IT
security has recently been “red flagged”
by both Congress and the Office of Management and
Budget as a major concern which agencies must address
immediately in order to ensure an acceptable level
of government-wide cybersecurity. Recent regulations
and requirements are changing the face of government
IT security prompting agencies to seek innovative
and useful solutions. In this session, three questions
will be examined and answered: How much IT security
is enough? What are the real threats? Who is responsible?
By
determining the most effective and practical security
solutions, this session will address regulations
such as the Federal Information Security Management
Act (FISMA) and improve IT security operations
and requirements in order to comply with federal
guidance by dissecting real-world examples from
both the public and private sector.
“Standards
for Security Categorization of Federal Information
and Information Systems,” National Institute
of Standards and Technology, December 2003
Agenda
7:30 Registration and Continental Breakfast
8:30
Updates: National Institute of Standards and Technology
Directives and Developments
• Hear the latest news and guidance on government
security, including FISMA requirements by covering
FIPS Publication 199
• Discuss “what’s next”
in security reform from inside the top computer
security agencies
• Voice concerns and ask questions during
a participant feedback session
9:30
Discussion: What Drives Us to do IT Security?
• Determine what an IT systems security
posture is and identify the critical components
• Conduct an effective risk analysis, certification
and accreditation
• Identity the real drivers for IT security
actions: regulations, technology, fear, mission,
etc.
• Use assessments to correctly prioritize
resource allocations and justifications
Minimal
Solutions
• Recognize the strengthens and weaknesses
of firewalls
• Examine deployments of firewalls in the
real world
10:30
Break
10:45
Cryptography
• Learn what the various types of cryptographic
algorithms provide
• Understand the advantages and impacts
of deploying crypto solutions
12:00
Networking Luncheon
1:00
Authentication
• Understand the various authentication
options: USB, PCMCIA, SLL, VPN, smartcard, biometrics,
etc.
• Determine when and were to deploy the
right authentication solutions
• Apply crypto solutions and understand
the impact of deploying them
Monitoring
IT Systems
• Learn to deploy a multi-faceted anti-virus
program
• Discover effective intrusion detection
and protection systems
2:30
Break
2:45
Enterprise Security Monitoring
• Assess various available ESM solutions
• Understand the reality of monitoring all
the IT security devices from a central facility
The
convergence of IT and Physical Security
• Learn about the new position of the Chief
Security Officer (CSO)
• Discuss the issues and impacts of convergence:
the roles, responsibilities, politics, qualifications,
etc.
Future
Issues, Trends, and Projections
• Determine new threats to our IT systems
• Project where the future of IT technology
is heading
• Identify the impact the National Policy
document has on the status of IT security posture
4:30
Adjourn
|
