Information Security in Higher Education
|
|
|
- Joseph Tyler
- 8 years ago
- Views:
Transcription
1 Information Security in Higher Education Joanna Grama, JD October 20, 2015 OARnet CIO Meeting
2 Agenda Information Security in Context REN-ISAC EDUCAUSE Cybersecurity Initiative EDUCAUSE Annual Conference
3 Speaker Bio Joanna Grama Director of Cybersecurity and IT GRC Programs at EDUCAUSE Lawyer by training Credential hoarder by choice (CISSP, CIPT, CRISC) Admitted work-a-holic who becomes bored easily Social media addict (Reformed?) helicopter parent
4 Information Security in Context
5 It s Scary Out There
6 Information Security is a Top 10 IT Issue Not Just Once in 2015 Source: EDUCAUSE Top 10 IT Issues, Trends Interactive Graphic.
7 Information Security is a Top 10 IT Issue But Twice. Source: EDUCAUSE Top 10 IT Issues, Trends Interactive Graphic.
8 Data Is The Target User credentials/passwords Personally identifiable information Financial information Health information Proprietary information/trade secrets Research data Information about how networks and IT resources work Confidential information that, if released, could cause personal embarrassment
9 Data Breaches by Industry Source: ECAR, Just in Time Research: Data Breaches in Higher Education, May 2014.
10 Data Breaches in Higher Education Source: ECAR, Just in Time Research: Data Breaches in Higher Education, May 2014.
11 Data Breaches in Higher Education Source: ECAR, Just in Time Research: Data Breaches in Higher Education, May 2014.
12 Data Breaches in Higher Education Number of breaches per year Source: EDUCAUSE Review, This Magic Moment: Reflections on Cybersecurity, September, 2015.
13 Introduction to REN-ISAC
14 REN-ISAC Research and Education Networking Information Sharing and Analysis Center Kim Milford, Executive Director
15 Mission The REN-ISAC mission is to aid and promote cyber security operational protection and response within the higher education and research (R&E) communities. The mission is conducted within the context of a private community of trusted representatives at member institutions, and in service to the R&E community at-large. REN-ISAC serves as the R&E trusted partner for served networks, the formal ISAC community, and in other commercial, governmental, and private security information sharing relationships.
16 Ohio Higher Education Members OARnet Ashland University Case Western Reserve University Denison University Eastern Gateway Community College John Carroll University Kent State University Kenyon College Marshall University Miami University Oberlin College The Ohio State University Ohio University Owens Community College Sinclair Community College University of Akron University of Cincinnati Wittenberg University Xavier University Youngstown State University
17 REN-ISAC Components Private Trust community CSIRT for.edu Sector ISAC R&D
18 Private Trust Community Membership is open to: Colleges and universities Teaching hospitals R&E network providers Government-funded research organizations Member representative eligibility: Very specific job responsibility requirements: institution-wide operational protection and response (essentially the IT Security Office (or alike) security engineers, architects, and direct managers) Tightly circumscribed to maintain a high level of trust and interaction among the representatives 2 tiers, differing in eligibility criteria, trust vetting, sensitivity classification, and the commitment-level of the institution
19 Private Trust Community Member participation is a cornerstone of REN-ISAC Member contributions through participation: Board Technical Advisory Group Microsoft Analysis Team Membership Committee Member Orientation and Engagement Committee Technical webinars Services development Projects, e.g. sensor development Special Interest Groups, e.g. SIEM, Forensics, Bro, etc.
20 Private Trust Community Information products (e.g. Daily Watch, Advisories, and Alerts) Benefit from REN-ISAC relationships in broad security community Benefit from REN-ISAC / vendor security cooperation relationships Participate in technical educational security webinars Participate in REN-ISAC meetings, workshops and training Access to the 24x7 REN-ISAC Watch Desk Develop relationships with known and trusted peers
21 CSIRT for.edu Daily notifications, directly and privately to abuse contacts at.edu institutions concerning compromised or vulnerable systems, credentials, and other incident involvement In service to all of US.EDU regardless of membership, and international members Over 12,000 notifications per month Over 1,800 institutions notified 24x7 Watch Desk Represent the sector in forums of private, commercial, and governmental CERT/CSIRTS
22 EDU Sector ISAC Trusted partner for the R&E community Member, National Council of ISACs Formal relationship with DHS/US-CERT Cross-sector information sharing Public alerts aimed at R&E security practitioners, CIOs and business officers
23 R&D CSIRT Tools RINO (Ren-Isac NOtification system) Receives, collates, and distributes notifications concerning observed compromised or vulnerable systems RIHF (Ren-Isac Human Filter) Process notifications based on data that requires operator vetting and interaction. RINO and RIHF aren t currently released open-source but we re hoping to get there.
