Northeast Ohio Information Security Forum

There will be no meeting for NEOISF on June 21st due to BSidesCleveland being the following weekend. We will return to our regularly scheduled meetings in July for a meeting on July 19th. An announcement for the July meeting will happen closer to the scheduled meeting date.

– NEOISF Board –

—< NORTHEAST OHIO INFORMATION SECURITY FORUM MEETING
—< Wednesday May 17, 2017
—< 6:30 PM – 8:00 PM
—< Pizza and social start 6:00 PM
—< Location: OEC at 4205 Highlander Pkwy Richfield, OH 44286
—< Open to everyone and free as always

The Northeast Ohio Information Security Forum will hold our monthly meeting at the above date and time.

Agenda:

Wikis for simple & effective documentation
by: Christopher Ursich

The reason people hate “doing documentation” is that their understanding of it is all wrong.  It’s not all their fault; documentation systems are usually terrible, and the author gets no value out of what he writes.  Done properly, wikis cut down these inhibitors at very little cost, and can significantly add to the efficacy of your team.

• Chris Ursich has worked in infrastructure security for 15 years, in the higher-ed, manufacturing, SaaS, and insurance industries.  His favorite standards are ISO 8601 and ISO 216.

Hey I Got the Interview! Now what?!
by: Kenyon Mau

In this day and age, a lot of time and effort goes into hiring employees, especially in the security space.  Putting your  best foot forward when interviewing as well as interviewing for yourself is key to ensuring you are not moving into a difficult or toxic environment.  Additionally, with it being a small community, you want to always leave your options intact for future opportunities.

In this presentation, we will look at how to present yourself well in most interview situations ranging from phone interviews, to one-on-one interviews, to panel interviews.

• • Kenyon Mau is a successful human resources expert with over twenty years of experience as well as a passion for positively influencing an organization’s bottom line through the recruitment, retention, and development of talent.  He possesses a zest for innovation and creativity and has demonstrated these attributes in a variety of organizations of varying sizes, cultures, and needs.

Don’t forget to come early, starting at 6:00 PM, for food and soda, sponsored by TrustedSec.

Another great meeting from NEO Info Sec Forum – we hope to see you there!

– NEOISF Board –

—< NORTHEAST OHIO INFORMATION SECURITY FORUM MEETING
—< Wednesday April 19, 2017
—< 6:30 PM – 8:00 PM
—< Pizza and social start 6:00 PM
—< Location: OEC at 4205 Highlander Pkwy Richfield, OH 44286
—< Open to everyone and free as always

The Northeast Ohio Information Security Forum will hold our monthly meeting at the above date and time.

Agenda:

Mental Health in Infosec – Hackers, hugs, and drugs
by: Amanda Berlin

• Amanda Berlin is currently a Network Security Engineer at Hurricane Labs. She has been working in the IT industry for around 10 years and has worked in both public and private sector as well as spending a decent time in healthcare. She managed the internal phishing campaign at a medium size healthcare facility to promote user education about phishing and hacking through an awards based reporting program. Known as ‘The InfoSystir” she is also the author of the new book, Defensive Security Handbook. She volunteers at many other conferences, and enjoys teaching others. Amanda lives at home with her three boys and “Rabbit” the cat.

Operating System Security Beyond the Fortress Mentality: A Review of Innovations in Secure Linux Operating Systems
by: Thomas Pieragastini

In the past the concept of operating system security has revolved either around the concept of building the endpoint as a fortress, with locked down permissions and strong anti-virus protections, or encasing the endpoint in network layer protections based on indicator based blocking and heuristic detection mechanisms.  These methods have been bypassed, and are being circumvented with increasing frequency.  As the discussion shifts away from the endpoint as fortress, and into other possible approaches, the question tends to center around which operating system is the “most secure”, a question that ignores differences in threat model and security objective.  Recently operating systems, within the Linux world, have emerged that eschew this approach in favor of more specified approaches to security; amnesiac operating systems, advanced application level and process sandboxing, absolutely minimal attack surface and application level virtualization.  This presentation will discuss some of the innovations in the world of secure operating systems, the threat models that they respond to and the architectural steps taken in order to achieve their intended security objectives.

• Thomas Pieragastini came to the world of information security via the circuitous route of academia, through threat intelligence and into pentesting.  He is passionate about securing data, hacking things, digital rights and privacy.

Don’t forget to come early, starting at 6:00 PM, for food and soda, sponsored by TrustedSec.

Another great meeting from NEO Info Sec Forum – we hope to see you there!

– NEOISF Board –

—< NORTHEAST OHIO INFORMATION SECURITY FORUM MEETING
—< Wednesday March 15, 2017
—< 6:30 PM – 8:00 PM
—< Pizza and social start 6:00 PM
—< Location: OEC at 4205 Highlander Pkwy Richfield, OH 44286
—< Open to everyone and free as always

The Northeast Ohio Information Security Forum will hold our monthly meeting at the above date and time.

Agenda:

The Concept of Technological, Compliance and Security Debt
by: David Sopata

Finding it hard to explain to non-technical people the value of continually upgrading technology, processes, and/or systems? Tired of management telling you “If it ain’t broke don’t fix it”? Feeling the burn of buying parts on eBay for a system that should have been replaced 10 years ago? Are you having trouble finding COBOL developers? Welcome to the concept of Technical Debt. The concept has been around however, it has not necessarily been applied well or communicated effectively to others outside the INFOSEC world. David Sopata who is an Information Security Professional who specializes in Compliance, Continuous Improvement, Risk, and Auditing will provide a recap of what Technical Debt is, how it could be applied within your environment, and how it can apply not only to Technology, but Security, Compliance, and Business Processes.

Standing Out in the crowd, the right way
By: Sheena Fain

Ever find yourself at a job fair, or submitting your resume to all those closely guarded infosec positions? Do you wonder if you are lost in the endless see of paper that get shoved into a HR or Recruiter’s hands? How do you make yourself stand out amongst the crowd. Welcome to Standing out in the crowd, the right way. We will be discussing tips and tricks on how to get your resume, profile, or name into the ear of the right people and once you’ve landed that coveted interview, tricks to creating a lasting image of who you are. Why be just another Joe or Jane when you can be Joe with that awesome profile page that had all that potential and career planning and goals?

• Sheena is a HR Manager with SecureState
• Sheena has several years experience in HR including both public and private sectors
• She has a MBA through University of Phoenix
• Currently she is pursuing her SPHR certification
• She is passionate about helping candidates understand what hiring managers are looking for

Don’t forget to come early, starting at 6:00 PM, for food and soda, sponsored by TrustedSec.

Another great meeting from NEO Info Sec Forum – we hope to see you there!

– NEOISF Board –