March 21st 2018 - Toledo Ohio

The 2018 CyberSecurity & Risk Management Summit was held in Toledo this past Wednesday.  We had approximately 80 security & audit professionals in attendance for a full day of training at U of Toledo's Immersive Simulation Center; later that evening, around 50 joined us for dinner & drinks at Maumee Bay Brewing Company.

In my dinner remarks, I commented that this event was a memorable, unique, and highly educational experience.  It was also a lot of fun because we got to meet so many great people of Northwest Ohio.  We were able to grow and learn as a community of security leaders and practitioners.  

We are all thankful to Northwest Ohio ISACA and IIA chapters for their partnership and guidance in organizing the event.    As well, our keynotes and instructors did a phenomenal job, and I'd like to recognize them for their great talent, and for sharing their expertise with our group.

Group Picture:  Keynote Speakers, Instructors, and The Event Committee

Theater Room packed with the great security and audit professionals of NW Ohio and SE Michigan

The Theater Room had an awesome audio/video setup.

I have posted all of the information about our speakers, including pictures, LinkedIn profiles, and PowerPoint presentations below.

Opening Keynote:  Jeff Schmidt, Vice President and Chief Cyber Security Innovator, The Columbus Collaboratory.

PowerPoint Download:  Leadership, Culture, and Change

Jeff Schmidt, Vice President and Chief  Cyber Security Innovator, The Columbus Collaboratory

Jeff Schmidt delivers opening keynote presentation on "Leadership, Culture, and Change"

Session 1:   "Developing a Cyber Strategy".  Instructor:  Jerod Brennen, CISSP, Security Architect, Advisor, Speaker, Teacher, GBQ Partners.

PowerPoint Download:  Developing a Cyber Strategy

Jerod Brennen, CISSP, Security Architect, One Identity LLC

Jerod Brennen teaches a course on Developing a Cybersecurity Strategy

Session 2:  "Managing your User Population - Identity & Access Management"  Instructor:  Robert Sandri, Sr. Security Advisor and Principal Solution Architect, One Identity LLC.

PowerPoint Download:  Managing your User Population - Identity & Access Management

Rob Sandri, Sr. Security Advisor and Principal Solution Architect, One Identity LLC.

Rob Sandri teaches his course on Managing User Populations

Session 3:  "External Threats, Securing your Perimeter"  Instructor:  Dr. Loren Wagner, DIA, CISSP, CSSBB, Sr. Director of Compliance Services, CentraComm.

PowerPoint Download:  External Threats - Securing Your Perimeter

Dr. Loren Wagner, DIA, CISSP, CSSBB, Sr. Director of Compliance Services, CentraComm.

Dr. Loren Wagner teaches his course on External Security Threats

Closing Keynote:  Ted Wolff,  Board of Directors, ISACA International; Sr. Manager Risk Management, Vanguard

PowerPoint Download:  What's Next?  Where is Cyber Risk Heading?

 Ted Wolff, Sr. Manager Risk Management, Vanguard; Board Member, ISACA International.

Ted Wolff's closing keynote session

After the closing Keynote, we had a guided tour of the University of Toledo Inter-professional Immersive Simulation Center.  We captured some neat moments from the tour in the pictures below:

The University of Toledo Inter-Professional Immersive Simulation Center

The tour was getting kicked off

Headed to the Simulation Rooms

Immersive Simulation - Virtual Reality! 

Other immersive Hi-Tech in the Simulation Center.

Next we headed off to Maumee Bay Brewing Company, in the Historic Oliver House, for dinner and drinks.  Food, beer, and service from the venue was excellent as usual:

Maumee Bay Brewing Company - The Historic Oliver House

The Oliver House has got to be one of the coolest Venues in Northwest Ohio

Maumee Bay - Group Pic 1

Maumee Bay - Group Pic 2

Maumee Bay - Group Pic 3

Thanks  to the great staff at Maumee Bay for the excellent service they provided to our group

Evening Keynote:  Brian Kelley, Chief Technology Officer, The Ohio Turnpike and Infrastructure Commission.

