ControlCase IT GRC 2013 ControlCase Conference...

4
“Compliance - a 360 degree view” The continually increasing pressure to regulate control of information technology has led to the adoption of risk and compliance solutions by many organizations . These requirements are not fixed and can differ from one industry sector to another; even from one organization to another. The one thing that can be relied on is that the speed of change will increase, and those with the responsibility for managing compliance need to be able to respond correctly and accurately predict what is going to happen next. About the Conference With the scope and number of compliance regulations changing constantly, keeping compliance strategy on the cutting edge can be challenging. This year’s conference themed “Compliance—a 360 degree view” will provide an opportunity for professionals in the Compliance and Risk sector to evaluate and share best practices with peers and with senior compliance professionals from ControlCase. The event will be educational in nature and you can expect to gain the latest insights that will allow you to make more informed decisions. Who should attend The conference is targeted at Information Security, Risk, Governance and Compliance professionals. “This event will provide an excellent platform to network with peers and gain insight on Compliance from industry leading experts.” Event Contact: [email protected] Sofitel Hotel, Washington DC LaLafayette Square 806 15th St NW Washington, DC 20005, United States Phone: +1 202-730-8888 Location “Compliance—a 360 degree view” ControlCase Conference 2013 ControlCase Conference 2013 Washington DC, Oct 17-18, 2013

Transcript of ControlCase IT GRC 2013 ControlCase Conference...

Page 1: ControlCase IT GRC 2013 ControlCase Conference ...files.ctctcdn.com/5c04f0c8001/a29cdda3-6482-4390-b... · Risk sector to evaluate and share best practices with peers and with senior

“Compliance - a 360 degree view”

The continually increasing pressure to

regulate control of information

technology has led to the adoption of

risk and compliance solutions by many

organizations . These requirements are

not fixed and can differ from one

industry sector to another; even from

one organization to another.

The one thing that can be relied on is

that the speed of change will increase,

and those with the responsibility for

managing compliance need to be able to

respond correctly and accurately predict

what is going to happen next.

About the Conference

With the scope and

number of compliance

regulations changing

constantly, keeping

compliance strategy on the

cutting edge can be

challenging. This year’s

conference themed

“Compliance—a 360

degree view” will provide an opportunity

for professionals in the Compliance and

Risk sector to evaluate and share best

practices with peers and with senior

compliance professionals from

ControlCase.

The event will be educational in nature

and you can expect to gain the latest

insights that will allow you to make more

informed decisions.

Who should attend

The conference is targeted at

Information Security, Risk, Governance

and Compliance professionals.

“This event will provide an

excellent platform to

network with peers and

gain insight on

Compliance from industry

leading experts.”

Event Contact: [email protected]

Sofitel Hotel, Washington DC La– Lafayette Square

806 15th St NW Washington, DC 20005, United States

Phone: +1 202-730-8888

ControlCase IT GRC 2013

Location

“Compliance—a 360 degree view”

ControlCase Conference 2013ControlCase Conference 2013

Washington DC, Oct 17-18, 2013

Page 2: ControlCase IT GRC 2013 ControlCase Conference ...files.ctctcdn.com/5c04f0c8001/a29cdda3-6482-4390-b... · Risk sector to evaluate and share best practices with peers and with senior

Day 1 Agenda

(Oct 17th 2013)

8:30 AM to 9:15 AM - Registration & Breakfast

9:15 AM to 9:30 AM - Welcome Address

9:30 AM to 10:15 AM - Unified Compliance

Kishor Vaswani, CEO, ControlCase

10:15 AM to 11:15 AM - The Cloud Shared Security

and Compliance Paradigm

Mark Ryland, Chief Solutions Architect - Worldwide

Public Sector Team, Amazon Web Services (AWS)

11:15 AM to 11:30 AM - Coffee Break

11:30AM to 12:30 PM - P2PE & Other PCI DSS Version

3 Changes

Erik Winkler, VP, ControlCase

12:30 PM to 1:30 PM - Lunch

1:30 PM to 2:15 PM - Is Compliance possible with

smart phones and wearable computers?

