WHAT:

In the upcoming Webinar, experts from two leading security companies, ArcSight and Vormetric, will detail the various insider threats facing organizations and the requirements for implementing a model for effective insider threat prevention, detection and response. Held in the wake of the City of San Francisco’s insider data breach (related article: http://tinyurl.com/64hqch) this Webcast will provide attendees a clear understanding of the controls required to mitigate insider abuse and ensure strong separation of duties for privileged users without hindering business operations.

Topics to be covered include:

• The City of San Francisco cyber-sabotage, its impact and how it could have been prevented
• The insider threat landscape, identifying who poses a threat to networks, systems and data
• Five essentials for a solid insider threat mitigation strategy
• Requirements for effective insider threat monitoring built upon separation of duties and robust application, identity and data monitoring

WHEN:

Thursday, July 24, 2008
11:00 a.m. PDT / 2 p.m. EDT
https://ppsevents.webex.com/ppsevents/onstage/g.php?t=a&d=662593408

WHO:

Brian Contos, chief security officer of ArcSight, a leading security and compliance management solution provider, has more than fourteen years of security expertise developed in highly sensitive and mission-critical environments. He has written several security books, including “Enemy at the Water Cooler – Real Life Stories of Insider Threats,” as well as “Physical and Logical Security Convergence.” He has held positions at Riptech, Lucent Bell Labs, Compaq Computers and the Defense Information Systems Agency (DISA).

Co-presenting is Gretchen Hellman, senior director of security solutions for Vormetric, the leader in data security management and enforcement solutions. Hellman brings the company’s expertise in policy-based data encryption, access control to the Webcast discussion as well as her own broad experience helping companies of all industries meet their security management and regulatory compliance objectives. Hellman has worked with technology vendors, including ArcSight, Voltage Security and McAfee and their customers to define, develop and implement practical solutions to emerging complex security and compliance problems. Hellman is a frequent speaker in the areas of compliance standards and control frameworks, security policy and network, system and data security technology.

WHY:

When a San Francisco municipal employee locked a major portion of the city's computer network and gave himself virtually exclusive access to most of the city's data, every company and organization was forced to take notice and evaluate their defense against insider threats. From automated administrator and insider abuse detection to strong controls placed directly on the data itself, organizations have the power to mitigate these kinds of risks and protect their confidential data and critical services as well as reputations. Contos and Hellman will provide attendees step-by-step guidance on how to develop an effective insider threat strategy.