Agenda Details

CISO Executive Summit
Date: Sunday, 18 April 2010
Time: 9am - 5pm

Sunday, April 18

8:00 AM - 9:00 AM Registration and Continental Breakfast Sponsored by SailPoint

9:00 AM - 10:00 AM
Opening Remarks and Keynote Address: The International State of Information Security, People, Processes and Technologies
Kevin Richards, CISSP, President, ISSA International
Over the past 20 years the face of information protection and critical infrastructure protection has changed dramatically. What we once viewed as frequent annoyances have changed into threats to national security, public safety and financial stability. Prof. Schmidt will talk about the progression of our dependencies on our systems and the evolving threats against those systems, and share ways to mitigate your risk. From application development to cyber crime, we can make progress on protecting data, intellectual property and our identities by employing the correct policies, people and technology.

10:00 AM - 10:45 AM
Breach Behavior: Its Cure and Prevention
Darrin Reynolds, CISSP, CISM, Vice President, Information Security, Diversified Agency Services, a Division of Omnicom Group
• How to tell your customer you just lost their data... to the Internet
• Common mistakes to avoid when responding to a breach incident
• Critical factors for conducting a breach investigation
• Managing a breach event for an improved client relationship
• Counter-intuitive tips for breach prevention

10:45 AM – 11:00 AM Refreshment Break Sponsored by Courion Corporation

11:00 AM – 12:00 PM
Featured Presentation: Securing the Cloud Today and Tomorrow
Dave Cullinane, CPP, CISSP, Chief Information Security Officer & Vice President, eBay MP Global Information Security
Cloud computing and the practice of utilizing IT infrastructure as an on-demand service is transforming the Internet and business itself. Securing Software-as-a-Service and other cloud-based computing creates significant challenges and opportunities. In this session, Mr. Cullinane will discuss the state of cloud security today, the impact of the best practices developed by the Cloud Security Alliance, and the key innovations needed to assure the future of secure cloud computing. The potential for "security clouds" to significantly enhance our ability to meet emerging security needs will also be discussed.

12:00 PM Networking Luncheon Sponsored by Q1 Labs

1:00 PM – 2:00 PM
Keynote Address: Security and the Generations: A Blueprint for the Future
Ray Stanton, Global Head, Business Continuity, Security & Governance Practice, BT
Mr. Stanton will take a visionary look at emerging trends in information security with regards to the effects driven both by the younger security generation, and the challenges and risks associated with managing the Power of Four - i.e. The Veterans, Baby Boomers, Generation X's and Y's. He will explore what this means in terms of managing today's environments, as well as social and psychological behaviors, and suggest ways for CISOs to overcome these challenges. Mr. Stanton will also discuss strategies for recruiting, training and maintaining talent – whatever the age.

2:00 PM – 3:00 PM
Optimizing and Automating Your Compliance Program
Gene Fredriksen, CISM, Chief Information Security Officer, Tyco International
• Understanding and documenting your compliance processes
• Optimizing the processes to get the best return for your effort
• Automating to build rigor into the process
• Involving your auditors early
• Continuously evaluating the efficiency and effectiveness of the processes, evolving them for greater cost effectiveness

3:00 PM – 3:15 PM Refreshment Break Sponsored by Courion Corporation

3:15 PM – 4:00 PM
Taking Over the CISO Role for a Large, Multi-Faceted Organization
Robert Booker, Chief Information Security Officer, UnitedHealth Group
• Assessing the existing program and extending capabilities to address emerging requirements of a dynamic economy and new regulations
• Creating a priority landscape
• Engaging key executive and operational stakeholders across business domains for alignment, support and execution
• Key performance indicators and critical success factors
• Embracing the dynamics of economy and new regulation while maintaining the integrity of the strategic plan and business focus

4:00 PM – 5:00 PM
Opposing Forces: Privacy and Social Networking
Paul Hopkins, Head, Network Vulnerability Intelligence, e-Security Group, University of Warwick
• The privacy issues and threats created by these sites
• How future regulatory and technical developments may impact these threats
• Exploring the impacts of greater user control of the data and the role organizations play in protecting and monitoring personal information
• Examining the business boundaries as organizations evolve

5:00 PM - 6:00 PM Networking Cocktail Reception Sponsored by BT