IIA RESPONSE TO SEC P ROPOSAL FOR ENCHANCED DISCLOSURES…..1 FINISH S TRONG AND THE RIDDLE MONTH ......................... 2 OF THE IIA….. 3 ISACA TRAINING AND ABOUT THE AND 4 October 2009 The Institute of Internal Auditors HTTP://WWW.THEIIA.ORG/CHAPTERS/CENTRALARKANSAS Central Arkansas Chapter The IIA Responds to SEC Proposal for Enhanced Disclosures The IIA recently responded to the U.S. Securities and Exchange Commission’s (SEC’s) proposed amendments to rules to enhance the compensation and corporate governance disclosures registrants are required to make. These disclosures include compensation policies, executive stock and option awards, director qualifications and legal proceedings, company leadership structure, the board of director’s role in the risk management process, and potential conflicts of interest of compensation consultants. In its response, The IIA commended the SEC’s proposal for enhanced disclosures as a significant and positive step, but suggested a different approach in some areas. For example, rather than requiring that specific information be disclosed for the investor to make a decision concerning the independence and objectivity of the compensation committee’s consultant, The IIA advocated a formal assessment of independence be made by the committee and included in the report on Form 10-K. Additionally, The IIA shared its belief that disclosures related to the board of director’s oversight of risk management should be strengthened by inclusion of a formal board assessment of management’s processes. The IIA also included suggestions for consideration regarding an effective, independent, and resourced internal audit function. “The IIA has long been an advocate for transparency in governance and we feel the SEC’s proposal, in general, is a significant and positive step toward advancing that objective,” said IIA President and CEO Richard Chambers. “Our response recommends a variety of approaches that we feel would enhance transparency and accountability — especially regarding the board’s involvement in risk management and how it should relate to a variety of decisions, an issue that is top-of-mind to investors after the significant corporate failures of late.” The IIA’s complete response to the SEC’s proxy disclosures and solicitation enhancements can be downloaded from the Responses to Regulators and Oversight Bodies section of The IIA’s Web site. This article was found on the IIA website. For the link to the article click here. The next Central Arkansas IIA Chapter meeting will be on November 4th! We hope to see all of you there! Finish Strong In sports, it is not uncommon to hear stories of how successful teams have rallied in the face of adversity behind a player, coach, or motto to stay motivated throughout the season. An example of this is the 2008 University of Florida football team that attributed much of its success to the motto “Finish Strong.” Despite an unexpected, early-season setback, this motto permeated the lives of players and coaches on and off the field and “Finished Strong,” eventually winning the school's third national championship. The champions were motivated to Finish Strong in the classroom. Finish Strong in the weight room. Finish Strong in practice. Finish Strong on every play. Finish Strong in every game. Most games are decided in the second half. Finish Strong every season. Very difficult to win a championship if you lose late. Candidates preparing for the CIA Exam can take this motto and apply it to their study preparations. Finish Strong on each practice test. Finish Strong each day you study. Set a goal and meet it. Finish Strong with your review. The final days are when you should undertake a cumulative review and focus on your weak areas. Finish Strong when answering each question on your exam. Put to use the test-taking skills you have Gleim Contact Information learned. Finish Strong at the exam center. Be in control. You have done everything you can to be adequately prepared to PASS the exam. Remember, there are others who are not as well prepared as you. Gleim Publications, Inc. 4201 NW 95th Blvd Gainesville, FL 32606 800.874.5346 Ext. 147 This is something that carries over to each of our lives. Finish your day strong by ending it on a positive note. Finish what you have started, and not just for the sake of finishing it, but with the intention of doing the job well. Fax 352.375.6940 Hours: Mon-Fri 8am-7pm Website http://www.gleim.com/ Gleim Discount As a member of the chapter, you are eligible for a 20% discount on Gleim's CIA Review materials. In addition, the Chapter will receive 20% of your Online CPE purchase. Keep in mind that as a Central Arkansas IIA Chapter member, you will receive a 20% discount on the Gleim CIA Review materials, which include over 3800 practice multiple-choice test questions. To take advantage of the reduced prices, please contact our chapter representative, Melissa Leonard at 1-800-874-5346 ext 131. Contact Melissa at 800.874.5346, ext. 131 or melissa.leonard@gleim.com to take advantage of this offer or if you have any questions. This article was written by Melissa Leonard. Riddle of the Month See if you can solve the riddle of the month. The first to respond with the correct answer will be named the “Riddler of the Month” in next month’s newsletter. Good Luck! Good at math? Try this one....If 1=3, 2=3, 3=5, 4=4, 5=4, 6=3, 7=5, 8=5, 9=4, and 10=3. What does 15=? Click here to email your answer. Congratulations to September’s Riddler of the Month: Sarah Runyan, Windstream. Last month’s riddle: Complete this