- This event has passed so registration is closed.
Overview
This lively discussion will feature an expert seasoned CISO, with experience of hundreds of incidents, running 4 MSSP’s discussing some of the benefits and downsides to consider when looking for help: MSSP’s, consultants, venders and your business. We discuss how to get the most out of an MSSP while maintaining critical “tribal knowledge” staff and get past “phone it in” SLA based outsourcing. We’ll also cover some ideas to make your Board and C-levels work together on the same team, using IR Desktop exercises and escalating to “the Nuclear Option”
Key Take Aways:
- Awareness of some outsourcing benefits and things to look for and what to avoid
- Some new ideas on how to discuss and share risk information to executives
Moderator
Lee Neely – Information Assurance APL, LLNL
Lee Neely is a senior IT and security professional at LLNL with over 30 years of extensive experience with a wide variety of technology and applications from point implementations to enterprise solutions. He teaches cyber security courses, and holds several security certifications including GMOB, GPEN, GWAPT, GAWN, GPYC, GEVA, CISSP, CISA, CISM and CRISC. He is a current ISSA International Board Member and former ISSA International Director, Member of the SANS NewsBites Editorial Board, SANS Analyst, and Security Weekly podcast host. You can keep up with Lee @lelandneely
Speaker/s
Pete Nicoletti – Field CISO of the Americas, Check Point
Pete has a long history of support of the ISSA and its mission. He was one of the original 4 board members that started the South Florida chapter and was President of the Group for 4 years and helped grow the chapter to hundreds of members. He started the “Hack for the Flag and Chili Cookoff” and large yearly conferences that are still going strong.
Pete has 31 years of IT and MSSP experience and has been a hands-on CISO for the last 18 years and recently joined Check Point as Field CISO of the Americas. Pete’s experience and leadership was most recently at Cybraics Defense as CISO. This company is an advanced Artificial Intelligence and Machine Learning Analytics formed as a DARPA funded project. Pete is the former CISO of Hertz Global, successfully protecting the brand in over 150 countries, 20,000 employees and 10,000 locations. Pete led Virtustream’s (now a Dell company) efforts as CISO to achieve FedRAMP and NIST 800-53 certification in record time and hosted dozens of US Federal Agencies on its most secure cloud design. Pete started the MSSP, security consulting, Pen/Vulnerability Testing Teams as VP of Security engineering at Terremark and successfully guided these services migration in the Verizon purchase. Pete has been a local S. Florida trailblazer for many years, starting a wireless ISP, a network engineering company and an award-winning CRM-telephony Integration Company.
Pete is a founder, leader and member of numerous security groups and is a Board Member and Board Advisor. In 2017, Pete was honored to be selected as a “Top 100 Global Chief Security Officers.” Pete’s cloud security deployments and designs have been rated by Garter as #1 and #2 in the world and he literally “wrote the book” on secure cloud reference designs as published in Intel Press: “Building the Infrastructure for Cloud Security: A Solutions View.”
See Pete Nicoletti‘s full profile.
Dr. Nancy Landreville – Security Project Manager (Contractor for Dept of VA), EMESEC
I am active with various organizations and have been a Treasurer with ISSA BR for many years. I also served as a Vice President of Programs seeking talent for ISSA NOVA in obtaining speakers; and, maintaining my status over the past three years as a Cyber Executive member serving the government and military. I have been a consultant with Q and TS SCI security. Agencies contact me through a business to advise government leaders. I also serve as the Chair for the Baltimore Section for IEEE having served as the Vice Chair last year. I support various initiatives in engineering with cloud architecture, forensics, and mechanics. I have several ongoing projects and incorporate innovations for education and scientific development. I was a government and military leader and executive for several decades (i.e.: Computer Scientist, Functional System Security, Privacy Officer, Deputy for Office of General Counsel, and Executive with the Inspector General for the VA, etc.). I have also collaborated with IEEE and NIST for over 11 years in developing policies. I have six degrees with honors and I worked for the EPA for 17 years many years ago as a Technical Information Specialist, I also served in the military as a Military Police Officer and JAG over a few decades. I was a technical professional at an early age designing software and hardware innovations. I am a leadership volunteer with IEEE, NIST, INSA, ISSA, etc. I had my own business for consulting leaders since I left the government in 2014. I inactivate the business for high security venues and have been a temporary government employee for other organizations such as the National Science Foundation (NSF). I have been a full Professor as an adjunct instructing graduate and doctoral students. I have been designing security coures and serve as a partner with CompTIA for the government.
Recent On-Demand Web Conferences
ISSA Webinars and Conference series cover all the continuing education credits to maintain your cyber security certifications. (CPEs, CEUs, ECE, etc). Each hour is equal to one continuing education credit. Certificates of completion are available upon request after completion. For instructions, click here.