Baton Rouge Information Systems Security Association

Calendar of Events

Event: IT Risk Management presented by Raj Mehta of Deloitte
Thursday - July 10, 2008, 11:30 am
Location: Jefferson Parish Library 4747 West Napoleon Avenue in Metairie between Clearview and Transcontinental
Duration: 3 hours

Reminder

Please mark your calendars for our next event!

TOPIC: IT Risk Management presented by Raj Mehta of Deloitte
DATE: July, 10, 2008
TIME: 11:30 - 2:30
LOCATION: Jefferson Parish Library 4747 West Napoleon Avenue in Metairie between Clearview and Transcontinental
COST: No charge; free lunch will be provided to GNO ISACA members
RSVP: Please send RSVP to vice-president@isaca-nola.org

Event: ISACA: Crash Course in Cryptography – The Art of “Secret Writing”
Thursday - June 12, 2008, 11:30 am
Location: 4747 W. Napoleon Ave., Metairie, LA 70001 in the Jefferson Room (right side parking lot).
Duration: 2 hours

Hello Everyone!

Our next meeting is a little over a week away! I'm sorry for the late notice but the originally scheduled speaker cancelled late last week. Chris Davis, who works for Forescout, has kindly offered to come this month instead of in August. He is a dynamic speaker, he has given presentations to the Dallas ISACA chapter (they regularly have hundreds at their meetings) and they have raved about him. From talking and emailing with him, he's a very warm, kind, funny guy who should be fascinating to listen to.

Please come next Thursday! NOTE NEW LOCATION! MEETINGS ARE NOW B.Y.O.L. (bring your own lunch--see below)

TOPIC: Crash Course in Cryptography – The Art of “Secret Writing”

SPEAKER: Chris Davis, CISA, CISSP, has trained and presented in information security, auditing, advanced computer forensic analysis, and hardware cryptographic design for corporate and government organizations and conferences. He is the author of three books: IT Audits: Using Controls to Protect Information Assets, Anti-Hacker Toolkit, 3rd Ed., and Hacking Exposed: Computer Forensics, and is a contributing author to other books and publications.

His contributions include projects and presentations for Gartner, Harvard, SMU, McCombs, SANS, BlackHat, 3GSM, and ISACA. He has enjoyed positions at McCombs Business School, Cisco Systems, E-Forensics, Microsoft Technology Center, Texas Instruments, and currently ForeScout Technologies. He holds a Bachelors Degree in Nuclear Engineering from Thomas Edison, and a Masters in Business from the University of Texas at Austin. Chris was a US Navy submariner, and served on the deep dive Submarine NR-1 and the ballistic missile OHIO class USS Nebraska, SSBN 739 (Go Big Red!).

TIME: 11:30-2:30pm, Thursday, June 12, 2008

CPE: 3

NEW LOCATION: All luncheon meetings for the rest of the year will be at the East Bank Regional Library at 4747 W. Napoleon Ave., Metairie, LA 70001 in the Jefferson Room (right side parking lot).

COST: No charge

FOOD: Bring your own lunch, or, Chateau Coffee Café in the Library lobby has drinks, salads and sandwiches for sale.

RSVP: All are welcome, bring a guest. Please RSVP so we have sufficient materials and seating for all attendees. ISACA members, who respond to this email before noon, June 11, will have free lunch provided for them.

ABSTRACT: The Art of “Secret Writing” – Cryptography – has been around for more than 3000 years, destroying nations, saving lives, and protecting our deepest secrets. Come join us on a journey to understand the fundamental truths you need to know about this ancient art that incredibly impacts our lives today. After a brief history of development of cryptographic systems, we will work real-world problems, discuss very cool technologies, with an open question and answer session..

CDs will be available with the speaker’s personal favorite tools and whitepapers. The core material of this discussion covers the fundamentals of CISSP Domain 04 – Cryptography.

Join ISACA: Membership benefits include 50% discount on SANS@Home courses; discounts on CISA, CISM, CGEIT, course materials, books and exams, eligibility for door prizes, and free lunch if you register before noon of the day before the regular meeting.

