August 29th 2017 - Toledo Ohio

The Cybersecurity User Group met yesterday in Toledo Ohio at the historic Oliver House, which is now the home of the Maumee Bay Brewing Company.  This is probably the most unique venue we've used for our group meetings to date.  The atmosphere in that old building was so cool, and the staff was excellent.  As always, our speaker's powerpoints, pictures from the event, short videos, and a recap of the agenda are all posted below:

We had 26 local Cybersecurity professionals in attendance.  Here are some pics of our group enjoying the presentations, lunch, and this special venue:

Our keynote presenter was Matthew Haschak, a 17-year veteran at Bowling Green State University and current Director of Security and Infrastructure at BG.  It was a great privilege for our group to hear from Matt.  He has a strong reputation locally and abroad for his leadership and expertise in the area of Cybersecurity.  Matt delivered an incredibly insightful presentation titled "Implementing Two-Factor Authentication at Bowling Green State University" where he shared the challenges, successes, and lessons learned from that experience.  Thanks again Matt for your contribution to our group.

Matt's presentation can be viewed/downloaded HERE.

A couple keepsakes from Matt's presentation are posted below:

We wrapped up our meeting with a round-table discussion moderated by Jackson Shaw, who is Vice President Product Management at One Identity.  It was a real honor to have Jackson's participation at user group.  He has been a pioneer and thinker in the IAM space since before "IAM" was even part of our common lexicon.  Jackson's round-table discussion guided us through insightful concepts related to "Managing Identity & Security in an increasingly SaaS world", which was also the title of his round-table.   

Jackson's slides are available for download HERE.

Jackson has the most relaxing profile pic I've ever seen:

Here is a pic from yesterday of Jackson leading the Cybersecurity group round-table in the historic Oliver House in Toledo:

We are planning our next meeting in Columbus at the end of September.   Still working to confirm our speakers.  As soon as those details are confirmed I will make an announcement. 

If you haven't already done so, please don't forget to send your ISACA and (ISC)2 member IDs to either myself (gib.patt@oneidentity.com) or Cynthia Au (cynthia.au@oneidentity.com), and we will submit 2 CPEs toward your continuing education requirements for your certs.

Yours Truly,

Gib Patt

The Cybersecurity User Group

gib.patt@oneidentity.com

July 25th 2017 - Southfield Michigan

Yesterday we met at Southfield's Bacco Ristorante "the buzzy Italian eatery".   I think I can speak for the group and say it was not only "buzzy" in that dining hall, but also a great time learning and networking with some of the best people!  We had 30 Michiganders and Ohioans in attendance, with roles ranging from Executives and Vice Presidents, to IT Directors, Managers, and Security Practitioners. The participation from members and speakers alike was superb.

The keynote presentation was delivered by David Cutri, Executive Director and Chief Compliance Officer at University of Toledo.  Dave's presentation was titled Cybersecurity and Corporate Governance, and delved into the 5 guiding principles for the Board of Directors.  It was a totally unique learning experience and I hope Dave will speak for us again in the future.  We are sincerely grateful for Dave's contribution, and cannot thank him enough for sharing his time and experience with our group.

David's presentation is available for download HERE.

Now I'm no photographer, my iPhone doesn't take the best pics, and low lighting in that dining hall doesn't help, but nevertheless I have posted some keepsakes from David's presentation below:

Gib Patt (yours truly) spoke to the group for a few minutes about the top challenges we're seeing at One Identity in the area of Identity & Access Management.

My slides, and the agenda slides for the event, are available HERE.
Don't forget to study up on Gall's Law HERE :)

One of my colleagues captured a couple pics of me at the podium.  Someone said I look like a hacker...is that true?

Next on the agenda was our group's very first round table discussion.  It was a lively exchange moderated by Wayne Smiley, One Identity Solution Architect and CISSP.    Wayne did a great job guiding us through some examples of real life phishing attacks and spurring a related conversation with the group.  The round table will become a staple at our events going forward.

Wayne's Slides are available HERE.

Here are some pics and a video of Wayne moderating the group discussion:

One Identity's Regional Director, Eric Robinson, asked the group some probing questions and helped guide part of the group discussion.  It was great to have Eric's participation.  Here is a short clip of Eric questioning the group:

As a reminder, our group is a CPE submitter for both (ISC)2 and ISACA credential holders.   Anyone who attended should send your membership ID to Cynthia Au, cynthia.au@oneidentity.com .  Cynthia will make sure your account is incremented by 1.5 credits for your attendance.  If you hold credentials from an organization other than (ISC)2 or ISACA and you have a continuing education requirement, please let me know and we'll look into it...maybe we can get you credits too.

