The IT Security Forum
The Forum PagesThe FormatTestimonialsResearchRichmond EventsContact Us
Conference | Delegates | Suppliers | Confirmed Attendees | Post Forum Tools
Testimonials
Very productive - an ideal way to develop new relationships for future opportunities.

Alan Reilly, Managing Director
Test Direct UK

More Testimonials


Forum Features


More Richmond Events
The CIO Forum
3 - 5 October 2010
Arizona

The IT Directors' Forum - Autumn
13- 16 October 2010
Southampton

The CIO Forum Financial Services
4th November 2010
New York

The IT Directors' Forum
18 - 21 May 2011
Southampton

The IT Security Forum
22 - 24 May 2011
Florida

The CIO Forum
22 - 24 May 2011
Florida

Full Forum Portfolio


Conference

We create The IT Security Forum conference program based on research and feedback from our clients, senior level IT executives who, like you, are dealing with critical issues on a daily basis.

Conference sessions are given by industry experts and IT executives who have a clear understanding of the business obstacles inherent in controlling large technology departments and how they can be managed and resolved.

Through small workshops and roundtables, you are able to share best practices, successful case studies, and receive opinions and suggestions from your peers. The entire conference is built around helping you become a more effective executive and opening doors to new perspectives and points of view.

CONFERENCE 2010 TOPICS
* Information Security
* Regulatory Compliance
* Data Leakage and Management
* Aligning Security Awareness with Business Strategy
* The impact of Web 2.0 on Business Security
* Feeling Safe in the Cloud
* Intrusion Prevention and Detection
* Securing your Budget and Information
* Mobile Asset and Personnel Management
* Leadership Development
* Team Building
* Talent Management


Highlights from past Conference Programs




FAILURE IS NOT AN OPTION: APOLLO 13 NARRATIVES FROM EARTH AND THE CAPSULE
OPENING KEYNOTE ADDRESS
Gene Kranz, NASA Flight Control Director and Captain James Lovell, Commander of Apollo 13


Gene Kranz
NASA Flight Control Director Apollo 13 and Presidential Medal of Freedom Recipient

Gene Kranz was the leader of the “Tiger Team” of NASA flight directors who guided the crippled Apollo 13 spacecraft safely back to Earth. His role in the crisis now legendary, Kranz was made famous by his oft-quoted phrase, “Failure is not an option.”


Captain James Lovell
Career Astronaut and Commander of Apollo 13

A great American hero, astronaut Jim Lovell is most famous for his role in the American space age, specifically for his calm and careful command of Apollo 13. Lovell stoically articulated the five-word message, “Houston, we have a problem,” which quickly became a part of the American lexicon.

 






AMERICA'S ECONOMIC FUTURE
CLOSING KEYNOTE ADDRESS
Dr. Barry Asmus Political, Business, and Financial Expert
Asmus identifies the “Six Unstoppable Trends” that are impacting America’s business and its economy. The current recession will temporarily slow these trends but not stop them. The Latin word for credit is credere, which means “to believe.” The de-leveraging and economic contraction begun in 2008 could last until 2010. But note this: we have had 13 economic recessions in the last 80 years followed by 13 expansions. Currently, 75 million Baby Boomers are in the high investment and most productive stages of their lives. Confidence will be restored. The end of prosperity? Or, is the best yet to come? Asmus’ presents his “Six Unstoppable Trends” and asks you to decide.

Dr. Barry Asmus is an effective advocate of free market economics. He is a recognized thinker who delivers his ideas in an enthusiastic and energy filled presentation. As a professor of economics, he was twice voted University Professor of the Year.





Conference Theme:
CRUCIAL SECURITY AND LEADERSHIP STRATEGIES ESSENTIAL FOR GROWING THE BUSINESS OF TECHNOLOGY IN AN UNSTABLE ENVIRONMENT
Workshops, Roundtables, and Presenters


IT Governance: Third Party Information Handling

Jennifer Bayuk, formerly CISO Bear Stearns

Countering Intrusions, Cyber fraud and Phishing
Special Agent, FBI

An Integrated Approach to Enterprise Security: Risk and Compliance Management
Dennis Devlin, CISO, Brandeis University

How the Rise of Eastern European Organized Cyber Crime Targets Your Infrastructure
Special Agent, FBI

Creating a Sense of Urgency: 8 Steps Necessary to Create Lasting Organizational Change
Ray Bender, Leadership & Technology Author

Performance Under Pressure: Leadership and Mental Toughness in Corporate America
Dr. Mark Lowry, Partner, Winning Mind
Marc Sagal, Managing Partner, Winning Mind

