October 1 st Smart Phone Security Awareness

Transcription

1 October 1 st Smart Phone Security Awareness Title: Smart Phone Security Attack Vectors and Controls Presenter: Eric Maiwald, Gartner Description: Even though they are sometimes found under the Christmas tree, handheld devices such as smart phones are no longer toys. These devices contain powerful processors, memory, and communications capabilities that make them, in reality, small versions of desktop computers. Although enterprises and employees have seen the benefit of using these devices, handhelds do contain sensitive information, and therefore, they must be protected. This assessment compares and analyzes the security controls of the most popular handheld-device environments and identifies third-party security products in an effort to inform enterprises as to how to manage the risks these devices present. Title: Securing Smart Phones Presenter: Mark Shull, SVP of Mobile Protection, McAfee Description: CIOs are faced with an ever changing technical landscape and smart phone technology is the latest challenge on their horizon. With the explosive proliferation of smart phones, coupled with an increase in demand for real-time access to critical information, smart phones are increasingly becoming the medium that enterprises are utilizing to meet their business needs for mobile access and employee productivity. With access to critical systems and data, these devices are becoming an ever increasing security risk and are making CIOs question how they can manage and support their organizations security policies. Through recent acquisitions, including Trust Digital, McAfee s Solutions are providing enterprise mobility management and security software which is deployed by a growing number of businesses to deliver mission critical data to the point of service. McAfee is addressing the mobile workforce and mitigating the risks associated with vulnerable or malicious mobile applications downloaded by employees and changing the mobile landscape. During this presentation, McAfee will present how these solutions are integrating with McAfee s endpoint protection capabilities such as antivirus, antispyware, host intrusion prevention, policy auditing, and firewall technologies to deliver the industry s first comprehensive mobile security solution. Attendees will also hear how they could benefit from centralized management and reporting of the integrated technologies through the McAfee epolicy Orchestrator (epo ) console.

2 October 8 th Cloud Security Awareness Day Title: Microsoft Cloud Security Demo Presenters: Al McKinnon, Microsoft; Andy Olenek, Microsoft; and George Spanakis, Microsoft Description: This presentation will provide attendees with a fundamental understanding how Microsoft can support their business needs well ensuring compliance with their organizations security requirements. Microsoft anticipating the needs of government designed its cloud computing services to meet and exceed internationally recognized access control standards, including the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the Sarbanes- Oxley Act of 2002, and the Federal Information Security Management Act of 2002 (FISMA). Microsoft cloud computing allows organizations better manage and reduce their IT costs to adapt to shrinking budgets, at the same time reducing environmental impact and creating more time for IT staff to focus on critical projects. Title: Developing a Cloud Computing Security Strategy Presenter: Dan Blum, Gartner Description: Organizations need a strategy to leverage cloud computing in a secure manner. This presentation discusses how to align cloud computing governance with security organizations, IT groups, and business units. It also discusses architectural considerations, cloud computing use cases, service provider assessment criteria, and cloud-enabling the organization's IT security infrastructure. 1 PM 2:30 PM Title: Protecting your data in the cloud Presenter: Chris Knepper, CSC Description: Leveraging cloud computing in a secure manner mandates that agencies ensure their data is secured. This presentation proposes key considerations when formulating a cloud data security strategy and it focuses on how to secure your data s security when it s in transit, at rest, and being backed up. The presenter will present the following architectural considerations for agencies considering cloud computing: Data security. Cloud computing use cases for data security. Service provider assessment criteria. Cloud standards and specifications relevant to data security.

3 The presentation also includes Cyber-related considerations, and offers case studies and lessons learned from cloud implementations across the public and private sectors. October 22 nd Desk Top Security Day Title: Planning for the Security Features of Windows 7 Presenter: Neil MacDonald, Gartner Description: This presentation analyzes the major security improvements with Windows 7, their pros and cons, as well as specific recommendations for planning their deployment. Title: Microsoft & Citrix Securing Virtualized Desktops Presenters: Al MacKinnon, CISSP, MCSE, MCT, MCTS-WS08 TBD, Citrix Description: This presentation is intended for individual who want to see how virtualized desktops can meet their organizational needs well ensuring they are secured. During this presentation, the presenter will discuss the pros and cons of implementing this solution and the security functionality built into it. Microsoft Desktop Virtualization solutions help organizations to reduce their total cost of ownership, increase business agility and continuity, enable anywhere access, and improve security and compliance. For organizations new to desktop virtualization, deploying Microsoft Application Virtualization as a first step can provide immediate cost savings. Desktop Virtualization offers a broad portfolio of solutions that empower organizations to choose the technologies that best address their unique business and IT challenges while preserving their existing IT investments. Microsoft delivers desktop virtualization offerings for a wide range of situations from always connected workers to those requiring more flexibility such as mobile workers. For connected workers, Microsoft and its partners, including Citrix, deliver a Virtual Desktop Infrastructure (VDI) solution that allows organizations to centrally manage desktops in the datacenter while providing a personalized desktop experience for end users.

4 October 29 th Wireless Security Awareness Title: Securing WLANs in the Enterprise Presenter: Paul DeBeasi, Gartner Description: One of the biggest concerns for many enterprises is that of securing a wireless local area network (WLAN). The fact that wireless signals are invisible and impossible to completely control means that a network manager never fully knows where the network is being accessed when a wired LAN is used. This presentation provides guidance for deploying secure WLANs by drawing on the wisdom Burton Group has gained as a result of assisting large, multinational enterprises with their wireless security architecture. Title: Wireless Security Technologies Presenters: Dave Fraser, CISCO Consulting Systems Engineer; Eric Mitchell, CISCO Systems Engineer Description: As the need for wireless technologies increases, so to does the risk of it be used to circumvent organizational network security protocols. These risks can range from employees using unauthorized access points to hackers sitting outside your building to capture unsecured data packets. During this presentation, Cisco will discuss their secure wireless solution which helps organizations provide secure mobility services to their customers, employees and partners, increase access to network resources, improve business processes and reduce costs. Topics to be covered and demonstrated include: Proactive threat and intrusion prevention capabilities to protect monitor, alert, classify and mitigate attacks that originate from the physical frequency thru the application layer that doesn't just detect wireless attacks, but prevents them in the first place Comprehensive protection to safeguard company confidential data and communications Simplified user management with a single user identity and policy across networks that also protects against unauthorized access Adaptive Wireless IPS (wips) is integrated in the Cisco Unified Wireless Network infrastructure and provides wireless-specific network threat detection and mitigation against malicious attacks, security vulnerabilities, and sources of performance disruption.

5 Registration To register, sign up through E-LMS -> Student Catalog -> Keystone Academy for Learning (KAL) -> KAL 2 IT Professional Learning Series - > Monthly Educational Sessions. Space is limited, registrants will be accommodated on a first come, first served basis. OR You can download and follow the instructions in the PowerPoint PDF document entitled E-LMS Registration Process.