IS THERE A FUTURE TOPIC YOU WANT TO HEAR ABOUT? Please tell me!

Event: ISACA NOLA's next meeting on May 8th
Thursday - May 08, 2008, 11:15 am
Location: Cafe East, 4628 Rye St, Metairie, LA 70006
Duration: 2 hours

SACA NOLA is pleased to announce our next Annual General Meeting (AGM) on May 8. Robert Cerasoli, New Orleans Inspector General and ISACA member, will present on "Ethics in Public Service" and provide us an update on the progress of his office. The press release is attached to this email.

Date: Thursday May 8, 2008
Location: Cafe East, 4628 Rye St, Metairie, LA 70006
Time: 11:30am registration, presentation 12pm - 2pm
Speaker: Robert Cerasoli
Topic: Ethics in Public Service and an update on the progress of his office
RSVP: by 5pm Monday May 5, 2008
Cost: $20 member, $25 non-members

The AGM in May marks the end of our year. We appreciate the support you provided for the chapter during the last year, and without you, we would not be able to provide monthly events. In addition, we would not be able to organize the events if it weren't for the chapter's volunteers. At the May AGM, we will elect the 2008-2009 board. Please consider volunteering. Positions are available for all levels of involvement. If you're interested, send me an email or call 504-569-3463.

Contact John at johnpouey@fidelityhomestead.com to attend.

Event: SANS Speaker!
Thursday - April 10, 2008, 8:30 am
Location: Tulane
Duration: 3 hours

Seth Misenar, SANS instructor and security team leader at Blue Cross Blue Shield of Mississippi, will discuss the importance of log management and the foundation of a strong logging infrastructure. Nearly every major regulation affecting cyber security demands or implies the need for continuous logging and effective log management.

Mr. Misenar's background includes penetration testing, vulnerability assessments, regulatory compliance efforts, security architecture design, as well as physical and network consulting for Fortune 100 companies. This session will cover topics from the SANS Perimeter Protection in Depth course. Please join us for this wonderful opportunity.

TOPIC: Log management
SPEAKER: Seth Misenar
DATE: April 10, 2008
TIME: Registration begins at 8:30am; presentation 9am - noon- 3 CPEs
COST: FREE - Breakfast and lunch will not be provided
LOCATION: Tulane University Elmwood Campus 800 E. Commerce Road, Harahan, LA 70123
RSVP: Please reply to this email to reserve your seat as space is limited.

EMAIL: johnpouey@fidelityhomestead.com

Event: Planning meeting
Thursday - February 21, 2008, 1:00 pm
Location: CCCC
Duration: 1 hour

1. Take a look at the new laptop.
2. Plot out ideas for our next set of meetings.

Directions:

From I-12:
1. Exit Sherwood Forest Blvd North Bound
2. Left on to Florida Blvd
3. Right onto Sharp Rd
4. Right onto Red Oak Drive

Building is on corner of Sharp and Red Oak, use east side door.

From Corporate Blvd:
1. Travel east on corporate blvd, cross airline and continue on to old hammond
2. Turn north (left) onto Sharp Rd.
3. Continue on Sharp across Florida Blvd.
4. Right onto Red Oak Drive

Building is on corner of Sharp and Red Oak, use east side door.

From the Mall of Louisiana
1. Travel North/East on Bluebonnet, cross Airline Hwy and continue on Coursey
2. Turn North/Left onto Cedar Crest
3. Continue on Cedar Crest to Old Hammond, continue north on
Sharp Rd.
4. Continue on Sharp across Florida Blvd.
5. Right onto Red Oak Drive
Building is on corner of Sharp and Red Oak, use east side door.

http://maps.google.com/maps?f=q&hl=en&geocode=&q=10120+Red+Oak+Drive,+Baton+R
ouge+LA&sll=37.0625,-95.677068&sspn=48.106236,81.738281&ie=UTF8&z=17&iwloc=ad
dr

10120 Red Oak Drive - 70815.
Enter on east side of building

Event: Technical Class
Thursday - January 17, 2008, 1:00 pm
Location: TBD
Duration: 1 hour

Using Group Policies to manage Windows security & restriction policies. Application methods, tools, troubleshooting and a brief look at software installation services.

