Information Systems Security Association

Our next ISSA meeting is December 10th at 8:00 a.m. sharp. Please feel free to join us earlier at 7:30 a.m. for light breakfast fare and to network with other security professionals. The meeting will be held at LandAmerica Financial Group 5600 Cox Road, Glen Allen; you must pre-register for security entrance. The meeting will be held in the East Building, Atlantic A Conference Room. Please RSVP to Corey Perkins.

Mr. Miles Romello, Wachovia NB will be our speaker and will be presenting the topic:

"Microsoft Vista® - 1 Year Later...Ready for Primetime Corporate Implementation?"

Mr. Romello will provide a synopsis of how Microsoft Vista® looks from the corporate perspective 1 year after his initial presentation on its security. After its introduction in 2007, how has Microsoft Vista® fared? Does it enhance network security? Does it integrate more seamlessly into corporate networks? Does it improve access controls? Does it prevent common malware attacks? Does it improve intrusion detection?

Speaker Biography:

Miles Romello (CISSP, MCSE, MCDBA) is a trusted security professional with over 14 years of Systems Engineering and Security experience focusing on the Microsoft® platform. In his experience he has been a successful architect, securing infrastructures from small businesses to fortune 50 companies. These companies cover the government, services, energy, retail and financial industries. Currently he works as a Corporate Information Security Manager at a leading financial institution overseeing the team responsible for all Microsoft® systems.

To attend the meeting at LandAmerica Financial Group on Cox Road you must be on the Security Guard Station List - Please RSVP to Corey Perkins .

Past Meeting Presentations:

2008

January 9 - The Latest on the Security Threat Landscape by Brian Fielder
February 13 - Privileged Password Management Best Practice by Barak Feldman
March 12 - VoIP Security Threats, Vulnerabilities, Countermeasures, and Best Practices by Peter Thermos
April 9 - Mad Dash To Push Everything Online – Including SCADA by Jerry Martin
May 14 - Network Access Control (NAC) -- Lessons learned by Eric Weakland
June 11 - Making a Business Case for Security to Internal Stakeholders by PK Kinser, Rick Witherow, and Bob Brown
July 9 - Assessing a Web Application Security Development Program by Bob Austin
August 13 - DNS Vulnerability (What did Kaminsky find?) and Secure DNS by Alan Clegg
September 10th - Large Scale Search Strategy & Architecture to Support Regulatory Compliance & Incident Response by Andy Bair
October 8 - Pen Testing as an Auditing Tool - With an Update on Legislation by Bryan Miller
November 12 - Cyber Threat Landscape by Ryan Olson

2007

January 10 - Botnets by Tyler Hudak
February 7 - Critical Components of an Effective Information Risk Function by Bryan Palma
March 14 - Department of Homeland Security Security Overview by Jerry Dixon
April 11 - Wireless Security by Tad Steinberg
May 9 - Information Assurance and Data Security by Jack Callahan
June 13 - PCI Compliance by Bob Brown
July 11 - Practical Incident Response by Steve Fahrenkrog
August 8 - VISTA Security by Miles Romello
September 12 - Security Metrics by Bob Austin
October 10 - Encryption & Key Management -- Falling through the Cracks by Terence Spies
November 14 - Enterprise Security Architecture by Prentice Kinser
December 12 - The State of Incident Response by Rich Cummings



		Meetings