BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Definitive Conferencing - ECPv6.18.3.1//NONSGML v1.0//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-ORIGINAL-URL:https://defincon.co.za
X-WR-CALDESC:Events for Definitive Conferencing
REFRESH-INTERVAL;VALUE=DURATION:PT1H
X-Robots-Tag:noindex
X-PUBLISHED-TTL:PT1H
BEGIN:VTIMEZONE
TZID:Africa/Johannesburg
BEGIN:STANDARD
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
TZNAME:SAST
DTSTART:20250101T000000
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
DTSTART;TZID=Africa/Johannesburg:20261125T080000
DTEND;TZID=Africa/Johannesburg:20261127T170000
DTSTAMP:20261001T124337Z
CREATED:20261001T124337Z
LAST-MODIFIED:20261001T124337Z
UID:3719-1795593600-1795798800@defincon.co.za
SUMMARY:Why Cutting Anti-Fraud Training Now Is Penny-Wise\, Pound-Foolish
DESCRIPTION:If you’ve had a training course cancelled this year because of “no budget\,” you’re not alone — it’s the reason we’re hearing more than any other right now. \nBut here’s the problem: fraudsters don’t answer to a budget committee. While organisations tighten their belts\, criminal networks are investing in AI-generated deepfakes\, automated phishing\, and OSINT tools to target the very gaps that under-resourced teams leave open. \nThis article explains why cutting anti-fraud\, risk\, and audit training now is a penny-wise\, pound-foolish move — and more usefully\, how to reposition your department from a cost centre to a profit centre so that leadership actually approves the budget next time you ask. \n\nWhat’s Inside the Article\n📌 What P&G\, Netflix\, Amazon\, and Lego did differently during the 2008 downturn — and what Coca-Cola’s 2020 ad cut cost them by comparison \n📌 The five categories of financial impact most risk and audit teams already deliver but rarely report \n📌 A one-page ROI summary template your team can use to build the business case for your own training budget \n📌 Two ready-to-use email templates for submitting a training request that leadership will actually take seriously \n\nDownload the Article\n👉 Download the full article here \n\nUpcoming Anti-Fraud Training Course\nProactive OSINT Investigations\n📅 25 – 27 November 2026\n📍 Definitive Conferencing\, Corner of Definitive Lane & Kruin Street\, Harmelia\, Isando\, Gauteng \n👉 Download the Anti-Fraud Training Catalogue \n\nAbout the Author\nMario Fazekas CFE\, LPEC\nOwner — AuditLink Training and Consulting \n📧 mario.fazekas@auditlink.net\n🌐 auditlink.net\n📞 +27 (0) 83 611 0161 \nFeel free to share this article with colleagues who are fighting the same budget battle.
URL:https://defincon.co.za/event/why-cutting-anti-fraud-training-now-is-penny-wise-pound-foolish/
LOCATION:Definitive Conference Center\, ext\, Corner of Definitive Lane &\, Kruin St\, Harmelia\,\, Germiston\, Gauteng\, 1619\, South Africa
CATEGORIES:Training Workshop
ATTACH;FMTTYPE=image/png:https://defincon.co.za/wp-content/uploads/2026/10/Anti-fraud-training-budget-business-case-article-AuditLink-Mario-Fazekas-South-Africa-2026.png
ORGANIZER;CN="AuditLink":MAILTO:mario.fazekas@auditlink.net
END:VEVENT
BEGIN:VEVENT
DTSTART;TZID=Africa/Johannesburg:20261202T080000
DTEND;TZID=Africa/Johannesburg:20261204T170000
DTSTAMP:20261028T101932Z
CREATED:20261028T101751Z
LAST-MODIFIED:20261028T101932Z
UID:3731-1796198400-1796403600@defincon.co.za
SUMMARY:Auditing Cyber Security & Information Security NIST & ISO 27002 Course
DESCRIPTION:This auditing cybersecurity and information security NIST ISO 27002 course is designed for internal auditors involved in IT audits or those interested in audit activities that require an understanding of how to manage the impact of cybersecurity events on business risks. This auditing cybersecurity and information security NIST ISO 27002 course allows auditors to examine preventive\, detective\, and corrective controls and how to apply the audit process to a cloud environment. \nAttendees will be exposed to the mobile environment and cyber standards\, and learn how to audit common security solutions — all through the lens of the NIST Cybersecurity Framework (CSF 2.0) and ISO 27002:2022. \nWho Should Attend?