The one security event you need is here. December 9-10, 2008 Jacob K. Javits Convention Center, New York City
ENTERPRISE DATA SECURITY ENTERPRISE SECURITY CONFERENCE & EXPO
Register before October 31 to save $200. Go to scworldcongress.com. w See the latest products and services w Learn new strategies, techniques and solutions w Gain valuable international perspectives w Find out how to protect your business from future threats
Learn from leading experts and innovators including:
Karen Evans, administrator of e-government and IT, OMB Platinum sponsor
Gold sponsors
Adrian Seccombe, CISO, Eli Lilly & Jericho Forum Board Member
Louis Freeh, Former Director, FBI
Congressman Jim Langevin (D-R.I.)
Silver sponsors
Mohd Noor Am Intl. Multilater Terrorism Lead association sponsor
Education partners
Media partners
Letter from the Editor
SC World Congress December 9-10, 2008, at the Javits Convention Center in New York
Join us in December To help you prepare for the latest threats and imminent risks to the security of your business, SC Magazine has created the SC World Congress, our first international conference and exposition. We’ll arm you with the information you need to bolster your corporate cybersecurity defenses and prepare you for the future. Join us in December and we’ll give you the practical advice and useful guidance you need to hone your security processes, while gaining a better understanding of how the threat landscape is evolving. Over two days, you’ll capture the latest thinking from industry leaders through a specially designed program of educational sessions, keynotes and panel discussions. You will network and exchange ideas with fellow security professionals facing similar challenges to you, and you’ll spend time in an exposition hall filled with ideas and solutions from the leading vendors and service providers. Armed with the no-nonsense guidance and insights offered by government and industry experts, you’ll leave the SC World Congress armed with the kind of information that will make a real difference to your business. We look forward to welcoming you.
2
Register now and save: go to www.scworldcongress.com
Featured keynotes and speakers
Alexander Abramov
Mohd Noor Amin,
VP in IT risk management, JP Morgan Chase
Intl. Multilateral Partnership Against CyberTerrorism
Jeff Debrosse research director, North America, ESET
Kevin Hyland
John Iannarelli
Robert Israel
Joe Jarzombek
detective inspector, Scotland Yards Anti Corruption Command
supervisory special agent, FBI
VP & CIO, John C. Lincoln Health Network
director for software assurance, NCSD, U.S Dept. of Homeland Security
Ted Jestin
Paul Kurtz
Norm Levine
Mark Lobel
CISO & senior vice president, Lehman Brothers
exec. dir. of SAFECode; partner, Good Harbor Consulting LLC
manager of IT compliance & governance, HBO
principal, PricewaterhouseCoopers
Dan Lohrmann
Kim Marcus
Michigan CIS, director, MDIT Office of Enterprise Security, state of Michigan
asst. director, Office of the Special Representative of Interpol to the UN
Steven Peltzman
Patrick Peterson
CIO, Museum of Modern Art
VP of technology, IronPort Systems, a Cisco Business Unit
Lt. Gen. Harry D. Raduege Jr.
Marina Roesler
Bob Russo
Marcus Sachs
managing director, global head of technology audit, Goldman Sachs
GM, PCI Security Standards Council
exec. dir. for govt. affairs, national security policy, Verizon Communications
Howard Schmidt
Phyllis Schneck
Daniel Schutzer
president, Information Security Forum
founding chair, InfraGard Natl. Members Alliance & VP, research integration, Secure Computing Corp.
exec. director, Financial Services Technology Consortium
Bobby Singh
Dor Skuler
Stan Waddell
Neil Warner
director, information security, Smart Systems for Health Agency
GM, mobile security products enterprise business group, Alcatel-Lucent
AVP and CISO, UT Southwestern Medical Center
chief information security officer, GoDaddy.com
(USAF, Ret.) chairman, Deloitte Center for Network Innovation
Ty Sagalow president, product development, general insurance, AIG
Warren Axelrod
Dave Cullinane
CPO and business information security officer, US Trust
CISO, eBay
Paul de Graaff
Michele Edson
CSO, AIG
SVP, The Santa Fe Group / administrator, BITS Shared Assessments Program
Maurice Hampton
Questions? Email congressinfo@haymarketmedia.com or phone 877-418-4861. Outside the U.S., dial 410-418-4861.
information security program manager - GE
3
Tuesday, December 9
DAY1 Time
Track 1 Policy/management This track helps security professionals prioritize, better understand and provide guidance around important topics, such as PCI, DRM, security awareness and privacy. These timely topics will be of value to security personnel at all levels.
(For a full description for each session, please visit www.scworldcongress.com Scheduling subject to change or revision.) Plenary 1: A view from the top (open to all) The growing wave of data theft, internet crime and cyberterrorism is crashing over legitimate businesses and governments worldwide.
8:30 a.m. – 9:30 a.m.
PCI: More data = more regulation...finally The payment card industry has worked hard to standardize practices and secure credit card transactions that take place in North America.
9:45 a.m. – 10:30 a.m.
Securing your mobile blind spot Laptops that leave the enterprise fall into a “mobile blind spot,” outside the reach of the IT staff’s protective measures.
