ISACA@India Newsletter

23
Table Of Contents (A quarterly newsletter from ISACA India Growth Task force (IGTF) and all ISACA chapters in India) ISACA @ India Foreword ...................................................................................................... 1 IGTF Activities From July to September 2014 ........................................ 2 ISACA Direct Coverage July to September 2014 .................................... 3 Bangalore Chapter ...................................................................................... 6 Cochin Chapter ............................................................................................ 7 Chennai Chapter.......................................................................................... 8 Coimbatore Chapter ................................................................................... 9 Hyderabad Chapter ................................................................................... 10 Vijayawada Chapter .................................................................................. 11 Mumbai Chapter ........................................................................................ 12 New Delhi Chapter.................................................................................... 13 Pune Chapter ............................................................................................. 14 CSR Initiative from ISACA Pune Chapter ............................................. 16 Computer Security Awareness Month-2014 at Symbiosis Center for Information Technology (SCIT), Pune .................................................... 17 How Can You Help ISACA Grow in India? ............................................. 18 ISACA Chennai Conference 2014 .......................................................... 19 October 2014 Volume 3

Transcript of ISACA@India Newsletter

Table Of Contents

(A quarterly newsletter from ISACA India Growth Task force (IGTF) and all ISACA chapters in India)

ISACA @ India

Foreword ...................................................................................................... 1

IGTF Activities From July to September 2014 ........................................ 2

ISACA Direct Coverage July to September 2014 .................................... 3

Bangalore Chapter ...................................................................................... 6

Cochin Chapter ............................................................................................ 7

Chennai Chapter.......................................................................................... 8

Coimbatore Chapter ................................................................................... 9

Hyderabad Chapter ................................................................................... 10

Vijayawada Chapter .................................................................................. 11

Mumbai Chapter ........................................................................................ 12

New Delhi Chapter .................................................................................... 13

Pune Chapter ............................................................................................. 14

CSR Initiative from ISACA Pune Chapter ............................................. 16

Computer Security Awareness Month-2014 at Symbiosis Center for

Information Technology (SCIT), Pune .................................................... 17

How Can You Help ISACA Grow in India? ............................................. 18

ISACA Chennai Conference 2014 .......................................................... 19

October 2014 Volume 3

Foreword

Page 1

by the task force include

developing trainings sessions

with knowledge partner

Institute for Development and

Research in Banking Technology

(IDRBT); joint initiatives with

Computer Society of India

(CSI); joint initiatives with other

professional organisations such

as the Institute of Chartered

Accountants of India (ICAI) and

The Institute of Cost

Accountants of India (ICAI);

and articles written by task

force members. Task force

members have also been a part

of several key functions

organised by the target

stakeholders, including RBI,

ICAI and others.

On the other hand, the

chapters have also been busy

with various activities. These

activities include COBIT 5

training, workshops,

conferences, chapter/

programme committee

meetings and more. The

subsequent sections of this

newsletter attempt to map the

activities of the chapters under

the broad objectives under

which the IGTF is set up.

The excellent work completed

by various chapters and the task

force members is highly

commendable, and I am sure it

will greatly benefit the ISACA

community and the industry.

The ISACA® India Growth

Task Force (IGTF) is a body of

persons formed with an

objective to create an apex-

level single body to represent

ISACA members across India

with government, regulators,

industry and other like-minded

professional organisations, in

the space of IS audit, IT

governance, IT risk

management and IT security. It

is practically difficult for a

single ISACA chapter to

represent ISACA professionals

spread across the country with

government and regulators

such as Reserve Bank of India

(RBI), Securities and Exchange

Board of India (SEBI), Insurance

Regulatory and Development

Authority (IRDA), Company

Law Board and other key

government agencies. While

the task force provides

thought leadership for various

ISACA professionals the real

grass-root efforts come from

the chapters. To be effective,

the chapters and the task force

need to work in unison

towards the betterment of

ISACA professionals, both in

terms of quantum leap and

qualitative enrichment.

ISACA@India embodies the

spirit of cooperation and

contribution amongst the

various chapters and IGTF.

Most of the chapters are in the

process of a change in

leadership, welcoming new

chapter leadership to the

ISACA global umbrella. This

third volume of the newsletter

highlights various activities of

the chapters. I am confident

that the new leadership teams

at each chapter will carry on

the good work—if not, better

it.

One of the key projects

undertaken by the task force is

publication of a COBIT 5-based

guidance to provide an

objective assurance to CXOs

in the industry to state

assertions on internal controls

in their respective annual

reports to stakeholders. This

has been achieved by mapping

the regulatory requirements

stipulated in the new

Companies Act 2013 to

various elements of the COBIT

5 framework. Needless to

reiterate, COBIT 5 provides

apt solutions to the challenges

of CXOs to comply with

onerous regulatory

requirements. This good

initiative would culminate into

interesting webinars,

publications, press releases,

and other strategic and tactical

collaborative initiatives with

various Indian institutions.

