March 21st 2018 - Toledo Ohio

The 2018 CyberSecurity & Risk Management Summit was held in Toledo this past Wednesday.  We had approximately 80 security & audit professionals in attendance for a full day of training at U of Toledo's Immersive Simulation Center; later that evening, around 50 joined us for dinner & drinks at Maumee Bay Brewing Company.

In my dinner remarks, I commented that this event was a memorable, unique, and highly educational experience.  It was also a lot of fun because we got to meet so many great people of Northwest Ohio.  We were able to grow and learn as a community of security leaders and practitioners.  

We are all thankful to Northwest Ohio ISACA and IIA chapters for their partnership and guidance in organizing the event.    As well, our keynotes and instructors did a phenomenal job, and I'd like to recognize them for their great talent, and for sharing their expertise with our group.

Group Picture:  Keynote Speakers, Instructors, and The Event Committee

Theater Room packed with the great security and audit professionals of NW Ohio and SE Michigan

The Theater Room had an awesome audio/video setup.

I have posted all of the information about our speakers, including pictures, LinkedIn profiles, and PowerPoint presentations below.

Opening Keynote:  Jeff Schmidt, Vice President and Chief Cyber Security Innovator, The Columbus Collaboratory.

PowerPoint Download:  Leadership, Culture, and Change

Jeff Schmidt, Vice President and Chief  Cyber Security Innovator, The Columbus Collaboratory

Jeff Schmidt delivers opening keynote presentation on "Leadership, Culture, and Change"

Session 1:   "Developing a Cyber Strategy".  Instructor:  Jerod Brennen, CISSP, Security Architect, Advisor, Speaker, Teacher, GBQ Partners.

PowerPoint Download:  Developing a Cyber Strategy

Jerod Brennen, CISSP, Security Architect, One Identity LLC

Jerod Brennen teaches a course on Developing a Cybersecurity Strategy

Session 2:  "Managing your User Population - Identity & Access Management"  Instructor:  Robert Sandri, Sr. Security Advisor and Principal Solution Architect, One Identity LLC.

PowerPoint Download:  Managing your User Population - Identity & Access Management

Rob Sandri, Sr. Security Advisor and Principal Solution Architect, One Identity LLC.

Rob Sandri teaches his course on Managing User Populations

Session 3:  "External Threats, Securing your Perimeter"  Instructor:  Dr. Loren Wagner, DIA, CISSP, CSSBB, Sr. Director of Compliance Services, CentraComm.

PowerPoint Download:  External Threats - Securing Your Perimeter

Dr. Loren Wagner, DIA, CISSP, CSSBB, Sr. Director of Compliance Services, CentraComm.

Dr. Loren Wagner teaches his course on External Security Threats

Closing Keynote:  Ted Wolff,  Board of Directors, ISACA International; Sr. Manager Risk Management, Vanguard

PowerPoint Download:  What's Next?  Where is Cyber Risk Heading?

 Ted Wolff, Sr. Manager Risk Management, Vanguard; Board Member, ISACA International.

Ted Wolff's closing keynote session

After the closing Keynote, we had a guided tour of the University of Toledo Inter-professional Immersive Simulation Center.  We captured some neat moments from the tour in the pictures below:

The University of Toledo Inter-Professional Immersive Simulation Center

The tour was getting kicked off

Headed to the Simulation Rooms

Immersive Simulation - Virtual Reality! 

Other immersive Hi-Tech in the Simulation Center.

Next we headed off to Maumee Bay Brewing Company, in the Historic Oliver House, for dinner and drinks.  Food, beer, and service from the venue was excellent as usual:

Maumee Bay Brewing Company - The Historic Oliver House

The Oliver House has got to be one of the coolest Venues in Northwest Ohio

Maumee Bay - Group Pic 1

Maumee Bay - Group Pic 2

Maumee Bay - Group Pic 3

Thanks  to the great staff at Maumee Bay for the excellent service they provided to our group

Evening Keynote:  Brian Kelley, Chief Technology Officer, The Ohio Turnpike and Infrastructure Commission.

PowerPoint Download:  Leading from the Edge with Connected Vehicle Technology

Brian Kelley, Chief Technology Officer, The Ohio Turnpike and Infrastructure Commission

Brian Kelly delivers the Evening Keynote address.

Wrap Up Topic  "A Current Discussion in Identity & Security"  Presenter:  Robert Sandri, Sr. Security Advisor and Principal Solution Architect, One Identity LLC.

PowerPoint Download:  A Current Discussion of Identity & Security

Robert Sandri, Sr. Security Advisor and Principal Solution Architect, One Identity LLC.

