Dear Members,

ISACA Singapore Chapter would like to kindly invite you to one day Enterprise Key Management Infrastructure(EKMI) Workshop.

As the internet continues to become more hostile and Information Technology infrastructure comes under contractual and government regulation (PCI-DSS, PCSA, HIPAA, FISMA), IT Auditors are challenged with having to audit increasingly sophisticated security infrastructures to assess their compliance with these regulations. Encryption of data is fast becoming the last bastion of defense. However, as global enterprises face the daunting task of encrypting sensitive data across hundreds of thousands of laptops, PDAs, desktops, databases, servers and other devices, they are required to establish an enterprise-wide key-management strategy that balances their security objectives with lower operational costs and complexity. Enterprise Key Management Infrastructure (EKMI) is the discipline designed to deliver on that objective. EKMI addresses the complexity of managing all cryptographic keys within a single infrastructure using industry-standard protocols and guidelines. As companies start to implement EKMI, IT Auditors must keep pace with this complex technology so they do an effective job of assessing them for risk-mitigation. This workshop is geared to provide that information.

What the EKMI Workshop covers

The workshop will cover the following topics:
· An Introduction to EKMI
· A Detailed Description of EKMI Components (Public Key Infrastructure and Symmetric Key Management System)
· How an EKMI works
· A Demonstration of a Symmetric Key Management System (SKMS)
· Installing an SKMS (Lab Session – Students must bring their own laptop to participate in the lab)
· Understanding various ways how an EKMI can be attacked (There may be a demonstration of this, time-permitting)
· Distinguishing between strong and weak controls in an EKMI

About the Presenter

Arshad Noor is the Chief Technology Officer of StrongAuth, Inc., a Sunnyvale, California-based company that specializes in Enterprise Key Management, Identity Management and Compliance Work-flow Management. He is the architect and lead developer of StrongKeyTM, an open-source implementation of a Symmetric Key Management System (SKMS), whose protocol is the basis for the Symmetric Key Services Markup Language (SKSML) standard being formalized by the OASIS EKMI Technical Committee; StrongAuth donated the SKSML protocol to OASIS on a royalty-free basis for the standardization effort. Arshad is also the current Chair of the OASIS EKMI TC that currently has 28 members on its committee, including Visa, Wells Fargo, Red Hat, the US Dept. of Defense and many other companies and individuals in the security industry. He has spoken at many international conferences on EKMI, including the ISACA International Conference in Singapore in July 2007.

The details are as follows:

Venue: M Hotel
Date: 6th November 2007
Time: 8.30 am to 5.30 pm (Registration starts at 8.00 am)
Fee: S$450.00(ISACA and IIA members)
S$520.00 (non-members)

Registration

To register, visit the www.isaca.org.sg and register online. The deadline for registration is on 1st November 2007. Registration will only be confirmed upon receipt of payment before the start of classes. Notes and course materials will be given to all participants.

Please post cheque made payable "ISACA Singapore Chapter" to:

ISACA Singapore Chapter
101 Cecil Street
#09-12 Tong Eng Building
Singapore 069533
Attn: Ms Anny
(Please indicate on the reverse side of your cheque, Your Name, Contact Details)

ISACA Singapore Chapter reserves all rights to modify the timing, date and/or topic due to availability of trainers/facilities.

Please direct all queries to admin@isaca.org.sg.

Look forward to meeting you at the workshop.

Regards,
Ram Marappan
Board of Directors
ISACA Singapore Chapter