Other key projects undertaken

S. V. Sunder Krishnan

Chairman– ISACA India

Growth Task Force

Back To Index

Avinash W. Kadam

Advisor, ISACA IGTF

Major activities during this quarter

ISACA India Growth Task Force had a face-to-face meeting for its members on 25 July 2014, a day prior to

ISACA India Conference 2014 (IIC-2014) in Mumbai. Various topics were discussed including exciting

opportunities offered by the new mantra from the Indian Prime Minster: ‗Less government, more

governance‘, and the high priority given to IT. Should we also say, to ‗IT governance‘? IGTF members will be

contacting chapter leadership for seeking ground-level support for various activities from time to time.

‗Guidance to Validate Internal Control Assertions in Indian Financial Reporting‘ was published and is now

available at www.isaca.org/topic-india.

This important guidance document provides assistance with the New Companies Act 2013. It can help you

to improve governance and risk management integration, reduce the cost of non-compliance and enhance

user outcomes. Companies now need to assert that internal controls over financial reporting are effective

and reliable. In the event there are any qualifications, the same needs to be disclosed to the stakeholders

who rely on financial statements.

A webinar is planned for1 October 2014 to give insight into the ‗Guidance to Validate Internal Control

Assertions in Indian Financial Reporting‘ publication.

Two major conferences were held during this period (More details are given in the chapter coverage.):

ISACA India Conference IIC-2014 in Mumbai on 26 and 27 July with theme ‗GRC 2.0 for SMAC‘

Bangalore Chapter Annual Conference on 18 and 19 July with the theme ‗Data Privacy—GRC

Challenges‘

COBIT 5 programmes—There seems to be a growing shortage of COBIT 5 experts in the country. This

view was expressed by participants of the COBIT 5 Implementation programme held at Mumbai from 18-20

September 2014. These participants were from two major Indian banks and one International bank and had

the responsibility to implement COBIT 5 in their banks. There were some consultants who had assignment

for COBIT 5 implementation in foreign locations.

The new publication ‗Guidance to Validate Internal Control Assertions in Indian Financial Reporting‘ as well

as ‗RBI Guidelines Mapping With COBIT 5‘ published in 2013 and ‗Securing Sensitive Personal Data or

Information Under India‘s IT Act Using COBIT 5‘ published in 2012 heavily depend on the availability of

practitioners with good knowledge of COBIT 5.

Chapters are urged to organize more COBIT 5 programmes to meet this growing demand.

The number of COBIT 5 programmes conducted by each chapter to date are as follows:

Chapter COBIT 5 Foundation COBIT 5 Implementation COBIT 5 Assessor

Mumbai 3 1 Planned for 9-11 October

Bangalore 2

Chennai 2

Pune 1

Kolkata 1

India Growth Task Force Report

From July to September 2014

Page 2

Back To Index

The online web-based training programme, currently being conducted by the ISACA Mumbai Chapter for

ICAI members is proving to be successful.

Congratulations to Pune Chapter

The Pune Chapter has achieved 10% growth during the year 2014. There is no secret to this growth. The number of

activities the chapter offers and the whole-hearted participation of its members have directly resulted in this growth. In

COBIT 5 parlance, the Pune Chapter has met its stakeholders‘, i.e., members‘, needs by sheer good governance. Please

read the Pune Chapter report and you will be convinced.

Congratulations to Sandeep Godbole (President, ISACA Pune Chapter) and his team for this great achievement.

Page 3

1

Title: Smart Phones More Vulnerable To Cyber Attacks

Publication: The New Indian Express

Summary: At the ISACA Bangalore chapter‘s annual conference Richard H L Marshall explains how smart

phones and tablets are more vulnerable to cyber attacks than traditional computing devices

URL / Clip: http://www.newindianexpress.com/lifestyle/tech/Smart-Phones-More-Vulnerable-To-Cyber-

Attacks/2014/07/23/article2344503.ece

2

Title: Indian insurers likely to collect Rs 427-cr online premium in FY15: R K Nair

Publication: Business Standard

Summary: At IIC 2014, Mr. R. K. Nair, Member – Finance & Investment, IRDA explains why insurers should

adopt newer technologies as soon as possible.

URL / Clip: http://www.business-standard.com/article/finance/indian-insurers-likely-to-collect-rs-427-cr-

online-premium-in-fy15-r-k-nair-114072600865_1.html

Back To Index

ISACA Direct Coverage -

July - September 2014

Page 4

Back To Index

3

Title: India‘s Browsing Habits

Publication: The Times of India -Education Times

Summary: Sandeep Godbole explains how growing internet usage results in newer opportunities and benefits

URL / Clip:http://www.educationtimes.com/ads/youthforchange/articlepage.aspx?

slug=324/201407142014071217145731c8d60f03/India%E2%80%99s-browsing-habits.html

Page 5

4

Title: Governance, Risk Management and Compliance cornerstone for SMAC

Publication: Enterpriser.in

Summary: Vaibhav Patkar talks about the key highlights of IIC 2014 and the functioning of ISACA in India

URL / Clip:http://enterpriser.in/?cat=3

5

Title: GRC 2.0 for SMAC - An ISACA event

Publication: Banking Frontiers

Summary: Event coverage showcasing the key highlights of IIC 2014

6

Title: Leveraging IT to Reinvent the Real Estate Industry

Publication: CXOtoday.com

Summary: Ajayesh Srinivasan of ISACA Bangalore chapter shares his insights on the role of IT in enabling the

real-estate sector to achieve transparency, cost benefits, streamlined project execution and customer focus.

