Portland Tech-Security Conference

Bob Goldschmidt
Accuvant Senior Security Consultant

"PCI Security - Myths and Mistakes"
Best Practices in Enterprise Security and PCI Compliance

As the pressure for organizations to become PCI compliant increases, there are a number of common myths and mistakes around this process. Evan Tegethoff, Accuvant Compliance Services Director, will identify these myths and mistakes and how to address them. Topics of discussion include:

• Current PCI compliance statistics
• Top vulnerabilities from compromised merchants
• Ongoing compliance management
• PCI policy and standards requirements
• PCI scope reduction or elimination

Dave Butcher

Understanding Managed File Transfer - Insights & Best Practices

As IT departments continually adopt new technologies to improve the performance of their systems, productivity of their end users and relationships with trading partners, they are faced with numerous challenges. One such challenge companies face today is securing and automating large file transfers. Traditional file transfer systems and mediums no longer meet the needs of most organizations or their trading partners, especially when data exposure is a concern. Many organizations have developed in-house solutions that are difficult to manage, lack the ability to track and audit file transfers, and expose the organization to security breaches. A Managed File Transfer (MFT) solution should be secure, easy to manage, and have the flexibility to integrate with existing technologies.

In this presentation, you will:

• Gain a better understanding of the business challenges and drivers of file transfers.
• Identify the security concerns around traditional file transfer systems and mediums.
• Learn best practices to develop security architectures for file transfers.
• Understand how a MFT solution can meet the needs of your stakeholders

Jim Shaeffer
CEO

Major Components of Risk Management: Consolidating Endpoint Security Functions and Adding a Managed Security Service for a Safer Business Environment

In general, we all want the world to be a place where everyone can trust one another, and this certainly holds true in the business world. Today, however, with so much information out there, it's no longer about blind trust. It's about being able to see how everyone's using their endpoints and your network and to make very clear what's appropriate and that everyone follows the rules.

Acknowledging that the risk exists for the inside employee or the outside hacker to misuse your business resources and information, it is more likely that trusted employees are doing something accidentally or something they think is benign. We've all heard about the large-scale cyber attacks that make the news, but it's the under-the-radar "accidents" that will take your business for a long, expensive ride. Fortunately, there are ways to recognize and proactively defend against them.

By deploying at the endpoint a single-agent solution that delivers multiple security functions managed from a single console, you'll achieve greater security than by using individual products from different vendors or a suite of products from a single vendor combining disparate technologies that merely masquerade as a single agent. Monitoring your perimeter and all communications with an independent verification solution and adding a managed security service greatly reduces risks for your organization, while saving you time and money.

Attend this informative presentation and learn about the risk management advantages you'll get by deploying a true single-agent endpoint network security solution integrated with a managed security service.

>> click here for the presentation

Rick Farina
Senior Wireless Security Engineer

Glenn Williamson
Managing Director Western Sales

Wireless: The Invisible Threat to Your Network

AirTight Networks, the leader in wireless security and compliance, discusses the evolution of current and emerging wireless threats and their impact on the enterprise.

This session will highlight 10 basic wireless threats, the impact of 802.11n ratification, the challenges facing IT to detect and defend against these threats, and the pros and cons of various defense mechanisms.

>> click here for the presentation

Andrew Plato, CISSP, CISM
President / Principal Consultant

The Ultimate Security Risk: People

It has been estimated that 80-90% of all security failures are the result of human error, incompetence or poor procedures. How people manage, use and monitor information systems has a more profound impact on security than any technology. This presentation will address a diverse set of concepts on management, technology, human behavior and psychology to highlight the most pervasive risk to your IT operations - people. And like all presentations from Andrew Plato, it will be entertaining and thought-provoking.

Topics Include:

• How we perceive security and threat
• How personalities influence attitudes toward security
• Why sensational security issues and exotic hacking techniques are useless to your business
• Why collaboration & communication are key skills for security people
• Strategies for managing people and risk
  

>> click here for the presentation

Coley Moore
Senior Systems Engineer

Are You Still Fighting the Cyber War of 1995?

>> click here for the presentation

Mikko Välimäki
Chief Scientist

Evolving Web Threats and Countermeasures

>> click here for the presentation

Jose Fernandez

Three issues underscore the need to secure digital identities and information: risk mitigation, business enablement and compliance pressures.

• When data is lost or stolen, organizations incur both financial and brand damages.
• Organizations require greater information flow to customers, partners and employees faster and in real time to stay competitively viable.
• Regulatory agencies recognize the need to protect identities and information and have mandated certain requirements dictating the handling of sensitive information.

Moreover, because of hackers, keystroke logging, phishing and other attacks which grant access to applications, perimeter security (anti-virus, firewall, etc.) is no longer enough to protect identities and information. Rather, organizations should have trusted security - often SSL, strong authentication, fraud detection, digital certificates and PKI - which strikes the right balance between affordability, expertise and service.

>> click here for the presentation