24 Relationships APWG (Anti-Phishing Working Group) DHS/US-CERT and other national CERTS and CSIRTS EDUCAUSE Global Research NOC at IU Higher Education Information Security Council Internet2 LE (various) National Council of ISACs NCFTA
25 Organization Hosted by Indiana University (fiscal and administrative agent) Eight full-time staff Governed by a Board formed from among the members (2/3) plus sponsoring and host organizations Relationship with the Higher Education Information Security Council (HEISC, similar in concept to a Sector Coordinating Council (SCC))
26 Fees FY2016 (July June 2016) are unchanged from the rates established for FY2015 Fees are calculated according to a modified Carnegie Classification (CC) model, based on the CC Basic2010 of U.S. colleges and universities. The 30+ CC classes are mapped to 4 REN-ISAC classes: Very High Research $2,500 High Research $2,250 Large Master's and Doctoral/Research $1,500 All Other $1,250
27 Introduction to the EDUCAUSE Cybersecurity Initiative
28 EDUCAUSE Cybersecurity Initiative Lead by the Higher Education Information Security Council (HEISC); an EDUCAUSE and Internet2 partnership Working Groups Yearly Security Professionals Conference The Information Security Guide (practitioner resource) Mentoring Program Security Discussion List The Higher Education Information Security Council (HEISC) supports higher education institutions as they improve information security governance, compliance, data protection, and privacy programs. Learn about HEISC and its programs at
29 Working Groups Awareness and Training Governance, Risk, and Compliance Technologies, Operations and Practices Information Security Guide Editorial Board Security Conference Program Committee Higher Education Chief Privacy Officers
30 Security Professionals Conference Established 2000 Only conference for higher education information security practitioners April 18-20, 2016 in Seattle, WA CFP open now! Submit by 11/9/2015
31 Information Security Guide Effective practices and solutions Created by higher ed security professionals for higher ed security professionals Based on ISO View the Information Security Guide at:
32 InfoSec Program Assessment Tool Self-assessment tool Based on ISO questions Appropriate for institutional or unit use View tool at:
33 InfoSec Research from EDUCAUSE Core Data Service Core Data Reporting (M7) Almanacs CDS Spotlights ECAR Infused throughout research Infographics EDUCAUSE Leader materials
34 Next Week! Security & Privacy at the EDUCAUSE Annual Conference DHS Deputy Assistant Secretary Gregory Touhill speak about the Importance of a Cybersecurity Education. Briefing: Cyber threats facing colleges and universities today. Learn more:
35 Resource List
36 Resource List Resources for Presidents and Senior Executives: Information Security (EDUCAUSE): Top Information Security Strategic Issues (EDUCAUSE): REN-ISAC Public Alerts and Advisories: Grama & Milford, This Magic Moment: Reflections on Cybersecurity:
37 Questions? Please ask questions so that I don t have to tell jokes or show embarrassing family pictures for these last few minutes. Joanna Grama
REN-ISAC Research and Education Networking Information Sharing and Analysis Center
REN-ISAC Research and Education Networking Sharing and Analysis Center EDUCAUSE and Internet2 Security Professionals Conference April 2007 Introductions Mark Bruhn AVP for Telecommunications, IU AD, Center
Research and Educational Networking Information Analysis and Sharing Center (REN-ISAC)
Research and Educational Networking Information Analysis and Sharing Center (REN-ISAC) Doug Pearson Director, REN-ISAC ren-isac@iu.edu Copyright Trustees of Indiana University 2003. Permission is granted
Information Security
Information Security CDS Spotlight: June 2013 Research Bulletin June 14, 2013 ECAR CDS Spotlight Series Gregory W. Hedrick, Director, Security Services, Purdue University Joanna Grama, Portfolio Manager,
Enhancing NASA Cyber Security Awareness From the C-Suite to the End-User
Enhancing NASA Cyber Security Awareness From the C-Suite to the End-User Valarie Burks Deputy Chief Information Officer, IT Security Division National Aeronautics and Space Administration (NASA) Agenda
CYBERSECURITY LEADERSHIP
CYBERSECURITY LEADERSHIP David G. Delaney, JD, MALD Deputy Director, CACR Visiting Assistant Professor, Maurer School of Law dgdelane@indiana.edu 812-855-4230 William K. Barnett, PhD Associate Director,
