Anticipate the unexpected - ASIS 2012

Education sessions: 2000 Series
MONDAY, sEPTEMbEr 19 • 11:00 am–12:00 noon
2116 A Practical and Technological
Approach to Managing Workplace
Violence
▲ Advanced
effectively managing potential threats of violence
that may impact the workplace entails utilizing
a framework based on industry best practices,
collaborative partnerships, and technology. This
presentation provides an overview of the threat
management framework used by the Microsoft
Global Security Investigations team. hear how
the team assesses potential threats of violence
and specific security strategies used to mitigate
possible threats to its staff and facilities. The
presentation also reviews organization-specific
approaches and challenges to delivering threat
management services on a global scale.
James Louie, Group Investigations Manager, Microsoft
Corporation
2117 Corporate Account Takeover:
Online and in the real World
▲ Advanced
This presentation covers the tools, techniques,
and tactics of the online fraudster targeting large
corporate accounts for financial gain via account
Takeover (aTO). Specific schemes being utilized
will be discussed as well as emerging threats.
understand best practices for preventing this type
of fraud as well as advanced controls that will
help you protect your own company.
Matthew Harper, Group Vice President, Client
Authentication, SunTrust
2118 National security information:
Top Five Aspects to successfully
Protecting Our secrets
● Fundamental
Protecting vital national security assets is
becoming much more complicated and the
challenge to keep up can be overwhelming. The
name of the game in national security is change,
and at a scale and pace that is unprecedented.
This presentation offers a clear outlook on
what is really important and opens the floor for
discussion. Taking a look at the Top Five can
assist you in responding to the many threats
and risks in today’s changing landscape.
Dorene Colwell, Director Special Security Programs, Office
of Intelligence and Analysis, Department of the Treasury
2180 Next Generation Cloud security
Compliance
■ Intermediate
Security in the cloud requires automated
provisioning, continuous monitoring, and reporting
on control effectiveness over time—especially
important for any regulated industry which uses
either public or private cloud resources. elastic
provisioning of cloud resources must also include
adaptive security and privacy controls. Guidance
on creating a next generation security compliance
framework which is inherently tied to industry
standards is given and regulatory frameworks
will be presented.
Robert Weronick, CPP, Director of Global Security, Alexion
Pharmaceuticals, Inc.
2181 Critical infrastructure
Protection and risk Management
■ Intermediate
Whether it’s keeping the lights on, financial
markets running, or fresh water flowing from our
taps, critical Infrastructure permeates every
aspect of our daily life. In this interactive panel
discussion, we’ll explore how risk management
practices shape the protection of our very way
of life. The role of a risk-based approach to
protecting the nation’s critical infrastructure is
crucial to providing the best possible security
program for the limited resources at our disposal.
In this panel discussion, we’ll hear from all sides
of the issue.
Mark Weatherford, Vice President/CSO, NERC;
Diana-Lynn Contesti, Board Chairperson, (ISC) 2 ; Allan
McDougall, Principle, Evolutionary Security Management
“Absolutely the best conference for
learning, obtaining information on
state-of-the-art technology, and for
networking.”
carl Mountain
Senior Investigator, Global Security
Microsoft
24 Asis 2011 Anticipate the unexpected. The security tools, techniques, and talent for tomorrow.