March 2015: Making Cybersecurity Decisions – a Risk Based Approach

Title: Making Cybersecurity Decisions – a Risk Based Approach

Abstract:

We make myriad decisions every day in our capacity as security professionals. From simply scanning alerts and deciding on appropriate actions, to heading up critical incident response activities. Dozens, sometimes hundreds of small decisions and impressions that push us to act in certain ways, prioritize certain activities, and ultimately determine when our sensitive data and resources are adequately protected. But why do we make these decisions and how can we help our broader organization understand the threats that are being faced? It all comes down to Risk… and our ability to clearly articulate it to senior management. In this interactive presentation we will talk about the cornerstones of a strong risk management process, understand its place in a larger security program framework, and develop methods for assessing risk. Hope to see you there!

 Speaker: Rick Dreger

Rick Dreger is president and owner of WaveGard, an information security firm partnered with Netcraftsmen to deliver expert level cyber defense solutions. Rick has helped a wide range of clients, including Fortune 100 companies, hospitals, law firms, associations, the Federal government, and dynamic mid-sized businesses. With experience that spans over 20 years, Rick’s expertise covers security program creation, risk intelligence assessments, next generation data protection, secure mobility, and wireless networking.

Rick obtained his Master of Science in Computer Engineering from Villanova and a Bachelor of Science in Electrical and Biomedical Engineering (EE/BME) from Duke University. Professionally, Rick maintains both his Certified Information Systems Security Professional (CISSP) and Certified Information Systems Auditor (CISA) certifications. As a complement to his hands-on consulting experience Rick has been a contributor to Information Week, co-authored a McGraw Hill wireless security book, and is actively teaching the capstone class for Georgetown University’s cybersecurity certificate course.

 CPE Value: 2CPEs