Export to

• Google Calendar
• iCalendar file
• hCalendar markup
  <div class="vevent h-event"> <h1 class="summary p-name">2018 Spring Training: IT Security and Audit Symposium</h1> <div class='date'><time class="dtstart dt-start" title="2018-05-21T09:00:00" datetime="2018-05-21T09:00:00">Monday, May 21, 2018 at 9am</time> through <time class="dtend dt-end" title="2018-05-22T17:00:00" datetime="2018-05-22T17:00:00">Tuesday, May 22, 2018 at 5pm</time></div> <div class="location vcard p-location h-card"> <a class="url" href='http://calagator.org/venues/202395919'><span class='fn org p-name'>Clackamas Community College - Wilsonville</span></a> <div class="adr p-adr h-adr"> </div> </div> <div class="description p-description"> <p>Spring Training</p> <p>Day 1:</p> <p>1) Keynote: Blockchain: More that Cryptocurrency: Michael Reed (Intel)</p> <p>Presentation on the origin of blockchain technologies and its evolution to a key technology in pursuit of increased efficiencies and new business models. Is your enterprise ready for blockchain?</p> <p>2) Micro Segmentation and Cloud-A blueprint for protecting your golden egg: Tyler Hardison (RedHawk Security) (EVENT SPONSOR)</p> <p>3) Benefiting from PCI – Even if Compliance is Not Required: Bowe Hoy (Sword&Shield) and Mike Griffin (Circle K Stores, Inc.)</p> <p>The Payment Card Industry Data Security Standard (PCI DSS) can be beneficial to your organization, even if compliance to it is not a requirement. PCI DSS features a number of valuable guidelines to help your organization improve its security posture, technology auditing, and business operations. This session will help you understand the key components of PCI DSS and how your organization can benefit from implementing it. You will receive practical lessons through case studies about organizations that have successfully implemented PCI DSS. Whether these organizations were required to comply with PCI DSS, or chose to adopt it – they became a better organization because of it. And you can learn how to do the same for your organization.</p> <p> 4) Certificate Security and Frameworks for a Public CA: Derek Thomas and Scott Perry</p> <p>As the ubiquity of on-line shopping continues to amplify our digital environment, ensuring a trusted on-line transaction becomes critical to building the brand loyalty and experience once relished within the physical brick and mortar retailer. The ability to ensure a trusted and secure transaction is not new, however the scrutiny placed on that trust is at an all time high with significant changes in the issuing community and the scrutiny ensuing from the browser community for secure and reliable trusted certificates.</p> <p>In this presentation, Scott Perry, Partner and Derek Thomas, Managing Director, of Scott Perry CPA, one of six licensed CPA firms performing Certificate Authority audits, will discuss the changing landscape of on-line transactional trust and the requirements of Certificate Authorities. The presentation will include a discussion and overview of an established but less known framework for evaluating and auditing the performance of Certificate Authority practices and considerations applied to evaluating the security of your on-line transactions.</p> <p>Day 2: 5 Sessions: Various Presenters</p> <p>5) Current Economics of Cyber: David Hobbs: Radware</p> <p>Often we discuss the changing threat landscape from a pure technical or vulnerability picture, however this does an injustice to element of ease, cost and access to attacks. This presentation will provide attendees with an up-to-date picture of the rapidly changing landscape of attack tools and services, the buying criteria and locations for these the tools and ease of use. In addition, the presentation will provide an understanding of how the combination of the proliferation of these tools and their corresponding use has dramatically changed the dynamics of the return on defense strategies. This presentation will provide unique insight into the world of the Darknet, specific customer attack stories, new economic models of measuring security deployments and a refreshed look at how controls should be deployed going forward.</p> <p>6) Cyber War Chronicles - Stories From the Virtual Trenches (ERT Report 2017): David Hobbs: Radware</p> <p>From information shared by over 1250 companies on their top concerns, we talk about what happened in 2017 and predict the top trends of 2018 in cyber security. The first half of 2017 saw a continuation of some cyber-security threats, as well as the emergence of some attack types and trends. Ransom attacks, political hacks, and new dynamics around the accessibility and capability of attack tools have added even more challenges to security. This session will explore some of the latest evolutions of the threat landscape, through a combination of market intelligence, real-world case studies, and direct insights from those on the front lines of cyber-security.</p> <p> 7) OWASP Updated Top10: Alex Ivkin (ISACA Board)</p> <pre><code> A detailed technical review of the OWASP top 10. </code></pre> <p>8) The Value of Cyber Certifications: Alex Ivkin (ISACA Board)</p> <p>9) Fraud Audit in a Digital Environment: Sarah Dalton: E&Y</p> <p>CPE: 14 CPE</p> <p>Cost:</p> <p>Regular Pricing: On or After 4/20/18:</p> <p>ISACA or IIA Member: $185</p> <p>Non-Member: $225</p> <p>We hope to see you there!</p> </div> <h3>Links</h3> <ul> <li><a class="url u-url" href="https://www.eventbrite.com/e/2018-spring-training-it-security-and-audit-symposium-tickets-44242034115">Website</a></li> </ul> </div>