ISSA New England April 2017 Chapter Meeting Event
Tuesday, April 11, 2017 from 12:00 PM to 3:30 PM EDT
You are invited to ISSA, New England Chapter's first meeting of 2017. Come join us as we kick off this year’s schedule with well-known and established practitioners in the field of information security: Robert Siciliano, Michael Rasmussen and Verterim's Jennifer Pesci-Anderson and Peter Ridgley.
#1 Best Selling Author Robert Siciliano is a Certified Speaking Professional; CEO of IDTheftSecurity.com is fun and funny, but serious about teaching you fraud prevention and personal security. Robert is a United States Coast Guard Auxiliary Flotilla Staff Officer of the U.S. Department of Homeland Security whose motto is Semper Paratus (Always Ready). His programs are cutting edge, easily digestible and provide best practices to keep you, your clients and employees safe and secure. Siciliano’s media credentials include hard-hitting and informative contributions to major media outlets such as TIME Magazine, The Wall Street Journal, Forbes, The New York Times, The Anderson Cooper Show, John Stossel, Good Morning America, CNN, Fox News, and many others.
Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC). With 21+ years of experience, Michael helps organizations improve GRC processes and choose technologies that are effective, efficient, and agile. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — being the first to define and model the GRC market in 2002 while at Forrester.
Please register below.
This event is open to ISSA members.
Guests and non-members are welcome to attend; a fee of $35 will be charged, payable by cash only, at the door.
Verizon
60 Sylvan Rd
Waltham, MA 02451
Tuesday, April 11, 2017 from 12:00 PM to 3:30 PM EDT
You are invited to ISSA, New England Chapter's first meeting of 2017. Come join us as we kick off this year’s schedule with well-known and established practitioners in the field of information security: Robert Siciliano, Michael Rasmussen and Verterim's Jennifer Pesci-Anderson and Peter Ridgley.
#1 Best Selling Author Robert Siciliano is a Certified Speaking Professional; CEO of IDTheftSecurity.com is fun and funny, but serious about teaching you fraud prevention and personal security. Robert is a United States Coast Guard Auxiliary Flotilla Staff Officer of the U.S. Department of Homeland Security whose motto is Semper Paratus (Always Ready). His programs are cutting edge, easily digestible and provide best practices to keep you, your clients and employees safe and secure. Siciliano’s media credentials include hard-hitting and informative contributions to major media outlets such as TIME Magazine, The Wall Street Journal, Forbes, The New York Times, The Anderson Cooper Show, John Stossel, Good Morning America, CNN, Fox News, and many others.
Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC). With 21+ years of experience, Michael helps organizations improve GRC processes and choose technologies that are effective, efficient, and agile. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — being the first to define and model the GRC market in 2002 while at Forrester.
Please register below.
This event is open to ISSA members.
Guests and non-members are welcome to attend; a fee of $35 will be charged, payable by cash only, at the door.
Verizon
60 Sylvan Rd
Waltham, MA 02451
Agenda:
12:00 Registration
12:30–1:20 Robert Siciliano, The Panacea is Security Appreciation, not Awareness Training
Security Awareness has not worked. Some studies show anywhere from 15-80 percent of consumers or employees still fall for phishing scams. Why? There is no patch for human gullibility. And because security awareness is “head based” information, knowledge, perception or an intellectual understanding it still lacks “security appreciation”. Security appreciation is consciousness, comprehension and a degree of gratitude for someone or something. This “heart based” appreciation and understanding affects us at a cellular level. When you make your employees and client’s data security appreciative and social engineering proofed, then your data and everyone’s identities become tougher to hack.
1:30–2:20 Michael Rasmussen, GRC Economist & Pundit, The Role of Info/CyberSec in Operational & Enterprise Risk Management Programs
When the organization approaches information risk as a silo disconnected from other enterprise risk areas that do not collaborate with each other there is no possibility to be intelligent about risk decisions that could impact broader business strategy and operations. Risk Management maturity increases as the ability to connect, understand, analyze, and monitor interrelationships and underlying patterns of performance, risk, and compliance across the business grows. Organizations require complete situational and holistic awareness of information risk management across operations, processes, relationships, systems, transactions, and data to see the big picture or risk and impact on performance and strategy. Understanding and managing risk in today’s environment requires a new paradigm in managing the interconnections and relationships of risk, particularly information risk.
2:30–2:45 BREAK
2:45-3:15 Verterim's Jennifer Pesci-Anderson and Peter Ridgley, Why GRC Programs Fail?
Learn the top 7 reasons why GRC programs fail - no matter the size of the program. Verterim will share what you can do to identify red flags to side-step failure, use the antidotes to turn failures into successes, create the path to GRC success.
3:15 wrap up
12:00 Registration
12:30–1:20 Robert Siciliano, The Panacea is Security Appreciation, not Awareness Training
Security Awareness has not worked. Some studies show anywhere from 15-80 percent of consumers or employees still fall for phishing scams. Why? There is no patch for human gullibility. And because security awareness is “head based” information, knowledge, perception or an intellectual understanding it still lacks “security appreciation”. Security appreciation is consciousness, comprehension and a degree of gratitude for someone or something. This “heart based” appreciation and understanding affects us at a cellular level. When you make your employees and client’s data security appreciative and social engineering proofed, then your data and everyone’s identities become tougher to hack.
1:30–2:20 Michael Rasmussen, GRC Economist & Pundit, The Role of Info/CyberSec in Operational & Enterprise Risk Management Programs
When the organization approaches information risk as a silo disconnected from other enterprise risk areas that do not collaborate with each other there is no possibility to be intelligent about risk decisions that could impact broader business strategy and operations. Risk Management maturity increases as the ability to connect, understand, analyze, and monitor interrelationships and underlying patterns of performance, risk, and compliance across the business grows. Organizations require complete situational and holistic awareness of information risk management across operations, processes, relationships, systems, transactions, and data to see the big picture or risk and impact on performance and strategy. Understanding and managing risk in today’s environment requires a new paradigm in managing the interconnections and relationships of risk, particularly information risk.
2:30–2:45 BREAK
2:45-3:15 Verterim's Jennifer Pesci-Anderson and Peter Ridgley, Why GRC Programs Fail?
Learn the top 7 reasons why GRC programs fail - no matter the size of the program. Verterim will share what you can do to identify red flags to side-step failure, use the antidotes to turn failures into successes, create the path to GRC success.
3:15 wrap up