1. Newsletter
Winter 2012
In This Issue:
 Board Update
 New Members
 Chapter Member in Focus
 CobiT 5 for Information Security
 New ISACA Resources
 ISACA Social Media
 Oceania CACS 2012 Conference
 Sponsorship & Exhibition Opportunities
 Calendar of Upcoming Events
ISACA Auckland Chapter Board 2012-2013
 President: Shahvez David
 Vice-President: Liz Wickham
 Immediate Past President: Chandan Ohri
 Treasurer: Vernon Lomberg
 Secretary: Gillian Gainsford
 Board Member Philip Webster
 Academic Relations: Brian Cusack
 Education & Programs: Philip Whitmore
 CISA coordinator: Maher Al-Khazrajy
 CISM coordinator: Walter Manyati
 CEGIT & CRISC coordinator: Matthias Kraft

2. © Copyright ISACA Auckland Chapter 2
Board Update…
Shahvez David, President, ISACA Auckland Chapter
Greetings!
This update is dedicated to the achievements of three of our chapter members in recent times. The first such achievement is that of Nalin Wijetilleke, a member of our chapter who is the recipient of the 2012 Harold Weiss Award for Outstanding Achievement. This award was instituted in 1985 to recognise individuals for dedication to the IT governance profession. It is for achievement that far exceeds the norm. Nominees for the award are provided by ISACA’s general membership and based on input from ISACA’s international president and the official nominee is put forward to the ISACA board of directors for final approval. The below is an excerpt about Nalin from ISACA HQ.
“Nalin has been a leading role model for the ISACA community in Asia… he has always strived to reach out to other chapters and members to move the association forward. Nalin’s knowledge in IS audit, assurance and governance, along with his competencies in project management, business continuity and information security has and will continue to be an inspiration for current and future ISACA members. ….His experience, coupled with a strong professional background has helped him to deliver results, exceeding key stakeholder expectations. He is not only a mentor, but also a friend to the professional community he serves...”
Nalin, on behalf of the ISACA Auckland Chapter, Congratulations!
The achievements of two other chapter members have got international acclaim and bring repute to our Chapter on the International stage:
 Nanyi Gong, who tied for the highest score in the world on the December 2011 CISA examination. Nanyi this achievement brings the sincere congratulations of the ISACA Board of Directors, the CISA Certification Committee and the international headquarters staff, and last but not the least your local chapter.
 David Kruger, who was awarded in Oceania for his achievement in the CGEIT examination. Well done David, congratulations on behalf of ISACA.
The Board hopes that the lunch time sessions in the last four months, including our first annual CIO Panel have provided value to the membership. We aim to bring an international speaker each year to our monthly sessions, last year we had the ISACA International President, Ken Van Der Wal in September. This September, we are fortunate to have ISACA International Vice President and international authority on IT Governance, Rob Stroud presenting to us. This will be followed in October by our first annual Head of Internal Audit panel, please do attend these events. Another major event is the Oceania 2012 CACS conference to be jointly hosted by the Wellington and Auckland ISACA Chapters at Te Papa from 10 -12 September. I encourage you all to attend.
Regards,
SJDavid

3. © Copyright ISACA Auckland Chapter 3
New Members…
The Auckland Chapter would like to welcome the following new members.
Mr. Dirk Rossouw, CISA CISM
Mr. Philip Michael Selway
Mrs. Thavamany Thavarasn
Mr. Shaneel Naidu
Mr. Jeffrey Nowak
Mr. Dieter Hermann Rohm
Ms. Lizel Elmien Foord
Chapter Member in Focus Q&A…
Nanyi Gong, CISA, IT Manager, Laidlaw College, shares his experiences as an ISACA Auckland Chapter member.
Q. How does ISACA benefit you in your professional life?
A. I quite like ISACA’s tagline: “Trust in, and value from, information systems”. I think this truly explains the roles and responsibilities of most of us which not only require us to drive more value from our IT investment but also effectively manage the risk at the same time. I find the information and resources from ISACA to be very valuable in fulfilling and enhancing this mission.
Q How does it feel to be co- ranked No 1 in the world for passing the CISA examination?
A. It was such a pleasant surprise when I received the email from ISACA! I’m very grateful for the opportunity as well as the help and support received from our local chapter.
Q. What do you think sets your chapter apart from other professional organisations in your area?
A. The quality of our monthly meetings. Not only the presentations and the speakers are great, the food is superb too!

