Connecting with Your Peers IT Challenges and Opportunities in 2012 A Facilitated Group Discussion Thursday, January 12, 2012

2 Today’s Agenda TimeTopic DescriptionSpeaker(s) 3:00 – 3:05Session IntroductionJim Enstrom Tim Demas 3:05 – 3:50Small Group Break-out Discussions N/A 3:50 – 4:50Facilitated Group DiscussionJim Enstrom Tim Demas Table Leaders/Spokesperson 4:50 – 5:00Session Wrap UpJim Enstrom Tim Demas

3 Today’s Learning Objective Today’s overall learning objective is to gain insights into IT priorities, challenges and opportunities for 2012, for IT and IT compliance/audit professionals.

4 Session Rules of Road Everyone’s participation is valued -- so we encourage you to share information, ask questions, and learn from your peers! CAUTION – This is not a confidential forum, so understand your company’s policies regarding sharing of information Respect everyone’s point of view Don’t monopolize the floor, and be respectful of everyone’s time Turn off cell phones, PDAs etc.

5 Who’s in Our Audience Today?

6 Survey Results – Top IT Priorities for 2012 IT governance related priorities including: –Budget, spending constraints, demonstrating ROI –Effective project management –Compliance management / impact of regulation –Audit remediation –IT risk assessment –Customer service –Metrics and reporting –Linkage to ERM

7 Survey Results – Top IT Priorities for 2012 (cont’d) Cloud and virtualization priorities –Policy development –Security and privacy –Vendor management Information security –Security governance –Mobile security (BYOD) –Advanced Persistent Threats (APTs)

8 Survey Results – Top IT Priorities for 2012 (cont’d) Social media ERP – including compliance and auditing requirements for large-scale implementations Data Loss Prevention (DLP)

9 Top Issues, Challenges & Opportunities Topic #1: Threats to Effective IT Governance Topic #2: IT Regulation – Burden or Opportunity? Topic #3: Cloud, Virtualization, Mobile, Social Media – Common Risk Management Threads Topic #4: IT Security – the Changing Landscape Topic #5: Organizational Change Enablement: Communicating IT Risk Issues with Impact Topic #6: Third Party Vendor Management

10 Small Group Discussions First, assign a group “scribe” to take notes on the flip chart. Discuss the following questions: 1.What are the key issues or challenges associated with your topic? (consider some of the points we just discussed) 2.What are ways that company’s can more effectively deal with these issues or challenges? In other words, what solutions have worked for you? 3.Now, consider the flip side – what are the opportunities associated with this topic? 4.Discuss solutions or ideas you have to exploit these opportunities. 5.Lastly, discuss and consider what this topic means to the IT risk management professional – IT compliance and IT audit professionals. After you have completed discussing these topics, let one of the facilitators know. You should assign a spokesperson for your group.

11 Facilitated Session We will spend approx 10 minutes on each topic. Please be mindful of this time requirement. –Topic #1: Threats to Effective IT Governance –Topic #2: IT Regulation – Burden or Opportunity? –Topic #3: Cloud, Virtualization, Mobile, Social Media – Common Risk Management Threads –Topic #4: IT Security – the Changing Landscape –Topic #5: Organizational Change Enablement: Communicating IT Risk Issues with Impact –Topic #6: Third Party Vendor Management

12 Session Wrap-up Feedback on the session Thank you: Jim Enstrom Vice President, ISACA Chicago Chapter Tim Demas Program Director, ISACA Chicago Chapter