Anticipate the unexpected - ASIS 2012

More documents

Recommendations

Info

Education sessions: 2000 Series MONDAY, sEPTEMbEr 19 • 4:30 pm–5:30 pm 2320 Protecting America’s Electric Grid ■ Intermediate The north american electric Reliability corporation’s (neRc) mission is to ensure the reliability of the north american bulk power system, and much is being done to protect the largest, most reliable grid on the earth. learn what neRc is doing to secure the grid from cyber and physical attacks. In addition, neRc will discuss security initiatives, the ongoing threat to industrial control systems, and the critical Infrastructure Protection (cIP) Reliability Standards. Brian M. Harrell, Sr., CPP, Manager of Critical Infrastructure Protection, North American Electric Reliability Corporation (NERC); Mark Weatherford, Vice President/ Chief Security Officer, North American Electric Reliability Corporation (NERC) Sponsored by the ASIS Utilities Security Council 2380 Cloud incident response ■ Intermediate The cloud. Where small and large organizations are going and have gone. You want to be in the cloud, but how do you protect it? If an incident were to occur, would you know? how will you detect, notify, isolate, and contain cloud-based incidents? explore a strategic approach to improving IR awareness and detection to meet the cloud’s elevated demands. learn to analyze your IR requirements across the IaaS, SaaS, and PaaS platforms; how to talk with your vendor; risks to management; and IR containment, recovery, and evaluation test procedures. Erika Voss, Consultant, CGI Federal; James Hewitt, Director of Security Governance, CGI 2381 Cyber security and the socio-Political Landscape: Going beyond the Technology ■ Intermediate Today, emerging issues around online security go beyond the threats to technology and its vulnerabilities. Threats are compounded by nation states engaging in cyber war as well as on-line criminals committing fraud for financial gain. With more people globally coming online and becoming Internet savvy, there is an associated political and social impact, as well as the rise of using new media for politically motivated objectives leading to new forms of manipulation and exploitation. cyber security is no longer just about protecting servers and networks from malware, denial-of- Service, and online compromise of information. Freddy Tan, Chief Security Advisor, Microsoft Asia 2382 The Economics of Failure ■ Intermediate In this session, we will discuss how much secure code costs in the software lifecycle. We will also look at how much patch management can impact the budgets of an organization as well as other good security practices. We also will compare all of the secure measures we take and then consider if it is worth it. In which areas can we just assume the risk? Eric Irvin, Solutions Architect, Alert Logic 2383 Mobile Devices: Employee Monitoring and Data Loss Prevention in Light of the Expectation of Privacy ■ Intermediate IT and business has long believed that they own the data that traverses their networks. as long as a banner and a policy existed informing users that no reasonable expectation of privacy existed, then it was perfectly legitimate to read, review, and record that data—until now. Based on three recent court cases, a company may be infringing upon an employee’s right to privacy if the company reads, reviews, or records that employee’s data traffic under certain circumstances. In this session we will discuss best practices and possible ramifications of the use of standard security and compliance monitoring tools, in light of recent case law. A. Spencer Wilcox, CPP, Supervisor, Compliance Services, Constellation Energy 2385 Why Do Developers Make These Dangerous software Errors? ■ Intermediate aimed at the entire development and acquisition lifecycle, the Masters of Software assurance (MSwa) adapts software engineering to software assurance (Swa). The MSwa Reference curriculum achieved Ieee and acM recognition. at the community college level, Software assurance Mobile Instruction (SaMI) is an iPad-based curriculum application set up for distance learning with a myriad of pre-loaded resources. The cybersecurity community supports the current developer workforce through free resources such as pocket guides. The Swa Forum Processes and Practices Working Group developed Swa benchmarking resources that synthesize existing software assurance best practices for use by development organizations addressing application security. 34 Asis 2011 Anticipate the unexpected. The security tools, techniques, and talent for tomorrow.
