1. The Mistakes QSAs Make © Branden Williams. All rights reserved. CONFIDENTIAL Presnted by: And other ways to get a migrane Branden R. Williams, CISSP, CISM Notably: FORMER QSA

3. Yep, some of these are boneheaded. © Branden Williams. All rights reserved. CONFIDENTIAL

4. Mistake #1 © Branden Williams. All rights reserved CONFIDENTIAL Making Up Requirements

5. Making Up Requirements © Branden Williams. All rights reserved. CONFIDENTIAL

6. Train the Trainer? © Branden Williams. All rights reserved. CONFIDENTIAL

8. Assessors like to be Security Pros © Branden Williams. All rights reserved. CONFIDENTIAL NOT Auditors

9. Mistake #2 © Branden Williams. All rights reserved CONFIDENTIAL Disagreeing over Comp Controls

10. Disagreeing over Comp Controls © Branden Williams. All rights reserved. CONFIDENTIAL

15. Mistake #3 © Branden Williams. All rights reserved CONFIDENTIAL QSA is Drunk with Power

16. QSA is Drunk with Power © Branden Williams. All rights reserved. CONFIDENTIAL

20. Mistake #4 © Branden Williams. All rights reserved CONFIDENTIAL The Buddy of the Executive

21. The Buddy of the Executive © Branden Williams. All rights reserved. CONFIDENTIAL

23. Mistake #5 © Branden Williams. All rights reserved CONFIDENTIAL The FNG

24. The FNG © Branden Williams. All rights reserved. CONFIDENTIAL

25. 3-day ground school program © Branden Williams. All rights reserved. CONFIDENTIAL

26. Imagine 3-day ground school © Branden Williams. All rights reserved. CONFIDENTIAL Oops

27. The FNG © Branden Williams. All rights reserved. CONFIDENTIAL The more prepared you are, the less of an issue this is.

29. Mistake #6 © Branden Williams. All rights reserved CONFIDENTIAL Focusing on Q/A not TCE

30. Focusing on Q/A not TCE © Branden Williams. All rights reserved. CONFIDENTIAL

32. Mistake #7 © Branden Williams. All rights reserved CONFIDENTIAL The Threat of the Future

33. The Future Threat © Branden Williams. All rights reserved. CONFIDENTIAL

35. Questions? © Branden Williams. All rights reserved. CONFIDENTIAL

36. General Disclaimer This document is not to be construed as a promise by any participating company to develop, deliver, or market a product. Branden R. Williams reserves the right to revise this document and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. Unpublished work of Branden R. Williams. © 2010 All rights reserved. This work is an unpublished work and contains confidential, proprietary and trade secret information of Branden R. Williams. Access to this work is restricted to Branden R. Williams and any employee who have a need to know to perform tasks within the scope of their assignments. No part of this work may be practiced, performed, copied, distributed, revised, modified, translated, abridged, condensed, expanded, collected or adapted without the prior written consent of Branden R. Williams. © 2010 Branden Williams. All rights reserved. CONFIDENTIAL

37. The Mistakes QSAs Make © Branden Williams. All rights reserved. CONFIDENTIAL Branden R. Williams, CISSP, Former QSA Click to edit Master text styles [email_address] blog.brandenwilliams.com Fin.