PowerPoint Download:  Leading from the Edge with Connected Vehicle Technology

Brian Kelley, Chief Technology Officer, The Ohio Turnpike and Infrastructure Commission

Brian Kelly delivers the Evening Keynote address.

Wrap Up Topic  "A Current Discussion in Identity & Security"  Presenter:  Robert Sandri, Sr. Security Advisor and Principal Solution Architect, One Identity LLC.

PowerPoint Download:  A Current Discussion of Identity & Security

Robert Sandri, Sr. Security Advisor and Principal Solution Architect, One Identity LLC.

And one last final "Thank You" to our honorable committee, who helped put this event together.  Without them this special occasion within our community would never have taken place:

The Event Committee:

David Cutri, Vice President and Recent Past President, Northwest Ohio ISACA

Dr. Pascal Bizarro, President Northwest Ohio ISACA

Matt Hoverman, Vice President Northwest Ohio IIA

Sarah Burkstrand, President Northwest Ohio IIA

Cynthia Au, Sr. Field Adviser, One Identity LLC

Great new Friendships were Created

We can't wait for our next event in Northwest Ohio!

Thanks again all, and feel free to contact me any time.

Sincerely,

Gib Patt

gib.patt@oneidentity.com

614 209 8516

February 22nd 2018 - Detroit

Yesterday, February 22nd, The Cybersecurity Leadership Forum met at Andiamo Detroit Riverfront, located in the Renaissance Center: 

Andiamo Detroit in the Ren Center

It was an excellent venue, and we had two fine speakers:  Dr. Michael Muha, CISO & Chief Privacy Officer for Workforce Software, and Chris Ostler, President & CEO of Immersion Technologies, both pictured here along with yours truly:

Left to Right:  Chris Ostler, President & CEO, Immersion; Gib Patt, Founder, The Cybersecurity Leadership Forum, Mike Muha, CISO & Chief Privacy Officer for Workforce Software.

In total we had about 20 Detroit-area security pros dining with us through the lunch hour:

Michael Muha gave the first presentation; his topic was "Approaches to Justifying Cybersecurity Projects: Win-Win Strategies".  Mike imparted many lessons through an energetic and interactive presentation.  Mike's slides can be downloaded HERE.

Mike Muha, CISO & Chief Privacy Officer, Workforce Software
Presenting "Approaches to Justifying Cybersecurity Projects" at Andiamo Detroit

Here is a short video clip from Mike's presentation:

After Mike's presentation, our group security roundtable discussion began, and was moderated by Chris Ostler, President & CEO, Immersion Technology Services.  Chris guided us through a range of "Current Affairs in Cybersecurity" and also imparted some valuable lessons for our group:  Chris' slides are also available for download HERE.

Chris Ostler, President & CEO, Immersion Technology Services

...and a short video of Chris presenting:

On behalf of the Cybersecurity Leadership Forum I want to thank our great speakers for sharing their time and talent with the Detroit-area security community.   We are grateful for the opportunity to learn from your experiences, and share your ideas within our own organizations.

Our next meeting is scheduled for March 21st in Toledo Ohio at the Maumee Bay Brewing Company, and will follow a full day of training at the U of Toledo campus at the Immersive Simulation Center.  More details will be shared next week.

Until next time I wish you all the greatest of success!

Sincerely,

Gib Patt
Founder & Coordinator, The Cybersecurity Leadership Forum

December 14th 2017 - Cleveland

Cleveland is an amazing City.  I love being in Cleveland.  And everyone in Cleveland knew approximately where Jack Nichelson, Director of IT Infrastructure & Engineering at Medical Mutual of Ohio, was speaking yesterday.  All you had to do was look for the huge "JACK" sign in Cleveland.   That would get you pretty close...

