Pittsburgh Tech-Security Conference

Ken Pappas

How to Proactively Protect Against Next Generation Network Threats - Meet Security and Compliancy Requirements and Keep Your Network Safe in a Down Economy

This educational session will focus on:

• The next generation of network threats and increased risk in a depressed economy
• Automating strategies to defeat threats
• How to proactively protect your network from threats including malicious content, undesired access, and rate-based attacks using the latest network Intrusion Prevention System (IPS)
• Addressing PCI, GLBA and HIPAA compliance requirements
  

Skip Taylor

Managing Mobile Devices - Working Outside In Rather Than Inside Out

Jim Shaeffer
CEO

Major Components of Risk Management: Consolidating Endpoint Security Functions and Adding a Managed Security Service for a Safer Business Environment

In general, we all want the world to be a place where everyone can trust one another, and this certainly holds true in the business world. Today, however, with so much information out there, it's no longer about blind trust. It's about being able to see how everyone's using their endpoints and your network and to make very clear what's appropriate and that everyone follows the rules.

Acknowledging that the risk exists for the inside employee or the outside hacker to misuse your business resources and information, it is more likely that trusted employees are doing something accidentally or something they think is benign. We've all heard about the large-scale cyber attacks that make the news, but it's the under-the-radar "accidents" that will take your business for a long, expensive ride. Fortunately, there are ways to recognize and proactively defend against them.

By deploying at the endpoint a single-agent solution that delivers multiple security functions managed from a single console, you'll achieve greater security than by using individual products from different vendors or a suite of products from a single vendor combining disparate technologies that merely masquerade as a single agent. Monitoring your perimeter and all communications with an independent verification solution and adding a managed security service greatly reduces risks for your organization, while saving you time and money.

Attend this informative presentation and learn about the risk management advantages you'll get by deploying a true single-agent endpoint network security solution integrated with a managed security service.

Dave Butcher

Understanding Managed File Transfer - Insights & Best Practices

As IT departments continually adopt new technologies to improve the performance of their systems, productivity of their end users and relationships with trading partners, they are faced with numerous challenges. One such challenge companies face today is securing and automating large file transfers. Traditional file transfer systems and mediums no longer meet the needs of most organizations or their trading partners, especially when data exposure is a concern. Many organizations have developed in-house solutions that are difficult to manage, lack the ability to track and audit file transfers, and expose the organization to security breaches. A Managed File Transfer (MFT) solution should be secure, easy to manage, and have the flexibility to integrate with existing technologies.

In this presentation, you will:

• Gain a better understanding of the business challenges and drivers of file transfers.
• Identify the security concerns around traditional file transfer systems and mediums.
• Learn best practices to develop security architectures for file transfers.
• Understand how a MFT solution can meet the needs of your stakeholders

Manu Namboodiri
Vice President of Marketing

Slashing security costs and complexity : An information-centric approach to data protection

Organizations are investing heavily in multiple products to protect sensitive and personal data. These include device-based defenses (such as disk encryption), network-based defenses (such as VPNs and Firewalls) and application-specific defenses. What do they all have in common? They are, in fact, all trying to protect the data - not the device, not the network, and not the port. Taking a piecemeal, device or network-centric approach to data protection only increases costs and complexity. Trends point to an information or data-centric approach - that is, one that truly focuses on protecting the data itself - at all times. This logical approach reduces costs and complexity and will serve as the security & privacy paradigm of tomorrow.

This session will investigate the top 5 security myths of today, the evolving nature of data and why current approaches to protection are swiftly becoming obsolete. We will further delve into the promise of an information-centric approach, the essential requirements of a solution, and the roadmap of how this can be achieved.

>> click here for the presentation

Ken Pappas
Security Strategist

Defending Against Internal Threats and Unauthorized Access

IT departments of all sizes are concerned with how to best protect themselves and their data against outside threats, such as hackers and viruses. However, while their attention is turned to options on how to keep these malicious entities from entering their networks, IT departments haven't realized that the greatest threat to their data is already inside and has gained access - the company's employees.

According to industry experts, insider threats are the number one cause of data breaches. Fifty-nine percent of employees who leave or are asked to leave a company, and have access to proprietary information, will steal company data. When a company has a fiduciary responsibility to keep its intellectual property secure, how can it implement a solution that won't adversely affect day-to-day operations?

This presentation, given by Security Strategist Ken Pappas, President of True North Security, will discuss ways insiders can get access to a business' internal data, and the options available to securing data stored on a network from unauthorized access and the guidelines and parameters that need to be considered when implementing a security solution.