Welcome to the ISSA UK Chapter Website

With active participation from individuals and chapters all over the world, the Information Systems Security Association ( ISSA ) is the largest international, not-for-profit association specifically for information security professionals.

THE ISSA UK CHAPTER HAS BEEN VOTED CHAPTER OF THE YEAR 2005 and 2006

It provides educational forums, publications and peer interaction opportunities that enhance the knowledge, skill and professional growth of its members. It is also the ‘preferred partner’ of (ISC)2 for CISSPs & SSCPs

EURIM Information: Director's Guides to Managing Information Risks

The Directors' Guides to Managing Information Risk are now available on the IAAC
website Guides.

These were among the first target deliverables of the new Information Security Awareness Forum and were published yesterday.

There are eight in all, each one sides of A5, with no unreadable small print.
There is therefore no excuse for ignoring their contents, provided they are well publicised and widely circulated.

The three on organisation issues - www.iaac.org.uk/Portals/0/23176_DIAN_A5_ORGAN_15_4.pdf cover::
- Why Information Risk is a board level issue
- Realising the benefits
- Regualtion and Legislation

The two on people issues - http://www.iaac.org.uk/Portals/0/23176_DIAN_A5_PEOPLE_15_4.pdf cover:
- Governance and structures
- Creating a strong information handling culture

The three on process issues process.

The guides do not carry a copyright notice and although folder for the printed version carries one it also says, in much larger print "Please share them with the other organisations you work with, your suppliers, partners and customers"

ISSA-UK E-Newsletter for May 2008

Message from the UK Chapter President

Dear Members,

April has been a busy month for us in the Infosec calendar:
Our Security Day at Bletchley Park proved to be very popular - excellent speakers and a facilitating visit of the museum on a beautiful spring day earning 6 CPE points. What a day to be out of the office for a security professional! We announced on the day that Derin Mellor was the lucky winner of the prize draw for the Digital Forensics Module place at Nottingham Trent University.

Infosecurity Europe was a very successful event for ISSA-UK this year. I would like to offer a very warm welcome to new members who have joined the chapter as a result.
Many thanks to all those who helped out and those who approached the management team wanting to get more involved in chapter activities.
We now have a very strong team delivering some major initiatives:

o The Advisory Board has been extended to include a total of 5 MPs and 2 Lords with interests in Info Security giving us political balance across the 3 main parties together with further academia links from the Universities of Oxford and Warwick

o Our Inaugural Scottish Regional Meeting will take place at KPMG offices in Edinburgh on 19th May – Matthew Pemble & Ken Munro will be our speakers

o At our 12th June London Chapter Meeting speakers will include Rt Hon Alun Michael MP & David Lacey

o The Northern regional meeting will take place in June at KPMG offices in Leeds – more details will appear next month

o The 10th July Security Day will be a morning of Information Security Technology Updates followed by an afternoon of round table Expert Panels on board the ship TS Queen Mary on the River Thames

Please see below for full details about these meetings and do register if you would like to attend.

With very best wishes,

Geoff Harris
ISSA UK President

This Month's Hot Topics:

1 UK Chapter meetings in 2008:

UK Chapter meetings in 2008 will be hosted by KPMG (2nd Thursday in the month)

Please put the above dates in your diaries.
*KPMG Salisbury Square -
http://www.kpmg.co.uk/about/offices/PDF_maps/308889b_Salisbury_Square_2007_web.pdf
** KPMG Canary Wharf
http://www.kpmg.co.uk/about/offices/PDF_maps/308897b_Canada_Sq._office_locator__2007_web_rev1.pdf

ISSA-UK Inaugural Scottish Regional Meeting
Monday the 19th of May at the KPMG Edinburgh offices.
5:30 - 6:00 Registration & refreshments
6:00 - 6:30 Geoff Harris, ISSA-UK President /KPMG (host):
6:30 - 7:00 Matthew Pemble - “Online Fraud - Is it worth our time?”
7:00 - 7:30 Ken Munro - “Social Networking – A Penetration Tester’s View”
7:30 - 9:00 Drinks & Canapes

