main | sponsors | directions | committee | registration information | event schedule

On-line registration is now closed.  Onsite registrations will be accepted on a space available basis.  

What should comprise the information security function at an organization? How do you measure its effectiveness over time? Are there common features applicable across diverse organizational types and sizes?  

These questions have become increasingly critical for organizations as the potential loss from information security breaches mounts. The recent revelation of breaches at Heartland Payment Systems is just the latest indicator of the potential consequences for lapses (lawsuits in federal and district courts, inquiries by federal regulators, sanctions by Visa, reissuing of cards, and plunging stock values).  

Join industry practitioner Joel Scambray for a discussion of evolving approaches to an information security “defensible due care”  standard, including lessons from the field on aligning organizational goals and existing standards, prioritizing and communicating risk, selecting effective technical controls, sustaining a program over time, and measuring effectiveness to drive governance.  

Presenter Info

Joel Scambray is co-founder and CEO of Consciere, provider of strategic security advisory services. He has assisted companies ranging from newly minted startups to members of the Fortune 50 address information security challenges and opportunities for over a dozen years. 

Joel’s background includes roles as an executive, technical consultant, and entrepreneur. He has been a Senior Director at Microsoft Corporation, where he led Microsoft's online services security efforts for three years before joining the Windows platform and services division to focus on security technology architecture. Joel also co-founded security software and services startup Foundstone Inc. and helped lead it to acquisition by McAfee for $86M. In 2007, he helped lead US-based Leviathan Security from start-up to well-recognized boutique security consultancy. He previously held positions as a Manager for Ernst & Young, security columnist for Microsoft TechNet, Editor at Large for InfoWorld Magazine, and Director of IT for a major commercial real estate firm.  

Joel is widely recognized as co-author of Hacking Exposed: Network Security Secrets & Solutions, the international best-selling computer security book that first appeared in 1999. He is also lead author of the Hacking Exposed: Windows and Hacking Exposed: Web Applications series.Joel brings deep experience in technology, IT operations security, and consulting to clients ranging from small startups to the world’s largest enterprises. He has spoken widely on information security at forums including Black Hat, I-4, and The Asia Europe Meeting (ASEM), as well as organizations including IANS, CERT, The Computer Security Institute (CSI), ISSA, ISACA, SANS, private corporations, and government agencies such as the Korean Information Security Agency (KISA), FBI, and the RCMP. 

Joel holds a BS from the University of California at Davis, a MA from UCLA, and he is a Certified Information Systems Security Professional (CISSP).