Report on CAP Cybersecurity November 5, 2015
Agenda Number 7. Report on CAP Cybersecurity November 5, 2015 Phil Cook CISSP, CISM Manager, Information Technologies Risk #1 External Attacks PR 81 Protect and secure CAP's Information Technology assets
Department of Homeland Security
Department of Homeland Security Cybersecurity Awareness for Colleges and Universities EDUCAUSE Live! July 24, 2014 Overview Dramatic increase in cyber intrusions, data breaches, and attacks at institutions
North East Regional Bias Against Information Security Threat
Summary Information Security North East () is a forum for council and public service information security managers from Northumberland, Tyne and Wear, Durham and the Tees Valley 1. is also the Warning,
OhioLINK Membership and Participation Policy Approved 9/1 6/97
OhioLINK Membership and Participation Policy Approved 9/1 6/97 Guiding Principles: OhioLINK(OL) was created as a service to all citizens of the State of Ohio through its ability to support and enhance
Utica College. Information Security Plan
Utica College Information Security Plan Author: James Farr (Information Security Officer) Version: 1.0 November 1 2012 Contents Introduction... 3 Scope... 3 Information Security Organization... 4 Roles
ISE Northeast Executive Forum and Awards
ISE Northeast Executive Forum and Awards October 3, 2013 Company Name: Project Name: Presenter: Presenter Title: University of Massachusetts Embracing a Security First Approach Larry Wilson Chief Information
Logging In: Auditing Cybersecurity in an Unsecure World
About This Course Logging In: Auditing Cybersecurity in an Unsecure World Course Description $5.4 million that s the average cost of a data breach to a U.S.-based company. It s no surprise, then, that
North Texas ISSA CISO Roundtable
North Texas ISSA CISO Roundtable Roundtable Topic Threat Against Our Well Being The Most Effective Methods in Combating and Responding to the Cyber Attack Event Sponsor Moderator and Panelists David Stanton
Cyber Risks in the Boardroom
Cyber Risks in the Boardroom Managing Business, Legal and Reputational Risks Perspectives for Directors and Executive Officers Preparing Your Company to Identify, Mitigate and Respond to Risks in a Changing
Information Security Program CHARTER
State of Louisiana Information Security Program CHARTER Date Published: 12, 09, 2015 Contents Executive Sponsors... 3 Program Owner... 3 Introduction... 4 Statewide Information Security Strategy... 4 Information
Working with the FBI
Working with the FBI WMACCA Data Privacy & Security Conference September 17, 2014 Individuals Organized Crime Syndicates Hacktivist Groups Nation States Nation-States Individuals Industry Law Enforcement
Data Security Breach. How to Respond
Data Security Breach How to Respond About ERM About The Speaker Information Security Director at ERM CISSP, CISA, CRISC, PCIP, PCI-QSA Core Experience: Information Assurance Computer Forensics Penetration
Stepping Through the Info Security Program. Jennifer Bayuk, CISA, CISM
Stepping Through the Info Security Program Jennifer Bayuk, CISA, CISM Infosec Program How to: compose an InfoSec Program cement a relationship between InfoSec program and IT Governance design roles and
Testimony of. Before the United States House of Representatives Committee on Oversight and Government Reform And the Committee on Homeland Security
Testimony of Dr. Phyllis Schneck Deputy Under Secretary for Cybersecurity and Communications National Protection and Programs Directorate United States Department of Homeland Security Before the United
The Next Generation of Security Leaders
The Next Generation of Security Leaders In an increasingly complex cyber world, there is a growing need for information security leaders who possess the breadth and depth of expertise necessary to establish
Security Incident Management Essentials Compiled as a service to the community by Internet2, EDUCAUSE, and REN-ISAC
Compiled as a service to the community by Internet2, EDUCAUSE, and REN-ISAC Background and Overview The Computer Security Incidents Internet2 (CSI2) working group organizes activities to better identify
US-CERT Overview & Cyber Threats
US-CERT Overview & Cyber Threats National Cyber Security Division United States Computer Emergency Readiness Team June 2006 Agenda Introduction to US-CERT Overview of why we depend on a secure cyberspace
By: Gerald Gagne. Community Bank Auditors Group Cybersecurity What you need to do now. June 9, 2015
Community Bank Auditors Group Cybersecurity What you need to do now June 9, 2015 By: Gerald Gagne MEMBER OF PKF NORTH AMERICA, AN ASSOCIATION OF LEGALLY INDEPENDENT FIRMS 2015 Wolf & Company, P.C. Cybersecurity
Law Firm Cyber Security & Compliance Risks
ALA WEBINAR Law Firm Cyber Security & Compliance Risks James Harrison CEO, INVISUS Breach Risks & Trends 27.5% increase in breaches in 2014 (ITRC) Over 500 million personal records lost or stolen in 2014
ISACA S CYBERSECURITY NEXUS (CSX) October 2015
ISACA S CYBERSECURITY NEXUS (CSX) October 2015 DO2 EXECUTIVE OVERVIEW Will you be a Cyber defender? ISACA launched the Cybersecurity Nexus (CSX) program earlier this year. CSX, developed in collaboration
CHAPTER 1 COMPUTER SECURITY INCIDENT RESPONSE TEAM (CSIRT)
CHAPTER 1 COMPUTER SECURITY INCIDENT RESPONSE TEAM (CSIRT) PURPOSE: The purpose of this procedure is to establish the roles, responsibilities, and communication procedures for the Computer Security Incident
Educa&onal Event Spring 2015. Cyber Security - Implications for Records Managers Art Ehuan
Educa&onal Event Spring 2015 Cyber Security - Implications for Records Managers Art Ehuan Risk to Corporate Information The protection of mission dependent intellectual property, or proprietary data critical
Creating a Culture of Cyber Security at Work
Creating a Culture of Cyber Security at Work Webinar Why is this important? Cybersecurity is a people problem. Cybersecurity is no longer just the IT department s responsibility. It is everyone s responsibility.
Introduction. Special thanks to the following individuals who were instrumental in the development of the toolkits:
Introduction In this digital age, we rely on our computers and devices for so many aspects of our lives that the need to be proactive and vigilant to protect against cyber threats has never been greater.
Total Number of Foreign Students: 18,607. Part 1: Net Contribution to State Economy by Foreign Students (2006-07)
Ohio Total Number of Foreign Students: 18,607 Part 1: Net Contribution to State Economy by Foreign Students (2006-07) Contribution from Tuition and Fees to State Economy: $337,436,000 Contribution from
HIPAA Considerations for Small Non-Profits. Jill M. Girardeau July 20, 2011
HIPAA Considerations for Small Non-Profits Jill M. Girardeau July 20, 2011 Mission of Pro Bono Partnership of Atlanta: To provide free legal assistance to community-based nonprofits that serve low-income
KEY TRENDS AND DRIVERS OF SECURITY
CYBERSECURITY: ISSUES AND ISACA S RESPONSE Speaker: Renato Burazer, CISA,CISM,CRISC,CGEIT,CISSP KEY TRENDS AND DRIVERS OF SECURITY Consumerization Emerging Trends Continual Regulatory and Compliance Pressures
CHAPTER 2016-138. Committee Substitute for Committee Substitute for Committee Substitute for House Bill No. 1033
CHAPTER 2016-138 Committee Substitute for Committee Substitute for Committee Substitute for House Bill No. 1033 An act relating to information technology security; amending s. 20.61, F.S.; revising the
Information Security Training & Awareness
Online Training & Project Briefing Expectations & Responsibilities Information Security Manager s Forum, March 4, 2008 Revised September 20, 2010 (1) Why is awareness important? Obligation to protect private
FINANCIAL SERVICES INFORMATION SHARING & ANALYSIS CENTER (FS-ISAC) OPERATING RULES
FINANCIAL SERVICES INFORMATION SHARING & ANALYSIS CENTER (FS-ISAC) OPERATING RULES Copyright FS-ISAC, Inc. All Rights Reserved FS-ISAC White December, 2012 Contents 1.0 FS-ISAC History and Background...
Integrating Cybersecurity with Emergency Operations Plans (EOPs) for Institutions of Higher Education (IHEs)
Integrating Cybersecurity with Emergency Operations Plans (EOPs) for Institutions of Higher Education (IHEs) Amy Banks, U.S. Department of Education, Center for School Preparedness, Office of Safe and
CYBER & PRIVACY INSURANCE FOR FINANCIAL INSTITUTIONS
CYBER & PRIVACY INSURANCE FOR FINANCIAL INSTITUTIONS 1 As regulators around the world move to tighten compliance requirements for financial institutions, improvement in cyber security controls will become
Next. CDS 2015 Survey Module 7 Information Security Survey Errata
1 CDS 2015 Survey Survey Errata This module includes questions about the IT security organization, staffing, policies, and practices related to information technology security. This is an optional module.