\nThis course is designed for those who need to understand and wish to undertake security audits\, including internal auditors involved in IT and cybersecurity audit activities. \nPlease review the content and course levels before booking to ensure you are attending the right course. \nCourse Content\nDay 1 — Foundations of Cybersecurity Auditing and Governance \nSession 1: Course Introduction and Overview of Cybersecurity\nIntroduction to course objectives\, cybersecurity landscape\, key business risks\, and the role of auditors in managing cybersecurity events. Overview of preventive\, detective\, and corrective controls. Introduction to NIST Cybersecurity Framework (CSF 2.0) and ISO 27002:2022 as audit references. \nSession 2: Cybersecurity Governance and Connections to Networking Concepts\nCybersecurity governance principles\, roles and responsibilities (board\, management\, auditors). NIST CSF Governance function and ISO 27002 organisational controls. Networking fundamentals relevant to audits including architecture\, protocols\, and common vulnerabilities. \nSession 3: Hacking\, Cyberwarfare\, and Internet Security\nCommon attack vectors\, threat actors\, and cyberwarfare implications from an audit lens. Auditing internet-facing controls\, firewalls\, and perimeter security using NIST/ISO mappings. Audit techniques for identifying weaknesses. \nSession 4: Cyber Security Governance Deep Dive and Audit Process\nAligning organisational governance with NIST and ISO 27002. Audit planning\, risk assessment\, and evidence collection for governance controls. Interactive exercise: mapping governance policies to NIST CSF and ISO 27002 controls. Case study on governance failures. \nDay 2 — Technical Controls\, Cloud\, Mobile\, and Encryption Auditing \nSession 1: Personal Data Security\, Encryption\, and Digital Certificates/Identities\nEncryption principles\, key management\, and data protection controls. Digital certificates\, PKI\, and identity management auditing. Audit procedures for data classification and protection. \nSession 2: Wireless Security\, Mobile Security\, and Cloud Environment Auditing\nWireless and mobile threats and controls including Wi-Fi security\, device management\, and BYOD. Auditing cloud environments: shared responsibility model\, configuration management\, and controls using NIST Cloud Computing resources and ISO 27002. Practical audit checklists for IaaS/PaaS/SaaS. \nSession 3: Auditing Common Security Solutions\nFirewalls\, IDS/IPS\, endpoint protection\, access controls\, and vulnerability management. Mapping to NIST Protect/Detect functions and ISO 27002 technical controls. Hands-on exercise: reviewing sample security solution configurations from an audit perspective. \nSession 4: Audit Application and Case Studies\nIntegrating preventive\, detective\, and corrective controls in audits. Group activity: develop audit test plans for cloud and mobile scenarios\, common pitfalls\, and best practices. \nDay 3 — Incident Response\, Forensics\, Legal Aspects\, and Audit Closure \nSession 1: Digital Forensics and Investigations\nForensics principles\, evidence handling\, and chain of custody in audits. Integrating forensics readiness into security programmes. Audit review of investigation processes. \nSession 2: Computer Security Incident Response Teams (CSIRTs) and Incident Management\nCSIRT structures and incident response lifecycle using NIST CSF Respond/Recover functions. Auditing incident detection\, response\, and recovery controls including metrics\, reporting\, and continual improvement. \nSession 3: Legal Framework in South Africa\nOverview of key laws: Protection of Personal Information Act (POPIA)\, Cybercrimes Act\, and other relevant regulations. Auditor responsibilities regarding data breaches\, privacy\, and compliance. Mapping South African requirements to NIST/ISO for integrated audits. Case studies on compliance failures and audit findings. \nSession 4: Course Integration\, Best Practices\, and Assessment\nHolistic audit approach combining all elements into a comprehensive cybersecurity audit. Reporting findings\, recommendations\, and follow-up. Emerging trends\, auditor toolkit (checklists and tools)\, final exercise\, Q&A\, and certificate of completion. \nTopics Covered\n\nOverview of cybersecurity\nCybersecurity connections to networking concepts\nHacking and cyberwarfare\nInternet security\nPersonal data security and encryption\nWireless security and mobile security\nDigital certificates and identities\nDigital forensics and investigations\nComputer Security Incident Response Teams (CSIRTs)\nLegal framework (South Africa — POPIA & Cybercrimes Act)\nCyber security governance\n\n\nContact:\nProject Coordinator: CPD and Events\nmduduzi@governanceacademy.co.za | 011 609 1761 Ext 403 \nLeadership Academy
URL:https://defincon.co.za/event/auditing-cyber-security-information-security-nist-iso-27002-course/
LOCATION:Definitive Conference Center\, ext\, Corner of Definitive Lane &\, Kruin St\, Harmelia\,\, Germiston\, Gauteng\, 1619\, South Africa
CATEGORIES:Training Workshop
ATTACH;FMTTYPE=image/jpeg:https://defincon.co.za/wp-content/uploads/2026/10/Auditing-Cyber-Security-and-information-Security-NISTISO.jpeg
ORGANIZER;CN="Leadership Academy":MAILTO:neo@governanceacademy.co.za
END:VEVENT
BEGIN:VEVENT
DTSTART;TZID=Africa/Johannesburg:20261209T080000
