Anticipate the unexpected - ASIS 2012

TUEsDAY, sEPTEMbEr 20 • 1:45 pm–3:00 pm
3220 Getting From Here to There:
Advancing in the security Field
● Fundamental
With the ever changing world of the private
security sector, learning what it takes to ‘move up
the ladder’ can be challenging and confusing. a
panel of security veterans tell it like it is for those
ready to move up.
Jeffrey Hawkins, Manager, Security Management
Education Outreach, American Military University; Jeffrey
Slotnick, CPP, PSP, President, Setracon Incorporated; Ray
Van Hook, CPP, Executive Director of Campus Security, The
School of The Art Institute
3280 Forensics and the Cloud
■ Intermediate
due to the explosion of applications for cloud
computing, a new practice has emerged in
“cloud forensics.” In fact, the u.S. department
of Justice has begun to focus efforts in this area.
Who controls the evidence, including collection,
preservation, and validation of information
contained within the cloud? What happens if that
cloud is outside the united States? This session
attempts to explain what the cloud and forensics
mean in relation to one another.
3282 Picking the right Tool for
the Job: Using Vendor Tools to Aid in
the Development of secure Code
■ Intermediate
Building secure code is a top priority for
organizations today. as criminals move from
attacks against the operating system to third
party applications, organizations find themselves
on the receiving end of attacks. developing
secure code is not only technically challenging,
but is inherently difficult due to a variety of factors
including interaction with other code, and new
attacks. Many vendors have released tools to aid
developers in this endeavor. This session looks
at the application security products market and
discusses some of the options that organizations
have in choosing a tool.
Robert Ayoub, Global Program Director, Network Security,
Information & Communication Technologies, Frost and
Sullivan
TUESDAY
LEVEL KEY: ● Fundamental ■ Intermediate ▲ Advanced
3283 Mobile Applications: Managing
Enterprise risk and Exploitation
■ Intermediate
an emerging trend is for large organizations to
shift mobile device ownership and maintenance
to their employees to reduce business costs.
at the crossroads of this shift in IT governance
are smartphone applications and their ability
to access corporate resources and intellectual
property. not all smartphone applications are
created equal. Most organizations lack formal
processes to support centralized device
management, secure application distribution,
software security, and privacy control. Vetting
risk becomes increasingly embedded into the
converged mobile and Intranet architectures.
This session presents a mobile application risk
management framework which addresses
assessment and mitigation techniques.
Richard Tychansky, Information Assurance Engineer,
Lockheed Martin Corporation
3284 Putting Your House in Order—
business intelligence Gathered
From 100+ sustainable iT-GrC
implementations
■ Intermediate
Review best practices and concepts from
real-world IT GRc implementations proven to
work for 100+ organizations. decipher when to
apply various risk assessment methodologies
(top-down vs. bottom-up; threat-based vs.
business criticality). Gain an understanding
of existing controls framework and selecting
appropriate frameworks based on the target areas
and relevant regulations. Review techniques for
avoiding pitfalls of controls catalogue overload.
case studies highlight challenges of the IT GRc
program roll-out and exploring technology to
match the organization’s needs and
methodologies.
Vivek Shivananda, Founder/CEO, Rsam
“The seminar and Exhibits is
the best source for staying
current in the industry and
reviewing products.”
Mike Bruggeman
Director, Global Security
General Motors
September 19–22, 2011 | Orange County Convention Center | Orlando, Florida | www.asis2011.org 47