|
9:00am-10:00am
Justifying Security Expenditures in Your
Organization to the Business Decision Maker
Marilyn Dement, Senior Security Product Manager,
Verio
Enterprises today experience new security
threats and identify vulnerabilities on an
almost daily basis. Many
security initiatives aimed at mitigating
security threats are misunderstood by company
management and remain un-deployed, leaving
critical business infrastructures inadequately
protected. Budget authority within many IT organizations is often
limited, requiring final decisions to be
determined by non-technical decision makers, who
don’t understand the technical requirements or
implications. This session will cover ROI
methodologies and approaches that can be used to
help technical executives speak in the business
decision maker’s language to successfully secure
funds.
10:00am-10:30am Refreshment Break
10:30am-11:30am
The Role of Security in an Effective Compliance
Program
Brian Polick, Security Solution Director,
Computer Associates
Polick |
An automated and sustainable compliance effort
requires a centralized way of managing user
identities, controlling access to protected
resources, whether they be enterprise
applications, platforms, system devices,
databases or web services. It also requires an
efficient way to allocate and de-allocate
resources as individual user identities are
created, removed or modified. Lastly, any
sustainable compliance methodology requires a
centralized and effective way of auditing,
monitoring and potentially responding to
security events within the enterprise. Our
speaker will cover:
-
The Landscape of Regulatory Compliance
-
The Role of Security Management In
Compliance
-
A Compliance Security Management Platform
-
Key Capabilities of a Security Compliance
Platform
-
Moving from Compliance to Improved Business
Performance
This presentation will provide you with an in
depth understanding of the importance of
security management, especially identity and
access management, to a full compliance program.
11:30am-12:30pm
Bridging the Gap Between Network and Security
Management – A Panel Discussion
Moderator:
Brendan Hannigan, Executive VP,
Q1Labs
Panelists:
Jason Witty, Manager, Information Security,
Options Clearing Corporation
Paulette Hradnansky, Director, Information
Security Operations, Motorola
Arlene Yetnikoff, Director, Information
Security, DePaul University
Tyrone Parker Jr., Global IS Security Manager,
Hewitt Associates
David Shue, Member of Technical Staff – Security
Operations, Lucent Technologies
Hannigan |
Shue |
Network devices and security products
proliferated in response to emerging network
applications and evolving security threats
respectively. Now these previously diverse
technologies are converging within the
same hardware and footprint in your enterprise,
and yet the management of network and security
remain in their distinct silos. Can there be
common ground established between networks and
security, and what does this mean for the
enterprise as a whole? A panel of enterprise IT
departments will share their experiences
in
bridging the gap between network and security
management.
12:30pm-1:30pm Luncheon
1:30pm-2:30pm
Managing a Secured Network Infrastructure
Tim Davidson, Consulting System Engineer,
Cisco Systems
Davidson |
Taking at face value all the security solutions
that are implemented, the training security
practitioners receive and the corporate/security
policies that are adhered to, one would think an
enterprise would be safe from external &
internal threats. Think otherwise!
-
Firewalls often fail because they're
configured and maintained improperly.
-
IDSs are often useless because of slow
response time to alerts—and/or failure to
separate the real attacks from the false
alarms.
-
SIMs encounter the same problem: unless
there's a human security expert monitoring
them, they're not defending anything.
This presentation will cover the keys to
designing and implementing an effective security
management framework for your organization which
includes the following:
-
Defining effective security policies
-
Strategies for centralizing security policy
enforcement
-
Successfully managing identities and access
-
Techniques for consolidating security events
-
Strategies for effectively containing
security threats
-
Tactics for preventing human error due to
improperly configuring, maintaining and
managing the various security devices in
your network.
2:30pm-3:30pm
Simplifying the Complexity of Security
Management
Tony Sabaj, Named Account Engineer, Check Point
Software
Sabaj |
Enterprises face a daily onslaught of security data generated
by disparate security systems, platforms and
applications. The incessant flood of data can
bring any security organization to a halt. Not
only is it difficult to manage and interpret
millions of messages, but demonstrating the
value of a security system still remains a
tricky proposition for most security and IT
organizations – especially when the system costs
less when it's working. Attendees will learn
how to successfully implement
Security Management Tools for their
infrastructure, including how to:
-
Effectively manage multi-vendor systems
while maintaining an in-depth defense system
-
Rapidly deploy a management system that will
be easy-to-use on an ongoing basis
-
Pinpoint and take action on important
security events in real-time
-
Architect a system that provides the
rationale and ROI for your overall security
infrastructure
-
Uncover the hidden costs of security
management tools before investing into a
system
-
Choose a management system right for your
organization with selection criteria tips
3:30pm-4:00pm - Refreshment Break
4:00pm-5:00pm
Implementing an Enterprise SIM: Trials &
Tribulations from the Field
Derek Milroy, Security Architect, The Corp Sec
Project
Milroy |
Derek is a popular speaker at CAMP known for his
"hands-on approach" . This presentation will
cover the following topics Security Information
Management topics:
-
Identifying your monitoring needs
-
How to run an effective pilot that will enable you to
determine the scope of your SIM
implementation (sample numbers for hardware
will be presented)
-
Strategies for dealing with Microsoft security logs
-
Tactics for correlation and alerting
-
Implementing a Virtual SOC vs. a SOC
-
Integrating your SIM with your IR Process
-
Report generation for compliance efforts
The
frameworks and checklists that Derek will present have all
been proven in production environments.
Each attendee will receive a certificate
awarding 7 CPE credits for CISSP continuing
education,
in addition to 0.7 CEUs.
CISSP is a registered certification mark of
(ISC)˛, Inc.
In this one day conference you, will learn the following:
-
We will
explore Security Identity Management (SIM)– How to take the
abundance of raw data and transform it into actionable
intelligence.
-
Strategies
for identifying the most crucial security events in
your enterprise. You must decide what to watch for before
implementing monitoring of your entire environment.
-
How to
effectively determine valid security incidents and integrate
the output from your SIM solution into your Incident
Response program.
-
Using SIM
solutions to document compliance with
monitoring requirements as per various laws.
-
Strategies
for reducing false positives
-
Using
security event monitoring to facilitate identifying ways to
prevent future attacks.
-
How to
provide the right information at the right time so threats
are accurately detected
-
Keeping
the impact of an attack to an absolute minimum
-
Strategies
to ensure a successful full scale enterprise deployment over
a variety of platforms
|