Tim Rohrbaugh, VP Information Security, Intersections

2:15 PM to 3:00 PM - FISMA: Implementing Risk

Management to meet Federal Government Security

Requirements

Jim Graham, Senior Vice President of Federal

Programs, SecureIT

3:00 PM to 3:15 PM - Coffee Break

3:15 PM to 4:00 PM - Legal Liabilities of Weak

Security

David Zetoony, Partner, Bryan Cave

4:00 PM to 4:45 PM - Benefits and Future of

Compliance as a Service (CaaS)

Ashwani Kaul, President, ControlCase Technologies

4:45 PM to 5:00 PM - Concluding Remarks

Cocktail Reception

5:30 PM to 7:30 PM

at the Sofitel Hotel ICi Urban Bistro

Day 2 Agenda

(Oct 18th 2013)

8:30 AM to 9:30 AM - Registration & Breakfast

9:30 AM to 10:30 AM - HIPAA Compliance

Hugh Kominars, VP, ControlCase

10:30 AM to 10:45 AM—Coffee Break

10:45 AM to 11:45 AM — Road to Compliance - A

Shared Partnership

Neelam Patel, AVP, PMO

11:45 AM to 12:00 PM - Panel Discussion/Q&A

12:00 PM to 12:15 PM Concluding Remarks

12:15PM to 13:30 PM Lunch

14:00 PM to 17:00 PM City Tour

Accommodation at Sofitel Hotel

Rooms are available on a first-come first-serve

basis for a special rate of USD$279 per night.

Please make reservations with the Hotel directly

and mention “ControlCase Conference” to

receive the special rate.

Hotel Reservations Tel: +1 202-730-8888

Location

ControlCase IT-GRC 2013 IT GRC— “What's Next” z

ControlCase Conference 2013ControlCase Conference 2013 “Compliance—a 360 degree view”

Washington DC, Oct 17-18, 2013

Page 3: ControlCase IT GRC 2013 ControlCase Conference ...files.ctctcdn.com/5c04f0c8001/a29cdda3-6482-4390-b... · Risk sector to evaluate and share best practices with peers and with senior

ControlCase IT-GRC 2013 IT GRC— “What's Next”

Speaker Profiles

Kishor Vaswani, CEO, ControlCaseKishor Vaswani, CEO, ControlCase

Kishor is responsible for all lines of Governance, Risk and Compliance (GRC) within ControlCase. Under his leadership, ControlCase has acquired "Compliance as a Service" (CaaS) clients in more than 30 countries globally. Kishor brings extensive experience across a broad range of security, privacy and regulatory issues. Formerly with Ernst & Young LLP, Kishor led numerous projects for Fortune 500 clients spanning across regulatory policies, security reviews, and assessment of onshore and offshore vendors. He has served as an advisory member on a Joint Commission on Technology and Science (JCOTS) for the Commonwealth of Virginia. He has been a speaker on multiple occasions, including the MIS Conference and ISACA. He holds an MBA from the University of Maryland and a Bachelor's degree in Computer Science.

Mark Ryland, Chief Solutions Architect Mark Ryland, Chief Solutions Architect -- Worldwide Public Sector Team, Amazon Web Worldwide Public Sector Team, Amazon Web

Services (AWS)Services (AWS)

Mark Ryland is the technology leader for Amazon Web Service’s Worldwide Public Sector (WWPS) team. He has more than 20 years of experience in the technology industry, beginning with Microsoft Federal Systems, where he served as a Senior Architectural Engineer in the early 1990s. Subsequently, Ryland served as CTO of two start-up companies, as well as Vice-President and Director of the Washington DC office of a Seattle-based public policy think-tank. He rejoined Microsoft in 2008 as National Standards Officer for the USA, later switching back to an engineering role as a principal program manager in Microsoft’s identity and access team. Mark joined the AWS WWPS team as Chief Solutions Architect in September 2011, bringing a rich set of software engineering, distributed systems, cyber security, technical evangelism, and tech policy skills to the team.

Erik Winkler, VP of North America, ControlCaseErik Winkler, VP of North America, ControlCase

Erik is responsible for the management and delivery of ControlCase Services to customers in

North America. He is an experienced senior manager and security engineer with over 15 years

of engineering experience, including 10 years of experience with information security.

Prior to ControlCase, he was a principal at Cybertrust, Inc. and responsible for delivery and

oversight of all vulnerability management services. He has also spent 5 years as a manager in

Ernst and Young’s information security practice.

He holds a Master of Science degree in Engineering Physics from the University of Virginia.

