Phoenix Tech-Security Conference

Peter Bybee

Using Network Access Control (NAC) to consolidate security layers, eliminate endpoint security threats, manage risk, and maintain compliance.

Session Abstract: This session given by Peter Bybee, CISSP, CISA will provide valuable insight into the confusing array of NAC technology solutions in the marketplace. If you've been thinking about deploying a NAC solution, this is the independent analysis that you've been waiting for.

As part of this discussion the following areas will be covered:

• Understanding different approaches using Network Access Control to secure endpoints, the internal network environment and enforcing policies
• Explaining both pre-admission and post-admission approaches including various solution enforcement options offered in the marketplace
• Should you wait for 802.1x? Do you need to upgrade your switching infrastructure?
• What are the current NAC trends in the marketplace? What is Microsoft doing with NAP? How will what Microsoft and Cisco are doing affect the choices that you make?
• So once you've got NAC deployed, what kinds of policies should you implement and enforce that will help you manage risk?
• How do you reduce the complexity and consolidate security layers using full-cycle NAC?
• How can you use NAC to address compliance requirements for PCI, GLBA, SOX, HIPAA, and others?
• What is the best way to deploy and manage a NAC solution?

Network Access Control is perhaps the most significant network security concept since the introduction of the firewall, don't miss this informative and enlightening presentation!

David Butcher, PMP CSDP
Sr. Systems Engineer

Understanding Managed File Transfer - Insights & Best Practices

As IT departments continually adopt new technologies to improve the performance of their systems, productivity of their end users and relationships with trading partners, they are faced with numerous challenges. One such challenge companies face today is securing and automating large file transfers. Traditional file transfer systems and mediums no longer meet the needs of most organizations or their trading partners, especially when data exposure is a concern. Many organizations have developed in-house solutions that are difficult to manage, lack the ability to track and audit file transfers, and expose the organization to security breaches. A Managed File Transfer (MFT) solution should be secure, easy to manage, and have the flexibility to integrate with existing technologies.

In this presentation, you will:

• Gain a better understanding of the business challenges and drivers of file transfers.
• Identify the security concerns around traditional file transfer systems and mediums.
• Learn best practices to develop security architectures for file transfers.
• Understand how a MFT solution can meet the needs of your stakeholders.

>> click here for the presentation

Current Threats and Countermeasures

Securing the information assets of an enterprise has never been so important or so complicated. The past several years have seen a significant increase in the number of security incidents, threats and vulnerabilities and significant advancements in attack methodologies with new tools, techniques, and attack vectors being released on a weekly basis.

Join Accuvant for a lively, interactive discussion to review the latest in current threats, vulnerabilities and the tools attackers are using to compromise the security of our enterprise and our customers data. Through presentation and live demonstration, attendees will learn about the latest attacks, tools, and techniques employed by today's hackers, as well as potential countermeasures that can help protect against these attacks.

>> click here for the presentation

Jim Shaeffer

Network Quality Assurance Solutions

Despite increased spending on more and more sophisticated Information Technology solutions, managing a network keeps getting to be more difficult. Whether it is due to the increasing complexity of networks, lack of personnel, no tangible metrics or poor translation of technical processes to management planning & decision data, spending has risen while network quality assurance has declined.

What processes do you have in place to consistently and objectively verify your internal controls are effective? How are policies monitored, documented and enforced? How frequently do you review key IT system logs scattered throughout your network? When was the last time you reviewed them? How do you determine if technology is being used properly or improperly in your environment? Do you draft executive reports that highlights the findings of your studies and provides justification for changes and budget requests? How much time does it all take, and is it getting done?

Network Quality impacts every facet of your network and business operations.

Security, compliance, performance, productivity, reliability, communications, response time and the bottom line are all impacted by network quality.
Without a consistent method of measurement, checks and balances quality cannot be assured.

To learn about easy, comprehensive ways to assure the quality of your network, including your endpoints, you'll want to attend this informative educational opportunity and learn about Network Quality Assurance and Clientless Endpoint Security Management (CESM) technology. CESM solutions enable companies to maximize their security investment and ROI to ensure ongoing optimal operations of their I/T infrastructure, all without installing client software on their endpoints.

As a special thank you for attending this presentation, JCS & Associates, Inc. will be giving away a 1 year license to one company for up to 5,000 endpoints of Congruity Inspector, the premier Network Quality Assurance solution.

>> click here for the presentation

Michael Waters
Western Regional Sales Manager

NAC and Beyond: Securing the LAN

>> click here for the presentation

Ken Pappas

Next Generation Network Security Threats -- What to Protect Against in 2008

Targeted threats are on the rise as new vulnerabilities continue to propagate. Evolving threats are less broad then the mass-mailing worms of the past. Newer threats focus on individuals or a specific company combining malware and social engineering to trick the individual through subtle manipulation. This session will discuss the next generation of threats that networks will battle and how they can be protected from these attacks.