Cyber Liability Insurance:
Cyber Liability Insurance: Reg Harnish, CISSP, CISM, CISA Chief Security Strategist GreyCastle Security Steve Lobel Vice President Anchor Agency October 17, 2013 1,200 Introduction Cybercrime Today Major
Next. CDS 2015 Survey Module 7 Information Security Survey Errata
CDS 2015 Survey Survey Errata This module includes questions about the IT security organization, staffing, policies, and practices related to information technology security. This is an optional module.
Degrees and Certificates Awarded at Ohio's Title IV Eligible, Degree Granting Institutions
at Ohio's Title IV Eligible, Degree Granting Institutions Fiscal Years 2000 through 2009 Prepared by March 2010 Table of Contents Degrees/Certificates Awarded in Fiscal Years 2000 2009 at Ohio s Title
Cyber Security Research and Development: A Homeland Security Perspective
Cyber Security Research and Development: A Homeland Security Perspective Simon Szykman, Ph.D. Director, Cyber Security R&D 202-772-9867 Outline! DHS Organizational Overview Cyber Security Stakeholders
CYBERSECURITY BEST PRACTICES FOR SMALL AND MEDIUM PENNSYLVANIA UTILITIES
CYBERSECURITY BEST PRACTICES FOR SMALL AND MEDIUM PENNSYLVANIA UTILITIES The information provided in this document is presented as a courtesy to be used for informational purposes only. This information
Cyber security in an organization-transcending way
Cyber security in an organization-transcending way EASEE-gas meeting March 19, 2015 Paul Bloemen ICT Security Manager Gasunie Chair Dutch Energy ISAC March 19, 2015 2 What to talk about Why is cyber security
DOD Medical Device Cybersecurity Considerations
Enedina Guerrero, Acting Chief, Incident Mgmt. Section, Cyber Security Ops Branch 2015 Defense Health Information Technology Symposium DOD Medical Device Cybersecurity Considerations 1 DHA Vision A joint,
CYBERSECURITY BEST PRACTICES FOR SMALL AND MEDIUM PENNSYLVANIA UTILITIES. second edition
CYBERSECURITY BEST PRACTICES FOR SMALL AND MEDIUM PENNSYLVANIA UTILITIES second edition The information provided in this document is presented as a courtesy to be used for informational purposes only.
Incident Management ITU Pillars & Qatar Case Study Michael Lewis, Deputy Director
Incident Management ITU Pillars & Qatar Case Study Michael Lewis, Deputy Director 2 Thanks To the ITU for sponsoring the initiative ictqatar has worked closely with the ITU-D since the project s inception,
CASRO Digital Research Conference Data Security: Don t Risk Being the Weak Link
CASRO Digital Research Conference Data Security: Don t Risk Being the Weak Link Peter Milla CASRO Technical Consultant/CIRQ Technical Advisor peter@petermilla.com Background CASRO and Standards CASRO takes
Cybersecurity and Insurance Companies
Cybersecurity and Insurance Companies ACLI Forum 500 CEO Leadership Retreat Timothy J. Nagle Vice President & Chief Privacy Counsel Prudential Financial 1 May 13, 2015 What is cybersecurity? Protecting
Top 10 Baseline Cybersecurity Controls Banks Aren't Doing
Top 10 Baseline Cybersecurity Controls Banks Aren't Doing SECURE BANKING SOLUTIONS 1 Contact Information Chad Knutson President, SBS Institute Senior Information Security Consultant Masters in Information
SCAC Annual Conference. Cybersecurity Demystified
SCAC Annual Conference Cybersecurity Demystified Me Thomas Scott SC Deputy Chief Information Security Officer PMP, CISSP, CISA, GSLC, FEMA COOP Practitioner Tscott@admin.sc.gov 803-896-6395 What is Cyber
Integrating Cybersecurity with Emergency Operations Plans (EOPs) for K-12 Education
Integrating Cybersecurity with Emergency Operations Plans (EOPs) for K-12 Education Amy Banks, U.S. Department of Education, Center for School Preparedness, Office of Safe and Healthy Students Hamed Negron-Perez,
Personal Security Practices of the CAO
Personal Security Practices of the CAO 1. Do you forward your government email to your personal email account? 2. When is the last time you changed your Enterprise password? Within the last 60 days Within
Information Security
IT Orientation at Penn Information Security October 21, 2015 Joshua Beeman University Information Security Officer jbeeman@isc.upenn.edu (215) 746-7077 www.upenn.edu/computing/security security@isc.upenn.edu
Draft Revision of OhioLINK PCIRC Families (Page 1 of 7) Region 1