And one last final "Thank You" to our honorable committee, who helped put this event together.  Without them this special occasion within our community would never have taken place:

The Event Committee:

David Cutri, Vice President and Recent Past President, Northwest Ohio ISACA

Dr. Pascal Bizarro, President Northwest Ohio ISACA

Matt Hoverman, Vice President Northwest Ohio IIA

Sarah Burkstrand, President Northwest Ohio IIA

Cynthia Au, Sr. Field Adviser, One Identity LLC

Great new Friendships were Created

We can't wait for our next event in Northwest Ohio!

Thanks again all, and feel free to contact me any time.

Sincerely,

Gib Patt

gib.patt@oneidentity.com

614 209 8516

February 22nd 2018 - Detroit

Yesterday, February 22nd, The Cybersecurity Leadership Forum met at Andiamo Detroit Riverfront, located in the Renaissance Center: 

Andiamo Detroit in the Ren Center

It was an excellent venue, and we had two fine speakers:  Dr. Michael Muha, CISO & Chief Privacy Officer for Workforce Software, and Chris Ostler, President & CEO of Immersion Technologies, both pictured here along with yours truly:

Left to Right:  Chris Ostler, President & CEO, Immersion; Gib Patt, Founder, The Cybersecurity Leadership Forum, Mike Muha, CISO & Chief Privacy Officer for Workforce Software.

In total we had about 20 Detroit-area security pros dining with us through the lunch hour:

Michael Muha gave the first presentation; his topic was "Approaches to Justifying Cybersecurity Projects: Win-Win Strategies".  Mike imparted many lessons through an energetic and interactive presentation.  Mike's slides can be downloaded HERE.

Mike Muha, CISO & Chief Privacy Officer, Workforce Software
Presenting "Approaches to Justifying Cybersecurity Projects" at Andiamo Detroit

Here is a short video clip from Mike's presentation:

After Mike's presentation, our group security roundtable discussion began, and was moderated by Chris Ostler, President & CEO, Immersion Technology Services.  Chris guided us through a range of "Current Affairs in Cybersecurity" and also imparted some valuable lessons for our group:  Chris' slides are also available for download HERE.

Chris Ostler, President & CEO, Immersion Technology Services

...and a short video of Chris presenting:

On behalf of the Cybersecurity Leadership Forum I want to thank our great speakers for sharing their time and talent with the Detroit-area security community.   We are grateful for the opportunity to learn from your experiences, and share your ideas within our own organizations.

Our next meeting is scheduled for March 21st in Toledo Ohio at the Maumee Bay Brewing Company, and will follow a full day of training at the U of Toledo campus at the Immersive Simulation Center.  More details will be shared next week.

Until next time I wish you all the greatest of success!

Sincerely,

Gib Patt
Founder & Coordinator, The Cybersecurity Leadership Forum

December 14th 2017 - Cleveland

Cleveland is an amazing City.  I love being in Cleveland.  And everyone in Cleveland knew approximately where Jack Nichelson, Director of IT Infrastructure & Engineering at Medical Mutual of Ohio, was speaking yesterday.  All you had to do was look for the huge "JACK" sign in Cleveland.   That would get you pretty close...

Jack didn't speak at the casino, but just down the street, at a top 10 nationwide steakhouse.  Yesterday's meeting of the Cybersecurity Leadership Forum was held at Red The Steakhouse on Prospect Ave in Downtown Cleveland:

Our user group not only has the best speakers, but we also meet at the very best venues.  We're very fortunate, and I'm grateful because we had a stellar event, and a great turnout, even while Cleveland was under a winter storm warning.  Here are some photos of the icy carnage I snapped just outside the restaurant:

Kinda nasty.  But cleveland is not unfamiliar with snow & ice, and we still had 20+ Cleveland-area security professionals venture out into the harsh weather to join us for the presentations.  Here is a group photo:

Jack Nichelson was our keynote speaker.  He is the Director of IT Infrastructure and Engineering at Medical Mutual of Ohio.  Visit Jack's bio page HERE

Jack delivered perhaps the very best presentations we've had to date. What a way to end the year.  The topic was "Creating a Results Oriented Culture".   It was an excellent delivery, lively, insightful, and humorous.   If you don't know Jack, he is a person you've got to meet.

Jack,  on behalf of the Cybersecurity Leadership Forum of Ohio, and everyone who participated in yesterday's discussion, I want to thank you for offering your time and talent.   We appreciate you sharing your unique perspective with our group, and hope you'll accept our invitation in the future to do it again.

