www.commnexus.org

Security Review for the CIO IPv6 Gaps and ISO 27001

IPv6 capability can’t be fully understood when viewed from an IPv4 perspective.  IPv6 does more than just give us more address space; it will change the way we think about designing and securing networks. Without taking them into consideration, any IPv6-based network is vulnerable to cyber attacks and cannot be proactively protected with any current Managed Security Services offering. In order to take full advantage of the IPv6 optimization and hardening, a well-prepared IPv6 architecture has to be implemented.  At this event, Mr. Jay McGuerty with SAIC will discuss safe implementation and practices, and will demonstrate some of the vulnerabilities inherent in the current RFCs for IPv6.



Additionally, at this event we will review ISO 27001.  ISO 27001 provides the framework to implement a complete life-cycle security practice that continuously seeks improvement. The ISO 27002 best practices provide controls that have been mapped to all the major authorities, including NIST, DoD Instruction 8500.2, the Health Insurance Portability and Accountability Act, COBIT, and others. The ISO 27001 certification demonstrates that you understand information security, are organized to accomplish it, and have implemented and continue to manage security controls that meet the level of protection commensurate with your specific business goals.  


Companies, both large and small, need to be implementing secure practices with their networks.  If you are unsure about what your company is doing to prevent hacking, or have questions about what you can do differently, come to this event and bring your questions!

Who Should Attend:
This event is limited to CIO’s and CISO’s.  If you would like to attend, but are not a CIO or CISO, please contact CommNexus.

PANELISTS:

Jay McGuerty
SAIC

Jay has over 24 years experience in IT, the last 12 of which have been specifically working on commercial and DoD networks.  He spent three years exclusively designing, security and installing VoIP including an installation at the White House.  The White House VoIP work transitioned into a redesign of the presidential trip kit,  VoIP covert channel analysis, other security related matters culminating in his assignment as the lead engineer responsible for preparing the White House for an IPv6 transition.  He reported regularly to WHCA Sr. Mgt as well as NSA engineers. Most recently, Jay has been the chief engineer on a special research and development project to develop IPv6 attack and defense software, as well as a primary engineer designing the IPv6 system for a large complex satellite system.

Duke Ayers
SAIC
Mr. Ayers has successfully supported the certification of the Military Health Systems Computer Resource Center and is currently assisting SAIC Corporate through this process. His holistic, streamlined approach to establishing a security management framework aids companies in meeting legal, regulatory and contractual requirements through a well-defined governance, risk management and compliance process.

Date:
April 15, 2009

TIME
7:00AM  Registration/ Networking/ Breakfast
7:30AM  Event Begins
9:00AM Event Ends

COST

**New Event Pricing**

Pre-Registration:
$20.00 – Individual Registration
$10.00 – Sponsor Company Employee Registration
FREE – Mentor Sponsor Company Employee Registration

At the Door:
$30.00 – Individual Registration
$20.00 – Sponsor Company Employee Registration
FREE – Mentor Sponsor Company Employee Registration