Draft Revision of OhioLINK PCIRC Families (Page 1 of 7) Region 1 Bluffton University Bowling Green State University o Mary Beth Zachary o mzachar@bgsu.edu o (419) 372-2054 Bowling Green State University
CERT.AZ description as per RfC 2350
CERT.AZ description as per RfC 2350 Contact Cyber Security Center (CSC) Computer Emergency Response Team (CERT) Address Block 702, Drogal lane Baku, Azerbaijan Telephone: +99412 4932056 +99412 4932057
Information Security Awareness Training and Phishing
Information Security Awareness Training and Phishing Audit Report Report Number IT-AR-16-001 October 5, 2015 Highlights The Postal Service s information security awareness training related to phishing
Application for Membership
Application for Membership This Application for Industry Membership is subject to approval by EnergySec. By executing the Membership Application and Membership Agreement and submitting payment for membership
aecert Roadmap Eng. Mohammed Gheyath Director, Technical Affairs TRA
aecert Roadmap Eng. Mohammed Gheyath Director, Technical Affairs TRA Agenda Introduction aecert Vision & Mission The need to establish a UAE National CERT Constituent Framework & Service Catalog National
CaaS Think as a bad guy Petr Hněvkovský, CISA, CISSP HP Enterprise Security
CaaS Think as a bad guy Petr Hněvkovský, CISA, CISSP HP Enterprise Security 1 Copyright 2014 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Information Security
IT Orientation at Penn Information Security May 8, 2013 Joshua Beeman University Information Security Officer jbeeman@isc.upenn.edu (215) 746-7077 www.upenn.edu/computing/security security@isc.upenn.edu
2014 NACo National Cyber Symposium April 10, 2014
2014 NACo National Cyber Symposium April 10, 2014 Chief Information Security and Privacy Officer King County Washington Governance Board President Holistic Information Security Practitioner Institute (HISPI)
Supplier Vigilance: A Critical Layer of Defense
Supplier Vigilance: A Critical Layer of Defense Lockheed Martin Information Security 1 Supply Chain Cyber Security Lockheed Martin October 23, 2013 Debbie Stuckey Waide Jones, CISSP 2 Synopsis Lockheed
Get the most out of Public Sector Cyber Security Associations & Collaboration
Get the most out of Public Sector Cyber Security Associations & Collaboration Gary Coverdale Chief Information Security Officer County of Napa, CA Stacey A. Wright Intel Manager MS-ISAC Get the most out
Financial Services. Information Sharing & Analysis Center FS ISAC
Financial Services Information Sharing & Analysis Center FS ISAC Operating Rules August, 2015 Contents Financial Services... 1 Information Sharing & Analysis Center... 1 FS ISAC... 1 Operating Rules...
INFORMATION TECHNOLOGY RISK MANAGEMENT PLAN
10/25/2012 TECHNOLOGY SERVICES INFORMATION TECHNOLOGY RISK MANAGEMENT PLAN Procedure Name: LIT Risk Management Information Technology Plan ver 2.31.docx Risk Management Plan Issue Date: TBD Procedure Owner:
NIST Cybersecurity Framework Impacting Your Company? April 24, 2014 Presented By Sheila FitzPatrick, NetApp Jeff Greene, Symantec Andy Serwin, MoFo
2014 Morrison & Foerster LLP All Rights Reserved mofo.com NIST Cybersecurity Framework Impacting Your Company? April 24, 2014 Presented By Sheila FitzPatrick, NetApp Jeff Greene, Symantec Andy Serwin,
CERT/CC Overview & CSIRT Development Team Activities
CERT/CC Overview & CSIRT Development Team Activities Georgia Killcrece CSIRT Development Team CERT Program Software Engineering Institute Carnegie Mellon University Pittsburgh, PA 15213-3890 October 2006
The Emergence of the ISO in Community Banking Patrick H. Whelan CISA IT Security & Compliance Consultant
THE MARKET LEADER IN IT, SECURITY AND COMPLIANCE SERVICES FOR COMMUNITY FINANCIAL INSTITUTIONS The Emergence of the ISO in Community Banking Patrick H. Whelan CISA IT Security & Compliance Consultant Agenda
RETHINKING ORC: NRF S CYBER SECURITY EFFORTS. OMG Cross Domain Threat & Risk Information Exchange Day, March 23, 2015
RETHINKING ORC: NRF S CYBER SECURITY EFFORTS OMG Cross Domain Threat & Risk Information Exchange Day, March 23, 2015 No Organization is Secure Source: http://www.informationisbeautiful.net An Average
Over 20 years experience in Information Security Management, Risk Management, Third Party Oversight and IT Audit.