10:45 a.m. – 11:30 a.m.
Exhibit floor break
11:30 a.m. – 12:15 p.m.
12:30 p.m. – 1:30 p.m.
1:45 p.m. – 2:30 p.m.
2:45 p.m. – 3:30 p.m.
10:00 a.m. – 4:30 p.m. Exhibition floor
Plenary 2: Global Title goes here data threats (open to all) Louis Freeh,iliqui former FBI director, discusses Molorerc ercidunt ip eugiat. Ut issues el et associated with data security, outsourcing, wisi blaore doloreLummy nonsequamsoftdit ware piracy, intellectual property and copyright. aliquam cortie Managing information in organizations with no georgraphical borders Secure DRM, information classification, information asset management – they’re all essential. Security awareness: Protecting you against your most dangerous assets – your employees
Exhibit floor break
3:30 p.m. – 4:30 p.m.
4:30 p.m. – 5:30 p.m.
4
Plenary 3: The Commission on Cybersecurity for the 44th Presidency (open to all) This will be your first opportunity to hear the finalized plan released in December.
Register now and save: go to www.scworldcongress.com
Track 2 Emerging threats/ risk planning Sessions in this track will focus on the risk planning and mitigation theme, as well as the latest emerging threats faced by organizations, and the best practices implemented to thwart them.
Track 3 Editor’s choice This track focuses on timely issues as seen through the eyes of Illena Armstrong, SC Magazine’s editor-inchief. Hear from a number of the latest innovators in the security industry discussing international cybercrime, breach PR best practices, and much more.
Track 4 Security, compliance, audit and governance This track is co-presented with ISACA New York Metropolitan Chapter. Issues discussed in this track include IT risk management, compliance optimization, partnering with your auditor and IT security governance.
Vendor risk assessment: time = money What are some best practices in this area, success stories and pitfalls to be avoided?
Secure business collaboration: Do it now Collaboration-oriented architectures is the key to safe business, says Jericho Forum. More than 80 percent of the technology is already available.
IT security governance Learn to leverage existing frameworks to negotiate information security into the fabric of an organization.
Risk comes in all sizes Explore best practices in mapping risk, regardless of your company or business division size, global footprint or revenue.
International cybercrime Your company network has been breached, information stolen – who are you going to call first?
IT risk management Knowing your information assets and understanding their risks is a key for designing an effective IT risk management program.
Title goes here Exhibition FloorMolorerc iliqui ercidunt ip eugiat. Ut el et wisi blaore doloreLummy nonsequam dit aliquam cortie
Title goes here Exhibition FloorMolorerc iliqui ercidunt ip eugiat. Ut el et wisi blaore doloreLummy nonsequam dit aliquam cortie
Title goes here Exhibition FloorMolorerc iliqui ercidunt ip eugiat. Ut el et wisi blaore doloreLummy nonsequam dit aliquam cortie
The key to secure coding: Secure code Software-coding processes all continue to need improvement and monitoring. Who do we hold accountable and how?
The financial impact of cybersecurity This session will show you how to bring the multiple stakeholders in cyber security together.
IT security audit What is the role of IT security audit and how can it bring better value above and beyond just providing assurance to the board? We find out.
State of the state on security Latest threats, malware and cybersecurity are things that should keep you up at night. We examine methods to avoid stepping into them.
Data and HIPAA In health care, security is more challenging due to the longevity with which data needs to be retained. Experts shed light on this challenge.
Your auditor is your friend – really! Auditors wearing a white glove and checking for dust on the mainframes are a myth. Here are ways to have them help you with management.
Questions? Email congressinfo@haymarketmedia.com or phone 877-418-4861. Outside the U.S., dial 410-418-4861.
5
Wednesday, December 10
DAY2 Time
Track 1 Policy/management This track helps security professionals prioritize, better understand and provide guidance around important topics, such as PCI, DRM, security awareness and privacy. These timely topics will be of value to security personnel at all levels.
(For a full description for each session, please visit www.scworldcongress.com Scheduling subject to change or revision.) Plenary 4: Consumer data – For your eyes only (open to all) Lost customer data from a number of sources – What are these types doing with our data?
8:30 a.m. – 9:30 a.m.
HIPAA: Not just your health care provider’s problem anymore HIPAA just doesn’t effect health care-related companies any longer.
9:45 a.m. – 10:30 a.m.
Practical security and privacy Today’s security professionals are being sent into battle with yesterday’s weapons to fight tomorrow’s wars.
10:45 a.m. – 11:30 a.m.
Exhibit floor break
11:30 a.m. – 12:15 p.m.
12:30 p.m. – 1:30 p.m.
1:45 p.m. – 2:30 p.m.
2:45 p.m. – 3:45 p.m.
10:00 a.m. – 4:30 p.m. Exhibition floor
Plenary 5: Cybersecurity from the eyes Title goes here of an executive to all) Molorerc iliqui (open ercidunt ip eugiat. Ut el et As a security pro, the fight withnonsequam execs for budget wisi blaore doloreLummy dit is inevitible. Here we get what is on their mind. aliquam cortie An eye on your employees New business tools – from IM to social networking – are changing how we do business.
