nevisnetworks.com/content/labs/Top10.pdf
- ActiveX
- File Format
- Antivirus
- Firewall
- IM
- Virtualization
- VISTA
- Driver
- VOIP
- Mobile

Speaker Profile:
Frank is an experienced leader with more than 15 years of business and technical experience specializing in information security, risk management, and regulatory compliance. He most recently served as the Vice President and Market Leader for Accretive Solutions' Baltimore-Washington office. Prior to joining Accretive Solutions, Frank led the Mid- Atlantic Technology consulting practice for PricewaterhouseCoopers where he served large corporations across a variety of industries, including financial services, telecommunications, and energy, as well as Federal government agencies. Frank is a frequent speaker at national conferences and regional industry groups on information technology and risk management. He holds his Master of Science degree in Software Systems Engineering from George Mason University, and a Bachelor of Science in Computer Science from Penn State University.

Directions:

95 from New York:
Take the Eastern Avenue exit (before the tunnel). Go towards Highland Town and the City (approximately five miles). Turn right onto S. High Street. Located on the corner of Fawn and S. High.

From 83 South:
Take 83 to Pratt Street. Turn left onto Pratt, right onto S. Exeter Street (immediately after S. High). Go two blocks to Fawn Street. Turn right on Fawn, right on S. High Street. Located on the corner of Fawn and S. High.

95 from Washington, D.C.:
Follow signs to Downtown via 395 North. Turn right onto Pratt Street, right on S. Exeter Street (immediately after S. High). Go two blocks to Fawn Street. Turn right on Fawn, right on S. High Street. Located on the corner of Fawn and S. High.

Valet parking available. Two-hour parking on the street.

Reservations: For reservations, please submit registration via the web site or call Pat Hamilton at (301) 592-5042 by NOON on Friday, September 5th. If there is no answer, please leave a voice mail message when prompted. If you wish to have the reservation confirmed be sure to leave a return phone number. You will automatically receive a confirmation if you registered via the web site. We will attempt to accommodate walk-ins, but please secure your seat with a timely reservation. Because this meeting requires special accommodations, late charges do apply for late registrants after the September 5th deadline and walk-ins.

Cancellation Policy: 
A registrant is responsible for the full cost of a meeting if reservations are not cancelled by noon on the Friday prior to the Chapter Meeting. Substitutions are acceptable. Please email Pat Hamilton at meetings@isaca-cmc.org to cancel a reservation.