URL / Clip: http://www.cxotoday.com/story/leveraging-it-to-reinvent-the-real-estate-industry/

Back To Index

Page 6

Highlights from the third quarter—July to September 2014

‗System Security Audit in BFSI‘ CPE meeting, presented by Nanda Mohan Shenoy, past president of the

Mumbai Chapter, was held on 13 July 2014 and attended by 50 participants. The methodology of

conducting an IS audit of banking, insurance, NBFC and mutual fund sectors was discussed. This

programme was provided free to those who registerd early for the chapter‘s Annual Conference.

The Annual Conference, which was themed ‗Data Privacy—GRC Challenges‘, was held on 18-19 July

2014 at TAJ Westend, Bangalore. A. S. Ramasastri, Ph.D., director, IDRBT, was the chief guest and

Richard H. L. Marshall, former advisor global cyber security, US Department of Homeland Security,

and current CEO at Secure Exchange Technologies LLC, was the keynote speaker. The conference

was attended by 188 delegates on the first day and 168 delegates on the second day. Various sessions

were addressed by industry experts.

The CISA 5-day review course for the September 2014 exam was held on 3,10, 17, 24 and 31

August2014 at the chapter office.

An introduction seminar on ISACA certification courses for the December 2014 exams was held on

21 August 2014 at office of SAP Labs India Pvt. Ltd., Whitefield Bangalore.

An introduction seminar for CISA and CISM was held at ICAI Mangalore on 13 September 2014 and

was attended by 28 participants. The seminar was interactive and provided a great deal of details

sought by the participants.

The COBIT 5 Foundation and CertificateExam2-day course was conducted on 13-14 September 2014

at Solitaire Hotel Bangalore. The course was presented by Ayilur Ramanath and attended by 18

participants with 19 taking the examination.

Plans for the fourth quarter—October to December 2014

A CPE session is planned for 27 September 2014 and will be presented by Vaidyanathan Iyer, head

global security practices at IBM India. The topic is yet to be finalised.

An introduction seminar on ISACA certification courses is planned for December (dates to be

determined) in both Bangalore and Mangalore.

A CPE session sponsored by Mclear SA is planned for the Hotel Matthan on 11 October 2014.

CISA, CISM, CGEIT and CRISC review classes for those members taking the December exams are

planned for October and November 2014.

Chapter Name Year of Formation Strength as of 31 August 2014

Bangalore Chapter, No.

138

1996 1057

President Vice President Secretary Treasurer

Natarajan K Ramasastry R.V. Raghu Ramachandra S,

Upadhya

Rajaraman

Chakkaraj

ISACA Bangalore Chapter

http://

www.isacabangalore.org/

17th Annual Conference 18th and

19 July 2014

Intro Seminar held at SAP Labs India

Pvt Ltd on 23 Aug. 2014

Intro Seminar Mangalore 13 Sept.

2014

System Security Audit in BFSI 13

July 2014

Back To Index

Page 7

Back To Index

The Core Committee of the chapter is involved in discussions with RV College of Engineering,

Bangalore to help them formulate an IS security course for undergraduate students. A meeting is

proposed during the quarter.

Annual General Body meeting will be held on 11 October 2014.

Chapter Name Year of Formation Strength as of 31 August 2014

Cochin Chapter, No.

176

2001 152

President Vice President Secretary Treasurer

Thrivikrama Vasudeva

Shenoy

Vivek Krishna Govind Shibu Sugathan B R Nath

Highlights from the Third Quarter – July to September 2014

Some members attended c0c0n 2014 (International Cyber Security and Policing Conference),

organised by The Kerala State Police, in Kochi on 22-23 August. A group photo taken on this occasion

is included.

Members from left to right in the photograph are: Deepesh, Sebin, Biju, Varghese, Shibu, Georgie and

Shaukath.

Plans for the Fourth Quarter – October to December 2014

Crash Course for CISA Exam December 2014

A one-day conference on information technology in the banking industry

ISACA Cochin Chapter

http://

www.isacacochin.org/

COBIT 5 Foundation Course 13

Sept. 2014

Cochin chapter members at

c0c0n conference 2014

www.isacakolkata.org

Highlights from the Third Quarter – July to September 2014

A half-day seminar was conducted on 13 September 2014 on ‗Security Audit in SAP Environment‘.

Two speakers delivered the sessions, which included up to 3 CPE hours: ‗Audit in SAP environment‘,

presented by Tapas Bhattacharya, CISA, and ‗Security Audit in SAP Environment‘, presented by

Chandak Banerjee, Accenture

Plans for the Fourth Quarter – October to December 2014

A half-day seminar on ‗IT General Controls & Sarabanes-Oxley Audit‘ planned for this quarter

Chapter Name Year of Formation Strength as of 31 August 2014

Kolkata Chapter

No. 165

2000 172

President Vice President Secretary Treasurer

Subrata Kumar Roy N.K. Ghoshal Gautam Basu Pankaj Karkarania

ISACA Kolkata Chapter

Page 8

ISACA Chennai Chapter Chapter Name Year of Formation Strength as of 31 August 2014

Chennai Chapter, No.

