The Enlighten Online

Bi-Monthly Newsletter The Enlighten Online

Nov – Dec 2008 Edition

NIPA Flyover, Rashid Minhas Road, Karachi

Table of Content

1 The President’s Message 3 2 ISACA Karachi honored successful CISAs / CISMs 5 3. ISACA 40 years of excellence 7 4. ExpressLine Magazine Published “Q & A Session” with 8 Ms.Huma Pasha, President ISACA Karachi Chapter 5. Death penalty sets for Cyber Terrorists in Pakistan 9 6. First Certified CGEIT Professional from Karachi 9 7. H.P establishes HP Experience Stores in Pakistan 10 8. Microsoft Corp. launches Global Imagine Cup 2009 10 9. Ground breaking of Japanese IT Park in Karachi 10 10. XTRAVO Explorer – Web browser by a Pakistani teenager 11 11. Cell Phone Manufacturing Plant in Pakistan 10 12. ISACA International Schedule of Conferences 12 13. Asia Pacific CACS Conference Kyoto, Japan 13 14. Contacts of Board Members, ISACA Karachi Chapter 14

-----------------------------

For Feedback & Suggestions

Absar Khan Chair Publications,

ISACA Karachi Chapter

[email protected]

This bimonthly newsletter focuses on ISACA Karachi Chapter’s activities, achievements & announcements. It also highlights major news events happening in the IS/IT/Telecom & related sectors of Pakistan.

Dear Member, Wishing you all a very Happy New Year and I take the lead and encourage you all to make our new year’s resolution that we are not going to support piracy. This is an special appeal to all those who will be sitting for the CISA / CISM and CGEIT exam that they should buy ORIGINAL books and CDs from ISACA bookstore. What’s happening at ISACA Global 2009 Asia Leadership Conference 21-22 Feb. 2009 in Kyoto, Japan.The Board has nominated Abdul Rasool Hoodbhoy andShamsuddin Surani as the primary delegates and Musharraf Khan, as the backup to attend the Leadership conference on behalf of the Chapter. The leadership conference is aimed at training the leaders so that they can serve you better. By giving opportunity to more volunteers we have more people to provide better service. Each volunteer who attends this conference will bear certain portion of the cost while the balance would be paid by the Karachi Chapter and ISACA. Asia-Pacific CACS Conference, 23-24 February 2009 We are requesting all members to do special marketing for the Asia-Pacific CACS. This is very important because in recent years there have been serious discussions at the international level and with chapter leaders about whether or not Asia-CACS will continue. The reason for this discussion is that the CACS conferences held around the world are designed to serve a whole world, not a local area. Unfortunately, in recent years the Asia-Pacific CACS conference registrations have been increasingly local to the host city or country. This brings questions to the forefront at ISACA International: If these conferences are primarily local in nature, is there a need for Asia-Pacific CACS? Yak Ngi Chuah Chair, ISACA Membership Board has appealed to us to help us elevate Asia-Pacific CACS to the international stage, as it should be. Hence I am requesting all of you to help us market it and how we can encourage attendance from all corners of Pakistan and even our friends in the Asian region to attend the Asia-Pacific CACS Conference which will be held in Kyoto on 23 –24 February 2009. I will be happy to send personalized letter to your individual boss as to why you should attend if you know that your organization has training budgets.

Continue . . .

President’s Message

ISACA Karachi Newsletter – Nov – Dec 2008 Edition Page 3 of 14

Overview of activities that qualify for CPE hours may be viewed by

clicking on the Qualifying Educational Activities link on the

ISACA web site at CISA www.isaca.org/cisacpepolicy CISM www.isaca.org/cismcpepolicy CGEIT www.isaca.org/cgeitcpepolicy

Overview of activities that qualify for CPE hrs.

President’s Message

What is happening at Karachi Chapter ISACA 40th Year Celebrates In February we will be launching the ISACA 40th year celebration. Please read details in the upcoming newsletter and brochure. I am looking forward to meeting you all at these events. New Web is under construction The local chapter web is getting a master face lift both in design and in content. One of the biggest achievements of the new web is that now the board members can directly communicate with members through single email and ensures everyone receives the mail. Please note we are picking up your email addresses from ISACA’s web hence please update your profiles which you can do it by logging into ISACA’s web www.isaca.org and updating your info in “My ISACA”. Warm regards, Huma Pasha President, ISACA Karachi Chapter.