This meeting is kindly hosted by KPMG at:
KPMG Edinburgh Office
Saltire Court
20 Castle Terrace
Edinburgh
EH1 2EG
http://www.kpmg.co.uk/about/offices/PDF_maps/308890_Edinburgh_office_locator_web_rev1.pdf

This meeting is open to ISSA members and information security professionals who are non-members.
If you would like to attend, then please “RSVP Inaugural Scottish Regional Meeting” to:
louis.gamon@issa-uk.org

---------------------------------------------------------------------------

ISSA-UK Chapter Meeting
Thursday the 12th of June at KPMG Salisbury Square
Topic: “They may be security aware – but can we trust them?”
5:30 - 6:00 Registration & refreshments
6:00 - 6:30 Rt Hon Alun Michael MP - UK Internet Governance Forum and Crime & Order on The Internet.
6:30 - 7:00 Speaker from Arcsight
7:00 - 7:30 David Lacey - Managing the Human Factor in Information Security
7:30 - 9:00 Drinks & Canapes

This meeting is kindly hosted by KPMG at:
KPMG Salisbury Square
8, Salisbury Square
London
EC4Y 8BB
http://www.kpmg.co.uk/about/offices/PDF_maps/308889b_Salisbury_Square_2007_web.pdf

This meeting is open to ISSA members only
If you would like to attend, then please “RSVP 12th June Chapter Meeting” to:
louis.gamon@issa-uk.org

2. For latest Discount news
visit: http://www.issa-uk.org/memberbenfit.html for current updates, news and details.

3. ISSA -UK "Security Training Days"
(6 CPEs - no admittance charge for ISSA members)

The 2008 programme & dates is as follows:

• 10th of July - Technology & Expert Panels (venue to be announced)
• 9th of October - Microsoft (London)

Please add these dates to your diaries. Full details will be posted six
weeks prior to the event.

4. E-Symposium (online) - earn 6 CPEs - join ISSA and its partner
(BrightTalk)

All 2007 e-symposiums have been archived and are viewable at your
convenience:

http://www.issa.e-symposium.com/

5. Directors’ Guides
The Directors’ Guides to Managing Information Risk are now available on the IAAC website
http://www.iaac.org.uk/Default.aspx?tabid=31

These were among the first target deliverables of the new Information Security Awareness Forum.

There are eight in all, each one sides of A5, with no unreadable small print. There is therefore no excuse for ignoring their contents, provided they are well publicised and widely circulated.

The three on organisation issues can be found here:
http://www.iaac.org.uk/Portals/0/23176_DIAN_A5_ORGAN_15_4.pdf
These cover:
Why Information Risk is a board level issue
Realising the benefits
Regulation and Legislation

The two on people issues can be found here:
http://www.iaac.org.uk/Portals/0/23176_DIAN_A5_PEOPLE_15_4.pdf
These cover:
Governance and structures
Creating a strong information handling culture

The three on process issues can be found here:
http://www.iaac.org.uk/Portals/0/23176_DIAN_A5_PROCESS_15_4.pdf

6. Contact details
We continue to get back “return to sender” envelopes from our mailshot and ‘rejected/bounced/ emails. In order to receive newsletters, event bulletins, the JOURNAL, etc. it is essential that your ‘profile’ is up-to-date. Please visit ISSA International, login and ensure all details (work, certification; e.g. CISSP, email address and snail mail address) are correct.

https://www.issa.org/Members/Your-Profile.html

7. ISSA -UK & media partner / associate¹ - calendar of events:
http://www.issa-uk.org/events.htm

Digital Forensics Module - Nottingham Trent University
The course is aimed to run in Q2 08, and the 5 day course is expected be
£2000 per delegate/student.
For any ISSA Members who are interested in attending, they will be subject
to a 10% discount.

