ISO 17799: IT Code of Practice for Information Security Management

By Gary E. Carpenter

Have you recognized the need to protect your company’s or your client’s information, and heard of the cyber risks, yet remain uncertain as to how to begin building a good information protection system? As is often the case, the real risks to an organization are unclear. Therefore, a detailed analysis of the risks and adequate planning may be useful to optimize resource allocation to develop a well-thought-out information protection program.

There are many security standards that can shed light on issues related to information protection. One of them is ISO 17799.

Learn about some of the most important aspects of ISO 17799 through attending the Dec. 12 evening continuing professional education (CPE) presentation organized by the New York State Society of CPAs Technology Assurance Committee. The benefits of a top-down information security strategy, implemented from the bottom up, will be highlighted during the event, which will cover the following topics:

• Information protection and business risk
• Baseline for security policy
• Introduction to ISO 17799

Date: Thursday, Dec. 12, 2002

Time: 6:00 p.m. to 6:30 p.m.: registration, networking, free sandwiches and soft drinks
6:30 p.m. to 7:30 p.m.: CPE session

Presenter: Oscar Kolodzinski, MBA

Location: NYSSCPA headquarters, 530 Fifth Ave. (between 44th and 45th streets), fifth floor, New York City

About the Presenter

Oscar Kolodzinski is an international finance and operations executive who, most recently, served as CFO for the international MSP and professional services firm NextGen Internet, with services focused on computer network security.

Mr. Kolodzinski founded Phiary Consulting to assist IT departments and senior management of small and medium-sized companies in shifting the focus of computer network security from technology-driven solutions to a risk management, business-driven approach that is tied to corporate goals. A member of the NYSSCPA, Mr. Kolodzinski can be reached at oskolo@alumni.gwu.edu or oskolo@att.net.

Additional Information

This NYSSCPA/Foundation for Accounting Education (FAE) CPE evening presentation is free for NYSSCPA members and $15 for nonmembers to qualify for one hour of CPE credit.

At the session you will get the chance to network with the profession’s and the industry’s IT leaders.

Advance registration is recommended because seating is limited.

For additional information, contact Gary E. Carpenter at (315) 487-4567 or gcarpenter-cit@worldnet.att.net or Bruce H. Nearon at (973) 403-6955 or bnearon@jhcohn.com.

Registration

To register: contact FAE at (212) 719-8383 or (800) 537-3635 or visit the Society’s website at www.nysscpa.org (you will need your Society member number to register). Select the Find Committees link at the left of the screen, scroll down to the Technology Assurance Committee, select it, and then select “12/12/02 ISO 17799: IT Code of Practice for Information Security Management” located under the Free IT CPE banner.

For more information on the Technology Assurance Committee, visit www.nysscpa.org, click on the committees tab on the left-hand side of the page and then scroll down to the Technology Assurance Committee link.

Acknowledgments

J.H. Cohn LLP and Carpenter Information Technologies, Inc., helped provide the funding and resources for the refreshments, marketing and publicity, and administration of this event.