The conference will be held at the McKimmon Conference and Training Center. For directions to the center, click on the link.

2010 Keynote: Ann Garrett, MBA, CISM, CGEIT
State Chief Security and Risk Officer

Ann Garrett is the State Chief Security and Risk Officer for the State of North Carolina. She earned her undergraduate degree at the University of Connecticut and her MBA from Meredith College. Ann also has a Certificate of Computer Programming from North Carolina State University, is a Certified Information Security Manager (CISM) and is Certified in the Governance of Enterprise Information Technology (CGEIT). She has broad knowledge of enterprise automated business systems, including over twenty-three years experience in the design, development, implementation, security, training, documentation and ongoing support for automated business systems. She has chaired, as well as served, on numerous project teams and committees and managed a wide variety of successful enterprise information technology initiatives. Her experience includes information security, risk management, business continuity and disaster recovery, information systems architect, financial management, IS audit, compliance, quality control, vendor and customer relationship management, sales support, budgeting, and operations planning and scheduling. Additionally, her accomplishments include:

• Served on Governor's Terrorism Preparedness Task Force & Governor's VISION 2030 Task Force.
• 2001 Access Control and Security Systems Security Magazine Honor Roll award.
• 2002 NASCIO Recognition Award winner in Security and Business Continuity Category.
• 2003 NASCIO Recognition Award second place in e-government category for Identity and Access Management.
• 2004 NC Enterprise Security Standards Compliance Assessment regional finalist Council of Governments Award.
• 2004 ISE/CSI Information Security Executive of the Year National Award
• 2005 NASCIO Recognition Award winner in Security and Business Continuity Category
• NASCIO Security and Privacy Committee, DHS Governing Coordinating Council, NC Multi-State Information Sharing Analysis Center/Federal Department of Homeland Security, NC Health Alert Network, Criminal Justice Information Network Security Oversight Committee, InfraGard, ISACA, ISSA and CSI.
• Expert advisor in the areas of security, risk, compliance, and privacy.
• Managed NC Office of Information Technology Services enterprise Y2K project.
• Authored the first state technical architecture for security and systems management, and enterprise security policy.
• Member of management team that implemented the North Carolina Accounting System (NCAS) at the Office of the State Controller. Project won a Federal Technology Leadership award in 1996.

Keynote Topic: Enterprise Security and Risk Management

The speaker will discuss the need for a risk based approach to a cyber security program that includes both proactive and reactive measures to mitigate risk and support compliance. Topics will include essential program such as elements risk management, security, business continuity and how they enhance the organizations compliance with legal and regulatory requirements. The presentation will include some examples, practical advice and lessons learned that may to help others to enhance their security program service offerings.

2010 Keynote: Marcus J. Ranum
Chief of Security for Tenable Security, Inc.

Marcus J. Ranum is a world-renowned expert on security system design and implementation. He is recognized as an early innovator in firewall technology, and the implementor of the first commercial firewall product. Since the late 1980's, he has designed a number of groundbreaking security products including the DEC SEAL, the TIS firewall toolkit, the Gauntlet firewall, and NFR's Network Flight Recorder intrusion detection system. He has been involved in every level of operations of a security product business, from developer, to founder and CEO of NFR. Marcus has served as a consultant to many FORTUNE 500 firms and national governments, as well as serving as a guest lecturer and instructor at numerous high-tech conferences. In 2001, he was awarded the TISC "Clue" award for service to the security community, and the ISSA Lifetime Achievement Award. As Chief Of Security for Tenable Security, Inc., Marcus is responsible for research in open source logging tools, and product training. He serves as a technology advisor to a number of start-ups, established concerns, and venture capital groups.

Keynote Topic: Advanced Persistent Threats

We know it's nothing new, but it's a good term for the biggest problem that security practitioners face, today: long-term covert penetrations. Since the security industry has oriented itself toward detecting widespread threats, we're at a bit of a technical impasse. I will offer a few ideas for things security practitioners can, and should, do.

---

Raleigh ISSA Chapter Past Conferences information.