99

1986 1041

President Vice President Secretary Treasurer

Chitra Murali Jambunathan Mettur

Ramani Geetha Jayaraman Dakshinamurthy

Namasivayam

Highlights from the third quarter—July to September 2014

CISA review courses for the December examination are in progress. The review course will end with

a full mock test conducted in mid-November.

The ISACA Chennai is proud to be associated with Loyola Institute of Business Administration (LIBA)

for the last 9 years, conducting the Certificate Program in Information Security, Controls & Audit of

Business Information Systems. The course syllabus and model has been designed jointly by the

Chennai Chapter board members and LIBA. The chapter also provides faculty support for the course

Meetings in the monthly professional development program were conducted as follows:

20 September—‗How Secure Is the Cloud and the Virtualization Footprint‘, presented by

Arun Subramaniam of Verizon, during the chapter‘s monthly meeting, attracted more than

90 members.

16 August—‗Stringent IS and Regulatory Needs in the Life Sciences System Development

and Management‘, was presented by C. Pradeep, vice president, Take Solutions.

A special program with a panel discussion on ‗New Age Banking—Cyber Security Challenges‘ was held

on 15 July. The panel included Geogina Crundell, IS risk head, Bank of Queensland; Janak Akkiahraj,

head information security, Scope International; Kumar, CISO, Tamilnad Mercantile Bank; and R. Vittal

Raj, international vice president, ISACA.

The Annual General Meeting of the chapter was held in July. The reports both by the treasurer and

the secretary were discussed and adopted by the AGM. The ISACA International Headquarters

compliance requirements were also filed.

The chapter held four marketing road shows to propagate the message about ISACA and its

certifications in different campuses where many information technology companies have their offices.

Awareness about ISACA and its certifications was created. As a result of the success of these initial

road shows, the chapter plans to execute more such events in the future.

The Chennai Chapter works closely with other professional organizations to share knowledge on

information security, governance and risk management. Our board members are invited to speak in

such forums and these occasions present an opportunity to talk about ISACA, COBIT and ISACA

certifications. Programs that were conducted during this quarter were:

Joint program with The Institute of Internal Auditors (The IIA) on ‗Internal Audit Challenges in IT

and ITes Sectors‘ in Sep 2014

A conclave on ―Business Transformation Through Emerging Technologies‖ was conducted with

Madras Management Association on 15 September. The conclave was specially designed to reach

http://www.isaca-

chennai.org/isaca/index.jsp

Back To Index

Speaker and a section of the

audience during the August 2014

monthly meeting

View of the audience during the

Sep 2014 monthly meeting

Page 9

to the SME sector and build awareness about ISACA, its certifications and research. The topics

discussed in the seminar were: strategic considerations for cloud adoption, leveraging on mobility

from the manufacturing and service industry perspective, analytics, the client experience,

dependency of businesses on digital marketing, and strategic considerations for adopting SMAC.

ISACA Chennai supported the Institute of Directors during their Global Summit on Business

Excellence. The chapter put up a stall to inform delegates about ISACA, COBIT and certifications.

Plans for the Fourth Quarter – October to December 2014

Monthly professional development meetings are planned for the third Saturday of every month.

Discussions in progress for scheduling and conducting seminars and other programs in Chennai, either

by the ISACA Chennai Chapter or jointly with other organizations

The ISACA Chennai conference, themed ‗Cyber Security Intelligence‘, is scheduled for 27-29

November. Registrations are in full swing with the Super Saver Offer currently ongoing. The two day

conference and the pre-conference workshop comes at a very attractive price of only Rs.7000 for

members. Click here to register: http://www.isaca-chennai.org/isaca/eventreg.jsp?eventid=1504013.

ISACA Coimbatore Chapter Chapter Name Year of Formation Strength as of 31 August 2014

Coimbatore Chapter,

No. 155

1997 49

President Vice President Secretary Treasurer

Gayathri

Purushothamam

Manjula Narasimhan Bharath Kumar Bharath Kumar

Highlights from the Third Quarter – July to September 2014

The ISACA Coimbatore Chapter participated in the 9th annual CII Connect Event event held

on 7 August 2014. Confederation of Indian Industries (CII), Coimbatore zone is the second

largest zonal office of CII in the country and represents around 275 member industries from

various sectors. Connect Event of CII is the biggest such event of the IT sector in the

region. Through participation in this event, the chapter is able to reach to the more than

800 participants through the ISACA stall as well as through a 1-page write-up on ISACA

included in the event brochure.

The chapter has created a database of all local university and higher education institutions,

and they are contacted frequently to increase awareness. These institutions are also

included as standard invitees to all chapter events. As a first initiative, the chapter

conducted an awareness programme on job opportunities in security for academic in

Coimbatore on 27 September 2013. As a follow up, an awareness event was conducted for

students at Hindusthan College of Arts and Science, Ramakrishna College of Engineering,

Karpagam College of Engineering, Krishnammal College for Women, Nehru College of

Engineering, and Nehru College of Arts and Science.

The Chapter held its 16th Annual General Meeting (AGM) on 27 September 2014.

