RSA Conference Brochure 2008

policy & govErnMEnt tuEsday, april 8 1:30 p.m. – 2:40 p.m. GOV-105 WEdnEsday, april 9 8:00 a.m. – 8:50 a.m. GOV-201 (L2) National Data Breach legislation: revolution or Missed Opportunity? (S) A View from the Hill: Cyber Security and the Homeland Security Committee Jake Olcott | Director, Subcommittee on Emerging Threats, Cybersecurity, Science & Technology, U.S. House of Representatives MODERATOR: Franck Journoud | Manager, Information Security Policy, Business Software Alliance (BSA) PANELISTS: Adam Golodner | Director of Global Security and Technology Policy, Cisco Systems, Inc. Gail Hillebrand | Senior Attorney, Consumers Union Ari Schwartz | Deputy Director, Center for Democracy and Technology (CDT) Mike Zaneis | Vice President of Public Policy, Interactive Advertising Bureau More than 35 states have already adopted legislation on breaches of personal data, so what will a national law change? What new obligations will it create? Should it be tough on businesses or give them flexibility? And to what effect: fewer data breaches or heavier burdens for businesses? This panel will answer these questions. 3:00 p.m. – 3:50 p.m. GOV-106 The House of Representatives Homeland Security Committee has conducted a number of investigations and held hearings into federal information technology security and cyber security. The presenter will describe these efforts, including cyber espionage, federal information security laws, critical infrastructure cyber security (SCADA and PCS), cybercrime and federal cyber security R&D spending. 9:10 a.m. – 10:20 a.m. GOV-202 (B) it’s Time to Change The Federal information Security Management Act (FiSMA) Bruce Brody | Vice President, Information Assurance, CACI Alan Paller | Director of Research, SANS Institute (S) Your Agency Had a Data Breach! What Do You Do? MODERATOR: Kem Clawson | Federal CTO, EMC PANELISTS: Tim Grance | Senior Supervisory Computer Scientist, NIST Marc Groman | Chief Privacy Officer, Federal Trade Commission Mischel Kwon | Chief Security Technologist, U.S. Department of Justice Hugo Teufel | Chief Privacy Officer, U.S. Department of Homeland Security FISMA has been around for nearly eight years, but it still measures the wrong things and promotes compliance over true security. This presentation will highlight the flaws in the current FISMA process and propose solutions by which the federal computing enterprise can better protect its systems from those who would do it harm. 4:10 p.m. – 5:20 p.m. GOV-107 (B) Privacy Today and Tomorrow — Where are We Headed? What Do You Need to Know? MODERATOR: Jon Swartz | Technology Reporter, USA TODAY PANELISTS: James Dempsey | Policy Director, Center for Democracy and Technology (CDT) Michelle Dennedy | Chief Privacy Officer, Sun Microsystems Jane Horvath | Senior Privacy Council, Google Orson Swindle | Senior Policy Advisor and Chair, Security Initiatives, Center for Information Policy, Hunton & Williams The Office of Management and Budget has tasked all U.S. government agencies with developing a comprehensive data breach policy. This entails limiting the capture and storage of personally identifiable information (PII), protecting access and reporting any suspected data breaches. This session will be delivered by four experts from the U.S. government who have been actively engaged in meeting these goals. 10:40 a.m. – 11:50 a.m. GOV-203 (S) In the past few years, news of data breaches and privacy concerns have dominated the national debate. This panel will discuss all issues related to data protection and privacy, from the impact of new laws and regulations to best practices. Come hear from the top privacy experts, who are now sitting at the table in the boardroom and strategically advising some of the top leaders in the world. 5:40 p.m. – 6:30 p.m. GOV-108 Adapting Authentication Approaches in Government Agencies to level of risk MODERATOR: Shannon Kellogg | Director of Information Security Policy, EMC Corporation PANELISTS: Julie Griffin | Vice President, Projects & Automated Systems, Navy Federal Credit Union Jeff Kopchik | Senior Policy Analyst, FDIC Phillip Loranger | Deputy Associate CIO for IT Investments and Deputy Chief Information Security Officer, U.S. Department of Transportation (S) Data retention: Policy Pros and Cons Bruce Heiman | Partner, K&L Gates In Europe, it used to be illegal. But after the Madrid bombings the EU now requires companies to retain data for three years. In the U.S., even the Patriot Act did not require data retention. But the Justice Department is eager to follow the EU. Should the U.S. do so? This session will look at the arguments — for and against — from the perspectives of government, businesses and individuals. sEssion classification In 2007, the President’s Identity Theft Task Force issued strategic recommendations that included strong authentication as an important safeguard for protecting sensitive data. This panel will feature leading practitioners and experts from the public and private sectors that have been involved in developing and implementing strong authentication requirements. (B) Business Futures (L2) Intermediate Legal/Compliance (L3) Basic Legal/Compliance (P3) Individual Contributor Professional Development (S) Strategic 38 See page 5 for complete level descriptions.

Table of Contents Feed for the Digital Edition of RSA Conference Brochure 2008

Table of Contents Who Should Attend & Why Keynote Speakers Agenda At-A-Glance Session Classification Special Events & Activities Connect & Network Highlights 1-Day Pre-Conference Tutorials 2-Day Pre-Conference Tutorials Tracks & Sessions Authentication Consumer Protection Business Trends & Impact Case Studies Cryptographers Deployment Strategies Developing with Security Enterprise Defense Hackers & Threats 1 Hackers & Threats 2 Identity & Access Management Industry Experts Law & Liability Policy & Government Professional Development Security-Oriented Architecture Standards Wireless Sponsor Sessions List of Exhibitors Registration Information Sponsors

For optimal viewing of this digital publication, please enable JavaScript and then refresh the page. If you would like to try to load the digital publication without using Flash Player detection, please click here.