Plenary 6: International response to cyberthreats (open to all) Cyberterrorism is international and needs to be treated for the security of all of us. Exhibit floor break
3:45 p.m. – 4:30 p.m.
6
Register now and save, go to www.scworldcongress.com
Track 2 Emerging threats/ risk planning Sessions in this track will focus on the risk planning and mitigation theme, as well as the latest emerging threats faced by organizations, and the best practices implemented to thwart them.
Track 3 Editor’s choice This track focuses on timely issues as seen through the eyes of Illena Armstrong, SC Magazine’s editor-inchief. Hear from a number of the latest innovators in the security industry discussing international cybercrime, breach PR best practices, and much more.
Track 4 Security, compliance, audit and governance This track is co-presented with ISACA New York Metropolitan Chapter. Issues discussed in this track include IT risk management, compliance optimization, partnering with your auditor and IT security governance.
Data loss prevention We’ll discuss how data loss prevention focuses on protecting assets and brand strength.
The latest security threats that go bump in the night What are the next biggest threat vectors that CSOs feel they may not be well prepared for?
Outsourcing security: pros/cons This session analyzes the options available to better enable decision-makers to make the right choice for their organization.
Offshoring – risk vs. reward Whether it’s a strong SLAs or stringent security checks and balances, organizations need to know the facts.
Executive budgeting panel Hear from the buying community that is highest on the food chain – what each in their respective roles are looking for.
Security aspects of compliance Ideas on how to create a global approach to security controls to replace a piecemeal approach for regulatory requirements.
Title goes here Exhibition FloorMolorerc iliqui ercidunt ip eugiat. Ut el et wisi blaore doloreLummy nonsequam dit aliquam cortie
Title goes here Exhibition FloorMolorerc iliqui ercidunt ip eugiat. Ut el et wisi blaore doloreLummy nonsequam dit aliquam cortie
Title goes here Exhibition FloorMolorerc iliqui ercidunt ip eugiat. Ut el et wisi blaore doloreLummy nonsequam dit aliquam cortie
Web security and malware Learn how infections can occur, the potential risks of an attack and how you can prepare.
Breach PR – best practices It’s all gone horribly wrong. Data was lost, and worse yet, it’s already in the news. So when it happens to you, what do you do?
Compliance optimization Hear from several top practitioners on how they assure their organizations’ compliance associated with multiple regulations.
Questions? Email congressinfo@haymarketmedia.com or phone 877-418-4861. Outside the U.S., dial 410-418-4861.
7
Registration
Join us
Register today for early bird rates. 2-day Conference Pass Before Oct. 31: $895 After Oct. 31: $1,095 1-day Conference Pass Before Oct. 31: $650 After Oct. 31: $795
Click on scworldcongress.com
Give us two days and we’ll give you six FREE plenary sessions presented by leading industry commentators, four dedicated tracks of multiple expert panels, 65 leading speakers, 55+ leading vendors, 130+ reasons you can’t miss New York’s security event of the year. Register today to attend the SC World Congress interThe following hotels offer special rates for the SC World Congress. These rates are subject to availability and do not include tax. Cancellation penalties and other terms and conditions vary per hotel. Contact New York Guest with questions or special requests: toll free: 866-406-5341; 212-302-4019; or email info@newyorkguest.com
Getting around
national conference and expo, the only event designed to give you the inside info you need to protect data, comply with regulatory demands, and stay abreast of new threats. Over two days, you’ll hear from industry leaders, network with peers, and meet the vendors you need to stay in touch with for the latest solutions.
Wyndham Garden Hotel: Convention Center 341 West 36th Street, 212-542-8990
Deluxe Room: $429, book by Oct. 24, Code: 1208SCWOR
Wyndham Garden Hotel Chelsea 37 West 24th Street, 212-243-0800 Double Room: $439, King Room: $419, book by Oct. 24, Code: SC World Congress Radisson Martinique Broadway 49 West 32nd Street, 212-736-3800 Standard Room: $349, book by October 8, Code: SC World Congress Holiday Inn Express: Madison Square Garden 232 West 29th Street, 212-695-7200
Standard Room: $469, breakfast incl., book by Nov. 10, Code: SC World Congress
Hotel 373 Fifth Ave 373 Fifth Avenue, 212-213-3388 Standard Rooms: $469, book by November 10, Code: SC World Congress NY Waterway ferries to NJ 39th St.
551 W38th St.
38th St.
Taxi stand
37th St.
416 W 36th St. SC World Congress shuttle bus to Penn Station MTA bus M34, M42
Jacob K Javits Convention Center
Shuttle bus: Free bus transfers between Javits and Penn Station. Look for buses with the “SC WORLD CONGRESS” sign.
36th St. 34th St.
35th St.
417 W35th St.
34th St. 34th St. 33rd St. Penn Station LIRR, Amtrak, NJ Transit 31st St.
. ve
hA
7t
. ve
hA
8t
. ve
. ve
hA
9t
hA
t 10
.
ve
hA
t 11
e id t S ay es w W igh H