Meeting Notes

Attendees:

• Keith Watson, CERIAS
• Preston Wiley, CERIS
• Ben Lewis, ITNS
• Steve Griese, Internal Audit
• Terry Aldridge, Internal Audit
• Addam Schroll, ITNS
• Darcy Kihlstrom, Internal Audit
• Cherry Delaney, ITNS
• Greg Hedrick, ITNS
• Utsav Mittal, CERIAS

Discussion Points:

1. We did a round of introductions for new members of the group. We were joined by three new members from Internal Audit.

2. We reviewed the notes from the previous meeting and provided an overview of the previous meeting and action items.

3. We reviewed the CPE opportunity list that Steve Santy created and to which Preston Wiley contributed. Preston also explained his spreadsheet method of tracking CPE credits when listening to podcasts.

4. We reviewed the proposed mission statement and organizational activities. Addam Schroll proposed massaging the wording slightly to make it more like a traditional mission statement.

5. We reviewed the international security organizations research conducted by the members. Each individual involved in the research provided a short summary of the findings. Those summaries and recommendations are provided on the wiki.

6. The results of the international security organizations discussion are as follows:

   ASIS: Requires fifteen ASIS members to form a chapter. It is unlikely that we can meet that membership requirement.

   (ISC)^2 Affiliated Local Interest Group (ALIG): This affiliation is very flexible and requires no money or dues. It has no requirements on forming a particular type of organization. Discounts are available to ALIGs. Cross marketing opportunities are essential to this relationship.

   ISACA: There are several ISCA members and Central Indiana ISACA chapter board members in the group. All chapter members are required to be ISACA members. Membership would be expensive. Forming a chapter takes more than one year of processing, negotiating, and approvals.

   ISSA: Less rigid in chapter formation though it requires ten ISSA members. Membership in ISSA is required and is also expensive.

   Infraguard: Requires US Citizens and criminal background investigation. There is also no interest from Infraguard in forming new chapters. (Most attendees found the requirements unappealing.)

7. Further discussion lead to these conclusions:

   • ASIS and Infraguard are NOT viable options.
   • (ISC)^2 ALIG is beneficial regardless of the organization or affiliation.
   • ISACA and ISSA are well-known but expensive options for students and new members.

8. We discussed creating a less formal association that would avoid the problems associated with forming a chapter, nonprofit status, collecting money, tax filing, etc. A summary will be posted to the wiki for further discussion.

9. We discussed locations for holding meetings. The CERIAS conference room, ITaP conference facilities, the Purdue Technology Center's conference room, the Vistech-1 building conference/training room, and the local public library meeting rooms are possibilities. Terry Aldridge brought up the issue of using Purdue facilities with non-Purdue people in attendance. She will investigate the issue and report back.

10. Future meetings times were discussed. Meeting during work hours might only be possible for some staff. If CPE credits are offered, there may be more support from managers. We should consider meetings outside of business hours. Keith will research the issue with members of the group to determine a suitable time for meetings.

11. A brief discussion on leadership and organization was held. If we continue with the proposed independent association there are no requirements for a strict management structure. As a result, Keith Watson was cajoled into continuing on as a benevolent dictator in the manner of free software project management, not the enlightened absolutism kind (we hope).

Action Items Assigned:

NOTE: All deliverables should be posted to the wiki or sent to the group email list for review by March 20, 2009.

1. Addam Schroll will create a variation of the proposed mission statement. He will also create a new vision statement and list of organizational goals. These will be posted along side the current statement. Other members are encouraged to create their variations on the same page and attached their name to them for discussion.

2. Keith Watson will investigate ASIS to see if there is a member directory. If so, these individuals may be contacted to determine their level of interest in joining.

3. Ben Lewis will investigate the ins and outs of staff-oriented university clubs or organizations. The model is the Purdue Working Parents club.

4. Greg Hedrick will investigate GLITS membership and meeting schedules to avoid conflicts.

5. Keith Watson will work on determining the best times for meetings.

6. Keith Watson will summarize the proposed independent association model.

7. Utsav Mittal will talk with his fellow students to determine their interest and expectations from the organization.

8. Terry Aldridge will look into the issues around using Purdue facilities with non-Purdue individuals in attendance.

9. Steve Santy will investigate certification study groups. Specifically, what study materials already exist, meeting times that are appropriate, possible presenters, interested students, etc.