SONORAN DESERT SECURITY USERS GROUP WEDNESDAY, NOVEMBER 13, 2013 Founder/President SDSUG - Leo J. Hauguel, CISSP, NSA-IAM – ACF2 Chairperson SDSUG – Stephen Mintz, CISSP - TSS 0745 - 0830 Registration/Refreshments compliments of CA Technologies NETWORKING with your SDSUG Members from around the State of Arizona 0830 - 0900 Business meeting – Leo J. Hauguel, CISSP, NSA-IAM New Website & Usage Update November Election of Officers 0900 – 1015 “The IT Board Game - Time for IT to come out of the closet and get a seat at the table” Diana Rosenblatt, CIPP/US – Risk Manager for Ideal Insurance – Glendale, AZ 1015 - 1030 Break & Networking - Refreshments compliments of CA Technologies 1030- 1145 “Real Time Interdiction with ZERO False Positives” Brett L. Scott, CTO – LiveSquare Security 1145 - 1200 - Gerad W. Claseman, President – American Service Animal Society (ASAS) - TBD 1200-1300 LUNCH & Networking time - Compliments of CA Technologies 1315- 1430 “Defcon 21 (2013) Part 1 of 2” Erik Graham, MSIA, CISSP-ISSAP, CRISC, CISM – General Dynamics C4 Systems 1430 – 1445 Break & Networking - Refreshments compliments of CA Technologies 1445 – 1600 “Defcon 21 (2013) Part 2 of 2” Erik Graham, MSIA, CISSP-ISSAP, CRISC, CISM – General Dynamics C4 Systems 1600 – 1615 Closing Remarks – Leo J. Hauguel - CISSP, NSA-IAM The 2014 SDSUG Wednesday Quarterly meetings are as follows: February 12 or 19, 2014/ITT-TECH; May 14, 2014/UAT ; August 13, 2014/ITT-TECH; November 12, 2014/UAT Please mark your calendars now and plan to attend one of the meetings. Leo J. Hauguel, CISSP, NSA-IAM Page 1 3/7/2016 C://MY DOCUMENTS/@ 2010-2012 SDSUG/SDSUG AGENDA/SDSUG AGENDA & Directions PRELIM 2013-11-13 SONORAN DESERT SECURITY USERS GROUP WEDNESDAY, NOVEMBER 13, 2013 Founder/President SDSUG - Leo J. Hauguel, CISSP, NSA-IAM – ACF2 Chairperson SDSUG – Stephen Mintz, CISSP - TSS Instructions on how to reserve your seat at the WEDNESDAY, NOVEMBER 13, 2013, Sonoran Desert Security User Group Meeting (SDSUG). Admission to the meeting is FREE but be willing to SHARE information with other professionals in your field of expertise. WHEN: TIME: WEDNESDAY, NOVEMBER 13, 2013 0745-1600 UAT - CAPACITY IS 130! 2625 W. BASELINE RD. TEMPE, AZ 85283-1056 TELEPHONE 800-658-5744 http://www.uat.edu/ PERSONAL CELL#: 623-826-1940 - Leo J. Hauguel, CISSP, NSA-IAM R.S.V.P. IS REQUIRED FOR THIS MEETING! Please SEND in your reservation in by MONDAY, NOVEMBER 4, 2013! CANCELLATIONS REQUIRED BY TUESDAY, NOVEMBER 5, 2013 EOD! NOTE EMAIL & CONTACT INFORMATION SDSUG: E-Mail Reservation to: SUBJECT LINE: leohauguel@cox.net “SDSUG November 2013 Meeting RSVP” Provide the following information when you Email in your reservation: Your Full Name: (First, MI, Last); Company Name: Phone Number: Where you can be contacted during the day/cell Email address: Work and/or alternate Home (SDSUG Membership Email (ID) used. This location is about ½ mile West of the I10 on Baseline road on the SOUTH SIDE OF THE ROAD JUST PAST Fry’s Electronics Store. Leo J. Hauguel, CISSP, NSA-IAM Page 2 3/7/2016 C://MY DOCUMENTS/@ 2010-2012 SDSUG/SDSUG AGENDA/SDSUG AGENDA & Directions PRELIM 2013-11-13 SONORAN DESERT SECURITY USERS GROUP WEDNESDAY, NOVEMBER 13, 2013 Founder/President SDSUG - Leo J. Hauguel, CISSP, NSA-IAM – ACF2 Chairperson SDSUG – Stephen Mintz, CISSP - TSS Title “The IT Board Game - Time for IT to come out of the closet and get a seat at the table” Speaker Diana Rosenblatt, CIPP/US – Risk Manager for Ideal Insurance – Glendale, AZ Biography Diana Rosenblatt Mother, Risk Manager, Public Speaker, Docent Heard Museum. Board Member Business Experience: Risk Manager Ideal Insurance Disaster Recovery Director Agility Recovery Solutions Computer Programmer Micros Mission: To provide small business the Risk Management resources of Fortune 500 companies that help to improve the business’s financial resilience. Designations: CIPP: Certified Information Privacy Professional CRM: Certified Risk Manager-pending ARM: Associates Risk Management-pending Affiliation: Alliance of Financial and Women Accountants (AFWA) Sonoran Desert Security User Group - SDSUG Infragard Medical Group Management Association (MGMA) Healthcare Information and Management Systems Society (HIMSS) Education: Michigan State University American Institute For Chartered Property Casualty Underwriters The National Alliance for Insurance Education & Research Volunteer: Heard Museum; Docent Leo J. Hauguel, CISSP, NSA-IAM Page 3 3/7/2016 C://MY DOCUMENTS/@ 2010-2012 SDSUG/SDSUG AGENDA/SDSUG AGENDA & Directions PRELIM 2013-11-13 SONORAN DESERT SECURITY USERS GROUP WEDNESDAY, NOVEMBER 13, 2013 Founder/President SDSUG - Leo J. Hauguel, CISSP, NSA-IAM – ACF2 Chairperson SDSUG – Stephen Mintz, CISSP - TSS Summary Presentation Agenda: What IT Should Know about Business a. What’s driving IT in business b. How can I learn to keep my job Why I Should Care a. Job Security b. Job Advancement How to drive decisions instead of live with the results a. Initiate Training b. Initiate Change Greater board involvement in technology means that corporate directors, just like CIOs, have to raise their game. Many more boards are seeking to better understand technology issues and their business implications than they have in the past. Businesses are increasingly more digital and it’s not just a matter of process automation or resource-planning systems. Technology trends such as big data, cloud computing, mobility, and social media are giving rise to new marketing and operational capabilities. Indeed, technology has become too embedded in the fabric of the business—and too critical for competitive performance—to be left to the IT function alone. As a result, many senior-executive teams have been called upon to get involved in technology issues. Boards are also beginning to take a strategic view of how technology trends are shaping their companies’ future. More boards than ever before are asking questions that ensure executives focus on the right issues. Deeper board involvement is also serving as a mechanism to cut through company politics and achieve endorsement of larger, integrated technology investments. The value at stake from getting technology right is typically quite large. Recent research indicates that about half of M&A (merger and acquisition) synergies depend on IT, which makes it a core driver of deal success.1 The risk of cyber attacks is another area that can directly affect both operations and the broader brand or business reputation. In fact, some boards are beginning to direct their risk committees to oversee cyber security issues.2 Diana Rosenblatt CIPP/US 602-620-0700 direct 623-209-5363 fax Ideal Insurance 7121 W. Bell Road Glendale, Arizona 85308 - diana@idealins.com Leo J. Hauguel, CISSP, NSA-IAM Page 4 3/7/2016 C://MY DOCUMENTS/@ 2010-2012 SDSUG/SDSUG AGENDA/SDSUG AGENDA & Directions PRELIM 2013-11-13 SONORAN DESERT SECURITY USERS GROUP WEDNESDAY, NOVEMBER 13, 2013 Founder/President SDSUG - Leo J. Hauguel, CISSP, NSA-IAM – ACF2 Chairperson SDSUG – Stephen Mintz, CISSP - TSS Title “Real Time Interdiction with ZERO False Positives” Speaker Brett L. Scott, CTO LiveSquare Security Biography Brett L. Scott is a technology professional with a career starting in 1987. Programming computers since 1977, Brett quickly developed a passion for the growing computer industry. Brett has served as a hardware tech, a bulletin board sysop, a Network Technician, Programmer, DBA, and System Architect. He is the inventor of the Proactive Defense Network, a patent pending, proactive and collaborative anticyber warfare technology. Summary Brett Scott will present and do a live demo of the latest technology from the R & D company LiveSquare Security. Contact Information Brett L. Scott, CTO LiveSquare Security Blscott@livesquare.com Leo J. Hauguel, CISSP, NSA-IAM Page 5 3/7/2016 C://MY DOCUMENTS/@ 2010-2012 SDSUG/SDSUG AGENDA/SDSUG AGENDA & Directions PRELIM 2013-11-13 SONORAN DESERT SECURITY USERS GROUP WEDNESDAY, NOVEMBER 13, 2013 Founder/President SDSUG - Leo J. Hauguel, CISSP, NSA-IAM – ACF2 Chairperson SDSUG – Stephen Mintz, CISSP - TSS Title “Defcon 21 (2013) – Part 1 of 2” Speaker Erik Graham, MSIA, CISSP-ISSAP, CRISC, CISM Principal Information Security Engineer - General Dynamics - C4 Systems Biography Erik Graham, CISSP-ISSAP, CISM, is Enterprise Security Architect for General Dynamics C4 Systems, where he is responsible for the security architecture that protect the confidentiality, integrity, and availability of General Dynamics' information assets from a wide range of risks. Erik has been working in the computer industry for over 20 years with over 17 years directly focused on computer security / information assurance. He has worked in a wide variety of both logical and physical security areas related to computer network attack (CNA) and computer