CYBERSECURITY: ISSUES AND ISACA S RESPONSE June 2014 BILL S BIO Over 20 years experience in Information Security Management, Risk Management, Third Party Oversight and IT Audit. Vice President Controls
DHS, National Cyber Security Division Overview
DHS, National Cyber Security Division Overview Hun Kim, Deputy Director Strategic Initiatives Information Analysis and Infrastructure Protection Directorate www.us-cert.gov The strategy of DHS, as defined
Network Security Deployment Obligation and Expenditure Report
Network Security Deployment Obligation and Expenditure Report First and Second Quarters, Fiscal Year 2015 June 16, 2015 Fiscal Year 2015 Report to Congress National Protection and Programs Directorate
How To Protect Yourself From A Hacker Attack
Cybersecurity Demystified: Information Technology Security Trends Joe Oleksak, Plante Moran Agenda Data Security Trends Example Attacks Industry Examples An Answer 1 Who Are The Victims? Targets - victims
ARMA: Information Governance: A Revenue Source Potential
ARMA: Information Governance: A Revenue Source Potential Presenter: Martin Tuip Executive Director for IG Products ARMA International Agenda About ARMA International What is Information Governance? Generally
What is Management Responsible For?
What is Management Responsible For? Matthew J. Putvinski, CPA, CISA, CISSP MEMBER OF PKF NORTH AMERICA, AN ASSOCIATION OF LEGALLY INDEPENDENT FIRMS 2011 Wolf & Company, P.C. About Wolf & Company, P.C Regional
Cybersecurity Assessment
Cybersecurity Assessment What Will the Regulators Be Looking For? Legal Counsel to the Financial Services Industry Digital Commerce & Payments Series Webinar March 18, 2015 1 Introduction & Overview Today
The Economic Benefit of International Students $26.8 billion Contributed; 340,000 U.S. Jobs Supported
The Economic Benefit of International $26.8 billion Contributed; 40,000 U.S. Jobs ed Economic Analysis for Academic Year 201-2014 International students and their families created or supported 40,000 jobs
How to Protect Sensitive Corporate Data against Security Vulnerabilities of Your Vendors
How to Protect Sensitive Corporate Data against Security Vulnerabilities of Your Vendors July 2014 Executive Summary Data breaches cost organizations millions and sometimes even billions of dollars in
Aftermath of a Data Breach Study
Aftermath of a Data Breach Study Sponsored by Experian Data Breach Resolution Independently conducted by Ponemon Institute LLC Publication Date: January 2012 Ponemon Institute Research Report Aftermath
Department of Homeland Security Federal Government Offerings, Products, and Services
Department of Homeland Security Federal Government Offerings, Products, and Services The Department of Homeland Security (DHS) partners with the public and private sectors to improve the cybersecurity
IAPP Global Privacy Summit Protecting Privacy Under the Cybersecurity Microscope
IAPP Global Privacy Summit Protecting Privacy Under the Cybersecurity Microscope March 6, 2014 Victoria King UPS (404) 828-6550 vking@ups.com Lisa J. Sotto Hunton & Williams LLP (212) 309-1223 lsotto@hunton.com
SES / CIF. Internet2 Combined Industry and Research Constituency Meeting April 24, 2012
SES / CIF Internet2 Combined Industry and Research Constituency Meeting April 24, 2012 Doug Pearson Technical Director, REN-ISAC dodpears@ren-isac.net Background on REN-ISAC The REN-ISAC mission is to
ITU National Cybersecurity/CIIP Self-Assessment Toolkit. Background Information for National Pilot Tests
ITU National Cybersecurity/CIIP Self-Assessment Toolkit Background Information for National Pilot Tests This document provides background information for pilot tests of the ITU National Cybersecurity/CIIP
Six Year Graduation Rates Prepared by October 2011
Six Year Graduation Rates Fall 2004 Cohort of First Time, Full Time, Bachelor's Degree Seeking Students at Ohio's 4 Year Public and Private Universities Prepared by October 2011 Table of Contents Six Year
Data Analytics & Information Security
Data Analytics & Information Security About The Speaker Practice Director at ERM M.S. Information Networking and Security CERT Coordination Center - Carnegie Mellon University Carnegie Mellon CyLab Agenda
The Future of Data Breach Risk Management Response and Recovery. The Cybersecurity Forum April 14, 2016
The Future of Data Breach Risk Management Response and Recovery Increasing electronic product life and reliability The Cybersecurity Forum April 14, 2016 Today s Topics About Merchants Information Solutions,
Incident Response. Six Best Practices for Managing Cyber Breaches. Nick Pollard, Senior Director Professional Services EMEA / APAC, Guidance Software
Incident Response Six Best Practices for Managing Cyber Breaches Nick Pollard, Senior Director Professional Services EMEA / APAC, Guidance Software www.encase.com 2014 Guidance Software Inc., All Rights
Establish a life of project budget for the Metro Information Security Improvement Program in the amount of $7,814,000. The FY16 portion is $860,000.
