ISACA San Francisco 2007 Fall Conference Schedule

2007 SF ISACA FALL CONFERENCE SCHEDULE

Click on the speaker name to download the bio and topic summary

Click on the session title to download the presentation

Get all session speaker bios and topic summaries here

Get all session presentations here

MONDAY, SEPTEMBER 17, 2007
	Core Competencies	Information Security	IT Governance	In-Depth Technical
7:15-8:45am	Registration and Breakfast
8:45-10:00am	Keynote Speaker: Rena Mears , Partner, Security Services, Deloitte
10:00-10:15am	Networking Break
10:15-11:45am	C11 Intro to IT Auditing for Non-IT Auditors Steve Shofner	S11 Web Application Security: Finding Vulnerabilities In Dynamic Applications Mike Shema	G11 Integrated Governance, Risk and Compliance Brett Curran	T1 Windows Vista Security Don Hester
11:45-1:15pm	Luncheon Speaker - Daniel Morrison of PWC on Vendor Security Risk Management
1:15-2:45pm	C12 COBIT Fundamentals and Uses Mike Villegas	S12 Information Leak Prevention: How to Tame the Insider Threat (WHITE PAPER) Aaron Weller	G12 Leveraging CobiT to Audit IT Governance Kendall Tieck	T1 Windows Vista Security (Continued)
2:45-3:00pm	Networking Break
3:00-4:30pm	C13 Beyond SOX: Adopting ITIL Chad Kalmes Paulina Fraser	S13 Continuous Monitoring (HP & Google's Perspective) Brad Ames Erik Jonte Jessica Amezquita	G13 Security Effectiveness Metrics: Creating a Compelling Business Case Yong-Gon Chon	T1 Windows Vista Security (Continued)
TUESDAY, SEPTEMBER 18, 2007
8:30-10:00am	C21 Intro to User Access Controls Tony Goulding	S21 How to Protect from Malicious Code:Using Honeynet and Darknet Technology as Part of a Compliance Program Michael Smith	G21 Leveraging IT Audit Resources: IT Risk Assessment Through High-Impact Audits Jerry Meyers	T2 Infrastructure Vulnerabilities Derek Koopowitz
10:00-10:15am	Networking Break
10:15-11:45am	C22 Intro to Change Management Controls Ray Cheung Biniam Debrezion	S22 Security Effectiveness: A System Settings Perspective Rodney Kocot	G22 Enterprise Risk Management Gary Ross	T2 Infrastructure Vulnerabilities (Continued)
11:45-2:15pm	Exhibitors Fair and Luncheon
2:15-3:45pm	C23 Into to Operations Controls Sandee Lim Kalpa Chobe	S23 Wireless Systems Vulnerabilities, Threats and Auditing Jeffrey Camiel Rob Tillman	G23 Beyond SOX: High Value Audit Stephan Spaulding	T2 Infrastructure Vulnerabilities (Continued)
3:45-4:00pm	Networking Break
4:00-5:30pm	C24 Intro to Application Controls Oliver Petri Matt Hatch	S24 Enpoint Security Mark Kadrich	G24 PMO Auditing Jackson Willett	T2 Infrastructure Vulnerabilities (Continued)
WEDNESDAY, SEPTEMBER 19, 2007
8:30-10:00am	C31 Intro to database Auditing Scott Hayes	S31 Locating Sensitive Data in Structured Data Sets Ravi Jagannathan	G31 Control Rationalization / Optimization David Willoughby	T3 Hacking 101: Understanding the Top Web Application Vulnerabilities and How to Protect Against the Next level of Attack Armando Bioc
10:00-10:15am	Networking Break
10:15-11:45am	C32 Compliance in Multiple Regulatory Settings Vanessa Balogh	S32 Data Privacy – Protection From Trusted Users Doug Sanders Scott Smith	G32 Operationalizing Security and Compliance: Generating Maximum Compliance ROI Mark Seward	T3 Hacking 101: Understanding the Top Web Application Vulnerabilities and How to Protect Against the Next level of Attack (Continued)
11:45-1:30pm	Luncheon Speaker - Todd Weinman of Lander, International on Strategies for Sustained Career Growth, Marketability, and Success
1:30-3:00pm	C33 Intro to Computer Assisted Auditing Tools (CAATs) Rudy Chavez Carl Bledsoe	S33 Leveraging FISMA Guidance to Support an Effective Risk Management Strategy to Secure IT Systems and Meet Regulatory Requirements Thomas Chimento Bill Robinson	G33 End User Computing Terry Nystrom Dannette Roberts	T3 Hacking 101: Understanding the Top Web Application Vulnerabilities and How to Protect Against the Next level of Attack (Continued)