Plans for the Fourth Quarter – October to December 2014

CISA review courses for the December 2014 CISA exam are underway and mock tests are

planned for 2 , 9 and 16 November. Interested candidates can contact the chapter to

http://www.isaca.org/

chapters7/Coimbatore/

Pages/default.aspx

Back To Index

Page 10

Back To Index

register. The mock test will include 200 questions and be given over 4 hours in the morning

session. It will be followed by a discussion on the answers and reasoning in an afternoon

session.

Invitation to nonmembers residing in Coimbatore

The Coimbatore Chapter invites all ISACA members in the region to its chapter activities and

events. If you would like to receive an email on the activities and events of the chapter, please

drop a mail to [email protected] with following details expressing your interest.

Name

Organization

Email Id

Membership No

The Coimbatore Chapter offers monthly CPE events, review courses for the CISA examination

twice a year and periodic educational events.

ISACA Hyderabad Chapter Chapter Name Year of Formation Strength as of 31 August 2014

Hyderabad Chapter,

No. 164

2000 538

President Vice President Secretary Treasurer

Sivaram Aluri Alaram Vijaya Bhaskar - Anant Rao

Vijapurapu

Highlights from the Third Quarter – July to September 2014

The Annual General Meeting of members of the chapter was held on 27 September 2014, along with

elections for the chapter board of directors for the 2014-16 term. Following are the new board of

directors.

Photograph taken on this occasion shows (from left to right): A.Vijaya Bhakar, Mohan Acharya

Komandoor, C.Venkatram, Naga Kishore, T. Koteshwar Rao, K. Kameshwar Rao.

Plans for the Fourth Quarter – October to December 2014

Curtain Raiser Event planned to promote the December 2014 ISACA examinations

Study Circle Meets/Workshops planned for the ensuing quarter

http://isaca.org.in/

Hyderabad Chapter Managing

Committee 2014

President A.Vijaya Bhaskar

Vice-President C.Venkatram

Secretary Mohan Acharya Komandoor

Treasurer T.Koteshwar Rao

CISA Coordinator Naga Kishore

Board Member K.Kameshwar Rao

Page 11

Back To Index

ISACA Vijayawada Chapter Chapter Name Year of Formation Strength as of 31 August 2014

Vijaywada Chapter,

No. 200

2008 19

President Vice President Secretary Treasurer

Janardhan Polavarapu Venkata Ramanamurthy

Veeramachaneni

Rama Narayana

Kunda

Raghava Gupta

Garre

http://

www.isacavijayawada.

org/

Highlights for the third quarter—July to September 2014

The Annual General Meeting of members of the chapter was held on 27 September 2014, along with

elections for the chapter board of directors for the 2014-17 term. Following are the new board of

directors.

Plans for the fourth quarter—October to December 2014

Study Circle Meeting on Cloud Computing - Speaker Mr. Ramanarayan Kunda –

Date: 27 October 2014

Security Concerns in SME Environment - Speaker Mr. Lakshmana Rao Paruchuri

Date : 15 November 2014

Big Data - Basics - Speaker Mr. Ramanarayan Kunda

Date : 13 December 2014

DESIGNATION NAME

President Mr. Lakshmana Rao Paruchuri

Vice President Mr. Venkata Ramanamurthy Veeramachaneni

Secretary Mr. Rama Narayana Kunda

Treasurer Mr. Raghava Gupta Garre

Director Membership Mr. Srinivas Tammana

CISA Coordinator Mr. Seshadry Atkuru

Director Programs Mr. Durga Prasad Darisipudi

Advisor to the Board Mr. Eswara Rao Immaneni

Immediate Past President Mr. Janardhan Polavarapu

Page 12

Chapter Name Year of Formation Strength as of 31 August 2014

145 1996 1306

President Vice President Secretary Treasurer

Vaibhav Patkar Chandrakant K.

Shanbhag

Geetha Murugesan Pranay Kochar

ISACA Mumbai Chapter

http://

www.isacamumbai.org/

Highlights from the Third Quarter – July to September 2014

ISACA Mumbai Chapter hosted the ISACA – India Conference and its 18th Annual Conference on 26

and 27 July 2014. The conference was inaugurated by R. K. Nair, member, IRDA. The theme of the

conference was GRC 2.0 for SMAC. Nair also e-inaugurated the new ISACA Mumbai Chapter offices.

The conference included more than 150 delegates with 10 organizations sponsoring the event. Other

major highlights of the conference were the panel discussion on ‗Control V/S Convenience‘ and the

Security Quiz conducted by Nanada Mohan Shenoy, past president of the ISACA Mumbai Chapter.

The conference was preceded by a workshop held on 25 July, which included tracks on ‗Cloud

Security‘ and ‗Mobile Application Security‘. About 100 participants participated in these workshops.

On 26 July, the chapter awarded IT awards in two categories: IT security and IT governance. HDFC

Bank, Endurance Technologies, JWT and Capgemini received the IT Security Award, while SVC Bank

was given the IT Governance Award.

The COBIT 5 Implementation Course was held on 18-20 September. The first of its kind held in India,

the workshop was conducted by Avinash Kadam and attended by 11 participants from Mumbai and

Pune.

Chapter 2014-15 Managing Committee elections were held on 27 September. The adjoining

photograph shows the new Managing Committee.

From left to right: Krishnakumar Menon, Rajesh Nayak, Latha Sunderkrishnan, Subbalakshmi Shirali,

Vaibhav Patkar, president, Pranay Koachar, Rajendra Bhalerao, treasurer. Front Row: Shankar

Gawade and Geetha Murugesan, vice president

CISA and CISM review classes for the December 2014 exam are currently underway.

Web based, online sessions are currently being conducted for ICAI (Cost Accountants) based on

ISACA‘s Model Curriculum on Information Security.

Chapter meetings held :

19 July – Demystifying Web Application Firewalls by Mr. Manish Chasta and Mr. Rohan

Parakh attended by 38 members

2 August Cyber security Time to think beyond Maginot line by Mr. Ashit Dalal attended by

50 members.

Plans for the Fourth Quarter – October to December 2014

ISACA Mumbai Chapter to conduct the COBIT 5 Assessor Course from 8-10 October 2014.

The portfolio of the Managing Committee to be announced.

Plans to hold CRISC review classes in November

Conference Participants

ISACA India Conference - 2014

ISACA Mumbai Chapter

Managing Committee 2014-15

Mr. Avinash Kadam with the

COBIT 5.0 Implementation

participants

Andrew Calhoun giving award to

SVC Bank

Page 13

Chapter Name Year of Formation Strength as of 31 August 2014

New Delhi Chapter

No. 140

1997 680

President Vice President Secretary Treasurer

Rajendra Kathal Jagmohan Singh Sandeep Mondal Arvinder Pal Singh

Arora, CA

ISACA New Delhi Chapter

http://www.isaca.org/

chapters2/new-Delhi/Pages/

default.aspx

Highlights from the Third Quarter – July to September 2014

On 16 August 2014, the chapter conducted a CPE event, offering a total of 3 CPE hours in two

sessions: ‗Securing the Digital Enterprise‘, presented by Felix Mohan, who offered insights on history

of the Internet, how the Internet of Things is unfolding, SMACI controls and the emergence of the

Digital Risk Officer. ‗Computer Forensic—Procedure of Examination/Analysis‘, presented by Neeraj

Aarora, who discussed the examination/analysis of electronic evidence with special reference to its

admissibility in court of law in India.

The Indian Institute of Management – Lucknow ISACA Student Group, under the ambit of the New

Delhi Chapter, was inaugurated on 22 June 2014 at Lucknow. A photograph taken on this occasion is

included.

Plans for the Fourth Quarter – October to December 2014

The chapter is offering a CISA review course for December 2014 exam. If aspirants show interest, the

chapter will offer review courses for other CISM, CGEIT or CRISC as well.

The chapter regularly holds CPE seminars and plans to hold at least two events every month during

the final quarter of 2014. The details of the CPE events are uploaded on New Delhi Chapter website

(http://www.isaca.org/chapters2/new-Delhi/Pages/default.aspx).

Neeraj Aarora delivering his

presentation on Cyber Security

& forensics on Aug 16 2014

Neeraj Aarora receiving a

memento from Chapter

President Mr. Rajendra Kathal

on Aug 16 2014

Inauguration of the Student

Group at IIM Lucknow

IIM Lucknow- ISACA Student

Group: Active members

Page 14

ISACA Pune Chapter

http://isacapune.org/

Special events/newsworthy items

The ISACA Pune Chapter has attained a 10% growth rate in its membership as of the end of August

2014. Pune is the only Indian Chapter to have achieved this distinction in the present period.

The Pune Chapter participated in the evaluation and verification process for ISACA International

Headquarters‘ corporate social responsibility (CSR) initiative. Chapter representatives visited and

nominated Snehalaya, an institution located in Ahmednagar and Pune. The institution was selected for

funding by ISACA International Headquarters.

(An article on the above subject written by Sunil Bakshi is included in this newsletter)

The Pune Chapter conducted a CISM Training Course for a leading corporation based in Pune. The

2.5-day course was aimed at preparing the employees for the CISM exam. This provided a good

opportunity for furthering ISACA and the chapter at the corporation.

Highlights from the Third Quarter – July to September 2014

An ISACA Certification Awareness and Student Membership session was organized at Symbiosis

Centre for Information Technology (SCIT), Pune under the sponsorship of the Pune Chapter, Team

Matrix and SCIT ISACA Student Group (ISG). The main agenda of the session was to apprise students

about ISACA student membership and ISACA certifications, conduct interactive sessions with

students, and felicitation of successful candidates who cleared the June 2014 CISA and CRISC exams.

The session was a perfect platform prior to the student registration drive for ISACA membership to

be launched at SCIT on 4August 2014.

The chapter held a CGEIT orientation session over Web Ex, conducted by Upesh Parekh, for

candidates from different geographies. This was an important foray into e-learning. Besides India,

candidates participated from Canada, Pakistan and the US.

The chapter regularly conducts CISA Study Circle events. These events includes 15-16 4-hour

sessions, conducted on Sundays. Participants also attend 2 mock tests and 3-day crash course atthe

end. This activity is conducted twice a year, prior to the June and December exams. The current CISA

Study Circle program began on 20 July and will conclude the first week of November. Attendees are

encouraged to form and participate in study groups. The chapter provides a venue for study groups

comprising of 6-7 students for group discussions free of cost.