Jack's Powerpoint Presentation is available for download HERE

Jack Nichelson, Director of IT Infrastructure & Engineering, Medical Mutual of Ohio

Here are some photos and a short video clip of Jack's presentation:

After Jack's keynote concluded, we had a round table group discussion lead by John Lindsly, IAM Practice Lead and industry thought leader at IC Synergy, a top nationwide consulting firm in the Identity and Access Management space, and One Identity's implementation partner of the year.  It was a true honor to have John Lindsly moderating our round-table.  The topic was "IT Service Management in the context of an IAM program". 

John's slides are available HERE

Here are some pics of John moderating the round-table discussion:

www.icsynergy.com

Also please remember to think of our sponsors, ICSynergy, and  One Identity, for all of your Identity & Access Management needs.  You may contact me if you'd like to schedule a consultation.

Thanks again to our speakers, attendees, and staff for making this another great meeting.

I believe we'll be in Detroit for our next meeting on January 18th.     More details to come.  Stay tuned.

I wish you all a great holiday season, a Merry Christmas, and Happy New Year!

Sincerely,

Gib Patt

November 9th 2017 - Dayton

The Cybersecurity User Group met in the great Gem City yesterday, Thursday 11/9, at Carvers Steaks & Chops.  The group continues to grow each month.  We had about 40 Dayton-area security professionals at the table...the exact capacity of the room. Is that good planning or a close call?   I have already received many email follow-ups and phone calls from our attendees expressing their gratitude for the speakers, and the educational content they delivered.  I too am very thankful to our speakers, but also to all of you who participated, and contributed to the discussion.  Security is a double edged sword... an immense problem and an immense benefit.  No one can do it alone.... it takes a team, it takes networking and knowledge sharing, and it takes a community with a culture of information security.... The Cybersecurity User Group is taking a lead in fostering this collaboration in Ohio and Michigan.

Carvers Steaks & Chops - Dayton Ohio

The CyberSecurity User Group Meeting:  Nov 9th, Dayton Ohio

The theme of the Nov 9th meeting was The NIST Cybersecurity Framework.

Our Keynote Speaker was Dr. Loren Wagner, DIA, CISSP , Sr. Manager of Global Network Operations and Perimeter Security, at the Cooper Tire & Rubber Company, based in Findlay Ohio. Dr. Loren's doctoral thesis centered on the NIST CSF.   He delivered a presentation titled "NIST Cybersecurity Framework | Research & Experiential Observations".  

"Thank you" Dr. Loren, for a great presentation, and for sharing your research and knowledge with the group.  We are all very grateful for your contribution, and for your commitment to studying and improving security and business.  Your comment that "There is no security without business" is very true.  I suppose the converse statement that there is no business without security is also true, perhaps more true now than its ever been, especially for some verticals.

Dr. Loren's presentations slides can be downloaded HERE. 

Dr. Loren Wagner

Dr. Wagner - during his NIST CSF presentation - 11-9-2017

Short video Clip of Dr. Loren Presenting

As has become our custom, the keynote was followed by a group discussion moderated by another industry expert.  In this case our round table moderator was Stacey Blanchard, IAM Practice Lead and Security Solution Architect for One Identity LLC.  Stacey's round table topics also centered on the NIST Framework, and she lead an interactive discussion that mapped Identity & Access Management topics into the five core functions of the NIST CSF.

Thank you Stacey! It was an honor to have you lead what turned out to be a very interactive group discussion, and I hope you will speak for us again in the future.

Stacey's round table slides can be downloaded HERE.

Round Table Moderator:  Stacey Blanchard, IAM Practice Lead and Security Solution Architect

Stacey Blanchard Moderates Round Table at 11-9-2017 User Group

Short Video Clip - Stacey Blanchard - 11-9-2017

And last but not least, let's not forget our short IAM lesson.  Recall the "Four A's" of IAM:

Each one of the "A's" has its own complexity and challenges, but the great complexity of Enterprise IAM is due to the fact that these "A's" must be performed for each user repository across the enterprise.  In today's world, the number of user repositories can easily number in the hundreds, or thousands; this exponentiates the complexity of the IAM problem.   The situation is further exacerbated by the fact that most organizations are now running both on-prem and cloud based user repositories. 

So we have a complex problem to solve.  But don't try to design a complex solution.  Recall John Gall, and his law of System Design:

John Gall (September 18, 1925 - December 15, 2014)

Start with simple working systems, and build from there.  

Our next User Group meeting will be in Cleveland in December.  Final arrangements are not yet confirmed, but it looks like we're zeroing in on Thursday December 14th in the downtown.  I'll send a newsletter update with speaker information, topic abstracts, and registration form as soon as this is confirmed.

