- Overview
- Agenda
- Speakers
Starting an Information Security Program: A Risky Proposition - Online Workshop
Where: Online/Virtual
When: Wednesday, January 18, 2023
1:00pm-4:00pm
Workshop Organizer: Eric Boughton of Fitchburg State University
Registration Fee:
NERCOMP Member: $90
Non Member: $180
Event Overview
Creating an Information Security Program doesn't have to be a big scary proposition. You just need to take the time to learn about what resources are needed and how to access the potential risks involved.
In this workshop, we will take a risky turn by talking about the practical steps involved in an IT risk assessment and how to come up with usable information to mitigate those risks.
We will also be engaged in discussion with seasoned information security professionals about their University’s Information Security Programs, how they got started, and what to look out for.
Additionally, we'll have an Information Security PechaKucha covering information needed in a security plan, vulnerability management, and getting cybersecurity out of the way
Who should attend?
This is intended for those getting started with information security with or without a technology background.
Session Outcomes:
Participants will:
- Hear from experts in the field about their experiences with cyber security.
- Be able to articulate what is necessary to get an information security program started and what they can do to keep one running.
Registration Cancellation Policy:
By clicking on the "Order Now" button, you are indicating a commitment to attend and will be held responsible for the registration fee. Your fee can be refunded if you notify us of a cancellation at least 3 days prior to the event via email to nercomp@nercomp.org.,
Accessibility
NERCOMP strives to make its online offerings and In-person workshops accessible for all registrants. Please contact us should you have an accessibility need. We've worked to provide resources that are accessible to as many people as possible, and if you encounter any issues while attending our events, please contact us at accessibility@nercomp.org or at 860-345-2081 to request assistance.
Event Disclaimer:
NERCOMP reserves the right to use any photographs or other mechanical recordings taken at NERCOMP events in promotional materials. No mechanical recordings of any kind may be used at NERCOMP events without the prior written consent of NERCOMP organizers and presenters. The views and opinions expressed at NERCOMP events do not necessarily reflect those of NERCOMP, nor does NERCOMP make any representation regarding the information presented at NERCOMP events.
Wednesday, January 18, 2023
1:00pm-1:14pm Welcome and Introductions
1:15 pm-2:00 pm A Risky Workshop
Speaker: Eric Boughton, Information Security Officer, Fitchburg State University
Description:
Our example: A project lead has come to you with a question about setting up an external app login.
We are going to go through the practical steps of an IT risk assessment and how to come up with usable information to mitigate the risk. Leaving you with the confidence to recommend the least risky option.
2:00 pm-3:00 pm Security Meeting (Panel Discussion and Q & A)
Speakers:
Sherry Horeanopoulos, Chief Information Security Officer, Fitchburg State University
Thomas Cesso, Chair, HEISO Council, Salem State University
David Marion, Director of Information Security, Bridgewater State University
Moderated by:
Eric Boughton, Information Security Officer, Fitchburg State University
Description:
A discussion with HEISO members Sherry Horeanopouls, Thomas Cesso, and Dave Marion about their University's Information Security Programs. Listen to their tales about:
How did the programs get started, was there a big event that kicked things off, or did a new requirement make it so?
What has it been like navigating the new cybersecurity field as it matures?
How has the student experience changed?
Where do you think cyber security is going?
Intended for all who are interested in cyber security in higher education.
3:00 pm-4:00 pm Information Security PechaKucha
Speakers:
Sherry Horeanopoulos, Chief Information Security Officer, Fitchburg State University
David Marion, Director of Information Security, Bridgewater State University
Eric Boughton, Information Security Officer, Fitchburg State University
Description:
Join our talkative security professionals as the slides keep on advancing while they try to keep up. In these Pechakucha-style presentations, there are 20 slides per presentation with 20 seconds a slide.
What do you need in an Information Security Plan?
Speaker: Sherry Horeanopoulos
Vulnerability Management, should you patch that?
Speaker: David Marion
Getting Cyber Security out of the way.
Speaker: Eric Boughton
Policy Development
Speaker: Sherry Horeanopoulos
Eric Boughton, CISSP, CRISC, CSX-P
Eric Boughton, CISSP, CRISC, CSX-P, has been employed as the Information Security Officer for Fitchburg State University since 2015 and has more than 10 years of experience in the IT department. His goal is to make technology a safe tool that enhances user productivity. Eric's expertise is in the technical components of security; Firewall and Web App Firewalls, Backup, SIEM/SOC Liason, Two-Factor Authentication, Data Security, and Risk Management.
Thomas Cesso, CISSP
Thomas Cesso is a successful IT, Information Security, and Risk Management professional with 30+ years of achievements in Fortune 500 consulting, global financial services, and academia. He conducted research at Boston University in management of technology, managed IT consulting for Ernst & Young and Price Waterhouse Coopers, led the evacuation, continuity of operations, and recovery from the WTC on 9/11 as Global Head of Technology for Citigroup. He was the subject of a book, Adventures of an IT Leader, and of a Harvard Business School Case Study, “Jack Carlisle CIO,” by R Austin and R Nolan. Mr. Cesso is currently Chief Information Security Officer and visiting lecturer at Salem State University. He also serves as Chair of the Higher Education Information Security Officer’s Council, a member of InfraGard, an affiliate of the FBI to protect infrastructure, and a Certified Information Systems and Security Professional.
Sherry Horeanopouls
Sherry Horeanopoulos, CISA, CISSP, is the Chief Information Technology Officer at Fitchburg State University. She has worked in the Education arena for over 25 years, as a Technology Trainer, Help Desk Director, System Administrator, Project Manager, and Security Officer. Sherry is a founding member of the Massachusetts Higher Ed Security Council and its past-Chairperson. She also serves as a member of the NERCOMP Professional Development Committee (Security). Her role in managing a Campus Security Program includes Security Training and Management, Anti-Malware Administration and Threat Prevention, Data Security, Account Provisioning and Access Management and Audit Leadership.
Dave Marion
David Marion started working in IT 19 years ago and has spent the last 9 years working in information security. Prior to working in information security, David’s background was in infrastructure services as a network administrator. David also teaches in the Cybercriminology and Cybersecurity program at Bridgewater State University and holds a bachelor’s degree in Political Science, a master’s degree in Public Administration, and a master’s degree in Cybersecurity and Information Assurance.