ControlCase Conference 2013ControlCase Conference 2013 “Compliance—a 360 degree view”

Washington DC, Oct 17-18, 2013

Tim Rohrbaugh, VP Information Security, Intersections IncTim Rohrbaugh, VP Information Security, Intersections Inc

Tim is a technologist with 23 years of Government and private sector experience. His security career started in communication security (comsec)) in the military and continued to Government projects for CSC at NATO, DISA, NMRC as an architect, ST&E team lead and instructor for information security. After leaving Government Consulting, Tim became a technology leader for a consulting firm which focused on the telecommunication and nascent eBusiness sector.

After this, Tim started an eBusiness consulting firm which grew quickly to fill three offices . As the CIO , he Lead the Centers of Excellence before joining Intersections Inc as the lead for Information Security. His latest focus is in anti-fraud, ID Verification (US Patent Holder) and Security Architecture. His mantra is “Information Security is not a Science it’s an Art.”

Page 4: ControlCase IT GRC 2013 ControlCase Conference ...files.ctctcdn.com/5c04f0c8001/a29cdda3-6482-4390-b... · Risk sector to evaluate and share best practices with peers and with senior

Ashwani Kaul, President, ControlCase Technologies Ashwani Kaul, President, ControlCase Technologies

Ashwani is responsible for managing ControlCase Technologies and ControlCase Managed Services.

Prior to ControlCase, Ashwani managed the Services and Education business for Ounce Labs (now

IBM) globally and the Security services business for CA's (formerly Computer Associates and now CA

Technologies) 10 largest Global customers, Eastern United States and the entire Federal Government.

With over 17 years in his career span, Ashwani has worked in an advisory capacity with over 10 of

the Fortune 100 companies and numerous Fortune 500 companies; covering a wide range of industry

sectors. Ashwani has played the role of a trusted advisor to many C-level executives at these

companies and worked as the de-facto CSO for many companies.

Neelam Patel, AVP PMO, ControlCaseNeelam Patel, AVP PMO, ControlCase

Neelam Patel leads the US Program Management Office, for which she ensures the ControlCase path

to compliance is clearly communicated to customers, and executed most efficiently to achieve

on-time results as a project team. She has 15 years of experience, including serving as a Program

Manager at Microsoft Corporation and Network Solutions. She holds a B.S. in Computer Science

from Rutgers University, and has a passion for delivering the right customer experience. She

welcomes any suggestions or feedback as we grow to serve current and future compliance needs.

ControlCase Conference 2013ControlCase Conference 2013 “Compliance—a 360 degree view”

Speaker Profiles

Hugh Kominars, Global VP of Partners, ControlCaseHugh Kominars, Global VP of Partners, ControlCase

Hugh is responsible for identifying and managing North American business partnerships and channels

that promote the delivery of security and compliance services to high value industries and business

sectors. He is also responsible for managing the delivery of compliance and security services for US

Midwest Region clients.

Formerly with Ernst & Young LLP, Hugh led the largest IT internal audit outsourcing engagement team

in North America and over the course of 5 years managed the delivery of over 600 national and

international projects which included IT security vulnerability assessments, network and application

penetration testing, pre/post application and system implementation reviews, regulatory compliance

reviews and data analysis. Hugh has over 20 years of public and private sector experience.

Speaker Profiles

Washington DC, Oct 17-18, 2013

David A. Zetoony, Partner, Bryan CaveDavid A. Zetoony, Partner, Bryan Cave

David Zetoony is the leader of the firm's data privacy and security practice, and has extensive experi-

ence advising clients on how to comply with the advertising and data privacy rules and regulations of

the Federal Trade Commission, representing clients before the Federal Trade Commission, and de-

fending class actions brought under state consumer protection statutes.

Mr. Zetoony has represented numerous retailers, data processors and marketing companies in con-

nection with data security breaches. He also sits on the Council for Court Excellence (CCE) as Board of

Director.

Jim Graham, Senior Vice President of Federal Programs, Secure ITJim Graham, Senior Vice President of Federal Programs, Secure IT

Jim is responsible for delivery of cybersecurity services and solutions for federal government

agencies and corporations/non-profits with government contracts and grants. He has over 25

years experience delivering professional services, cybersecurity services and IT solutions to the

Government, Healthcare, Information Technology and Law Enforcement markets.

Prior to SecureIT, Mr. Graham was the Founder and President of DOMAIN Technologies which

provided IT solutions and information assurance services to Federal Government agencies and

corporations. Mr. Graham holds a Bachelor’s Degree in Computer Science and Mathematics along

with CISSP, CAP, CCSK, and C|CISO certifications.