Security risk management – getting it right! Monday 31 August National Convention Centre, Canberra Time 5.00 pm – 6.15 pm Session Welcome cocktail reception SIG exhibition Tuesday 1 September National Convention Centre, Canberra Time 9.00 am – 9.05 am Session Introduction by conference chair Katherine Jones, Attorney-General’s Department 9.10 am – 9.30 am Opening and welcome address Senator the Hon George Brandis QC, Attorney-General 9.30 am – 10.10 am Australia’s current security and intelligence operating environment Duncan Lewis AO DSC CSC, Australian Security Intelligence Organisation 10.10 am – 11.00 am Managing Risk Across the Defense Enterprise - a US Department of Defense Security Perspective Stan L Sims, Defense Security Services 11.00 am – 11.35 am Morning tea SIG exhibition 11.35 am – 12.05 pm Managing personnel security risk Attorney-General’s Department 12.05 pm – 12.45 pm Managing risks at a nuclear facility Paul Jones, Australian Nuclear Science and Technology Organisation 12.45 pm – 2.00 pm Lunch SIG exhibition 1.00pm-1.40pm Industry sponsored lunch workshops International security standards: Australia’s role Varant Meguerditchian, Standards Australia Government-Industry – Academic collaboration on cyber: Australian Cyber Security Research Institute Gary Blair, Australian Cyber Security Research Institute Time 2.00 pm – 3.20 pm Session The cyber security review – managing cyber risk Panel chair - Carolyn Patteson, Attorney-General’s Department Joe Franzi, Australian Signals Directorate and Australian Cyber Security Centre David Campbell, CERT Australia David McLean, Australian Federal Police Sandra Ragg, Department of the Prime Minister and Cabinet 3.20 pm – 3.50 pm Afternoon tea SIG exhibition 3.50 pm – 4.30 pm Managing risk in a changing work force James Raymer, Australian National University 4.30 pm – 5.30 pm Risk appetite – what is your agency’s tolerance? Panel chair – Michael Jerks, Attorney-General’s Department Mark Jarratt, Norman Disney & Young David Crossley, Sydney Opera House Mitch Levy, Department of Human Services 6.30 pm – 10.00 pm SIG 2015 conference dinner Parliament House Keynote dinner speaker The Hon Dr Brendan Nelson BMBS FRACP (Hon) FAMA Australian War Memorial Wednesday 2 September National Convention Centre, Canberra Time 7.45 am – 8.45 am Session Industry sponsored breakfast workshops The innovation and technology partnership of SNP and TSM Tom Roche, SNP Security Craig Miller, SNP Security Security performance starts with storage Wayne Arvidson, Quantum 9.00 am – 9.05 am Introduction by conference chair Carolyn Patteson, Attorney-General’s Department 9.05 am – 9.45 am Personnel security risk assessment - an international insight Michael Shryane, United Kingdom Government Cabinet Office 9.45 am – 10.25 am The PGPA Act – Stage 2 – accountability and risk based business processes and systems Robert Antich, Department of Finance 10.25 am -11.00 am Morning tea SIG exhibition 2|Page Cyber security Time - 11.00 am – 11.50 am (via video link) Governance, personnel security & physical security Time - 11.00am - 11.50 am Session chair - David Campbell, CERT Australia Session chair - Michael Jerks, Attorney-General’s Department Protecting the critical infrastructure of the United States in the digital age - the role of government, industry, and the audit community Speakers The Hon Theresa M Grafenstine CISA CGEIT CRISC, US House of Representatives and ISACA International Vice President Ron Ross, National Institute of Standards and Technology, USA Understanding your risk environment Cyber security Time - 11.50 am – 12.30 pm Governance, personnel security & physical security Time - 11.50 am –12.30 pm Session chair - David Campbell, CERT Australia Session chair - Michael Jerks, Attorney-General’s Department Managing the risk posed by targeted cyber intrusions Implementation of the NZ Protective Security Requirements – capability maturity models and assurance reporting Speaker Joe Franzi, Australian Signals Directorate and Australian Cyber Security Centre Speaker Andrew Annakin, New Zealand Intelligence Organisation Speaker Carl Gibson, La Trobe University Time 12.30 pm – 1.35 pm Session Lunch SIG exhibition 12.50 pm – 1.30 pm Industry sponsored lunch workshops Major incident capability assurance Danny Ramsden, QinetiQ Australia Vern Amy, QinetiQ Australia Des Sengunlu, QinetiQ Australia Government-Industry – Academic collaboration on cyber: Australian Cyber Security Research Institute Gary Blair, Australian Cyber Security Research Institute Cyber security Time - 1.35 pm – 2.20 pm Governance, personnel security & physical security Time - 1.35 pm – 2.20 pm Implementing guidance on risk management Time - 1.35 pm - 2.35 pm Session chair - David Campbell, CERT Australia Session chair - Michael Jerks, Attorney-General’s Department Panel chair - Rob Lee, Attorney-General’s Department National Australia Bank’s live fire exercise - lessons learnt Security risk management on a global scale Training to mitigate risk 3|Page Cyber security Governance, personnel security & physical security Speaker John Yates QPM, Scentre Group and the Westfield Group Implementing guidance on risk management Speakers Rodger Tranter, Australian Radiation Protection and Nuclear Safety Agency (ARPANSA) Paul Arbon AM, Torrens Resilience Institute Aiden Collie, StratusFSR Time - 2.20 pm – 3.00 pm Governance, personnel security & physical security Time - 2.20 pm - 3.00 pm Implementing guidance on risk management Time - 2.35 pm-3.00 pm Session chair - David Campbell, CERT Australia Session chair - Michael Jerks, Attorney-General’s Department Panel chair - Rob Lee, Attorney-General’s Department Managing the risk of cyber security threats and trends Assessing the impact and consequence of risk Security standards and professionalism in the industry Speakers John Ieraci, Telstra Corporation Ltd Mike Burgess, Telstra Corporation Ltd Speaker Mark Stewart, The University of Newcastle Speakers Matthew Curtis RSecP, Security Professionals Australasia Steve Mark AM, Security Professionals Australasia Alex Webling, Security Professionals Australasia Speaker Nick Scott, National Australia Bank Cyber security Time 3.00 pm – 3.30 pm Session Afternoon tea SIG exhibition 3.30pm – 3.40pm Cyber Scurry 2015 winners’ announcement 3.40 pm – 4.20 pm Social media and human factors security risk Rod Cowan, Independent Writer and Director 4.20 pm – 4.30 pm Closing address by conference chair Carolyn Patteson, Attorney-General’s Department 4.30 pm – 5.00 pm Networking drinks Ballroom foyer Disclaimer: All endeavours will be made to present the conference program as detailed. The conference committee and the conference organisers reserve the right to alter without prior notice, any arrangements, timetables, plans or other items relating to the conference, for any cause beyond its reasonable control. The committee and organisers are not liable for any loss or inconvenience caused as a result of such alteration. 4|Page