CISO/CSO Panel: The Future of Security and the Evolving Role of the Information Security Officer
Dennis Devlin, CISO, Brandeis University – Moderator
Jennifer Bayuk, CISO Bear Stearns
Paul Borchardt, CISO, BNP Paribas
Tim Callahan, CISO, People’s Bank

How to Stop Advanced Persistent Threats from Evading Detection
Eddie Schwartz, CSO, NetWitness

Putting It All Together: Trends in Business Intelligence
Dr. Claudia Imhoff, Intelligent Solutions

Business Technology Leadership
Raymond Dury, Formerly CIO, Fifth Third Bank

Tips and Tricks for Managing IT in Tough Times
Jane Landon, Deputy Commissioner & CIO, NY Dept. of Finance
Brad Friedman, SVP Information Services, Burlington Coat Factory

Lessons from a Combat Helicopter Pilot: Creating Your Own Leadership Identity
Ray Bender, Speaker, Author, Consultant, Colonel, U.S. Army (Ret.)

Structuring Effective Business Communications: Strategically Conveying IT Value To Business Partners through Compelling Proposals
Mike Figliuolo, ThoughtLeaders

Motivating and Retaining Your Top Talent in Tough Times
Eric Herzog, Quest Communications

The Five Dysfunctions of an IT Team
Bill Bertolet, Dale Carnegie
Gene Ritchie, Dale Carnegie






IT Governance Process: Third Party Information Handling
Workshop: Security
Jennifer Bayuk, formerly CISO Bear Stearns
Third Party Data Handling: Service providers routinely sign confidentiality agreements. But as each day brings a new account of data security breaches, it is obvious that many organizations do not really know how to keep data safe. This session describes things you can do to verify that your service provider (1) knows how to safeguard data and (2) actually uses that knowledge to control the systems environment where your data is kept. In addition, many companies are required by regulation to perform "due diligence" to assess whether a service provider actually has enough security in place to keep their confidentiality promises. The session describes standard industry practices in use to meet those requirements.





How the Rise of Eastern European Organized Cyber Crime Targets Your Infrastructure
Workshop: Security
FBI Special Agent
This presentation will focus on the growing trend of organized cyber crime emanating from Eastern Europe and targeting the financial, business, and retail infrastructure of the United States. In this session you will learn the following:

1. An FBI assessment of organized cyber crime including an analysis of organized cyber crime versus traditional cyber crime and the threat posed by these organized criminal groups.
2. How law enforcement can exploit the vulnerabilities these groups possess.
3. Steps you can take to mitigate the risk of compromise.

A case study will be presented that will highlight an organized criminal group operating in New York City.





How to Stop Advanced Persistent Threats from Evading Detection
Workshop: Security
Eddie Schwartz, CSO, NetWitness
Many of today's network advanced persistent threats from state sponsored attackers and organized crime groups are evading detection by your perimeter defenses--whether you know it or not. That's because most critical infrastructure organizations have developed an over reliance upon perimeter-based, network-layer focused point solutions that require signatures or profile based foreknowledge of a given technical threat. As proven through numerous serious security breaches in operational and command and control systems over the last few years, most signature and log-file-based security solutions are already entirely obsolete, and security solutions based upon statistical analysis of netflows and other network-layer telemetry provide limited and incomplete network visibility.

This session focuses on the true nature and sources of today's most difficult security threats, and describes actual solutions, both technology and operations related, required to detect and mitigate invisible threats. The speaker will illustrate actual technical case studies from the commercial and public sector to describe an effective operational plan of action consisting of the use of automated reporting and alerting, and interactive threat analysis applications built upon a distributed full packet capture and session reconstruction infrastructure. The session will demonstrate techniques that will enable your organization to detect and stop designer malware, zero-day attacks, and non-signature-based threats to improve overall network visibility, and to detect beacon Trojans and the leakage and exfiltration of valuable organizational data.

Attendees will learn:
• The technical reasons that advanced persistent threats are evading current perimeter-based point solutions such as IDS, log monitoring and flow-based technologies.

• The true nature and sources of threats facing public and private organizations and the gaps in current network visibility.

• Advanced techniques for next generation network monitoring using full packet capture and session reconstruction, and the network visibility improvements provided by this approach.

• Specific examples of adversary





FBI Briefing: Countering Intrusions, Cyber fraud and Phishing
Workshop: Security
FBI Special Agent

Session Description Currently Being Developed






CISO Panel: The Future of Security and the Evolving Role of the Information Security Officer
Panel: Security
Dennis Devlin, CISO, Brandeis University, Moderator - Jennifer Bayuk, CISO Bear Stearns - Paul Borchardt, CISO, BNP Paribas - Tim Callahan, CISO, People’s Bank - Gareth Webley, CSO National City
Information security is definitely not new. However, the formal titles of CISO and CSO did not widely exist until the 1990’s when organizations began to connect to the Internet. Much has changed over the past two decades, and the years to come promise to be even more challenging. There are actually security practitioners who were there since the early days and lived to tell about it. A few of them will be on this panel. Please join us for an exciting discussion of how the role of CISO and CSO has evolved from being Dr. No who blocked things at the border, to an internal consultant and evangelist who enables safe international electronic commerce. This panel of experienced security veterans will share their thoughts and observations on the past, present and future of information security and risk.