Our next group meeting is in Toledo on August 29th, please see below for details.   I'll be sending a formal invitation within the next couple weeks.

Toledo Ohio

• Guest Speaker:  Matthew Haschak, Director of IT Security at Bowling Green University
• Topic:  Multi Factor Authentication.   I've also asked Matt to talk about his approach to "adaptive security" and how it improves security, and user experience.
• Date and Time:  August 29th 2017, 11am - 1pm
• Location: Maumee Bay Brewing Co. (Inside the historical Oliver House)
• Address:  27 Broadway Street, Toledo, OH
• Landing Page and Registration HERE.

Thanks again to our speakers, and to all of our attendees.  It was another great meeting, and I hope to see you all again soon.

Sincerely,

Gib Patt

614 209 8516

gib.patt@oneidentity.com

April 2017 - Central Ohio InfoSec Summit

It's already July so this post is way late, but I wanted to recall the great experience we had at the 2017 Central Ohio InfoSec Summit, which had its 10th annual convention in April in downtown Columbus (my hometown).   It was a fantastic event with over 1,000 people attending. The conference halls were packed with the very best speakers in Information Security from all walks of life.  Here's the very cool and unique wooden name badge they gave to attendees....I recently had to wrestle this away from one of my kids:

If you've never attended the Summit, do yourself a favor and get a ticket for the 2018 convention.  My employer paid for my pass, and it was well worth it.  The website for this past summit is still up and running HERE if you want to check out the the 2017 agenda, speakers, and topics.

The highlight of the event for me was the Thursday evening talk given by William Binney, a former high-level National Security Agency intelligence official who, after his 2001 retirement, having served for 30 years, blew the whistle on NSA surveillance programs.   William's talk was titled "The Surveillance State and Big Data" and it was a provocative, controversial yet fascinating discussion about the role and limits of government surveillance capabilities.

Here are a couple pictures from Mr. Binney's keynote:

And I was fortunate enough to meet up with William in the hallway after the keynote.  He agreed to a selfie with me:

That's all for now.  Hope you're all enjoying your summer!

Gib Patt

gib.patt@oneidentity.com

614 209 8516

LinkedIn

June 28th 2017: Columbus

We held our Executive Forum on The Cyber Risks That Matter to Corporate Boards last night in Columbus Ohio.  It was another fine evening, with lots of great real-world experiences being shared by our speakers, a round-table discussion with our attendees, and plenty of networking with our great Columbus-area executives.  Of course, we had some fine food from Mitchell's Ocean Club, which never disappoints, and the waiting staff was top notch!

Here are a couple group pictures of us enjoying the food and networking:

Our First Speaker was the CEO and Member of the Board for Cyber Risk Management LLC, Yong-Gon Chon.  Yong-Gon is responsible for the growth and execution for one of the largest pure-play cyber services companies.  Yong-Gon's talk was titled "Building a Cyber Balance Sheet For Your Board".   This was a fascinating talk on how cyber experts can begin to bridge the communication gap that exists between executive management and the board of directors.

Material's for Mr. Chon's presentation:

• Slide Deck:   "Building a Cyber Balance Sheet For Your Board"

• Report:  "The Cyber Balance Sheet Report"

Mr. Chon can be seen in the video and pictures below, delivering his presentation:

Our meetings are funded by One Identity, and sometimes co-funded by consulting partners like Focal Point, and yet we only spend very little time talking about our brands, products, and services.  We use our marketing dollars to focus on what's really important to our attendees:  bringing together like-minded people for knowledge sharing and round-table discussion on topics that matter most to them. That is the mission of our group.  With that said, Bill Evans talked for a mere 5 minutes about One Identity, and here are some pics and videos from his brief talk:

• Bill's slide deck:  "Get IAM Right!"

Perhaps the most impactful presentation of the evening came from Robert Kemp, Director of Technology at Travel Centers of America, an incredibly successful company based out of Westlake Ohio, near Cleveland.  Robert is a highly successful and very talented IT & Security executive with 25 years of experience leading large IT organizations to business success.  Robert's presentation shared his lessons learned, successes, and challenges that he has experienced throughout his career.   Robert's presentation was titled "Talk The Talk!" and his slides can be downloaded below.  Enjoy the pictures and videos from Robert's presentation:

• Robert's slide deck:  "Talk the Talk!"