ISACA Book Store Update

• Enterprise Value: Governance of IT Investments, The Val IT Framework 2.0 • Enterprise Value: Governance of IT Investments, Getting Started With Value Management • Knowledge-Based Audit Procedures 2009 • Healthcare Fraud: Auditing and Detection Guide • How to Comply with Sarbanes-Oxley Section 404: Assessing the Effectiveness of Internal Control, 3rd Edition • IT Control & Audit, 3rd Ed. • Beyond Compliance: 10 Practical Actions on Regulation, Risk and IT Management • Human Factors in Project Management: Concepts, Tools, and Techniques for Inspiring Teamwork and Motivation • Implementing IT Governance: A Practical Guide to Global Best Practices in IT Mgmt • IT Governance 2009: Policies & Procedures • IT Risk: Turning Business Threats Into Competitive Advantage • Principles and Practice of Business Continuity: Tools and Techniques Search the Bookstore online at www.isaca.org/bookstore for the complete descriptions by product title or category.

Contact ISACA Bookstore [email protected] or

+1.847.660.5650.


ISACA Karachi honored successful CISA/CISM candidates of June 2008 Session

On 6th November 2008, at ICAP Karachi.

ISACA Karachi Chapter honored CISA/CISM exam passers of June 2008 Session, on 6th November 2008, at ICAP Karachi. Mr. Hussein Hassan Ali Haji, CIA, CISA, CISM, FCIS (Past President ISACA Karachi) and currently Managing Director of HHH Associates Ltd Birmingham UK distributed the certificates to successful candidates. On this occasion ISACA Karachi Chapter also held a seminar on "White Hat, Black Hat and Gray Hat for your Security Systems". The 3 Hat Colors measured the degree that certain organizations are willing to bend in the current financial crisis. The participants gained valuable knowledge on how to ensure that IS security and IT Governance are not compromised in their environment. Mr.Hussein also shared his experience of being on the other side of security, true stories and actual unique situations.

Continue . . .


ISACA Karachi honored successful CISA/CISM candidates of June 2008 Session

On 6th November 2008, at ICAP Karachi.


ISACA, the nonprofit, independent professional association and worldwide leader in IT governance, control, security and assurance, celebrates its 40th anniversary in 2009. ISACA has maintained its steady growth by offering an expanding portfolio of globally tested good practices, tools and industry-leading guidance that helps enterprises verify that they are getting the most out of their IT investments, are managing their risks and are in regulatory compliance. ISACA develops international information systems auditing and control standards, publishes valuable guidance, and educates business and IT professionals worldwide through conferences, training weeks and distance learning. The association’s sought-after certifications have achieved widespread respect among global professionals and enterprises. More than 60,000 individuals have earned the Certified Information Systems Auditor (CISA) designation in its 30 years of existence. The Certified Information Security Manager (CISM) designation is only six years old, yet has already certified more than 10,000 professionals. ISACA’s newest credential, Certified in the Governance of Enterprise IT (CGEIT), was introduced in 2007 and has already become globally recognized. Through ITGI, ISACA also founded and continually updates the guidance contained in Control Objectives for Information and Related Technology (COBIT), Val IT and the IT risk framework in development. Founded in 1969 as the EDP Auditors Association, the organization’s name was changed to Information Systems Audit and Control Association in1994, which was then shortened to ISACA in 2006. Growth has been consistent over the years—from 10,000 members in the early 1990s to more than 86,000 constituents located in more than 160 countries in 2009. ISACA’s work is supported by its more than 180 chapters worldwide.

It is a great honor for ISACA Karachi Chapter leadership and its members that the international magazine “Express Line” published an interview with Ms.Huma Pasha (President ISACA Karachi Chapter), in its January, 2009 edition. This half page interview was covered under the segment of “Chapter Leader Q & A” on the page No. 3.

Express Line Magazine Published “Q & A Session” with President ISACA Karachi

Page 8 of 14

ISLAMABAD (November 07 2008): Any person who commits "cyber terrorism" and causes death of any person shall be punishable with death or imprisonment for life and fine up to Rs 10 million under the Prevention of Electronic Crimes Ordinance, 2008. The President of Pakistan on Thursday promulgated the Prevention of Electronic Crimes Ordinance, 2008 to control criminal data access, system damage, electronic fraud/forgery, misuse of encryption, cyber stalking, spamming, spoofing, unauthorized interception of data & cyber terrorism. The federal government will establish a specialized investigation and prosecution cell within Federal Investigation Agency (FIA) to investigate and prosecute the offences under the Ordinance. Afterwards, an Information and Communication Technologies Tribunal (ICTT) will be established under the ordinance through a gazette notification to undertake cases pertaining to abovementioned offences. The federal government may cooperate with any foreign government, Interpol or any other international agency with whom it has reciprocal arrangement for investigation or proceedings against the offences related to electronic system data, for collection of evidence in electronic form of an offence along-with interception of data. The ordinance reveals that any one who intentionally causes any electronic system or electronic device to perform any function for the purpose of gaining