Is There Really a Difference Between Data Loss and Data Leakage Protection/Prevention?
Roundtable: Security
Tammy Moskites, CISM, IT Security Officer, Huntington National Bank
During this moderated session, Tammy will challenge each of you to think about whether there really is a difference between Data Leakage and Data Loss Protection...and what about Data Leakage Prevention? Discuss with your peers how the ultimate effects of data loss could cost your business millions of dollars simply by letting data get away to inside and/or outside nefarious hands.

Prepare yourselves to come into this session ready to discuss the topics below with the focus to make for this session highly interactive!

• How do you define Data Protection?
• What does the difference between Data Loss vs Data Leakage mean to you? Is it one in the same?
• Where does Data Leakage Prevention come into play?
• What impact does this have in your organization?
• How well do you think you understand all your data?
• Insider vs. Outsider - who is your biggest threat?
• What can we do?
  





An Integrated Approach to Enterprise Security and Risk and Compliance Management
Workshop: Security
Dennis Devlin, CISO, Brandeis University
There are multiple forces driving enterprise information security in 2009. The forces include meeting customer expectations, achieving regulatory compliance, mitigating stakeholder risk, protecting brand reputation, and maintaining public trust. Associated enterprise-wide security goals and requirements sometimes overlap, and at other times can appear almost incongruent. An enterprise risk management program operates at the confluence. This session will focus on some proven approaches to identify and manage enterprise-wide risk at the center, and at the same time develop a cost-effective, risk-aware, federated information security organization.





Lessons from a Combat Helicopter Pilot: Creating Your Own Leadership Identity
Workshop: IT Leadership
Ray Bender, Speaker, Author, Consultant, Colonel, U.S. Army (Ret.)
This session examines the parallels of leading Army helicopter units in combat and leading your organization under challenging conditions. This session will address actions of personal leadership such as developing a reputation, being visible, sharing hardships, and being approachable. We will also cover the importance of building a leadership brand and how to lead professionals in complex and stressful situations by building trust and organizational cohesiveness.

One of the most important parallels between Army helicopter units and today’s business environment is the shortage of skilled people and that they are all volunteers. They must be led rather than managed.





Business Technology Leadership
Workshop: IT Leadership
Raymond Dury, Formerly CIO, Fifth Third Bank
The role of the CIO is evolving dramatically. Providing technology services and products no longer suffice, you are now required to have the skills and knowledge to run your organization as a business. The profile of the successful CIO now demands active participation in setting strategy, defining company direction and leading your peers.

We will address:

* How do you recognize the change required of your leadership?

* How do you up the ante?

* Do you have the skills and knowledge to run your organization as a business?





Putting It All Together: Trends in Business Intelligence
Workshop: IT Leadership
Dr. Claudia Imhoff, Intelligent Solutions
• Operational BI - Business intelligence (BI) applications are playing an ever increasing and important role in driving and optimizing daily business operations. This trend is leading to major changes in both the functionality and the usability of BI-related technologies and products. Developing an operational BI strategy in this dynamic and constantly changing environment is not a simple task. Dr. Imhoff will cover how you can extend the traditional business intelligence environment to include operational BI capabilities. The result is an operational BI environment that enables companies to build a smart and flexible business decision making environment for optimizing operational business processes.

• Data Warehouse Appliances - Data warehouse appliances have caught the interest of many BI implementers with their promise of scalability, low cost, and ease of maintenance. This section will examine the objectives of a data warehouse appliance and the benefits gained from their usage. It discusses where appliances fit into a mature BI architecture and how they are being used by customers.

• BI Software as a Service (SaaS) - SaaS has evolved significantly to deliver software functionality in a cost-effective manner that supports all forms of business models. SaaS consists of blended software, infrastructure and business services across multiple usage and delivery platforms and business models. SaaS vendors must focus not only on cost-effective software delivery but also on helping users transform their business workflow and processes, i.e., the way they do business. Companies thinking of using SaaS technology for their BI environments must understand its benefits and drawbacks as well as the challenges to this new type of BI offering.

• Open Source BI – Another interesting sector of BI technology is the growth of open source vendors. This section will discuss what open source is, its pros and cons for BI, and why it is worth looking into. Finally we will discuss getting started with open source BI and guidelines to its usage.





