IBM i Security & Compliance Seminar April

Transcription

1 IBM i Security & Compliance Seminar April Is your IBM i secure and why should you care? Are you under pressure from the regulators of SOX, JSOX, PCI, WBP etc? How secure is your data on IBM i? How and why should you secure your IBM i How does IBM i become compliant in 15 minutes? How do you meet the demands of the auditors? Where: IBM HQ Amsterdam When: April :00-18:00 Cost: Free to IBM i users Peter Croes: IBM Fred Wijshoff: Auditor KPMG Lionel Gross: Consultant Olympic Banking Systems Shmuel Zailer: CEO/CTO Raz-Lee Security Ronald van Erven Security Officer Timeos/PvIB Jon Shaw: Sales Director PKWARE Ian Taylor: Lead Solutions engineer PKWARE Ruud Goudriaan: Former Corporate Security Officer ING Bank Ronald Rietveld: Head of Information Security Risk Management - International at ABN AMRO Bank N.V Stephen Cheney Piet Munsterman SRC Secure Solutions

2 Agenda 12:00 Arrival, Coffee and muffins 12:30 Introduction by Stephen Cheney, SRC - Security from AS400 to IBM i 12:50 Ruud Goudriaan, ING Bank - How Banks are dependent on a secure internet 13:20 Peter Croes, IBM - IBM i Strategy and Roadmap in an ever changing world 13:50 Shmuel Zailer, Raz-Lee - How to manage Security and Compliance on the IBM i 14:40 Ronald Rietveld, ABN AMRO Bank, A solution for risk management and being demonstrably in control 15:10 Coffee 15:30 Jon Shaw & Ian Taylor PKWARE - The importance of data encryption 16:00 Lionel Gross, Consultant Olympic Banking Systems - Creating and organising Security BluePrints 16:30 Fred Wijshoff. KPMG - Auditing an IBM i - from an auditors point of view 17:00 Ronald van Erven, Timeos/PvIB The ever growing danger to your data 17:30 Piet Munsterman, SRC Summary and close 17:45 Drinks, snacks and networking Important notice Please be sure to bring identification with you as this is required by the reception at IBM. IBM requests that no photographs of persons or objects are taken in the building with possible exception of the speakers of this seminar.

3 The Speakers Stephen Cheney CEO of SRC Secure Solutions Stephen has many years of experience with IBM s midrange systems from System/3 through System i. He has worked as a consultant and has headed teams in projects for major banks and diverse international companies. He founded the SRC group of companies in Piet Munsterman Director of sales and marketing of SRC Secure Solutions Peter Croes Power Systems Technical Sales, IBM

4 Lionel Gross Consultant Olympic Banking Systems Lionel Gross is an independent consultant working almost exclusively with the core banking application Olympic which is hosted on iseries. One of his main tasks is to ensure the general security rules in place in the banks are correctly applied on the Olympic core banking systems. After having written an "Olympic Security Blueprint" where OS400 and Olympic security rules are detailed he implemented the Blueprint in seven countries. He works in coordination with the bank s auditors, receives their findings and works to fix them where required. He was very interested by several products supplied and/or developed by SRC and for the 2 last years he is working closely with this company and has implemented several of their products. Shmuel Zailer CEO and CTO Raz-Lee Security ltd Shmuel Zailer is a renowned expert in System i technology, and has been with Raz-Lee Security since Over the past 30 years, he has successfully developed, sold and marketed System i-related optimization and performance software products, including the isecurity product line. Prior to this, Mr. Zailer managed the software departments of two large corporations. In addition, he has in-depth knowledge in the field of computer performance, and served as a consultant to international companies in this area. Mr. Zailer is a veteran of the Israeli Defence Army's elite computer unit, and holds a BA degree in Computer Science and Economics from Bar-Ilan University.

5 Ronald van Erven Information Risk Officer, Timeos. Ronald s first information security role was part of a network/system manager s role in 1993 with the BVG. After which he worked for BT worldwide, MCI Worldcom and in 2000 started as ICT security officer with Versatel. In this position he acted as an enterprise information security program manager, implementing and getting the enterprise certified for the BS7799. As customer demand changed to SAS70 certifications Ronald setup terms of reference and coordinated the ICT audit activities within Versatel. Next to this he was involved in the development of customer security services and digital investigations. In his current role as Information Risk Officer he is the enterprise information security program manager with Timeos, an asset management firm for pension providers, this as part of a risk management team. Not only focusing on the procedural side but more on the technology and human risks in the area of information security & business continuity. Fred Wijshof Manager IT Advisory KPMG Advisory N.V, Fred is a member of the IT Advisory practice. Fred is specialized in data-analysis, IBM i audits, IT in the Financial Statement and SOX audits. Fred has 14 years of transaction and accounting, audit and advisory experience first with Ernst & Young and later at KPMG. He joined KPMG in 2005 and currently performs audits and advisory assignments as a manager in KPMG s National Dutch practice.

6 Jon Shaw Sales Director for EMEA and AsiaPAC at PKWARE Ian Taylor Lead Solutions Engineer at PKWARE Ronald Rietveld Head of Information Security Risk Management International at ABN AMRO Bank N.V. Ruud Goudriaan Former Corporate Security Officer and Head of Information Security at ING Mr. Goudriaan was responsible for the IT security of the ING Bank for many years. His knowledge of the exponential growth of the challenges to IT security is extensive.

7 Route description IBM Client Center, Amsterdam Address: IBM Nederland bv Johan Huizingalaan VH Amsterdam Telephone: 0031 (0) By car From Utrecht: A2 in the direction of Amsterdam At junction Holendrecht A9 in the direction of Haarlem At junction Badhoevedorp A4 in the direction of Amsterdam Take exit 1, Sloten and turn right (S107) After the viaduct you are at the Johan Huizingalaan, the IBM-building is located on the right You have to take the first entrance, the customer parking spaces are directly on the left behind the gate. From Schiphol/The Hague: After junction Badhoevedorp take exit 1, Sloten See route description coming from Utrecht

8 From Coentunnel tot the south: Take exit 1, Sloten and turn right Proceed until the end of the road and turn left You have to take the second entrance (left), the customer parking spaces are directly on the left behind the gate. From the East along the South-Ring Amsterdam: Don t take the the exit Amstelveen but follow in the direction of Zaandam Take exit 1, Sloten and turn left You have to take the second entrance (left), the customer parking spaces are directly on the left behind the gate. By Public Transport Transit busses are freely available to and from IBM (Departure Henk Sneevlietweg). The name of this bus is Rieker Circle Line. This bus is available for Customers and employees of IBM, Mexx, Adam Smith Building, PricewaterhouseCoopers N.V. & NCR. You can reach subway station " Henk Sneevlietweg " by taking the subway line 50 from station " Sloterdijk " of from subway station " Gein ". An other option is to take tramline 2 from Central Station. You will have to get out at the " Aletta Jacobslaan ". IBM is a 10 minute walk.

9 The timetable: Morning hrs 2 large busses (departure from Metrostation every 10 min.) Day hrs 1 minibus (available on demand) Evening hrs 2 large busses (departure from IBM Dynatos every 10 min.) You can recognize the buses by the logo above and the logos of all the companies

10 The Rieker Circle Line route: