2019 Houston Information Security Forum

7:45 AM - 8:30 AM

Registration & Breakfast

Come check in to receive your program and CPEs while enjoying a complimentary continental breakfast.

8:30 AM - 8:45 AM

IANS Welcome and Perspective

Come join us as we welcome you to the Forum.

Stephen Clark

Retired Major General, United States Air Force

Stephen is the CBO (Chief Business Officer) and a board member of Summit Technology Laboratory (STL) Summit Technology Laboratory (STL), a deep tech projection mapping start-up based out of Irvine CA. Stephen serves on the boards of Education Loan Finance (ELFi), a not-for-profit student loan financial holding company, Support Systems Associates INC (SSAI) a medium size defense contractor and the Jack and Jill Late Stage Cancer Foundation (JAJF), a national charity. Stephen served 32 years in the United States Air Force Special Operations community retiring as a Major General. He is a combat pilot with multiple deployments in Bosnia, Somalia, Haiti, Afghanistan and Iraq with leadership tours at the squadron, group, wing and Task Force level.

8:45 AM - 9:30 AM

Leadership…A Human Endeavor: Observations from 32 Years in the Air Force and Joint Special Operations Community

with

After an extensive career in military leadership positions, Major General Stephen Clark knows there's a compelling distinction between a quality manager and a high-performing leader. At their extremes, people are compelled to follow managers because they have to, while they willingly follow leaders because they want to.

As such, highly effective leaders understand that true leadership is a human endeavor and requires understanding the aspirations, motivations and abilities of individuals and the development of an empathetic relationship. At the core of servant leadership is the belief that if we take care of our people, they will take care of the business. Key to building relationships is the ability to clearly communicate the vision, values and limitations that we expect our businesses to operate within through actions, words and behavior. Making the transition from manager to leader is a journey of experience, learning, failure and introspection…along with a heavy dose of courage and humility.

9:30 AM - 9:50 AM

Tabletop Break

IANS Tabletops gives you an opportunity to connect with information security leaders in a relaxed environment. Come stretch your legs and network with your peers and solution providers over snacks and coffee.

9:50 AM - 10:25 AM

Technology Group 1

Join the Technology Spotlight session where Sponsors will present their innovative technology. Each session will last 35 minutes and are both technical and educational in nature. This is your opportunity to stay current on emerging technologies and see what is going on in the space.

Teri Radichel

IANS Faculty

Teri Radichel is the CEO of 2nd Sight Lab, a cloud security company that offers cloud security training, penetration tests, and cloud security assessments to organizations worldwide. She is the author of the book Cybersecurity for Executives in the Age of Cloud, an AWS Hero and meetup organizer, a member of the IANS Faculty and Infragard, and received the SANS 2017 Difference Makers Award for security innovation. Teri holds numerous cloud security certifications, including the GSE, which many regard as one of the most challenging certifications to obtain in cybersecurity. She was a member of the original Capital One cloud team and has worked as Cloud Architect, Director of SAAS Engineering, and now CEO, helping companies secure their clouds. Teri has spoken at numerous conferences worldwide including AWS re:Invent, re:Inforce, RSA, OWASP AppSec Day, and Serverless Days, to name a few.

10:35 AM - 11:20 AM Morning Roundtable How-To Sessions Secure the Cloud

Achieving Cloud Migration

with

Fortune 1000 organizations have a complex legacy of platforms, software and networks, and there’s no single playbook to move it all to a new platform because each piece of infrastructure is so different. But there are ways to achieve success. This session will show you how by addressing:

The proper sequence of events?
Problems to expect in different industries and from different data types
Regulatory considerations
Tools of note
How Hashicorp and the Shared Responsibility Model can help

Kenneth van Wyk

IANS Faculty

Ken is the President and Principal Consultant of KRvW Associates, LLC, an independent information security consulting company, and a Visiting Scientist at Carnegie Mellon University. He has held executive and senior technologist positions at Tekmark, Para-Protect, Science Applications International Corporation (SAIC), the U.S. Department of Defense, Carnegie Mellon University, and Lehigh University. Ken is a frequent speaker at technical conferences, and has presented papers and training for CSI, ISF, USENIX, FIRST, CERT, among others.

Improve Infrastructure and Ops

DevSecOps Business Cases

with

Companies still struggle to get developers and security on the same page. They need case studies to show them where and how DevSecOps successes have happened. To that end, this session explores:

Case studies of DevSecOps done right
How to measure your maturity for DevSecOps -- Phase 1 to Phase 5, for example
How to put the “Shift Left” DevSecOps workflow in place
How DevSecOps leads to more secure cloud deployments
How to use DevSecOps to improve security in IoT technology when they are at the development stage

Bill Dean

IANS Faculty

Bill is a Shareholder at LBMC Information Security,where he is responsible for security assessments, incident response, digital forensics, electronic discovery and overall litigation support. He also serves as an expert witness in federal courts and numerous state courts and has conducted digital forensic investigations and electronic discovery services to support litigation efforts. He is also an active member of the International Society for Forensic Computer Examiners and Board Member in East Tennessee’s InfraGard Chapter.

Improve Infrastructure and Ops

Advances in Network Visibility

with

Network security and monitoring remains essential in light of increasing volumes of data and an ever-expanding threat landscape, but comprehensive network visibility is hard, and organizations need better guidance. This session aims to provide that by looking at:

What organizations are missing and which vendors and techniques can help

11:30 AM - 12:05 PM

Technology Group 2

Join the Technology Spotlight session where Sponsors will present their innovative technology. Each session will last 35 minutes and are both technical and educational in nature. This is your opportunity to stay current on emerging technologies and see what is going on in the space.

Riley Bruce

Code42, Technical Product Marketing Manager

Riley is Technical Product Marketing Manager at Code42 where he enjoys educating Security and IT teams through engaging technical content and presentation. Previously, Riley served in both customer support and customer education roles at Code42. In his spare time, he enjoys photography, travel and relaxing at the lake in northern Wisconsin with his pug Mimi.

12:05 PM - 1:00 PM

Lunch & Sponsor Keynote: Departing Employees = Departing Data

with Last year, 40 million people changed jobs and 60% of them admitted to taking data when they left. 90% of these inside threats go undetected for months. By the time organizations find out, the damage is already done. Riley Bruce, Technical Product Manager at Code42 will discuss market drivers behind the business need for real time detection and response for a growing inside threat: departing employees.

InfraGard Houston Introduction

Join Tomas Ortiz from the InfraGard Houston Chapter for a short briefing on the organization's mission and purpose.

1:05 PM - 1:40 PM

Technology Group 2

Join the Technology Spotlight session where Sponsors will present their innovative technology. Each session will last 35 minutes and are both technical and educational in nature. This is your opportunity to stay current on emerging technologies and see what is going on in the space.

Teri Radichel

IANS Faculty

Teri Radichel is the CEO of 2nd Sight Lab, a cloud security company that offers cloud security training, penetration tests, and cloud security assessments to organizations worldwide. She is the author of the book Cybersecurity for Executives in the Age of Cloud, an AWS Hero and meetup organizer, a member of the IANS Faculty and Infragard, and received the SANS 2017 Difference Makers Award for security innovation. Teri holds numerous cloud security certifications, including the GSE, which many regard as one of the most challenging certifications to obtain in cybersecurity. She was a member of the original Capital One cloud team and has worked as Cloud Architect, Director of SAAS Engineering, and now CEO, helping companies secure their clouds. Teri has spoken at numerous conferences worldwide including AWS re:Invent, re:Inforce, RSA, OWASP AppSec Day, and Serverless Days, to name a few.

1:50 PM - 3:05 PM Afternoon Roundtable Workshop Sessions Detect, Respond and Recover

Cryptojacking & Cryptocurrency Mining: Defensive Measures

with

Cryptojacking malware and crypto mining are eating AWS resources, tying up CPU capacity and costing money. This session will help you fight back by exploring:

How to tell if cryptomining malware is in the system
How to get the malware out of your systems
How to keep it out
The most prolific cryptocurrency-based attacks targeting companies
How this malware differs from others, such as worms, ransomware and Trojans

Teri Radichel

IANS Faculty

Teri Radichel is the CEO of 2nd Sight Lab, a cloud security company that offers cloud security training, penetration tests, and cloud security assessments to organizations worldwide. She is the author of the book Cybersecurity for Executives in the Age of Cloud, an AWS Hero and meetup organizer, a member of the IANS Faculty and Infragard, and received the SANS 2017 Difference Makers Award for security innovation. Teri holds numerous cloud security certifications, including the GSE, which many regard as one of the most challenging certifications to obtain in cybersecurity. She was a member of the original Capital One cloud team and has worked as Cloud Architect, Director of SAAS Engineering, and now CEO, helping companies secure their clouds. Teri has spoken at numerous conferences worldwide including AWS re:Invent, re:Inforce, RSA, OWASP AppSec Day, and Serverless Days, to name a few.

1:50 PM - 3:05 PM Afternoon Roundtable How-To Sessions Secure the Cloud

Adapting the SOC to a Cloud Environment

with

Security Operations Centers remain rooted in the same tech, procedures and mindsets that existed before the cloud. They need to adapt to life in the cloud, and this session will explore how to get there. Issues addressed include:

How an old-world SOC differs from one in the cloud
Changes you need to make with your SOC
How to make that transition without dropping the ball in either world
Skills that need to be picked up in the new cloud-based SOC
Examples of cloud detection and response

Kenneth van Wyk

IANS Faculty

Ken is the President and Principal Consultant of KRvW Associates, LLC, an independent information security consulting company, and a Visiting Scientist at Carnegie Mellon University. He has held executive and senior technologist positions at Tekmark, Para-Protect, Science Applications International Corporation (SAIC), the U.S. Department of Defense, Carnegie Mellon University, and Lehigh University. Ken is a frequent speaker at technical conferences, and has presented papers and training for CSI, ISF, USENIX, FIRST, CERT, among others.

Detect, Respond and Recover

Insider Threats

with

Companies are usually unaware that a malicious insider is up to no good in their networks until it’s too late. They need help knowing how to identify early red flags. To that end, this session will explore:

Early red flags to look for
Security controls you can put in place to detect and prevent insider threat activity
Top insider threat monitoring solutions, their strengths and weaknesses
Detection tool essentials

Bill Dean

IANS Faculty

Bill is a Shareholder at LBMC Information Security,where he is responsible for security assessments, incident response, digital forensics, electronic discovery and overall litigation support. He also serves as an expert witness in federal courts and numerous state courts and has conducted digital forensic investigations and electronic discovery services to support litigation efforts. He is also an active member of the International Society for Forensic Computer Examiners and Board Member in East Tennessee’s InfraGard Chapter.

Improve Infrastructure and Ops

Bringing Red/Blue/Purple Teaming into Balance

with

Your Red Team does one thing, your Blue Team does the other, and they don’t talk. Companies struggle to get them on the same page and achieve the true value of these exercises. What to do? This session will explore:

The most valuable KPIs to use for these activities
How to use automation testing to test the effectiveness of a response during an exercise
How to leverage balanced scorecards for direct tracking of capabilities

Bill Dean

IANS Faculty

Bill is a Shareholder at LBMC Information Security,where he is responsible for security assessments, incident response, digital forensics, electronic discovery and overall litigation support. He also serves as an expert witness in federal courts and numerous state courts and has conducted digital forensic investigations and electronic discovery services to support litigation efforts. He is also an active member of the International Society for Forensic Computer Examiners and Board Member in East Tennessee’s InfraGard Chapter.

Detect, Respond and Recover

New Threat Hunting Techniques

with

Attackers keep evolving their tactics, making it increasingly difficult for traditional forensic techniques to keep up. It’s time to get proactive – and that’s where threat hunting comes into play. This session explores the latest techniques in that area, and how to:

Position hunt teams to directly increase the overall maturity (and ROI) of their monitoring and detection capabilities
Detect abnormal patterns of behavior

Kenneth van Wyk

IANS Faculty

Ken is the President and Principal Consultant of KRvW Associates, LLC, an independent information security consulting company, and a Visiting Scientist at Carnegie Mellon University. He has held executive and senior technologist positions at Tekmark, Para-Protect, Science Applications International Corporation (SAIC), the U.S. Department of Defense, Carnegie Mellon University, and Lehigh University. Ken is a frequent speaker at technical conferences, and has presented papers and training for CSI, ISF, USENIX, FIRST, CERT, among others.

Advance Your Team

Case Study: Building a Better Security Culture

with

Companies struggle to find a successful recipe for their security culture and need a concrete example of what another company has done to get it right. This session will offer:

A case study for a company that has succeeded in growing a true security culture
Three things you can do to change that trajectory and actually make your program effective
Ways to expand the team with non-traditional security staff (i.e. ambassadors/champions)

3:05 PM - 3:25 PM

Tabletop Break

IANS Tabletops gives you an opportunity to connect with information security leaders in a relaxed environment. Come stretch your legs and network with your peers and solution providers over snacks and coffee.

3:25 PM - 4:00 PM

Technology Group 1

Join the Technology Spotlight session where Sponsors will present their innovative technology. Each session will last 35 minutes and are both technical and educational in nature. This is your opportunity to stay current on emerging technologies and see what is going on in the space.

5:10 PM - 6:00 PM

Networking Reception

Come network with your peers! Hors d'eouvres and cocktails will be served!

Executive Competencies

Online Training