Performance Under Pressure: Leadership & Mental Toughness in Corporate America
Workshop: IT Leadership
Dr. Mark Lowry, Partner, Winning Mind

We find ourselves in challenging times. In no place is this challenge more pronounced than in technology. Now more than ever, leaders must stay focused and composed despite the increasing difficulty in doing so.
High levels of stress and pressure bring out the best in some and the worst in others. Getting things done, keeping teams motivated, working effectively with business partners and keeping clients happy is challenging in even the best of times. How then do leaders succeed under the toughest of conditions?

Winning Mind. LLC works with leaders and performers who must be at their best under pressure. Borrowing from their work with Fortune 500 Executives, Military Leaders and Elite Athletes, this presentation will help you improve your mental toughness and leadership capacity. You will learn how increasing levels of stress impact your ability to perform; you will get first-hand exposure to techniques for keeping yourself and your team focused on what matters most; and you will walk away with practical approaches for keeping your head in the game no matter how crazy things get.
 






Creating a Sense of Urgency: 8 Steps Necessary to Create Lasting Organizational Change
Workshop: IT Leadership
Ray Bender, Speaker, Author, Consultant, Colonel, U.S. Army (Ret.)
If you are responsible for leading your organizations change effort but you don’t know where to start this session will point the way.

There are eight steps required to successfully lead change that leaders must be aware of. While all of the steps are important, creating a sense of urgency is paramount. This session will familiarize you with the eight steps and provide action items necessary to create a real sense of urgency in your organization.





Structuring Effective Business Communications: Strategically Conveying IT Value to Business Partners
Workshop: IT Leadership
Mike Figliuolo, ThoughtLeaders
While IT may have a seat at the table as a business partner, their recommendations to the business are often “lost in translation.” Many times this occurs because the recommendation is created and delivered in a manner that, while it makes sense to IT, it lacks a compelling story from the business’ perspective.

The objective of this session is to provide you a new thought process and methodology that helps you cut through the clutter. You will see how to deliver clear and compelling recommendations that will be readily implemented by the business. During this session you will learn how to:

• Craft a compelling “core idea” that resonates with key stakeholders

• Build a solid, logical “architecture” to support your ideas

• Draft a clear and effective story that articulates your recommendation and its rationale

• Syndicate your story with a broad set of key stakeholders (versus the narrow set that is the norm)

• Choose and perform the “right” set of analyses required to convince your business partners

• Deliver your recommendation clearly and succinctly





Tips and Tricks for Managing IT in Tough Times
Workshop: IT Leadership
Jane Landon, Deputy Commissioner & CIO, NY Dept. of Finance and Brad Friedman, SVP Information Services
Part of the CIO position in this economically challenging time is to demonstrate their ability to enhance relationships, establish a new found credibility and trust with key stakeholders. The old adage of “doing less with more” applies every day in today’s economy. This highly interactive workshop “Tips and Tricks for Managing IT in Tough Times" will provide you with actionable tips and techniques to help you navigate the turmoil and meet your CIO agenda.

Areas that will be discussed include IT procurement, contract (re)negotiation, “rightsizing” your organization, recruiting, and getting creative about low cost solutions. Jane Landon of the NYC Dept of Finance and Brad Friedman of Burlington Coat Factory will take you through some of their real life examples they have implemented at their respective businesses.





The Five Dysfunctions of an IT Team
Workshop: IT Leadership
Bill Bertolet and Eugene Ritchie, Dale Carnegie
Patrick Lencioni, a previous keynote speaker at Richmond Events, says “If you can get all the people in your organization rowing in the same direction, you can dominate your industry.” Author of The Five Dysfunctions of a Team, Lencioni points to Trust as the foundation for building solid teams. On a team, trust involves vulnerability, which is difficult for most people. Participants in this workshop will assess their own levels of trust, learn how to assess their people’s trust levels, and complete a Personal Histories Exercise that is the first step in building trust. A commitment towards addressing an area of weakness will be made.





Motivating and Retaining Your Top Talent in Tough Times
Roundtable: IT Leadership
Eric Herzog, Quest Communications

Session Description Currently Being Developed






Interactive Discussions Hosted by The Yankee Group
Roundtables: IT Leadership
Camille Mendler, VP Enterprise Research - Eugene Signorini, VP Enterprise Research - Zeus Kerravala, SVP Enterprise and Consumer Research
 
                      TOPICS:

* Cloud 99.99: Identifying the Metrics that Matter

* Supplier Governance: From Adversary to Partner

* Creating a Strategic Mobile Enterprise

* Managing and Benefiting from Consumerization in the Enterprise

* Virtualization Strategies: Beyond the Server

*Securing the Anywhere Enterprise



Richmond Events