4 Part Series on Cyber Security - Part 4 on 5/24/17 at 6 pm
Practical Solutions to Protect Your Enterprise.
-- A Four Part Series on Cyber Security –
Technology Executives
Top 10 Things To Do Right Now To Stay Out Of The News
Ron Schlecht, Managing Partner, BTB Security
Wednesday, May 24, 2017
6:00 PM - 9:00 PM
New Location: Davio's
200 Main Street
King of Prussia, PA 19406
Who Should Attend: Business leaders in all fields of practice, NOT just Technology.
Why is this Different:
• You have attended panel discussions that have alerted you to the issues. This series will give you a deep view of the topics with real solutions and recommendations for you to explore.
• You will help set the direction of the presentations by directly submitting your questions and concerns via e-mail to [email protected]. The speakers will do their best to address your submitted questions as part of the presentation or during the Q&A’s.
Cyber-crime and related disasters make headlines daily, resulting in a kind of shock or deer-in-the-headlights freeze, wherein many people and companies are unable to take even the most essential steps to avoid similar fates. Your goal is to become knowledgeable in order to protect your company before a serious issue is encountered.
This 4-part series will provide a practical and holistic approach to addressing a company’s overall cyber security challenge and actionable steps for:
1) Understanding and prioritizing what needs to be protected and how to do so;
2) Insuring against cyber risks that might (will inevitably) occur;
3) Legal implications and how to prepare for and avoid them; and
4) Top ten specific actions to improve your company’s defenses.
You will shake off the shock, get out of the headlights, and take home specific and achievable actions to dramatically improve your company’s cyber risk management and chances of avoiding cyber wreck, ruin, the headlines and insolvency.
Submit your questions to: [email protected]
Registration: Member $55, Guest $75
Register Here!
MEMBERS OF AFFILIATED GROUPS PLEASE CALL THE OFFICE 215-393-3144 TO REGISTER.
Session One: - Was a HUGE success!
Cyber Security Risk Management – Minimizing Risk Thru Data Governance.
Larry Hershman, Partner, Black Cipher Security
Date: Wednesday, February 22 – 6:00 - 9:00 pm
Location: Talamore Country Club
723 Talamore Dr, Ambler, PA 19002
What data do I handle? Should I place the same value on all data?
The US National Institute of Standards and Technology (NIST) has developed an excellent Cybersecurity Framework. Using the NIST Framework as our guide, we will explore how organizations can assess and improve their ability to prevent, detect, and respond to cyber-attacks. The NIST Framework is designed to help individual businesses (i) assess the risks they face and (ii) organize their remediation activities in a cost-effective way.
Session Two:
Cyber Insurance – Without It, Most Organizations Can Be Severely Damaged or Destroyed
Austin Morris, Jr., President, Morris Risk Management
Date: Wednesday, March 22 – 6:00 - 9:00 pm
Location: Sullivan's Steak House (newly renovated!)
700 W Dekalb Pike
King of Prussia, PA 19406
The costs and liabilities resulting from a variety of cyber risks can be enormous. The consequences of a data breach, hacker damage, ransomware, cyber business interruption and other events are often severe and immediate. No industry or business is immune. This interesting presentation will explain cyber insurance, technology errors & omissions insurance, media liability insurance and how the protections they provide can be your best safety net. Complex and important coverages and nuances will be explained in plain English. This presentation will prepare you to take action.
Session Three:
Data Breaches Come In All Sizes
David J. Shannon, Esq., Chair, Technology, Media & Intellectual Property Practice Department of Marshall Dennehey Warner Coleman & Goggin, P.C.
Date: Wednesday, April 26 – 6:00 - 9:00 pm
Location: Sullivan's Steak House (newly renovated!)
700 W Dekalb Pike
King of Prussia, PA 19406
While behemoth data breaches such as the Home Depot and OPM incidents are the ones that tend to grab the headlines, the fact remains that a wide variety of data breaches impact businesses of all sizes every day. In this presentation, three very different data breach case studies will be explored – one small, occurring from theft of an accountant's laptop; one midsize, the result of hacker malware penetrating an ecommerce business; and one large, a PCI breach impacting 2.3 million credit card owners. While all three cases involve the same legal ramifications and exposures, each requires a customized response. This presentation will focus on the proper response to the everyday small, midsize and large data breaches. Issues impacting the response, will be germane to the discussion.
Learning Objectives:
1) Explain to executives the risks of both big and small data breaches
2) How executives can properly evaluate the costs of both large and small breaches
3) How Businesses must respond to a variety of data breaches
Session Four:
Top 10 Things To Do Right Now To Stay Out Of The News
Ron Schlecht, Managing Partner, BTB Security
Date: Wednesday, May 24 – 6:00 - 9:00 pm
NEW Location: Davio's
200 Main Street
King of Prussia, PA 19406
Companies are being breached at an alarming rate. While some attacks have gotten more advanced, most are taking advantage of obscure default settings and simple misconfigurations to gain access to your network and escalate privileges.
This talk will focus on the top security controls that can be implemented at low cost and low impact to your network, ensuring maximum ROI of your valuable time. Missing this talk could mean risking your company’s reputation.
Registration: Member $55, Guest $75
Register Here!
MEMBERS OF AFFILIATED GROUPS PLEASE CALL THE OFFICE 215-393-3144 TO REGISTER.
Moderator:
Chris Shull
Chris is the CISO for Xpand.io, which provides SaaS supporting effective new employee onboarding for large corporations, and a CIO Engagement Partner with Tatum, a Randstad company, providing interim leadership services for troubled IT projects and teams.
He is a Certified Information Systems Security Professional (CISSP) and has over 20 years’ experience delivering, implementing and managing private, public and hybrid cloud-based information technologies. He has led info security teams and efforts in companies large and small, in multiple industries and covering cloud tools -- SaaS, PaaS, IaaS, etc. -- from both the vendor and company sides. He has used the ISO 27001 and NIST SP 800 frameworks to address needs for HIPAA, FERPA, SOX, PII and PCI/DSS compliance. He recently helped a startup HR SaaS firm obtain U.S.-EU and Swiss Safe Harbor and EU-U.S. Privacy Shield certifications.
Chris previously served as Vice President of Information Technology and Operations for Drexel eLearning, Inc., as Director of IT for the Jewish Federation of Greater Philadelphia, Senior Consultant at GSI Health, Senior Director at the Wharton School, and Director of Systems Engineering and Senior Technical Architect at CareScience.
Chris earned a BA in Economics and Mathematics from the University of Pennsylvania and an MA from the Wharton School with a concentration in Operations and Information Management.
Presenters:
Larry J. Hershman
Larry is a Partner at Black Cipher Security and provides expertise and leadership in the areas of business process analysis, data compliance and project management. Larry has spent over 25 years in management and technology consulting, helping companies to adopt the appropriate technologies in order to achieve their business goals.
His expertise and understanding of cyber security concepts and the application of compliance requirements has been honed through his leadership of many security and compliance initiatives, including Payment Card Industry (PCI) readiness projects, Title Industry ALTA Best Practices certifications, HIPAA compliance reviews and Law Firm data governance.
Larry’s professional organizational memberships include Information Systems Security Association (ISSA), Health Information and Management Systems Society (HIMSS) and Institute of Management Consultancy.
Larry received his Bachelor’s in Computer Science from Temple University. He is a dedicated father, and an avid endurance athlete, participating in triathlons, marathons, and cycling events. Larry is a multi-year VIP fundraiser for the MS 150 City to Shore event and has raised significant funds for the Back on My Feet marathon for the homeless.
Austin Morris, Jr.
Austin is President of Morris Risk Management LLC.
MRM provides a full portfolio of insurance products and services in addition to advanced risk management solutions. MRM specializes in cyber liability insurance, technology errors & omissions insurance and provides advice on related cybersecurity matters.
MRM frequently participates in regional and national cyber risk and cybersecurity communities.
Austin earned a Bachelor of Arts in economics from Southern Methodist University. He earned Master degrees from The Pennsylvania State University, in University Park, and Rutgers, The State University of New Jersey, in New Brunswick. Previously he was an executive vice president for a leading technology company. Having served on several boards, Austin is currently Board Chairman for a federal agency-affiliated non-profit founded in 1972.
Ron Schlecht
Ron is a Certified Information Systems Security Professional (CISSP) and Certified Computer Examiner (CCE) with 16 years of experience in security risk management and digital forensics and over 17 years’ total experience in Information Technology. Ron is a Partner in the independent firm, BTB Security. Ron co-founded BTB Security after successfully developing and leading professional service teams and internal security departments.
Ron has an extensively varied background performing jobs in law enforcement and information security/forensics. Ron has experience on various systems, devices and applications and areas of focused expertise include security assessments, security monitoring, incident response, forensic investigations/examinations, and security organization implementation and review. Ron also has over twelve years’ experience in the programming of various languages.
David J. Shannon
David is the Chair, Technology, Media & Intellectual Property Practice Department of Marshall Dennehey Warner Coleman & Goggin, P.C. He concentrates a substantial portion of his practice on privacy law, data breaches, intellectual property, copyright infringement, trademark, trade secret, technology litigation, trade dress and media related litigation. David is experienced defending privacy and intellectual property cases venued throughout the United States, and has been litigating cases in federal and state courts since 1994.
David additionally represents design professionals in a variety of construction industry related claims. He has extensive experience representing architects, engineers, surveyors, land developers, commercial property owners, general contractors, subcontractors and commercial landscapers. David has defended clients in cases that involved claims for design errors and omissions and other contractual and negligence claims. Over the past fifteen years, he has tried a number of bench trials, jury trials, and arbitrations.
In 1990 David received his B.A. in political science from Denison University. He then attended Widener University School of Law and received his J.D. in 1994. His legal experience includes working for a boutique civil litigation firm in the intellectual property and e-commerce group.
***
Registration: Member $55, Guest $75
Register Here!