ISACA Chapter Annual Report

(This report will also serve as your chapter’s 2004 K. Wayne Snipes award entry form)

The Membership Board recently designed a new Chapter Annual Report for all ISACA chapters to complete and return to ISACA International. This process is meant to be as painless a task as possible, while ensuring that good governance is in place and that all chapters support and protect the ISACA brands. We know that chapter leaders are volunteers and are very busy, therefore this report is designed to be very succinct, easy to complete, and multi-functional, eliminating the need for complete of separate chapter award entries. Since the report is to be completed at the time of each chapter’s AGM, it can also serve as a reporting mechanism back to the chapter members.

Through completing and submitting this report by the due date, your chapter will automatically be considered for the K. Wayne Snipes Chapter Recognition Award. The Membership Board will carefully consider the information provided within and the four worldwide winning chapters are eligible to win a free registration to an ISACA-sponsored conference. One of these winners, a small chapter, can choose between the registration or a discount of up to US$1000 off the price of a PSS course. The same chapter cannot win the award three years in a row.

In addition, submitting copies of your newsletter with this report will automatically enter you into the “Best Newsletter Award” competition.

Chapter Name: London Chapter Number: 60

Reporting Period: 1 July 2003 - 30 June 2004 Due date: 30 days after AGM

Governance Information

Date of Last AGM	27 May 2004
Number of Chapter Board Meetings	10
Date of Latest Audited Accounts	From 1 January 2003 To 31 December 2003
Please attach a copy of the latest auditor’s certificate Prepared By Paid Third Party √ Board Appointed Volunteer
Date of Last Election	27 May 2004

Your Current Chapter Board

Please show if any board members have a financial relationship (e.g. paid lecturing, administrative support, etc.) with the chapter and attach details in a separate memorandum. This does not include reimbursement of out-of-pocket expenses, speakers’ gifts under US$250 in value, and similar minor transactions.

Position	Name	E-mail	Business Phone	Financial Relationship if over US$250?
President	Mr. Allan Neville Boardman, CISM,CISA,CA,CISSP	allan@internetworking4u.co.uk	07881930814	None
Vice President	Mr. Nicholas Gregory Fellows, CISA	nick.fellows@barclays.co.uk	07775543153	None
Membership Director	Mr. John Robert Hunter, FCA	jhunter@hlbdc.com	01635 248944	None
Treasurer	Mr. Kevin Paul Handscombe, CISA,ACA	kevin.handscombe@kpmg.co.uk	0207 694 8788	None
Secretary	Mr. Joseph F. Wright, CISA	joe.f.wright@hsbc.com	0207 992 1642	None
CISA Coordinator	Mr. Mark A. Hughes, CISA	mark.hughes@bartsandthelondon.nhs.uk	0208 836 4841	None
CISM Coordinator	Mr. Mark A. Hughes, CISA	mark.hughes@bartsandthelondon.nhs.uk	0208 836 4841	None
Other Board Members
Position	Name	E-mail	Business Phone		Financial Relationship over US$250?
Events	Mr. Nicholas Gregory Fellows, CISA	nick.fellows@barclays.co.uk	07775543153		None
IT Governance	Mr. Roger W. Southgate, CISM,CISA,FCCA	southgat@nildram.co.uk	02392 259720		None
Research	Dr. John A. Mitchell, CISA,CIA,CFE	john@lhscontrol.com	0707 851454		£3,700, refer attached
Academic Relations	Dr. John A. Mitchell, CISA,CIA,CFE	john@lhscontrol.com	0707 851454		as above
Past President	Dr. John A. Mitchell, CISA,CIA,CFE	john@lhscontrol.com	0707 851454		as above
External Relations	Mr. Charles Mansour, CISA	charles.mansour@ntlworld.com	01322 223714		None
Immediate Past President	Mr. Charles Mansour, CISA	charles.mansour@ntlworld.com	01322 223714		None
Publications	Mr. David M. Thirlwall, CISA	dave.thirlwall@hmce.gsi.gov.uk	0118 908 4238		None
Marketing	Mr. Peter J. Andrews, CISA,MBCS,MCMI	pa@pjaconsulting.co.uk	0208 549 0224		None
Webmaster	Mr. Allan Neville Boardman, CISM,CISA,CA,CISSP	allan@internetworking4u.co.uk	07881930814		None
Standards	Mr. Roger W. Southgate, CISM,CISA,FCCA	southgat@nildram.co.uk	02392 259720		None
Volunteers Coordinator	Mr. David M. Thirlwall, CISA	dave.thirlwall@hmce.gsi.gov.uk	0118 908 4238		None

