Check out the training tab for new opportunities
06.30.09 - 09:35am
See the Training tab for the Symantec Internet Threat briefing.
Craig
06.30.09 - 09:35am
See the Training tab for the Symantec Internet Threat briefing.
Craig
05.05.09 - 06:49am
Thursday May 21st, 2009 3:00 – 5:00 PM at Con Way (2055 NW Savier St. Portland)
Elections, Elections, Elections and Preparing for the 09-10 Chapter Activites
After another year, elections were held for a new President, a new Vice President, Treasurer and Secretary. Elected chapter officals are:
President: Aaron Cronan
Vice President: David Stauffer
Treasurer: Doug Bristow
Secretary: Ben Trimbo
In addition to the elected officials, there are a couple of open board positions:
Program Chair
Vendor Outreach Chair
Mentoring Program Chair
Those interested on serving on the board, please contact Aaron Cronan (see http://www.issa-portland.org/contacts/).
After the elections, chapter members discussed the upcoming year and topics of interest.
03.25.09 - 07:38am
2009 NW ISSA SECURITY CONFERENCE - Registration is open
Hosted by ISSA - Portland Chapter
held at InnoTech Oregon Conference
Thursday, April 23
Oregon Convention Center
For information and registration visit http://www.innotechconference.com/pdx/Event/NW_ISSA_Security_Conference.php
Full day educational conference, lunch, InnoTech expo, reception & networking for:
$65 for non-members ISSA members
$50 for ISSA, ISACA Members and Institute of Internal Auditors Use Discount Code ISSA9MBR for discounted price
Travel budgets cut, but still want the professional development in 2009?
Want 7 CPE Credit Hours for less than $65?
Don’t miss this local, but quality conference for security
With a Business and Technical Track the NW ISSA Security Conference is part of a continued ambitious community outreach program for ISSA. The goal of our program is to provide decision makers, stakeholders, and professionals with the knowledge and understanding they need to more effectively secure their organization’s sensitive information and comply with emerging information privacy laws and regulations.
Topics for 2009 include:
Registration and information is available at http://www.innotechconference.com/pdx/Event/NW_ISSA_Security_Conference.php.
Your registration confirmation will contain parking and transit information.
We look forward to seeing you on April 23.
03.04.09 - 12:47pm
Because we value your involvement in the Oregon / SW Washington IT Community, F2F Events is pleased to extend this invitation for you and any of your associates at ISSA - Portland Chapter to attend the INTERFACE 2009 Conference.
With the guidance and enthusiastic support of the INTERFACE-Oregon Advisory Council, and our sponsors, INTERFACE has become the premiere IT conference in the Pacific Northwest. INTERFACE is dedicated to educating attendees on current innovations and future trends in the areas of:
* Information Security
* Business Continuance (Data Storage & Recovery)
* Enterprise Communications
INTERFACE returns to Portland for its sixth year on March 18th at the Oregon Convention Center.
Your invitation to INTERFACE 2009 includes:
* 20 Educational (Vendor-neutral) Seminars
* Keynote Presentation
(”Watching the Watchers” – Catching Thieves BEFORE They Break In!)
* Delicious Lunch Buffet (12:00pm - 1:30pm)
* 45 Vendor Exhibits
* Cocktail Reception (3:15pm)
Information Security and Disaster Recovery Planning are major pieces to a puzzle all IT professionals are tasked with solving. By taking advantage of your invitation to attend INTERFACE 2009, you will learn more about the technology innovations and make contacts with other IT professionals that can help bring together the components of your IT solutions.
Educational presentations are the cornerstone of the INTERFACE conference. The seminars scheduled for this year’s conference include…
* Current Threats and Countermeasures
* PCI Compliance for the Rest of Us
* Plaid Pantry - A Case Study on Simplifying Security
* Anatomy of a Web Attack: How Hackers Threaten Web Security
* Inside Today’s Threat Environment
* Infrastructure 2.0 – Virtualization and Beyond
* Storage DeDuplication
* Meeting the e-Discovery Requirement
* Data Center Transformation and Green IT
* Virtual Disaster Recovery
* SIP: You Can’t Afford Not to Look
* Be Green, Save Green – Today!
KEYNOTE PRESENTATION:
“Watching the Watchers” – Catching Thieves BEFORE They Break In!
Presenter: Chris Roberts, President, CCi5 Inc.
For more information, including the schedule and descriptions of the
aforementioned seminars and keynote, use the following link:
Schedules and Descriptions
INTERFACE brings together dozens of industry-leading solutions
providers demonstrating the most current product innovations and
providing in-depth discussion regarding your organization’s specific
IT challenges. For a list and descriptions of all sponsors and vendors
at INTERFACE 2009, use the following link:
sponsors and vendors
Registration is now open, and available via the INTERFACE website. For
your convenience, use the following link to the online registration
page: Online Registration
** NOTE: The deadline to register for INTERFACE 2009 is Monday, March 16th at 6:00pm.
INTERFACE is a private conference, for invited technology
professionals. It is not a job fair, and not open to students nor
anyone under 18 years of age. NO EXCEPTIONS. For more information,
contact F2F Events at 1-800-365-6402, or by email at:
info@f2fevents.com
We look forward to seeing you on March 18th at INTERFACE 2009 in Portland!
INTERFACE 2009… “Bringing the Pieces Together.”
F2F Events, Inc.
1225 NW Murray Blvd., Suite 107
Portland, OR 97229
800-365-6402
02.23.09 - 11:09am
Thursday March 19th, 2009 3:00 – 5:00 PM at Con Way (2055 NW Savier St. Portland)
Fundamentals of Web Application Penetration Testing
Part of building secure networks and applications is subjecting them to focused testing. In this presentation, security analysts from Anitian Enterprise Security will discuss methods, technologies and tactics in conducting Web Application Penetration testing. Topics covered include:
· Recon and analysis
· Authentication
· Session management
· Access Controls
· Injection Testing
· Data protection
· Error handling
· Application hosting
Biography
Adam Gaydosh, CISSP, CISA, GPEN, GIAC, QSA
Senior Security Analyst
Anitian Enterprise Security
Mr. Gaydosh is a Senior Security Analyst at Anitian where he oversees the IT Audit and Assessment division. Mr. Gaydosh specializes in application layer testing and IT compliance. Prior to working at Anitian, Mr. Gaydosh worked for a large national government contractor. Mr. Gaydosh provided security consulting services to numerous branches of the US Government, including the US Department of Defense. Mr. Gaydosh worked on site with the US Marines and Army securing classified networks, deploying PKI and identity management solutions and conducting rigorous security hardening of server systems. While working at Anitian, Mr. Gaydosh has conducted hundreds of security audits and assessments ranging from small regional financial institutions to large, global corporations. Mr. Gaydosh is currently involved in dozens of high-profile application tests, including conducting security tests on the next generation of elections systems. Mr. Gaydosh has numerous security certifications including the CISSP, CISA and the SANS certifications for security auditing and penetration testing. Mr. Gaydosh is also one of Anitian’s Qualified Security Assessors for PCI-DSS compliance.
01.06.09 - 07:20am
February 12th, 2009 11:30 AM - 1:00 PM Port of Portland
During the month of February, the chapter will be meeting with the ISACA chapter. This year’s event will feature Vivek Chudgar of Foundstone and he will be addressing Payment Card Industry (PCI) statndards.
Because this is a lunch event, the cost is $20.00 per plate and members can register at:
http://www.acteva.com/booking.cfm?bevaid=171975
We look forward to seeing you at the event.
Top Ten PCI Concerns
Abstract:
The Payment Card Industry Data Security Standard (PCI DSS) has changed
the way that many retail and e-commerce organizations approach
information security. It is a broad compliance document that demands
action on numerous fronts, making it difficult to decide where to
concentrate scant resources. This presentation draws on Foundstone’s
experience as a Qualified Security Assessor to identify the current top
ten concerns for most organizations that need to comply with PCI DSS.
Actionable advice for each concern will be provided from both a systems
implementation and audit perspective. No prior knowledge of the
standard is required, and even those who are not subject to PCI DSS will
find that many of the information security concerns presented are
universal across industries.
About the presenter:
Roman Hustad is a Principal Consultant at Foundstone where he
specializes in software and application security. Most of his
professional career was spent as an application developer in the payment
card and financial services industries. Roman’s interest in the PCI Data
Security Standard led to full time work in the security consulting
industry. He now helps Fortune 500 and government clients achieve their
security assurance goals using his deep technical knowledge of software
as well as his strategic experience with compliance and the software
development lifecycle. Roman is a frequent speaker, teaches Java
security classes, and holds the following certifications: PCI Qualified
Security Assessor (QSA), GIAC Secure Software Programmer - Java
(GSSP-J), Sun Certified Java Programmer (SCJP), Sun Certified Web
Component Developer (SCWCD).
01.06.09 - 07:03am
January 15th, 2009 5:00 - 8:00 PM at Paragon Restaurant & Bar (1309 NW Hoyt St)
CHAPTER MEMBERS ONLY
With last month’s cancellation of the chapter meeting, the board has decided to hold a “Meet-and-Greet” for our January meeting. We encourage chapter members to come and interact with other information security professionals and enjoy cocktails.
12.01.08 - 06:02am
December 18th, 2008 5:00 – 8:00 PM at Paragon Restaurant & Bar (1309 NW Hoyt St)
This meeting is for Chapter Members Only
Due to the current and projected weather conditions facing the Portland area the 12/18/2008 Paragon meeting is canceled. In January, the Board will discuss a social event for the chapter members. I am sorry for any inconvenience that this may place on our members, I appreciate your understanding and that of Paragon.
Kyle E. Miller, CISSP
President ISSA Portland
11.10.08 - 07:09am
Details for each chapter meeting will be posted as information becomes available:
September 18th, 2008 3:00-5:00 PM - Con Way (2055 NW Savier St. Portland)
October 16th, 2008 3:00-5:00 PM - Con Way
November 20th, 2008 3:00-5:00 PM - Con Way
December 18th, 2008 5:00-8:00 PM - Paragon Restaurant & Bar (1309 NW Hoyt St) — Canceled
January 15th, 2009 5:00-8:00 PM - Paragon Restaurant & Bar (1309 NW Hoyt St)
February 12th, 2009 (Combined lunch meeting with ISACA)
March 19th, 2009 3:00-5:00 PM Con Way
April - Spring Conference at Innotech
May 21th, 2009 3:00-5:00 PM Con Way