sequence of letters: o, t, t, f, f, s, s, _, _, _. Answer: e, n, t. Need CPE’s for your CISA, CISM, CGEIT, CISSP or other certification? Got a limited budget for training and traveling? Have we got a deal for YOU! The Central Arkansas ISACA Chapter is holding a two-day workshop on Securing and Auditing Your Remote Access Applications. Taught by MISTI instructor Ken Cutler, this seminar can help you get a handle on your roaming users. The combination of small office/home high-speed Internet service, virtual private networks, mobile computing, and wireless technology have empowered a rapidly growing population of highly mobile, decentralized workers. These technologies have also unfortunately spawned opportunities to create numerous backdoors on many enterprise networks for both inbound and outbound access. In this diversified network security and audit workshop, you will explore the various wired network access methods and issues associated with extending the reach of the enterprise network, in conjunction with and apart from the firewalled connections to the Internet and other public networks. You will evaluate different security safeguards and audit procedures including: authentication mechanisms, enterprise authentication systems, end-point security, virtual private networks, and portable computing device security. Topics covered include: Risk analysis of remote access and mobile computing Sorting out the choices for enhanced user authentication protocols and mechanisms Remote access authorization procedures Enterprise authentication systems: RADIUS, TACACS+ Trusted and secure virtual private networks (VPNs) Remote control software - friend or foe? Securing notebooks, tablets, smart phones, and PDAs and other mobile computing environments Staying out of trouble with portable, removable storage media Audit procedures for testing the security and controls remote access and mobile computing applications Sound like something you can use? Keep reading! This seminar will be 2 days of training at the Verizon Wireless Regional Headquarters in Little Rock on November 12-13. Thursday’s session will be from 8 am until 5 pm and Friday’s will be from 8 am until 3:30 because we know no one likes to stay late on a Friday! If you went to Framingham, MA for this class, you’d be paying over $1500 just for the course. Add in travel expenses and it could be twice that! For only $400, members will receive 15 CPE credits (non-member fee is $500). That’s less than $27 per CPE and we even feed you lunch. For registration, go to www.ark-isaca.org and send a check or purchase order to: Central Arkansas ISACA P.O. Box 2305 Little Rock, AR 72203 C HAPTER L EADERSHIP About the IIA 2009-10 Officers President........... Shannan Knudsen* Vice President... …...Heather Harris* Established in 1941, The Institute of Internal seminars for professional development, and Web Treasurer ............. Jonathan Adams* Auditors (IIA) is an international professional -based training; produces forward-looking edu- Secretary.............. Open association with global headquarters in Alta- cational products; offers quality assurance re- Committee Chairpersons monte Springs, Fla., USA. The IIA is the internal views, benchmarking, and consulting services; Membership ......... Kyla Moran* audit profession's global voice, recognized au- and creates growth and networking opportunities thority, acknowledged leader, chief advocate, for specialty groups. and principal educator. Members work in inter- Website ................ Ryan Creswell* Newsletter ............ Tina Lephiew* Certification......... Michele Shroyer* Scholarship/Academic Relations…Camesha Young* Chapter Audit ...... Ken Bland nal auditing, risk management, governance, in- The IIA also brings great value to its members ternal control, information technology audit, through Internal Auditor, an award-winning pro- education, and security. fessional magazine, and through other out- Patrick Patton ...... At-Large standing periodicals that address the profession’s Curtis Summers ... At-Large The world’s leader in certification, education, most pressing issues and challenges and present * Also holds a seat on the Board of Governors. research, and technological guidance for the pro- viable solutions and exemplary practices. And fession, The Institute sets the International Stan- in support of quality, professionalism, and ethi- dards for the Professional Practice of Internal cal practices, The Institute provides internal Auditing and provides various levels of accom- audit practitioners, executive management, panying guidance; certifies professionals through boards of directors, and audit committees with the globally recognized Certified Internal Audi- guidance for internal auditing and governance tor® (CIA®) and specialty certifications in gov- best practices. ernment, control self-assessment, and financial services; presents leading-edge conferences, Institute of Internal Auditors Website Have you visited the IIA Website lately? The Institute of Internal Auditors website offers the latest news, discussion groups, e-learning, research reports and a forum for connecting with other internal auditors. Here are a few pages that may be of interest to you. Professional Guidance Periodicals Certification Bookstore Training Career Center Research Foundation Chapters & Institutes Membership Board of Governors C ONTACT I NFORMATION P.O Box 854 Little Rock, AR 72203 Phone: 501-303-5418 Fax: 501-303-5481 Newsletter: Tina.M.Lephiew@wind stream.com Web: http://www.theiia.org/ chapters/ centralarkansas