Chapter Adminstrator

Chapter Administrator

Ms Christine Lyon

admin@isaca-london.org

0707 665014

N/A

Chapter Statistics

Number of chapter members at time of Annual General Meeting (AGM) 928	Chapter Dues Amount US $80
Newsletter Produced? Yes √ No If yes, please attach the last two issues of your newsletter to this report.	Does your chapter have a website? Yes √ No If yes, what is the URL? http://www.isaca-london.org
Newsletter Method of Distribution (check all that apply) E-mail √ Regular Mail Posted on Website √ If other please specify:	How often is your web site updated? Weekly √ Monthly Quarterly If other please specify: also daily if required
Frequency of Newsletter distribution? Monthly √ for newsletter Quarterly √ for magazine (Datawatch) If other, please specify:	Are your bylaws posted on your web site? Yes √ No
	Does your web site include job postings? Yes √ No Members have access to the job postings service at no fee. Non-members pay a fee.

CISA and CISM Statistics

Did you run a CISA Promotion/Marketing Event in the past year? Yes √ No Comments: CISA is promoted at events when the Chapter mans a stand with other exhibitors e.g. Compsec, joint event with ICAEW & Cybersecurity Event	Did you run a CISM Promotion/Marketing Event in the past year? Yes √ No Comments: CISM is promoted at events when the Chapter mans a stand with other exhibitors e.g. Compsec, joint event with ICAEW & Cybersecurity Event
If Yes, how many people attended your chapter’s CISA Promotion Event? The attendees at the exhibitions (Up to 200 per event)	If Yes, how many people attended your chapter’s CISM Promotion Event? The attendees at the exhibitions (Up to 200 per event)
Did you run a CISA review course in the past year? Yes √ No Comments: CISA Weekend Review Course plus CISA Domain Training	Did you run a CISM review course in the past year? Yes √ No Comments: CISM Weekend Review Course
If Yes, how many people attended your chapter’s CISA review course? 22	If Yes, how many people attended your chapter’s CISM review course? 5

Chapter Event* Summary (add additional sheets if necessary):

The below information is used for K. Wayne Snipes Award determination.

Date	Target Audience (assurance, security, IT governance)	Total attended	CPEs	Topic and Speaker (if multi-track seminar, say “multi-track”)	Comments	Member Fee	Non Mem Fee	City or cities of event	Online Regis-tration?
25 Sept 2003	Governance/Risk Assurance/Security	63	1	Corporate Governance/CoBIT & Making a Start with Cobit. Gary Hardy.	Demonstrated the functionality of CobiT Online and CobiT QuickStart	None	£20	London	Yes
30 Oct 2003	Risk Assurance/Security	53	1	IT Risk Management - A Case Study. Dr John Mitchell	Provided an in-depth analysis of Risk Management in the context of availability of internet based service provision.	None	£20	London	Yes
27 Nov 2003	Risk Assurance/Security	58	1	SAP Security and Auditing Tools. Jason Viola	Overview of SAP R/3 architecture, potential security exposures, management controls and audit tools.	None	£20	London	Yes
18 Dec 2003	Risk Assurance/Security	51	1	Email and other messaging security. Allan Boardman	Discussed the main threats, vulnerabilities and issues associated with using email systems.	None	£20	London	Yes
22 Jan 2004	Risk Assurance/Security	63	1	Web application hacking and how to defend against it. Peter Wood	Demonstrated various web hacking techniques and how to defend against it.	None	£20	London	Yes
26 Feb 2004	Risk Assurance/Security	57	1	"Human Rights Act", privacy in the context of email auditing. Professor Neil Barrett	Explored the regulations and laws over email use including the Human Rights Act, the Regulation Investigatory Powers Act, and the Data Protection Act.	None	£20	London	Yes
25 Mar 2004	Risk Assurance/Security	44	1	Auditing the Outsourcing of IT. Tim Wright	Covered IT Outsourcing issues from an auditor's perspective.	None	£20	London	Yes
22 April 2004	Risk Assurance/Security	38	1	Security built-in through a structured service. John Smith	Provided an insight into structured methods as applied to Security Management.	None	£20	London	Yes
27 May 2004	Governance/Risk Assurance/Security	51	1	How to audit an ERP system via the risk management route. Gabriel Lung	Demonstrated risk management techniques to provide effective independent assurance to management.	None	£20	London	Yes
24 Jun 2004	Risk Assurance/Security	65	1	Real Life Security Incidents. David Ramirez	Provided various real life experiences of security incidents.	None	£20	London	Yes

· Does not include Chapter Board meetings

Additional Chapter Events:

In additions to the CISA Review Course, the Chapter also ran a series of domain-based CISA training courses (4 one day sessions based on the 7 CISA domains). 20 plus people attended each of these sessions.