The Pune Chapter conducts an open seminar for professionals at large. This is intended for people to

highlight benefits of ISACA certifications and ISACA membership, and provide a platform for potential

candidates and members to interact with experts. Events like this have proven successful in promoting

Chapter Name Year of Formation Strength as of 20 September 2014

Pune Chapter, No. 159 1999 599

President Vice President Secretary Treasurer

Sandeep Godbole Hemant Joshi Varsha Bhide Ashwin

Gangakhedkar

Back To Index

Natraj Vaddadi conducting the

‘Train the Trainer’ session

Page 15

Back To Index

ISACA certifications in Pune. This event was conducted on 12 July 2014 and almost 100 professionals

attended the seminar.

To identify new trainers from our membership, the chapter conducted a Train the Trainer seminar on

29 June. The chapter invited members who expressed interested in conducting lectures and sessions

for chapter. Each participant was asked to deliver a lecture on a predetermined topic, which was

evaluated by an expert panel. Later, professional certified trainer Natraj Vaddadi guided attendees on

various simple techniques to improve their effectiveness. This program helped the chapter in

identifying new quality trainers, who will be part of upcoming training programs hosted by the chapter.

Home Lending Library Facility

The Pune Chapter has extended a home lending library facility to its chapter members as a

membership benefit. All chapter members are eligible to borrow from this library free of charge.

The chapter offered a lecture on 28 June on ‗Internet of Things‘. The lecture was conducted by

Narendra Dharm, director, automotive and manufacturing at Syntel. He discussed the technology

developments, implementation aspects, and assurance and security in this domain.

The chapter offered a lecture on 6 September on ‗Cyberforensics and Fraud Audit—Who‘s

responsible?‘. The lecture was conducted by Professor K. Subramanian, from New Delhi. His talk

detailed the importance of cyberforensics for the enterprises of tomorrow and the requirement

engineering for the same.

Item Writing Workshop

With a view to motivate and enable members to contribute certification exam items, the chapter

organized an item-writing on 9 August. Participants were introduced to the basics of item

writing. The workshop was conducted by Sunil Bakshi, a long-time item writer.

A digital forensics workshop was organized on 6 July. The workshop was conducted by Shweta

Chawla. Participants learned about digital forensic sapproach, tools and techniques.

Chapter Annual General Meeting and Elections of the new board

The chapter‘s Annual General Meeting and elections were conducted on 21 September. The new

Chapter Board comprises:

Hemant Joshi, president

Varsha Bhide, vice president

Shirish Padey, secretary

Aditee Sangoram, treasurer

Chandan Chourasia , program director

Shashikant Satbhai , academic relations director

Upesh Parekh, communication director

Anagha Apte, membership director

Vijay Bhalerao, education director

Vijay Upadhyay, certification director

Sunit Belapure, accreditation director

Pushkar Dhole, CISA director

Vijay Bhalerao addressing

students of SCIT

http://isacapune.org/

Page 16

Back To Index

Pune Chapter Initiates Donation

Under ISACA CSR Programme

In @ISACA,volume 6, 2014, published on 12 March 2014 (http://www.isaca.org/About-ISACA/-ISACA-

Newsletter/Pages/at-ISACA-Volume-6-12-March-2014.aspx#5), ISACA International Headquarters, as part of its

corporate social responsibility (CSR) initiative, appealed to members and chapters to suggest suitable

organizationsin need of assistance for social welfare. (More details are available on the ISACA website,http://

www.isaca.org/About-ISACA/Pages/Corporate-Social-Responsibility-Program.aspx.)

Shashikant Satbhai, board member of the ISACA Pune Chapter, applied to ISACA International Headquarters in

described format (http://www.isaca.org/About-ISACA/Documents/Request-for-Funding-for-Support-of-a-Cause-

fillable-form.pdf) for a non-profit organization Snehalaya(www.snehalaya.org). Snehalaya based in the city of

Ahmednagar is working to support children and women who are victims of sex trafficking and domestic

violence. Founded 25 years ago by Dr. Girish Kulkarni, Shehalaya has now spread across Maharashtra state,

primarily covering Ahmednagar, Pune, Aurangabad and Nashik districts. Snehalaya has established a rehabilitation

center that can accommodate more than 350 children. Unfortunately more than 120 children are HIV positive

and are further victims of social stigma associated with AIDS. Snehalaya with the help of many volunteers, like

Shashikant Satbhai, has been instrumental in rehabilitating many women and children over past 25 years.

ISACA International Headquarters reviewed the proposal and requested more details from Snehalaya, including

bylaws, financial statements and reports. ISACA then asked the Pune Chapter for further specifications

regarding the type of assistance required and how it will be utilized. The Pune Chapter board selected a panel of

2 members (Vijay Bhalerao and Achyut Ghare) to visit Snehalaya, afterwhich it was determined to suggest

establishing a computer lab in the Snehalaya school.