unauthorized access to any data held in any electronic system or electronic device or on obtaining such un authorized access shall be punished with imprisonment of either description for a term which may extend to three years, or with fine or with both. Whoever for wrongful gain interferes with or uses any data, electronic system or electronic device or induces any person to enter into a relationship or with intent to deceive any person, which act or omission is likely to cause damage or harm to that person or any other person shall be punished with imprisonment of either description for a term which may extend to seven years, or with fine, or with both. Whoever with intent to coerce, intimidate, or harass any person uses computer, computer network, internet, network site, electronic mail or any other similar means of communication to communicate obscene, vulgar, profane, lewd, lascivious, or indecent language, picture or image, threaten any illegal or immoral act, take or distribute pictures or photographs of any person without his consent or knowledge that substantially increases the risk of harm or violence to any other person, commits the offence of cyber stalking shall be punishable under the ordinance ie, 10 years imprisonment or with fine not less than one 100,000 rupees, or with both. In case of any difficulty in giving effect to the provisions of the Ordinance, the government may, by order published in the official gazette, make such provisions not inconsistent with the provisions of this Ordinance as may appear to be necessary for removing the difficulty.

Country Highlights IT, IS, Telecom & related sectors

Death Penalty sets for 'Cyber Terrorism' in Pakistan

ISACA Karachi Chapter congratulates Mr.Fazal Karim who is one of the Director, ISACA Karachi Chapter Board on his successful achievement of CGEIT Certification. Mr.Fazal Karim has become the 2nd Certified CGEIT Professional from Karachi, while the 1st one from Karachi was Mr. Zainuddin A. Ansari.

2nd Certified CGEIT from Karachi


KARACHI (November 07 2008) The Hewlett Packard (HP) has established "HP Experience Stores" (HPES) to facilitate consumers in purchasing PC and printer products in Pakistan. This was stated by Philip Lau, General Manager, Personal Systems Group, HP Asia-Emerging Countries in a press briefing held at a local hotel on Thursday in Karachi. He said. "We are also making HP technology more easily accessible through the opening of the chain of HPES". The HPES concept is being implemented globally. HP has planned strengthening its retail presence by expanding into an additional 7500 retail partner stores in 1000 additional cities across the Asia Pacific and Japan region. The introduction of these HPES is part of HP's retail expansion in the region where consumers visiting these retail partners to enjoying an enhanced experience and will find unique and refreshing PC and printer products.


Hewlett Packard establishes "HP Experience Stores"

ISLAMABAD (November 06 2008): Microsoft Corporation has launched the global Imagine Cup 2009 and Innovation Accelerator Program in Pakistan in the presence of a large number of people at Usman Institute of Technology Auditorium. Students and faculty members from some of the leading institutes attended the event. The Imagine Cup and Innovation Accelerator Program aimed to provide an opportunity for students to win an all-expense paid trip to Egypt and may turn their technical products into commercial businesses. The Imagine Cup is a competition focused on finding solutions to real-world issues. The competition encourages the world's most talented software designers, programmers, game developers, photographers and filmmakers. Imagine Cup 2009 will be held in Cairo and Alexandria, Egypt where students will be asked to create software solutions that are aligned to one of the UNDP's Millennium Development Goals (MDGs). The eight MDGs range from halving extreme poverty and halting the spread of HIV/AIDS to providing universal primary education. Kamal Ahmed, Country Manager, Microsoft Pakistan said that Microsoft Pakistan has been consistently organizing the Imagine Cup competition in Pakistan since 2004. Winner teams from Pakistan have also been attending the worldwide finals competition for the last 2 years in Korea and France.

Microsoft Corp. Launches Global Imagine Cup 2009

KARACHI (November 05 2008): Despite an uncertain political-cum-economic situation in the country the government of Japan has started constructing IT Center at an estimated cost of 50 million dollar. The Japanese firm has been provided with five acres of land in SITE Superhighway for the IT-Park project. Provincial Minister for Industries and Commerce Rauf Siddiqui said that the Japan backed IT Center would create over 2,000 jobs for the country's talented and jobless youth.

Ground breaking of Japanese IT Park project in Karachi The CISA Online Review

Course is now available on ISACA e-Learning Campus at www.isaca.org/elearning This interactive, web-based course was developed to provide CISA exam candidates & ISACA members with an efficient and cost-effective tool for preparing for the exam or performing information systems audits and reviews.