Also ran two “Implementing CobiT for IT Governance” WorkShops in October 2003 (Gary Hardy - 19 attendees) and May 2004 (John Mitchell - 22 attendees).

The IT Governance SIG arranged four presentations to the group over the year.

Chapter Involvement

		Comments/Details
Is your chapter involved in the CISA Item Writing Program?	Yes No √
Is your chapter involved in the CISM Item Writing Program?	Yes No √
Does your chapter contribute funds to ITGI?	Yes No √
Is your chapter involved in other research work?	Yes √ No	Chapter donated $3,000 to two research projects – Performance Risk Management and Risk Profiling A number of draft standards were reviewed by board members during the year.
Is your chapter involved in actively promoting student membership?	Yes √ No	Yes, we have a reduced student rate for attendance at Chapter meetings and receiving the Chapter magazine
Is your chapter involved in the University Advocate Program?	Yes √ No	Yes, we have, through John Mitchell visited all the universities in the area having control related education and lecturers have accepted the benefits offered in the Academic Advocate programme. 5 Universities in the area are now involved in the programme John Mitchell is involved in the ISACA working party on 'CobiT in Academia'
Does your chapter have new member and retention initiatives in place?	Yes √ No	We extol the virtues of membership through attendance at conferences and trade meetings. We contact anyone who has not renewed. We review membership levels at each Board Meeting and decide on appropriate action

Chapter Involvement with Other Professional Organizations

Organization	Details
Accountancy Body	Ongoing relations with Institute of Chartered Accountants England and Wales (ICAEW), including a joint one day event in April 2004.
Computer Society	British Computer Society (BCS) through their IRMA SIG. Planning a joint event for March 2005
DPMA
IIA	Ongoing relations through their Information Security SIG (ISSIG), planning a joint event for September 2004.
ISSA
Other	FSA - UK Financial Services Regulator re IT Governance and Basel II

How has the chapter become more valuable to its members?

1	Training courses The Chapter ran a series of training courses for members at very competitive rates: - CISA Review Workshop - CISM Review Workshop - CISA Domain based Training - Two IT Governance/CobiT Worshops In addition, the Chapter negotiated discounts for members at a number of external training courses and conferences.
2	IT Governance SIG The IT Governance Special Interest Group chaired by Roger Southgate was formed in early 2003 with an initial membership or around 30. Membership now exceeds 70. During the first year the group held 6 meetings in total, 2 to get the group off the ground and 4 presentations.
3	Events The chapter continues to offer high quality monthly events, hosted at first-rate facilities at ABN AMRO and provides members with excellent networking opportunities. Attendance levels are up over previous years.

Please list any special achievements of which your chapter is especially proud:

In addition to the successful training events, formation of the IT Governance SIG and Chapter monthly events as mentioned above, other special achievements include:

• Membership continues to grow and stands at 928 as at 30 June 2004.
• The Marketing stands have been updated and now consist of three lightweight foldout stands that are at display at monthly events and conferences. The three colourful displays cover CISA, CISM and COBIT.
• The Chapter was awarded the K. Wayne Snipes Chapter Recognition Award for 2003 (Europe/Africa - Very Large Chapter).
• The Chapter’s website won the Gold seal for the 3rd consecutive year. The website provides one of the main forms of communications to members with news and information and attracts over 3,000 visitors per month.
• The Chapter’s award winning quarterly journal, Datawatch, is now only available online – as Datawatch Online (a pdf is available for download). This will reduce the publishing and distribution costs of the journal.
• As email is now the main form of regular communication with members, for distribution of the monthly newsletter and quarterly journal, efforts are ongoing to ensure that the Chapter has the correct and up to date email addresses for members.
• The Chapter continues to work with the other UK Chapters to promote ISACA under the banner “ISACA UK Chapters”, eg. combined events with other professional bodies and combined web front end as www.isaca.org.uk

Finally, the board comprises a team of dedicated professionals who continue to provide first-rate service to the Chapter members and ISACA.

Please indicate any financial marketing assistance received from ISACA Headquarters in the past year: None

Recommendations or questions for ISACA International / Key Boards: Suggest this document is made available to Chapters in the form of a web based form that can be populated throughout the year and then submitted once completed.

Please attach the following pages to completely answer the items on this form:

1) Latest auditor’s certificate or signature page √ 3) Newsletter (if produced) √

2) Financial relationship details (if any) √ 4) Any additional pages of information N/A

Respectfully submitted by:

Name: Allan Boardman

Chapter Position Held: President

Date: 20 July 2004

For ISACA International use only:

Date received: