The Mistakes QSAs Make © Branden Williams. All rights reserved. CONFIDENTIAL Presnted by: And other ways to get a migrane Branden R. Williams, CISSP, CISM Notably: FORMER QSA

Yep, some of these are boneheaded. © Branden Williams. All rights reserved. CONFIDENTIAL

Mistake #1 © Branden Williams. All rights reserved CONFIDENTIAL Making Up Requirements

Making Up Requirements © Branden Williams. All rights reserved. CONFIDENTIAL

Train the Trainer? © Branden Williams. All rights reserved. CONFIDENTIAL

Assessors like to be Security Pros © Branden Williams. All rights reserved. CONFIDENTIAL NOT Auditors

Mistake #2 © Branden Williams. All rights reserved CONFIDENTIAL Disagreeing over Comp Controls

Disagreeing over Comp Controls © Branden Williams. All rights reserved. CONFIDENTIAL

Mistake #3 © Branden Williams. All rights reserved CONFIDENTIAL QSA is Drunk with Power

QSA is Drunk with Power © Branden Williams. All rights reserved. CONFIDENTIAL

Mistake #4 © Branden Williams. All rights reserved CONFIDENTIAL The Buddy of the Executive

The Buddy of the Executive © Branden Williams. All rights reserved. CONFIDENTIAL

Mistake #5 © Branden Williams. All rights reserved CONFIDENTIAL The FNG

The FNG © Branden Williams. All rights reserved. CONFIDENTIAL

3-day ground school program © Branden Williams. All rights reserved. CONFIDENTIAL

Imagine 3-day ground school © Branden Williams. All rights reserved. CONFIDENTIAL Oops

The FNG © Branden Williams. All rights reserved. CONFIDENTIAL The more prepared you are, the less of an issue this is.

Mistake #6 © Branden Williams. All rights reserved CONFIDENTIAL Focusing on Q/A not TCE

Focusing on Q/A not TCE © Branden Williams. All rights reserved. CONFIDENTIAL

Mistake #7 © Branden Williams. All rights reserved CONFIDENTIAL The Threat of the Future

The Future Threat © Branden Williams. All rights reserved. CONFIDENTIAL

Questions? © Branden Williams. All rights reserved. CONFIDENTIAL

General Disclaimer This document is not to be construed as a promise by any participating company to develop, deliver, or market a product. Branden R. Williams reserves the right to revise this document and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. Unpublished work of Branden R. Williams. © 2010 All rights reserved. This work is an unpublished work and contains confidential, proprietary and trade secret information of Branden R. Williams. Access to this work is restricted to Branden R. Williams and any employee who have a need to know to perform tasks within the scope of their assignments. No part of this work may be practiced, performed, copied, distributed, revised, modified, translated, abridged, condensed, expanded, collected or adapted without the prior written consent of Branden R. Williams. © 2010 Branden Williams. All rights reserved. CONFIDENTIAL

The Mistakes QSAs Make © Branden Williams. All rights reserved. CONFIDENTIAL Branden R. Williams, CISSP, Former QSA Click to edit Master text styles [email_address] blog.brandenwilliams.com Fin.