Gib Patt

Found & Coordinator

The Cybersecurity User Group

614 209 8516

gib.patt@oneidentity.com

The Ohio Digital Government Summit 2017 - Oct 17th & 18th

http://www.govtech.com/events/Ohio-Digital-Government-Summit.html


Today concluded the Ohio Digital Government Summit, which was held on The Ohio State University campus at The Ohio Union:

The highlight for me was the Tuesday afternoon Keynote, Morgan Wright, an internationally renowned Cyber-expert.  Morgan's talk was titled "Cyberstrike:  Warfare in the Fifth Domain" which is a dramatized report on the "black energy" cyber attack that crippled the Ukraine's power grid. This presentation was totally fascinating and kept you on the edge of your seat from start to finish.  You can read the abstract of his talk HERE.   Morgan discusses the historic cyber attack in this Fox News interview:

I got to meet Morgan personally, and chatted with him after his keynote.  It was an honor to meet you Morgan, thanks for your insights, and thanks for the selfie!

Another highlight of the summit was the content and interactions delivered by Brian Kelley, who is the former CIO for Portage County Ohio, and current CTO for the Ohio Turnpike and Infrastructure Commission.  Brian was very active during the summit.  He hosted several presentations and panels, and was active in the breakouts, including the OCITA group session.  Brian's morning presentation was titled "Cloud Chasing, a Sensible Approach", and then later he participated in a panel discussion with the theme "Navigating the Cyber Landscape in Your Own Organization".  Its great that we have people like Brian helping drive government IT & security here in Ohio.  Thank you Brian for your passion and for leveraging your skills to serve the people of Ohio.  I hope you will consider speaking for the Cybersecurity User Group in the near future.

Lots more to come.  Executive CISO Network breakfast meeting in the morning, The Michigan Digital Government Summit in Lansing next week, and then Security Summit Week in Cleveland is the week of Halloween.  For information about these security events and other events taking place across the region, check out our "Upcoming Meetings" area of this blog.

Take Care.

Gib

September 28th 2017 - Columbus Ohio

Thursday 9/28, The Cybersecurity User Group met at Smith & Wollensky in Easton.  We had one of our best meetings to date.  There were close to 40 security professionals in attendance, with interaction and discussion throughout.  I'm very thankful to everyone who helped make today's meeting a success, especially our speakers: Jerod Brennen (Keynote), Bill Evans (Sponsor), and Adrianne Ward (Roundtable Moderator), but also our attendees who contributed your time and ideas to the security discussions.

Smith & Wollensky's at Easton

Group Pictures:

Opening Welcome Statement, Gib Patt, Group Founder/Coordinator:

Keynote Speaker:  Jerod Brennen, Security Architect, GBQ Partners

• Presentation Title:  "A Common Sense Approach to Information Security"
• Topic Abstract and Speaker Bio:  HERE
• Powerpoint Slides:  HERE
• Full Audio of Jerod's Talk:  Coming Soon.
• Pictures  and Short Video Clip of Jerod Presenting:

5-Minute Sponsor Segment: One Identity LLC:  Bill Evans, Sr. Director, Marketing

• Bill's Bio:  HERE
• Presentation Title "Get IAM Right"
• PowerPoint Slides:  HERE
• Video of Bill's talk:  

Roundtable Group Discussion, Adrianne Ward, Director, Security Solution Architecture, Americas

Adrianne Ward moderated the roundtable group discussion

Despite having fractured her hand earlier this week, Adrianne still showed up to moderate our roundtable discussion with the group.  Lesson learned:  use care when removing large plates from deadlift machine at gym!

• Roundtable Theme:  "A Selection of Current Statistics in IT Security"
• Speaker Bio:  HERE
• Powerpoint Slide:  HERE
• Pictures Adrianne Moderating:

Next Cybersecurity User Group Meeting:  Dayton, November 9th.

Our next meeting will be in Dayton on Thursday November 9th.  I'll send a newsletter update with registration and details once the venue is confirmed.  Our speaker for the Dayton meetup is Dr. Loren Wagner, who's Ph.D. research and dissertation focuses on the NIST Cybersecurity Framework.  An abstract for Dr. Wagner's talk along with a short biography have been posted HERE.    The Cybersecurity User Group cannot express well enough how pleased we are that Dr. Wagner has agreed to speak for us, and to facilitate a discussion.  This will be a rare learning experience, so please block your calendars now if you are able to attend.

Our group is not meeting in October because there are just too many other security events happening across our region.  For a list of October events please see the previous blog post HERE.  Or you can just scroll down.

Thanks all.