ISACA International Headquarters approved the request and transferred a sum of USD 5000 to Snehalaya‘s

account in September. Shashikant Satbhai and other Pune Chapter board members are working closely with

Snehalaya school management to establish the computer lab.

We suggest that other ISACA chapters should take this opportunity to impact and support non-governmental

organisations (NGOs).

Shashikant Satbhai

Initiator of the

programme

http://isacapune.org/

-Sunil Bakshi, Member IGTF

Page 17

Back To Index

Cyber Security Awareness Month –

2014 (CSAM’14)

Spreading the word on InfoSec -Vinay Hira & Swetha Sivakumar

Symbiosis Centre of Information Technology (SCIT), Pune

MBA-ITBM

On 2October, 2014, SCIT celebrated cyber security awareness month hosted by the members of Team

Matrix in association with ISACA. The Team Matrix members in SCIT embarked on the goal of doing their

share for spreading awareness on Information Security across various institutions and corporations. And 5 years

since, the legacy continues. In all grandness CSAM‘14 kickstarted with pre-events that were hosted to engage

students to participate in events such as the Hackathon and Crossword on information Security. Events like the

Hackathon drew huge participation where the participants unleashed their skills in ethical hacking. The contest

lasted for 2 weeks and was an attention grabber for students from various colleges with technical background.

The event on Crossword kindled the interests of the participants in thinking about a myriad information security

to complete the missing block of letters. The pre-events that were organized had set the context of the on –day

events of CSAM’14 by encouraging the participants to understand the basics on information security, its pros

and cons and about why InfoSec should matter to them.

On the day of the event, 2October, the panel discussions set the stage on fire where the eminent dignitaries

with strong backgrounds in information security expressed their views on security issues faced in the industry as

a part of the panel discussion. The panel discussion was certainly a gripping one were the panelists Ajit

Menon (Guest of Honor) – Chief Security Officer, Tata Consultancy Services, Avinash Kadam (Chief

Guest) – Advisor - India Task Force at ISACA, Nitin Bhatnagar - Head of Business Development at SISA

Information Security (APAC and CEMEA), Shweta Chawla - Owner, SC Cyber Solutions, Niranjan Reddy -

Founder Net Conclave Systems, Mr. Mukesh Jawarhani - Senior Manager - Group Audit at Bajaj Finance

Limited shared their views on variety of topics ranging from Cyber Law for the latest digital technologies to Security risks in BYOD on the topic “SMAC – An Information Security perspective”. The panel

discussion left the students with worthwhile takeaways on how decisions on emerging technologies need to be

made taking into account the security issues that tag along with implementing them.

Then came the most awaited events like the Treasure Hunt, Role Play Audit and Case study from keywords.

Treasure hunt was a fun event that revolved around the theme of information security in completing snippets of

code by collecting various clues and deciphering them. The event on RolePlay audit made participants to think

on their feet to solve a case study on the security state of an organization. The participants pulled off a

commendable show by wearing the hats of a CISO, auditor, Business Unit Heat and IT Administrator with

relevance to the given case. It was a delight to watch participants probe each other with various questions

regarding the state of security in the caselet. Case Study from Keywords saw many participants innovatively

come up with their imaginary cases on security related issues recently faced by many organizations

CSAM‘14 came to closure by spreading the thought of awareness in information security in various forms

possible across students, corporations and other relevant communities. Team Matrix together with ISACA

would continue to support such initiatives to make the digital world a safer place because InfoSec is our shared

responsibility. Stay aware and stay secure!

Avinash Kadam speaking at

CSAM'14

Panel discussion at CSAM'14

SCIT MBA ITBM Team

http://isacapune.org/

Page 18

Identify opportunities to present ISACA, its activities, certifications, frameworks to major

organisations in India.

Explain advantages of ISACA membership to friends and colleagues.

Establish contacts with the IT community in India and expose them to the activities of ISACA.

Contact colleges and universities offering management courses in information technology.

Spread the word about COBIT 5, explaining that COBIT 5 is a business framework and is

indispensable for governance and management of enterprise IT (GEIT) for every enterprise.

Help IGTF contact the right persons in state or central government to present ISACA. India is on the

fast track for e-governance, and ISACA has a tremendous opportunity to contribute towards this

national cause.

Contribute India-specific case studies on your organization's COBIT 5 implementation. These can be

published in COBIT Focus and also on ISACA‘s India-specific web page www.isaca.org/topic-india. Learn

more at http://www.isaca.org/Knowledge-Center/cobit/cobit-focus/Pages/COBIT-Case-Studies-

Submission-Guidelines.aspx.

Write articles highlighting the applications of COBIT 5. ISACA‘s PR agency Ketchum Sampark, is

always looking for such articles and will ensure that these articles are published in appropriate media.

Send your suggestions to Avinash Kadam, advisor, IGTF, at [email protected].

Back To Index

How Can You Help ISACA Grow in

India?

Page 19

Back To Index

http://www.isaca-

chennai.org/isaca/index.jsp

Page 20

Back To Index

http://www.isaca-

chennai.org/isaca/index.jsp

Page 21

Back To Index

http://www.isaca-

chennai.org/isaca/index.jsp

Page 22

Back To Index

http://www.isaca-

chennai.org/isaca/index.jsp