25 One Gateway Plaza Los Angeles, CA 90012-2952 213.922.2000 Tel metro. net SYSTEM SAFETY, SECURITY & OPERATIONS COMMITTEE MARCH 19, 2015 SUBJECT: ACTION: INFORMATION SECURITY IMPROVEMENT PROGRAM APPROVE
Legal Cybersecurity Assistance
Legal Cybersecurity Assistance Leviathan Security Group limitless innovation. no compromise. Cyber Due Diligence Digital security is a critical part of due diligence for any funding round or acquisition.
IT SECURITY EDUCATION AWARENESS TRAINING POLICY OCIO-6009-09 TABLE OF CONTENTS
OFFICE OF THE CHIEF INFORMATION OFFICER Date of Issuance: May 22, 2009 Effective Date: May 22, 2009 Review Date: Section I. PURPOSE II. AUTHORITY III. SCOPE IV. DEFINITIONS V. POLICY VI. RESPONSIBILITIES
Auditing emerging cyber threats and IT controls
Auditing emerging cyber threats and IT controls Robert Baldi Director of IT Audit, ACI Worldwide Warren Fish Manager of IT Audit, ACI Worldwide Competency The trouble with competence is that it is always
ALM Virtual Corporate Counsel Managing Cybersecurity Risks and Mitigating Data Breach Damage
ALM Virtual Corporate Counsel Managing Cybersecurity Risks and Mitigating Data Breach Damage VENABLE LLP Attorneys at Law Washington, DC/New York/San Francisco/Los Angeles/Baltimore/Virginia/Delaware November
Earning Your Security Trustmark+
QUICK START GUIDE Earning Your Security Trustmark+ CompTIA.org www.comptia.org/communities Introduction One of the biggest challenges for solution providers is protecting their clients networks and information
Transfer Outcomes for Undergraduate Students Attending Ohio's Public and Private Colleges and Universities. Prepared by
for Attending Ohio's Public and Private Colleges and Universities Prepared by March 2008 Table of Contents Three Year of Enrolled Spring Term, 2002 2006 by Sector Page 1 Three Year of Enrolled Spring Term,
CERT La Poste Group Infosec Observatory 40th TF-CSIRT meeting London 2013.09.27
Group Infosec Observatory 40th TF-CSIRT meeting London 2013.09.27 frederic.lebastard@laposte.fr Summary Introduction Detailed missions SISO Watch Compliance Short focus on «Malware Trap» PAGE 2 Le Groupe
Information Sharing Use Cases
Information Sharing Use Cases Effective Information Sharing: Lessons learned from Operator Experience Kathleen M. Moriarty Global Lead Security Architect EMC Office of CTO 1 What s New Text Is Title Case
Cyber Security Metrics Dashboards & Analytics
Cyber Security Metrics Dashboards & Analytics Feb, 2014 Robert J. Michalsky Principal, Cyber Security NJVC, LLC Proprietary Data UNCLASSIFIED Agenda Healthcare Sector Threats Recent History Security Metrics
US Cyber Marathon. David Ambrose, Chief Security Officer and Chief Privacy Officer Bureau of the Fiscal Service U.S. Department of the Treasury
US Cyber Marathon David Ambrose, Chief Security Officer and Chief Privacy Officer Bureau of the Fiscal Service U.S. Department of the Treasury Context: US Government Scope/Scale 320M US citizens 4.1M Government