This web site is designed to serve the needs of our
members, who are audit and security personnel in Iowa.
For those who are visiting the site and find useful
information, we are happy to be a resource for you.
If you are interested in ISACA membership, please follow
the appropriate links on the site, or contact one of
the officers.
Upcoming Meetings & Events
Mar.17.2009
March ISACA Meeting - The Convergence of Information Security, Privacy and Compliance
MARCH CENTRAL
IOWA CHAPTER ISACA MEETING DATE: March 17th, 2009 TOPIC: The Convergence of Information Security, Privacy and Compliance TIME: 11:30 am-1:00 pm (Registration begins at 11:00) WHERE: Embassy Club at 801 Grand FEE: ISACA Members $15 and Non-members $20 SPEAKER: Rebecca Herold
RESERVATIONS: Please RSVP by noon on Friday, March 13, 2009, by email to jeichhorn@deloitte.com. Since we will confirm a meal count with the Embassy Club that afternoon, Board policy calls for billing any "no-shows" for the meeting.
Topic Summary
Privacy breaches have increasingly made headlines around the world for several years. Many high-profile cases demonstrate how serious the financial, legal, and reputational consequences can be for organizations concerned. More complex regulations coupled with heightened awareness of the associated risks increasingly make privacy a legal compliance issue AND information security issue.
Rapidly emerging issues, like e-discovery, BC/DRP and disposal, spans privacy across a number of apparently convergent fields, such as law, information security, and compliance.
Three take-aways from this session will include:
1. How privacy, compliance and information security roles are evolving, how and why convergence is occurring. 2. Discussion of the lifecycle of personally identifiable information (PII), and why multiple areas must be involved with safeguards throughout the lifecycle. 3. How organizations should ensure collaboration between the areas.
Rebecca Herold CIPP, CISSP, CISM, CISA, FLMI, Becky to many of you here who have worked with her over the years, is an information privacy, security and compliance consultant, author and instructor with her own company, Rebecca Herold & Associates, LLC, who has provided assistance, advice, services, tools and products to organizations in a wide range of industries throughout the world for the past two decades.
Rebecca was named one of the "Best Privacy Advisers" in two of three categories by Computerworld magazine in both 2007 and 2008. In 2008 Rebecca’s blog was named one of the "Top 50 Internet Security Blogs" by the Daily Netizen. Rebecca was also named one of the "Top 59 Influencers in IT Security" for 2007 by IT Security magazine.