Jack didn't speak at the casino, but just down the street, at a top 10 nationwide steakhouse.  Yesterday's meeting of the Cybersecurity Leadership Forum was held at Red The Steakhouse on Prospect Ave in Downtown Cleveland:

Our user group not only has the best speakers, but we also meet at the very best venues.  We're very fortunate, and I'm grateful because we had a stellar event, and a great turnout, even while Cleveland was under a winter storm warning.  Here are some photos of the icy carnage I snapped just outside the restaurant:

Kinda nasty.  But cleveland is not unfamiliar with snow & ice, and we still had 20+ Cleveland-area security professionals venture out into the harsh weather to join us for the presentations.  Here is a group photo:

Jack Nichelson was our keynote speaker.  He is the Director of IT Infrastructure and Engineering at Medical Mutual of Ohio.  Visit Jack's bio page HERE

Jack delivered perhaps the very best presentations we've had to date. What a way to end the year.  The topic was "Creating a Results Oriented Culture".   It was an excellent delivery, lively, insightful, and humorous.   If you don't know Jack, he is a person you've got to meet.

Jack,  on behalf of the Cybersecurity Leadership Forum of Ohio, and everyone who participated in yesterday's discussion, I want to thank you for offering your time and talent.   We appreciate you sharing your unique perspective with our group, and hope you'll accept our invitation in the future to do it again.

Jack's Powerpoint Presentation is available for download HERE

Jack Nichelson, Director of IT Infrastructure & Engineering, Medical Mutual of Ohio

Here are some photos and a short video clip of Jack's presentation:

After Jack's keynote concluded, we had a round table group discussion lead by John Lindsly, IAM Practice Lead and industry thought leader at IC Synergy, a top nationwide consulting firm in the Identity and Access Management space, and One Identity's implementation partner of the year.  It was a true honor to have John Lindsly moderating our round-table.  The topic was "IT Service Management in the context of an IAM program". 

John's slides are available HERE

Here are some pics of John moderating the round-table discussion:

www.icsynergy.com

Also please remember to think of our sponsors, ICSynergy, and  One Identity, for all of your Identity & Access Management needs.  You may contact me if you'd like to schedule a consultation.

Thanks again to our speakers, attendees, and staff for making this another great meeting.

I believe we'll be in Detroit for our next meeting on January 18th.     More details to come.  Stay tuned.

I wish you all a great holiday season, a Merry Christmas, and Happy New Year!

Sincerely,

Gib Patt

November 9th 2017 - Dayton

The Cybersecurity User Group met in the great Gem City yesterday, Thursday 11/9, at Carvers Steaks & Chops.  The group continues to grow each month.  We had about 40 Dayton-area security professionals at the table...the exact capacity of the room. Is that good planning or a close call?   I have already received many email follow-ups and phone calls from our attendees expressing their gratitude for the speakers, and the educational content they delivered.  I too am very thankful to our speakers, but also to all of you who participated, and contributed to the discussion.  Security is a double edged sword... an immense problem and an immense benefit.  No one can do it alone.... it takes a team, it takes networking and knowledge sharing, and it takes a community with a culture of information security.... The Cybersecurity User Group is taking a lead in fostering this collaboration in Ohio and Michigan.

Carvers Steaks & Chops - Dayton Ohio

The CyberSecurity User Group Meeting:  Nov 9th, Dayton Ohio

The theme of the Nov 9th meeting was The NIST Cybersecurity Framework.

Our Keynote Speaker was Dr. Loren Wagner, DIA, CISSP , Sr. Manager of Global Network Operations and Perimeter Security, at the Cooper Tire & Rubber Company, based in Findlay Ohio. Dr. Loren's doctoral thesis centered on the NIST CSF.   He delivered a presentation titled "NIST Cybersecurity Framework | Research & Experiential Observations".  

"Thank you" Dr. Loren, for a great presentation, and for sharing your research and knowledge with the group.  We are all very grateful for your contribution, and for your commitment to studying and improving security and business.  Your comment that "There is no security without business" is very true.  I suppose the converse statement that there is no business without security is also true, perhaps more true now than its ever been, especially for some verticals.