4. © Copyright ISACA Auckland Chapter 4
Q. What is the most important benefit you get from ISACA?
A. The resources from ISACA on the topics of IS assurance are particularly beneficial to me. Plus engagement with the Auckland chapter and the chapter monthly meetings.
Q. What is your best piece of advice for those considering taking the CISA Exam?
A. Based on my experience and background, I feel the first thing is to identify any knowledge gaps you may have in terms of the CISA job practice domains, this will help create a more tailored study plan and approach. Make sure you get the CISA Review Manual, CISA Review Questions, Answers & Explanations Manual plus the supplement version of the year from ISACA and centre your study around these materials. Also don’t forget to attend our chapter’s CISA exam prep sessions, as I have found this to be very helpful. I want to take this opportunity to thank again Maher, Shahvez, Gillian, Walter and others for the time and effort put into organizing and running this!
COBIT 5 For Information Security…
Information security is challenging, often due to limited resources, time and knowledge of what information is „out there‟, let alone to what level it should be secured. As you are hopefully aware COBIT 5 for Information Security has just been released and is available on the ISACA website here for a small cost of US$35 (delivered via PDF although a book is available).
It is a Professional‟s guide, providing detail and practical guidance on how to successfully manage the information life cycle. The guide discusses enablers for implementing Information security in practice, and expands on the COBIT 5 processes where relevant to Information Security. The framework does not seek to replicate or remove the need to follow best practice frameworks such as NIST, (ISC)2, or ISO, but rather incorporates their principles within the document to provide a somewhat “Umbrella” like framework.
If you are within Information Security, Audit, or Governance having a read will be beneficial as there is no way you can avoid Information, and we can all do better at managing it! For more information on COBIT 5, ISACA has produced a number of webinars all worth 1 CPE for ISACA members that you can watch at your leisure. • A COBIT 5 Overview • 5 Essential Facts about COBIT • COBIT 5 for Information Security: Protect and Drive Enterprise Value
New ISACA Resources Available…
ISACA has issued the following new deliverables available on the ISACA web site
 Calculating Cloud ROI: From the Customer Perspective
 Virtualization Desktop Infrastructure (VDI)
 Incident Management and Response
 IPv6 Security Audit/Assurance Program

5. © Copyright ISACA Auckland Chapter 5
 Guiding Principles for Cloud Computing Adoption and Use
 Security, Audit and Control Features Oracle PeopleSoft, 3rd Edition
Have You Joined the Conversation in Social Media?
Have you Joined the Conversation in Social Media?
ISACA members can now maximise the value of their ISACA membership by joining the thousands who currently engage with ISACA via social media. In today‟s information age, it is important to maintain relationships; ISACA has a number of online forums. The ISACA Knowledge Center is active with online discussions and relevant guidance. More than 5,600 people view photos and videos on the ISACA Facebook page, and more than 6,800 people follow ISACA‟s Twitter feed and share their thoughts. Thousands more connect with peers in ISACA‟s LinkedIn groups, including ISACA (Official), COBIT (Official), ISACA Educational Events and four certification groups. We encourage you as ISACA members to communicate with others and get more involved with social media channels offered by ISACA.
Oceania CACS 2012…
The Wellington and Auckland ISACA chapters are proud to be hosting the 2012 Oceania conference. We are positive the combination of thought-provoking speakers, a theme focused on "embracing uncertainty and delivering value in turbulent times" and Wellington serving as a fantastic travel destination will provide a valuable and entertaining conference.
Oceania CACS 2012 will take place at Te Papa (Museum of New Zealand) from Monday 10th September 2012 to Wednesday 12th September 2012. If you have not yet registered please do so, as this will be the only ISACA CACS conference in New Zealand for the next four years. A great opportunity to get the CPE hours. Link to the registration page http://www.oceaniacacs2012.org/page/7/Registration.aspx
Sponsorship and Exhibition Opportunities…
The ISACA Auckland chapter offers a quality vehicle for sponsors to share their message and promote their brand. At the same time it offers valuable networking within the community with both tangible and intangible benefits, at our monthly and special events. The Auckland Chapter is offering some new exciting sponsorship opportunities throughout 2012. These should be seen as great opportunities to provide real value to both our sponsors and our members. If you are interested, please contact Shahvez David on +21 834 972.

6. © Copyright ISACA Auckland Chapter 6
Upcoming Chapter Events…
15 August 2012
Session on Cloud Security Risks and their Management By Matthias Kraft, Manager IT Risk & Assurance, EY.
13 September 2012
Special Session by International Governance Expert and ISACA Vice President Mr. Robert Stroud.
Robert Stroud serves as VP and as Service Management, Cloud Computing and Governance Evangelist at CA Technologies. Robert also serves as an International vice president of ISACA, is part of the Framework committee and was the former chair of the COBIT Steering Committee. Robert also serves on the itSMF International Board as Treasurer and Director Audit, Standards and Compliance. An industry veteran, Robert has significant practical industry experience and is a recognized industry thought leader, speaker and leader. Robert is a global authority on governance with multiple contributions to industry knowledge in multiple publications including COBIT 4.0, 4.1 and COBIT 5, Guidance for Basel II and also a former chair of COBIT Steering Committee. Stroud is considered a global authority in service management with his experience, knowledge and leadership. He has provided strong leadership with the ITIL Update Project Board, ITIL v3 Advisory Group, ITIL v3 mentor and reviewer and the itSMF movement in the US and Internationally and has contributed to several titles on ITSM. Prior to CA Technologies, Stroud spent more than 15 years in the finance industry successfully managing multiple initiatives in both the IT and retail banking sectors related to security, service management and process governance.
17 October 2012
First Annual Heads of Audit Panel Luncheon.
The panel will comprise of three Heads of Audit from some of New Zealand‟s Top Companies, and will provide insights about the latest trends, thinking, expectations and future for Internal Auditors. There will be opportunity for attendees to ask questions of the Panel.
Please note: All dates, venues, topics may be subject to change due to unforeseen circumstances. ISACA Auckland Chapter will strive to inform you as soon as possible of any such changes. Details of sessions will be provided via the monthly invite.