ISACA e-Learning Campus



Cell-Phone Manufacturing plant in Pakistan

"Xtravo Explorer" – Web browser by a Pakistani teenager

ISLAMABAD (December 25 2008): Government is negotiating with Chinese companies to set up manufacturing plants for cell-phone sets in Pakistan. Federal Secretary for Information and Technology Hifz-ur-Rehman informed the media. He said that government is negotiating Chinese cell-phone companies including Zong, China Mobile and Huawei to set up manufacturing plants of handset in Pakistan. He expressed that Pakistan was spending $500 million to $800 million annually on the import of mobile phone sets and manufacturing plants in Pakistan could result in saving valuable foreign exchange.

KARACHI (December 15 2008): The country's first ever web browser with numerous new options called 'Xtravo Explorer' runs for information and images faster than the world's all existing such internet tools, including the Internet Explorer of Microsoft, have been built by a Pakistani boy in his teens, Sheikh Imran Ahmed, 19. Sheikh Imran is a resident of Karachi brightening up Pakistan's image, despite being a developing country, globally. After the Xtravo's release on the website www.jawoco.com, immediately made the global websites like www.softpedia.comstir up to lift it and carry out reviews on it. The global response to this useful and latest web browser is immense, which is on a daily basis downloaded on a large scale tagging good reviews from its users across the world, who reckon it as a user friendly and easy tool. Its users say that it is comparatively better in performance, which offers at present easy options like tab browsing, image grabbing and protects the users from unwanted materials and websites flooding the computer screen at a time of internet use- through its strong capability of blocks pop-ups. Thus ensuring a secure browsing environment for users of all ages. Xtravo has unique features specifically for web designers, such as the document explorer which assists the webmaster to discover the coding of a web page while browsing on it and works as a scanner to analyze the pieces that make up a website such as images, text, labels and other code snippets.

Moreover, it enables hassle free uploading of web pages by simply typing ftp.yourdomain.com , which leads to a 100 percent secure standard procedure for transferring files (FTP) area. The browser checks users' subscribed RSS feeds regularly for instant news, downloads and updates which it finds. Besides provides a user interface to monitor and read the feeds as well. Xtravo's system requirements simply include 10 megabytes (MB) of hard disk drive (HDD), 128 of random access memory (RAM), Net Framework 2 (Compulsory) and Windows Operating System. "Xtravo Explorer" more information & downloads available at http://www.jawoco.com


ISACA International Up Coming International Conferences

Calendar - 2009

Asia-Pacific

CACSSM

Euro

CACSSM

North

America CACSSM

Oceania CACSSM

Latin

America CACSSM

Date

23-24

February 2009

13-18 March 2009

3-7 May 2009

6-11

September 2009

20-23

September 2009

Location

Kyoto, Japan

Frankfurt, Germany

Orlando, Florida,

USA

Canberra, Australia

San José, Costa Rica

New 2009 ISACA conference and educational event dates have been released.

For the latest information, please visit

www.isaca.org/conferences


List of Board Members, ISACA Karachi

Huma Pasha President

[email protected]

Kamran Nishat Vice President

[email protected]

Musharraf Zaman Khan Secretary & Arrangements Committee

[email protected]

Muhammad Irfan Iqbal Treasurer

[email protected]

Waqar Ahmed Khan CGEIT Coordinator

[email protected]

Abdul Rasool Hoodbhoy CISA Coordinator

[email protected]

Azfar M. Hussain Co-CISA Coordinator

[email protected]

Rehan A. Khan CISM Coordinator

[email protected]

Ghazali Wasti Chair CPE Committee [email protected]

Mansoor Qadri Co-Chair CPE Committee

[email protected]

Muhammad Reyaz [email protected]

Arshad Sattar Chair Membership Committee [email protected]

Faisal H. Siddiqui Co-Chair Membership Committee

[email protected]

Kashif Alam Khan Chair Audit Committee [email protected]

Absar Khan Chair Publication Committee

[email protected]

Kashif Malik Chair Education Committee [email protected]

Abdur Rehman Andani Standards Liaison

[email protected]

Asif Mumtaz Chair Academic Relations

[email protected]

Fazal Karim [email protected]

Shamsuddin Surani

Chair Website Committee [email protected]

Kashif Qadir

Co-Chair Website Committee [email protected]

Khawaja Muhammad Ali Marketing Coordinator

[email protected]

Hussein Haji Past President

[email protected]

The Enlighten Online

Documents