For more information contact John Walker on: jon@secure-bastion.co.uk

MAY:
National security in a borderless world - 14th & 15th May - Copenhagen,
Denmark
Register Online at: http://www.smi-online.co.uk/ts10.asp

ISSA Scotland - Edinburgh Regional Meeting -19th of May - KPMG Edinburgh

JUNE:
Financial Services Technology - Operational Risk - 5th June
http://www.cirmagazine.com/riskhorizons
50% discount for ISSA UK members. Please contact Louis Gamon
(louis.gamon@issa-uk.org) to register

SC Conference - 10th of June - Thistle Marble Arch, London
ISSA members are eligible for a 20% discount off the full rate of attendance
at SC magazine¹s acclaimed Stamp Out Data Leakage conference on 10th June
2008 in London. The event features SC¹s strongest speaker line-up yet,
including global security chiefs from organisations such as Vodafone,
Unilever and Aviva.

They will be offering vital learnings on such issues as raising staff
awareness, pinpointing key vulnerabilities and effective network access
systems to protect your information against what is statistically the
biggest chink in its armour ­ your workforce. Indeed staff error or
malpractice is currently responsible for around 80% of data leakage
incidents, so come along in June and find out how to put a stop to it once
and for all. View the full speaker line-up or claim your exclusive 20%
discount by quoting ³ISSA20³
http://www.stampoutdataleakage.com

MISti ³CISO Executive Summit² - Budapest - 11th-13th June
http://www.mistieurope.com/default.asp?page=65&Return=70&ProductID=6180

Financial Services Technology - IT Security - 24th June
http://www.fstech.co.uk/securityconference
50% discount for ISSA UK members. Please contact Louis Gamon
(louis.gamon@issa-uk.org) to register

8. ISSA-UK PARTNER - SearchSecurity
The ISSA UK Chapter would like to draw your attention to our new media
partner SearchSecurity.co.UK. Benefit from complimentary webcasts, white
papers, breaking industry news, plus find out how your salary stacks up with
the 2008 UK Salary Survey, yours at no cost as just one of the many benefits
that accompanies your membership.

http://searchsecurity.techtarget.co.uk/news/article/0,289142,sid180_gci12882
43,00.html?Offer=SEukissa320

9. SAI GLOBAL OFFER
SAI Global are offering an exclusive 10% discount to ISSA members to their
Secure Application Development program, this elearning program is designed
to give developers and software practitioners the knowledge they need to
build applications with security in mind.

This course is available to members of the ISSA UK Chapter at a 10% discount
until 31st December 2008. For more details on what¹s covered in the course
or to arrange an online demonstration, contact SAI Global on 01926 854111,
or visit their website at http://www.saiglobal.com/compliance/ISSA.

Current ISSA UK Member Benefits

We are proud to offer our members the following benefits:

• Free Subscription to Infosecurity Today
• Discounted insurance for members of the ISSA
• Training Camp - 10% discount on all course (CISSP, Cisco, Checkpoint etc)
• MIS Training - 10% Discount on all Conferences and Symposiums
• 30% Discounts on both O'Reilly and John Wiley & Sons publications
• 10% Discount on Alderbridge Consulting
• 20% Discount at Pearson Books
• 10% Discount for 7Safe Training Courses
• 10% Discount for training programs by Vogon International
• 10% off "Sophos Malware Analysis" course
• 10% discount for ISSA for SANS Training.
  

An example of the ISSA Monthly Journal is now available for public download, just click on the image below to obtain your free copy of ISSA Journal - April 2007.

For full details of how to join ISSA and membership benefits, click here.

We are currently providing a limited ISSA UK website, for further information about ISSA and ISSA UK please see the worldwide ISSA website at ISSA.ORG, the europeon webite at www.issa-emea.org or contact us at webmaster@issa-uk.org.