DTEND;TZID=Africa/Johannesburg:20261211T170000
DTSTAMP:20261103T083223Z
CREATED:20261103T082055Z
LAST-MODIFIED:20261103T083223Z
UID:3735-1796803200-1797008400@defincon.co.za
SUMMARY:Performing an Effective Quality Assessment Course
DESCRIPTION:A hallmark of a quality internal audit function is the ability to keep pace in a dynamic environment. Consistently monitoring the quality of the internal audit function provides audit leaders\, the board\, and other key stakeholders with the assurance that internal audit is performing at its highest level — providing value throughout an evolving organisation. \nThis performing an effective quality assessment course will provide you with the appropriate knowledge and skills to plan\, perform\, and evaluate the results of an external quality assessment case study. You will also learn about the process and templates in The IIA’s Quality Assessment (QA) Manual — based on the newly published Global Internal Audit Standards — so that you can identify opportunities to improve your internal audit function’s quality activities. \n⚠️ Important Note: This course uses the newly published QA Manual based on the Global Internal Audit Standards™. The new QA Manual is not included in the course fee — candidates are advised to purchase and download the manual before attending. There is no formal test or assessment at the end of this course. Candidates should visit www.theiia.org for guidance on the Quality Assessor Certification Program and access to the QA examination. \n\nWho Should Attend?\nLevel 2 — Internal auditors who are already practicing internal audit and have a basic understanding of the subject. \nLevel 3 — Supervisory/competent/senior internal auditors: those who already have a sound\, practical grasp of the fundamentals of internal auditing and manage staff. \nLevel 4 — Advanced internal auditors with an excellent understanding of topics being presented\, who are interested in exchanging knowledge with instructors and other participants. \nPlease review the content and course levels before booking to ensure you are attending the right course. \n\nCourse Content\nQuality Assessment Manual and Process Overview \n\nOverview of the Global Internal Audit Standards\, including standards referencing quality\nThe IIA’s Framework for Quality Assessment for external and internal quality assessments\nCommon quality assessment questions using The IIA’s IPPF resources\nQuality Assessment Manual process flow and tools\nThe three types of internal audit quality assessment\nQuality Conclusion Model\, Maturity Assessment\, and Performance of the Internal Audit Function\n\nTypes of Quality Assessments \n\nInternal Quality Assessments — advantages and limitations\nExternal Quality Assessments — frequency\, full assessment\, and validation\nSelecting external and internal assessors\n\nPlanning the Quality Assessment \n\nImplementing QA Manual planning tools\nKey features of planning guides and surveys\nAnalysing survey results\nPractical Case Study\n\nPerforming the Quality Assessment \n\nImplementing QA Manual tools for internal and external assessments\nKey features of interview guides and QA programmes\nAnalysing interview and QA programme results\nPractical Case Study\n\nEvaluating QA Results \n\nApplying evaluation criteria to common QA scenarios requiring professional judgement\nDetermining final ratings and evaluation results\nKey features of the QA evaluation framework and tools\nDeveloping value-added solutions for common QA issues and opportunities\nPractical Case Study\n\nPeriodic Internal Quality Assessment Approaches \n\nDeveloping an efficient and effective periodic internal assessment approach\nIPPF guidance on periodic internal QA\nCommon periodic assessment challenges and solutions\nFactors needed for an efficient and effective periodic internal QA programme\nPractical Case Study\n\nExternal Quality Assessment Options \n\nDetermining the external QA option best suited to your internal audit activity\nPros\, cons\, and considerations of external QA options\nRationale for selecting the best external QA option\nSuccessful practices for preparing for an external assessment\n\nContact:\nProject Coordinator: CPD and Events\nneo@governanceacademy.co.za | 011 609 1761 Ext 414
URL:https://defincon.co.za/event/performing-an-effective-quality-assessment-course/
LOCATION:Definitive Conference Center\, ext\, Corner of Definitive Lane &\, Kruin St\, Harmelia\,\, Germiston\, Gauteng\, 1619\, South Africa
CATEGORIES:Training Workshop
ATTACH;FMTTYPE=image/png:https://defincon.co.za/wp-content/uploads/2026/11/Performing-an-Effective-Quality-Assessment.png
ORGANIZER;CN="Leadership Academy":MAILTO:neo@governanceacademy.co.za
END:VEVENT
END:VCALENDAR