TUEsDAY, sEPTEMbEr 20 Schedule-aT-Glance all sessions will be held at the Orange county convention center. 8:00 am–9:00 am: KEYNOTE: Jeb Bush, Governor of Florida, 1999–2007 11:00 am–12:00 noon TUESDAY LEVEL KEY: ● Fundamental ■ Intermediate ▲ Advanced (ISC) 2 Security Congress LEVEL Arch/Eng/Design Crime/Loss Prevention Crisis Management Critical Infrastructure Global Government/Military Homeland Security Information/IT Security Investigations Legal Management Physical Security Professional Development Terrorism Young Professionals Systems Integrator NEW Application Security Cloud Security Governance, Regulation, and Compliance Mobile Security and Social Networking Swiss Army Knife 3101 ASIS Standards: Conducting a Risk Assessment—the Foundation for Successful Risk Management ■ X 3102 Security Engineering in High Threat Environments 3103 Crime, Terror, or Natural Disasters: ■ X X Medical/Preparedness Expertise/Critical Considerations for the Security Professional ▲ X X 3104 Integrator Series: Securing the University— Meeting Threats Inside and Out 3105 Setting the Standard: A Roundup of the ● X X X X X X Physical and Logical Technology Standards Affecting the Security Industry ▲ X X X X X 3106 Security Officer Training, Post Orders, and Negligence ■ X X X 3107 Considerations and Advancements in Providing a Defended Site Perimeter ● X X X X X X 3108 Excellence in High-Impact Security Education Training 3109 Update: The U.S. Department of ▲ X X X X Homeland Security and the Chemical Facility Anti-Terrorism Standards ■ X X X X 3110 Security Architecture and Engineering, Part 1: Basis of Security Design ■ X X X X X 3111 Lessons Learned: Trends in Extreme Violence in the Workplace ■ X X X X 3112 IT Security Council Series: Cyber Security 3113 What, Me Worry? The Global Privacy ● X Movement and Its Implications for the Modern Security Practitioner ■ X X X 3114 Managing the Corporate Security Culture Change ▲ X X 3115 Rail Security: Protecting the Customer’s Lading ● X X X X X 3116 Protests, Demonstrations, and Civil Unrest: Crisis Action Planning in Southeast Asia ■ X X X X 3117 Countering Business/Industrial Espionage in a Global Marketplace ▲ X X X X X 3118 Bolster Your Leadership Bucket List: 25 ‘Must Have’ Experiences for Security Leaders ■ X X X X 3119 Protecting Your Business: Understanding Islam and Islamofacism ● X X X 3180 Architecting and Building a Secure Virtual Infrastructure and Private Cloud ■ X X X 3181 Data Integrity Debate ■ X X X X 3182 Security ‘App-Titude’ ■ X X X 3183 The ABCs of Global Mobile Enterprise Compliance ■ X X X X X 3184 Control and Harmonization of Compliance Efforts Across Multiple Regulations ■ X X X X X 3185 Improve Your SDLC With CAPEC and CWE ■ X X X September 19–22, 2011 | Orange County Convention Center | Orlando, Florida | www.asis2011.org 35
Page 1 and 2: Seminar Overview Seminar Dates: Mon
Page 3 and 4: Program Highlights . . . . . . . .
Page 5 and 6: edUcation Solutions theaters. These
Page 7 and 8: Schedule of Events All programs and
Page 9 and 10: Fisher Labs Fleet Management Soluti
Page 11 and 12: Certification Activities ASIS CERtI
Page 13 and 14: Pre-Seminar Programs and Events Mak
Page 15 and 16: the Basis of Security Design: Funct
Page 17 and 18: collaborative and inclusive, and ho
Page 19 and 20: Tuesday SEPtEmBER 20 11:00 am-12:00
Page 21 and 22: 1:45 pm -3:00 pm MONDAY LEVEL KEY:
Page 23 and 24: MONDAY, sEPTEMbEr 19 • 11:00 am-1
Page 29 and 30: MONDAY, sEPTEMbEr 19 • 1:45 pm -3
Page 31 and 32: MONDAY, sEPTEMbEr 19 • 1:45 pm -3
Page 33 and 34: MONDAY, sEPTEMbEr 19 • 4:30 pm-5:
Page 35: MONDAY, sEPTEMbEr 19 • 4:30 pm-5:
Page 39 and 40: 4:30 pm-5:30 pm TUESDAY LEVEL KEY:
Page 41 and 42: TUEsDAY, sEPTEMbEr 20 • 11:00 am-
Page 43 and 44: TUEsDAY, sEPTEMbEr 20 • 11:00 am-
Page 45 and 46: 3185 improve Your sDLC With CAPEC a
Page 47 and 48: TUEsDAY, sEPTEMbEr 20 • 1:45 pm-3
Page 55 and 56: WEDNEsDAY, sEPTEMbEr 21 Schedule-aT
Page 57 and 58: 3:30 pm-5:00 pm WEDNESDAY LEVEL KEY
Page 59 and 60: WEDNEsDAY, sEPTEMbEr 21 • 11:00 a
Page 61 and 62: WEDNEsDAY, sEPTEMbEr 21 • 11:00 a
Page 63 and 64: 4183 identify, Assess, Mitigate: se
Page 65 and 66: WEDNEsDAY, sEPTEMbEr 21 • 1:45 pm
Page 71 and 72: THUrsDAY, sEPTEMbEr 21 • 8:00 am-
Page 73 and 74: President’s reception at Universa
Page 75 and 76: Loyalty has its rewards The VIP Alu
Page 77 and 78: FLORIDA Orlando as a premier destin
Page 79 and 80: Thank you to our Partners and spons

Anticipate the unexpected - ASIS 2012

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?