Dr. Loren's presentations slides can be downloaded HERE. 

Dr. Loren Wagner

Dr. Wagner - during his NIST CSF presentation - 11-9-2017

Short video Clip of Dr. Loren Presenting

As has become our custom, the keynote was followed by a group discussion moderated by another industry expert.  In this case our round table moderator was Stacey Blanchard, IAM Practice Lead and Security Solution Architect for One Identity LLC.  Stacey's round table topics also centered on the NIST Framework, and she lead an interactive discussion that mapped Identity & Access Management topics into the five core functions of the NIST CSF.

Thank you Stacey! It was an honor to have you lead what turned out to be a very interactive group discussion, and I hope you will speak for us again in the future.

Stacey's round table slides can be downloaded HERE.

Round Table Moderator:  Stacey Blanchard, IAM Practice Lead and Security Solution Architect

Stacey Blanchard Moderates Round Table at 11-9-2017 User Group

Short Video Clip - Stacey Blanchard - 11-9-2017

And last but not least, let's not forget our short IAM lesson.  Recall the "Four A's" of IAM:

Each one of the "A's" has its own complexity and challenges, but the great complexity of Enterprise IAM is due to the fact that these "A's" must be performed for each user repository across the enterprise.  In today's world, the number of user repositories can easily number in the hundreds, or thousands; this exponentiates the complexity of the IAM problem.   The situation is further exacerbated by the fact that most organizations are now running both on-prem and cloud based user repositories. 

So we have a complex problem to solve.  But don't try to design a complex solution.  Recall John Gall, and his law of System Design:

John Gall (September 18, 1925 - December 15, 2014)

Start with simple working systems, and build from there.  

Our next User Group meeting will be in Cleveland in December.  Final arrangements are not yet confirmed, but it looks like we're zeroing in on Thursday December 14th in the downtown.  I'll send a newsletter update with speaker information, topic abstracts, and registration form as soon as this is confirmed.

Gib Patt

Found & Coordinator

The Cybersecurity User Group

614 209 8516

gib.patt@oneidentity.com

The Ohio Digital Government Summit 2017 - Oct 17th & 18th

http://www.govtech.com/events/Ohio-Digital-Government-Summit.html


Today concluded the Ohio Digital Government Summit, which was held on The Ohio State University campus at The Ohio Union:

The highlight for me was the Tuesday afternoon Keynote, Morgan Wright, an internationally renowned Cyber-expert.  Morgan's talk was titled "Cyberstrike:  Warfare in the Fifth Domain" which is a dramatized report on the "black energy" cyber attack that crippled the Ukraine's power grid. This presentation was totally fascinating and kept you on the edge of your seat from start to finish.  You can read the abstract of his talk HERE.   Morgan discusses the historic cyber attack in this Fox News interview:

I got to meet Morgan personally, and chatted with him after his keynote.  It was an honor to meet you Morgan, thanks for your insights, and thanks for the selfie!

Another highlight of the summit was the content and interactions delivered by Brian Kelley, who is the former CIO for Portage County Ohio, and current CTO for the Ohio Turnpike and Infrastructure Commission.  Brian was very active during the summit.  He hosted several presentations and panels, and was active in the breakouts, including the OCITA group session.  Brian's morning presentation was titled "Cloud Chasing, a Sensible Approach", and then later he participated in a panel discussion with the theme "Navigating the Cyber Landscape in Your Own Organization".  Its great that we have people like Brian helping drive government IT & security here in Ohio.  Thank you Brian for your passion and for leveraging your skills to serve the people of Ohio.  I hope you will consider speaking for the Cybersecurity User Group in the near future.

Lots more to come.  Executive CISO Network breakfast meeting in the morning, The Michigan Digital Government Summit in Lansing next week, and then Security Summit Week in Cleveland is the week of Halloween.  For information about these security events and other events taking place across the region, check out our "Upcoming Meetings" area of this blog.

Take Care.

Gib