network defense (CND). Currently he is working on the security related to several technologies to include cloud computing, network protocol and application risk assessments, mobile device management (MDM), bring your own device (BYOD), reverse engineering, supply chain threats, and the insider threat (data exfiltration / covert channels). Erik has a Bachelor of Science from the University of Phoenix, a Master of Science in Information Assurance from Norwich University and holds multiple industry certifications. Summary With every passing day the challenge of protecting information systems increases. Information systems are becoming more complex which in combination with users who want more functionality with greater ease of use leads to an ever increasing risk. Staying current on security risks is critical to the protection of those information systems. In this presentation we will cover one of the best ways to stay on top of emerging security risks - Defcon. Defcon is the largest meeting of hackers in the US and it is one of the best ways to see and understand the new risks and more importantly their impact on your information systems. If you attended great; be ready to tell us what you learned. If you didn’t attend, shame on you; but don’t worry we’ll fill you in on some the most interesting presentations. Leo J. Hauguel, CISSP, NSA-IAM Page 6 3/7/2016 C://MY DOCUMENTS/@ 2010-2012 SDSUG/SDSUG AGENDA/SDSUG AGENDA & Directions PRELIM 2013-11-13 SONORAN DESERT SECURITY USERS GROUP WEDNESDAY, NOVEMBER 13, 2013 Founder/President SDSUG - Leo J. Hauguel, CISSP, NSA-IAM – ACF2 Chairperson SDSUG – Stephen Mintz, CISSP - TSS Title “Defcon 21 (2013) – Part 2 of 2” Speaker Erik Graham, MSIA, CISSP-ISSAP, CRISC, CISM Principal Information Security Engineer - General Dynamics - C4 Systems Biography Erik Graham, CISSP-ISSAP, CISM, is Enterprise Security Architect for General Dynamics C4 Systems, where he is responsible for the security architecture that protect the confidentiality, integrity, and availability of General Dynamics' information assets from a wide range of risks. Erik has been working in the computer industry for over 20 years with over 17 years directly focused on computer security / information assurance. He has worked in a wide variety of both logical and physical security areas related to computer network attack (CNA) and computer network defense (CND). Currently he is working on the security related to several technologies to include cloud computing, network protocol and application risk assessments, mobile device management (MDM), bring your own device (BYOD), reverse engineering, supply chain threats, and the insider threat (data exfiltration / covert channels). Erik has a Bachelor of Science from the University of Phoenix, a Master of Science in Information Assurance from Norwich University and holds multiple industry certifications. Summary With every passing day the challenge of protecting information systems increases. Information systems are becoming more complex which in combination with users who want more functionality with greater ease of use leads to an ever increasing risk. Staying current on security risks is critical to the protection of those information systems. In this presentation we will cover one of the best ways to stay on top of emerging security risks - Defcon. Defcon is the largest meeting of hackers in the US and it is one of the best ways to see and understand the new risks and more importantly their impact on your information systems. If you attended great; be ready to tell us what you learned. If you didn’t attend, shame on you; but don’t worry we’ll fill you in on some the most interesting presentations. Leo J. Hauguel, CISSP, NSA-IAM Page 7 3/7/2016 C://MY DOCUMENTS/@ 2010-2012 SDSUG/SDSUG AGENDA/SDSUG AGENDA & Directions PRELIM 2013-11-13 SONORAN DESERT SECURITY USERS GROUP WEDNESDAY, NOVEMBER 13, 2013 Founder/President SDSUG - Leo J. Hauguel, CISSP, NSA-IAM – ACF2 Chairperson SDSUG – Stephen Mintz, CISSP - TSS Erik Graham, MSIA, CISSP-ISSAP, CRISC, CISM Principal Information Security Engineer General Dynamics - C4 Systems 8201 E. McDowell Road, MD: H707 Scottsdale, AZ 85257 Phone: 480-441-4831, Cell: 480-734-6164, FAX: 480-441-3868 PGP key or x509 certificate available upon request. Leo J. Hauguel, CISSP, NSA-IAM Page 8 3/7/2016 C://MY DOCUMENTS/@ 2010-2012 SDSUG/SDSUG AGENDA/SDSUG AGENDA & Directions PRELIM 2013-11-13