12:30PM - 6:00PM

Room: 4th Floor

Abstract

Attendees may check-in, receiving their badge and welcome packet.

12:30PM - 5:30PM

Room: 4th Floor

1:15PM - 1:30PM

Room: Johnny Blood/Willie Davis Room

Presented By

Mark Sollazo - President, CEO & Co-founder

1:30PM - 2:25PM

Room: Johnny Blood/Willie Davis Room

Abstract

After 20 years of InfoSec & App Sec, it's clear that something is not working. We've been spending so much time & money we are still hit by a continuous stream of news and information about data losses and breaches positions the InfoSec industry in a unique situation. It also puts all of us security practitioners under the spotlight with everything to gain and lose. There was never a better time to take a deeper look into how we got here as an industry, what's working and what's not, and why it feels that we are failing. Obviously, we need to do something different, but what? How do we change the trajectory? Join us for a thought-provoking, disruptive view of our industry and what it means to your future as a risk and security professional.

Presented By

Tsion (TJ) Gonen - Application Security Industry Visionary

More Details

2:30PM - 2:55PM

Room: Johnny Blood/Willie Davis Room

Abstract

To be effective at defining and deploying a strategy you must understand the rules (customers, frameworks, ISMS). This session will explore the elements necessary to define, assess, improve, & mature your information security program. Start with the basic blocking and tackling and the rest will become evident.

Presented By

Bill Curtis - Sr. Information Assurance Consultant

2:30PM - 3:20PM

Room: Paul Hornung Room

Abstract

ForeScout will be used to demonstrate how to mitigate the evolution of the endpoint threats using key CIS Top 20 basic and foundational controls to identify and control risk related to all types of endpoints: corporate-owned devices, BYOD, COPE, and even IoT devices that pose particularly challenging problems as these devices do not support most conventional endpoint agents and tools, making them unusually difficult to detect and quarantine or remediate on connection to the network. We will review five discovery, control, and orchestration use cases: Asset Management, Device Compliance, Incident Response, Network Access Control, and Network Segmentation.

Presented By

Christopher Kudulis - Systems Engineer

More Details

2:30PM - 4:25PM

Room: Bart Starr Room

Abstract

(Space Limited - select participants allowed)
A customer-only discussion about industry needs, concerns, and how best to address them.
For company executives

Presented By

3:00PM - 3:25PM

Room: Johnny Blood/Willie Davis Room

Abstract

This session is to discuss determining the correct control, doing a gap assessment vs what you already have, implementation roadmaps and monitor for controls effectiveness.

Presented By

Lisa Niles - Director of Solution Integrations & CISSP

3:30PM - 3:55PM

Room: Johnny Blood/Willie Davis Room

Abstract

This session will explore what needs to be validated to assess, measure, and improve the effectiveness and efficiency of your Information Security program.

Presented By

Brian Judd, Bill Curtis - VP Information Assurance, Sr. Information Assurance Consultant

3:30PM - 4:20PM

Room: Paul Hornung Room

Abstract

Palo Alto Networks will be used to demonstrate how to seamlessly extend your security infrastructure into a platform to securely adopt new Service Delivery Models (Cloud, SaaS, Mobility) while remaining compliant and secure. Key uses cases we will focus on include:

• Public Cloud (AWS, Azure) and SaaS Application Security
• Advanced Endpoint Security
• Virtualized Data Center

For those interested in a hands-on experience implementing the controls for these new service delivery models you will be able to sign-up to attend a Palo Alto Network's Test Drive session.

Presented By

Mark Weber - Systems Engineering Manager

4:30PM - 5:15PM

Room: Johnny Blood/Willie Davis Room

Abstract

In this keynote, Wayne Larrivee – the voice of the Green Bay Packers - will draw some insightful analogies of the challenges IT professionals have to deal with in a developing a winning Information Security program each year for a game that is played 24-hours per day/365-days a year to those of preparing a winning NFL team to compete each year.

Presented By

Wayne Larrivee - Sportscaster

More Details

5:30PM - 6:15PM

Room: 4th Floor: North Balcony

Abstract

The Green Bay Packers are one of the most successful teams in the NFL, with 13 world championships and four Super Bowl wins. Authors Wayne Larrivee and Rob Reischel through interviews with current and past players, provide fans with a one-of-a-kind, insider's look into the great moments, the lowlights, and everything in between. Readers will hear from players, coaches, and personnel as they discuss their moments of greatness as well as their defeats, making for a keepsake no fan will want to miss.