Gib Patt

gib.patt@oneidentity.com

614 209 8516

Upcoming Security Events in September & October

<<NOTE>>  Details and REGISTRATION about the November 9th meeting of the Cybersecurity User Group are now posted HERE.

The following is a listing of all the security events in which we're participating through the end of October 2017.  We encourage your participation too, and hope to see you at one or more of these local security events:

Wednesday 9/20:  ISSA Central Ohio Chapter Meeting | 8am - Noon

• Location: Expedient Upper Arlington,  5000 Arlington Centre Boulevard, Columbus, OH 43220 
• Speaker:  TJ Adams, CISSP will be discussing about "Privileged Account Management" at 10am.
• More Info and Registration HERE.

Thursday 9/20:  ISACA Detroit Chapter Meeting | 530 - 830

• Location:  Michigan State University Management Education Center, 811 West Square Lake Road, Troy, Michigan 48098
• Speaker:  Rob Clyde, Vice Chair ISACA International
• More information HERE.
• Registration

Wednesday 9/27  ISACA Northwest Ohio Chapter Meeting | 530 - 8

• Location:  Buffalo Wild Wings;  1550 East Wooster Street;  Bowling Green, Ohio  43402
• Speaker:  William McCreary, CIO at University of Toledo
• Topic:   "Board of Directors Considerations for Technology and Cybersecurity"
• Registration 

Thursday 9/28:  The Cybersecurity User Group Luncheon | 11am - 1pm

• Speaker:  Jerod Brennen, Security Architect for GBQ Partners presents
• Topic:  "A Common Sense Approach to Information Security". 
• Round-table Moderator:  Adrianne Ward, Director Security Solution Architecture, One Identity LLC.
• Smith & Wollensky, 4145 The Strand W, Columbus Ohio (Easton Town Center).
• Registration

Thursday 10/12:  Central Ohio ISACA Chapter Meeting | 1130am - 1pm

• Dan Vance, Clark Schaefer Consulting LLC
• Topic:  "SOC and the Cybersecurity Threat"
• Location:  Brio Tuscan Grille at Polaris Mall:  1500 Polaris Pkwy, Columbus, OH 43240
• Abstract
• Registration

Tuesday 10/17 and Wednesday 10/18:  The Ohio Digital Government Summit

• Location:  The Ohio Union, 1739 North High St. Columbus OH 43210
• Agenda and Registration HERE

Wednesday 10/18:  Central Ohio ISSA Chapter Meeting

• Location:  Expedient/Tree of Life.
• Address:  5000 Arlington Centre Boulevard, Columbus, OH 43220 
• Speakers and Topics
• Alan Swanke and Shixiong Shang,  "Multilevel Container Security Challenges"
• Aaron Ansari, "Mid-Life InforSec Crisis"
• Krisann Lucrezi, "The Value of Threat Intelligence"
• Topic Abstracts and Registration:  HERE

Wednesday 10/18:  Northeast Ohio Information Security Forum Meeting

• Wednesday October 18, 2017
• 6:30 PM – 8:00 PM
• Pizza and social start 6:00 PM
• Location: OEC at 4205 Highlander Pkwy Richfield, OH 44286
• Open to everyone and free as always
• Agenda and Abstract:  HERE.

Thursday 10/19:  CISO Executive Network Breakfast Series

•  Location:  Vorys Sater Seymour & Pease LLP offices - 52 E Gay Street Columbus, OH 43215
• Agenda and Abstract:   HERE.
• This is a members only event but if you're interested in coming please contact me at gib.patt@oneidentity.com and I can request to bring you as a guest.  You can also view membership criteria and register to become a member HERE. 

Tuesday 10/24 and Wednesday 10/25:  The Michigan Digital Government Summit

• Location:  Lansing Center, 333 East Michigan Ave, Lansing MI 48933
• Agenda and Registration HERE

Tuesday 10/24:  SecureWorld Cincinnati

• Location:  Sharonville Convention Center, 11355 Chester Rd, Cincinnati, OH 45246
• Agenda and Registration:  HERE.
• Keynotes and Speakers:  HERE.

Monday 10/30 through Friday 11/3:  Cleveland Security Summit Week 2017

• Location:  The International Exposition Center, One I-X Center Dr, Cleveland, OH 44135
• We are sponsoring this event and have a discount code.  If you plan on attending, please contact gib.patt@oneidentity.com for a discount code for extra savings on the purchase of your pass.
• Information about the summit and keynotes HERE.
• Registration.

November meetings are now being posted here:  http://cybersecurityusergroup.blogspot.com/p/november-2017-security-meetings.html