By Mark Lappin/LMFJ

Lee Michaels Jewelers, Inc.
11314 Cloverland Avenue
Baton Rouge, LA 70809
Phone: 225-291-9094

Event: Earn 3 CPEs at the ISACA-NOLA meeting on Jan. 10
Thursday - January 10, 2008, 11:00 am
Location: New Orleans
Duration: 3 hours

Members of ISACA and the security, IT, and audit communities,

ISACA-NOLA's next general meeting will be presented by SANS instructor John Strand. His presentation will be based on the Hacker Techniques, Exploits, and Incident Handling course he will teach at SANS New Orleans in January 2008. SANS offers current, relevant, and well respected IT-related training. Our offer is an excellent way to sample one of their courses at a reasonable cost of $20! Also, we will provide lunch from Semolina's, three CPE hours, and the chance to win a door prize!

TOPIC: Hacker Techniques, Exploits and Incident Handling. The full course is available from SANS

AUDIENCE: IT Managers, IT technical staff, auditors, IT security staff, incident handling team members, penetration testers

DATE: Thursday, January 10, 2008
COST: $20.00 (lunch is included)
TIME: 11am (registration and networking), presentation 11:30-2:30pm (3 CPEs)
LOCATION: Postlethwaite & Netterville 2324 Severn Ave., Suite A, Metairie, LA 70001
RSVP: by 5:00pm Tuesday January 08, 2008 through PayPal at http://www.isaca-nola.org/Events_Services/events.htm

Event: Technical Class
Thursday - December 20, 2007, 1:00 pm
Location: Puryear IT - See Description for Address
Duration: 1 hour

Using Group Policies to manage Windows security & restriction policies. Application methods, tools, troubleshooting and a brief look at software installation services.

By Mark Lappin/LMFJ

Puryear IT, LLC
144 Maximilian St
Baton Rouge, LA 70802

Event: CANCELED: ISACA New Orleans - Issues in Encryption
Thursday - December 13, 2007, 11:30 am
Location: Cannon's at 4141 St. Charles
Duration: 1.5 hours

THIS CLASS IS CANCELED

*****
Topic: Issues in Encryption
Speaker: Chris Davis (Forescout Inc, Dallas Texas, and author of "IT Auditing: Using Controls to Protect Information Assets")
Date: Thursday, December 13, 2007
Time: Networking and Registration: 11:30-12:00
Luncheon: 12:00
Location: Cannon's at 4141 St. Charles (Free parking is available behind the restaurant)
Cost: $35
Registration link: http://www.isaca-nola.org/Events_Services/events.htm

Event: Technical Class
Thursday - November 15, 2007, 1:00 pm
Location: TBD
Duration: 1 hour

Part 2 of our Probe/Hardening Class.

Harden a LAMP server based on the probing results in Class 1/October.

Location:

Sparkhound
9352 Interline Drive
Baton Rouge, LA 70809

Event: Technical Class
Thursday - October 18, 2007, 1:00 pm
Location: Puryear IT
Duration: 1 hour

This meeting has NOTES. [View them].

Location: Puryear IT, 144 Maximillian St. Baton Rouge, LA 70809.

This will be our kick-off class, which we will have each month. Our plan is start off with a series dedicated to learning how to probe and harden your servers. We'll start off with:

Oct - Probe/scan for ports and vulnerabilities
Will scan: LAMP, IIS, SQL Server, MySQL
Nov - Harden LAMP
Dec - Harden Windows IIS
Jan - Harden Windows SQL Server and Linux MySQL

Event: Planning Meeting
Wednesday - September 12, 2007, 11:30 am
Location: Las Palmas on Jefferson
Duration: 1 hour

We will be having a "let's get this chapter going!" planning meeting Wed, 9/12/2007, at Las Palmas on Jefferson Highway. If you want to just pop in that's great! Just ask for the "ISSA".