Our next two events are in the works.  Here are the details:

Southfield Michigan (our very first meetup in Michigan):

• Guest Speaker:  David Cutri, Executive Director and Chief Compliance Officer, University of Toledo.
• Topic: Cybersecurity From The Perspective of The Board of Directors
• Date and Time:  July 25th 2017, 11am - 1pm
• Location:  Bacco Ristorante
• Address:  29410 Northwestern Hwy Southfield, MI 
• Landing Page and Registration HERE

Toledo Ohio

• Guest Speaker:  Matthew Haschak, Director of IT Security at Bowling Green University
• Topic:  Still being finalized but I believe it will be on the business value of multi factor authentication, and I've asked matt to talk about his approach to "adaptive security" and how that improves security, and user experience.
• Date and Time:  August 29th 2017, 11am - 1pm
• Location: Maumee Bay Brewing Co. (Inside the historical Oliver House)
• Address:  27 Broadway Street, Toledo, OH
• Landing Page and Registration HERE.

Lastly, everyone should now know that our group is officially an (ISC)² CPE Submitter!  We're really excited about this.  All of our group attendees who are (ISC)² credential holders must earn continuing professional education (CPE) credits throughout the life of their certification.   They can now earn 1.5 credits for each of our meetings they attend.  Look for the "CPE Submitter" logo on our landing pages above.  We are also pursuing a CPE status for ISACA credential holders, so stay tuned. 

Sincerely,

Gib Patt

614 209 8516

gib.patt@oneidentity.com

February 15th 2017: Columbus

Melissa Bowhers, Sr Compliance Analyst with Commercial Vehicle Group, based in New Albany Ohio, walked us through a fantastic presentation and overview which summarized the business challenges they faced, and the drivers that lead to the creation of a new IT User Access Audit Program within the company.   The meeting was at Brio at the Polaris Mall just north of Columbus, and we had about 25 to 30 of you joining us that day.

This is a great story with many lessons learned.  We had lots of Q&A during and after Melissa's presentation.  I only wish we would have captured some photos and videos for this blog!

Melissa was kind enough to make her presentation available to our group, and so you can view or download her slides HERE.

George is the Sr Security Adviser and Principal Solution Architect for One Identity.  George presented our second topic.  His presentation focused on Digital Transformation, how our world is rapidly changing, as well as some of the challenges and corresponding solutions for governing cloud based identity assets, such as SaaS applications.

George's slides are also available HERE.

Sincerely,

Gib Patt
614 209 8516
gib.patt@oneidentity.com
www.oneidentity.com

May 9th 2017: Cincinnati

The group met in Cincinnati on May 9th at The Original Montgomery Inn.  Our keynote guest speaker was Don Stoller, Sr. Security Engineer at Vantiv.  Don's presentation was titled "Fostering Organizational Adoption of a Privileged Account Governance Program".  We all got a lot out of Don's talk, and we really appreciate Don making time to share his expertise and experiences with the community here in Cincinnati.

Don's Powerpoint slides can be downloaded HERE

Here are a couple pictures and short video clip from Don's presentation:

Don Stoller, Sr Security Engineer

Don Stoller, Sr. Security Engineer

Next we had Bill Evans, Sr. Director of Product Marketing for One Identity, give a short introduction of the company.  Thank you for participating Bill, and also for funding our meetups!  Without your sponsorship our user group meetups would not be possible.  We hope you will continue to join our meetups in the future.

Bill's slides on One Identity are available HERE.

Here is a picture and video from Bill's portion:

Bill Evans introducing the group to One Identity

And last but far from least we had our presentation by George Cerbone, who is One Identity's Sr. Security Advisor and Principal Solution Architect.  George had a great segment titled "How to Avoid Enterprise Disaster - Why Identity Projects Fail".  Note the masterful graphics George chooses for his presentations!

George's slides are available for download HERE

...And here are some pictures and a short video from George's presentation:

George Cerbone - Sr. Security Adviser and Principal Architect

George Cerbone - Sr. Security Adviser and Principal Architect

Thanks again to our presenters and to all who attended.

June 2017 Meetup:

• Where:  Mitchell's Ocean Club Columbus Ohio
• Address: 4002 Easton Station, Columbus, OH 43219 
• When:  Wednesday June 28th from 6pm - 9pm.  
• This is a special meeting with a focus on executive communications on Cyber Risk.  We have two executive speakers who will be expounding on the theme " Cyber Risks that Matter to Corporate Boards".  You can read about the speakers and register for the event on the Landing Page.

July 2017 Meetup:

• Where:  Bacco Ristorante in Southfield Michigan
• Address: 29410 Northwestern Hwy Southfield, MI
• When:  Tuesday July 25th from 11am - 1pm  
• We are still confirming our speakers for Southfield, More details to follow shortly but you are welcomed to register on the Landing Page now and we hope to see you there.

Gib Patt
One Identity
gib.patt@oneidentity.com
614 209 8516