Presented By

Packers Radio Network

5:30PM - 7:30PM

Room: 4th Floor: North Balcony

Abstract

Enjoy complimentary food, beverages, and cocktails and enjoy an evening at historic Lambeau Field.

7:00PM

Room: American Family Insurance Gate

Abstract

Shuttles will depart at 7:00pm, 7:30pm, and 8:00pm for The Radisson Hotel in Green Bay

7:30PM

Room: American Family Insurance Gate

Abstract

Shuttles will depart at 7:00pm, 7:30pm, and 8:00pm for The Radisson Hotel in Green Bay

7:30PM

Room: American Family Insurance Gate

Abstract

Shuttles will depart at 7:30pm for the Milwaukee Area.

8:00PM

Room: American Family Insurance Gate

Abstract

Shuttles will depart at 7:00pm, 7:30pm, and 8:00pm for The Radisson Hotel in Green Bay

7:30AM - 2:30PM

Room: 4th Floor

Abstract

Attendees may check-in, receiving their badge and welcome packet.

7:30AM - 3:25PM

Room: 4th Floor

Abstract

Visit with industry vendors to learn about the best of breed solutions available to your business.

8:30AM - 8:45AM

Room: Johnny Blood/Willie Davis Room

Presented By

Mark Sollazo - President, CEO & Co-founder

8:45AM - 9:30AM

Room: Johnny Blood/Willie Davis Room

Abstract

Organizations of all sizes are struggling on how to best move or build security controls into their public cloud deployments. These IaaS platforms and native services provide an entirely new sandbox to play in, but often create friction when risk professionals try to employ techniques or tools built for on-premises environments. Join us today where Tim will share insight from his time at AWS, and from the thousands of customers Barracuda has worked with, across all cloud providers, on a few critical sources of friction and how to move past them.

Presented By

Tim Jefferson - VP Public Cloud

More Details

9:30AM - 10:15AM

Room: Johnny Blood/Willie Davis Room

Abstract

SynerComm consultants will answer these questions using vetted methods, frameworks and metrics from actual customer success stories of them efficiently and effectively planning, executing, and measuring progress in their Information Security Programs.

• Is my ISP effective?
• Do I have the right controls?
• Am I secure?
• How do I measure progress?

Presented By

Bill Curtis, Lisa Niles, Brian Judd, Marc Spindt - Sr. Information Assurance Consultant, Director of Solution Integrations & CISSP, VP Information Assurance, VP Services

More Details

10:15AM - 10:30AM

10:30AM - 11:10AM

Room: Johnny Blood/Willie Davis Room

Abstract

There is a significant difference, in the realm of security, when it comes to protecting IT (Information Technology) and OT (Operational Technology) assets.

This presentation will explain how ForeScout addresses both of these technology areas, with a single product, and uniform policies across the environment.

Presented By

Christopher Kudulis - Systems Engineer

More Details

10:30AM - 11:10AM

Room: Paul Hornung Room

Abstract

This session will provide specific and concrete action items that can help measurably reduce cybersecurity risk. We will discuss threats impacting organizations today highlighting statistics about cybersecurity weaknesses by industry. The highlight of this session will be revealing five key methods to effectively reduce cybersecurity risk that can be applied to organizations in any vertical and of any size.

Presented By

Dolly J. Krishnaswamy - Lead Compliance Analyst

More Details

10:30AM - 11:10AM

Room: Bart Starr Room

Abstract

The malware threatscape is constantly evolving, with new attacks being developed every day. Security software has likewise evolved to address this reality. Solutions that target emerging threats tend to be narrowly focused and require the addition of more traditional antivirus software from another vendor in order to provide complete protection. Stacking security agents from different vendors increases resource requirements on endpoints and adds complexity to security management.

Join this presentation to discuss how you we will address the causes and issues of agent fatigue and discuss how these issues can be addressed.

Presented By

Steve McIntyre - Sales Engineer

More Details

11:15AM - 11:55AM

Room: Johnny Blood/Willie Davis Room

Abstract

The Dark Web combined with Bitcoin is the perfect storm of capitalism where hackers are attempting to penetrate your organization in hopes of monetizing their efforts. One of the most difficult challenges for cybersecurity teams is to have visibility into what types of information has been exfiltrated from their specific organization and what to do should they find themselves targeted.

In this session, we'll cover the external threat intelligence landscape and more specifically the type of tools that are available to gain visibility into the dark web, how to dynamically update your existing defenses with the latest information from trusted sources, and how to take full advantage of this critical pillar in your cybersecurity program.

Presented By

Troy Dixler - Territory Manager

More Details

11:15AM - 11:55AM

Room: Paul Hornung Room

Abstract

Most people are satisfied if they can just keep up in this ever more complex world of technology but Scott Sneddon encourages you to be more ambitious and get ahead. In this session, he will outline a simple path to a secure and automated multicloud environment that enables you to take control and get ahead. The key is eradicating complexity and Scott will lead you through how you can solve the hard problems leaving you and your team to focus on business outcomes.

Presented By

Scott Sneddon - Senior Director, Cloud and SDN at Juniper Networks

More Details

11:15AM - 11:55AM

Room: Bart Starr Room

Abstract

The past year has proved that companies using cloud-based infrastructure are just as vulnerable, even more so, than companies with traditional on-premise security solutions and architectures. While we've seen many headline making breaches like Tesla and Uber, these haven't led to a clear and defined strategy for protecting cloud-based applications and assets. The only consistent trend is that everyone is doing things differently when it comes to cloud security. This session will focus on some of the most recent trends, common oversights and missed opportunities for customers that are navigating their own unique efforts to transition to the cloud.

Presented By

Katie O'Shea - Cloud Security Specialist

More Details

12:00PM - 1:30PM

Room: 4th Floor: North Balcony

1:30PM - 2:10PM

Room: Johnny Blood/Willie Davis Room

Abstract

Every IT security department's job, to protect data, has become more challenging as the security perimeter has dissolved with the adoption of cloud applications. The traditional threat-centric approach is to apply rigid policies to a dynamic environment and decide what is good or bad without context. This black and white approach results in frustrated users and overwhelmed admins. The reality is, everybody operates in the grey. Join us as we discuss a new human-centric approach to security, which considers the context of user behavior and adapts appropriately to help security teams make better decisions. We will explore how an effective data security system should cut through the noise of alerts and provide early warning signals to prevent the loss of important data.

Presented By

Bharath Vasudevan

More Details

1:30PM - 2:10PM

Room: Paul Hornung Room

Abstract

Nextgen firewalls, IPS, and DLP do not work unless the traffic is decrypted. SSL & TLS based attacks are on the rise however the exercise of decrypting that traffic is laborious especially as key sizes increase. A lot of companies are decrypting SSL traffic coming into their network with ADCs, but not many of them are looking at the SSL traffic going out. How can you leverage a platform to help fill in the gaps in your DDOS strategy.

Presented By

Mike Repp - Sr. Systems Engineer

More Details

1:30PM - 2:10PM

Room: Bart Starr Room

Abstract

Can Enterprise Level Security integration be realized cost-effectively by business of all sizes-scale? How can disparate point solutions and investments be aligned in real time to better effect?

In this presentation, Pulse Secure's America's Director of Cybersecurity Solutions' Strategy Jim Hebler provides an overview of Pulse's alignment within Fortinet's FortiFabric integration.

Whether provided onsite for internal implementation and integration - or aligned within a hybrid-driven Managed Security Service - the Pulse Secure-Fortifabric approach - driven by the certified professionals at partners like Synercomm - is the next-steps, best-in-science approach required to manage the mobility and device onslaught enabled by the Digital Revolution.

Presented By

Jim Hebler - Partner Velocity Director

More Details

2:15PM - 2:40PM

Room: Johnny Blood/Willie Davis Room

Abstract

To be effective at defining and deploying a strategy you must understand the rules (customers, frameworks, ISMS). This session will explore the elements necessary to define, assess, improve, & mature your information security program. Start with the basic blocking and tackling and the rest will become evident.

Presented By

Bill Curtis - Sr. Information Assurance Consultant

More Details

2:15PM - 2:40PM

Room: Paul Hornung Room

Abstract

Static code review, dynamic code review, API security. Do not wait until your applications are deployed to start testing security. In this session will be present topics and concepts to make security an integral part your organization's software development culture and operation. Join us to learn how DevSecOps can be applied to drive security maturity in your software development life cycle.

Presented By

Bill Kiley - Lead Programmer Analyst

More Details

2:15PM - 2:40PM

Room: Bart Starr Room

Abstract

In this session on we will define adversary simulation, its benefits, and why you should be doing them. Using SynerComm Playbooks, you can gain a better understanding of security risks against known adversary behavior, for planning security improvements, and verifying defenses work as expected.

Presented By

Brian Judd - VP Information Assurance

More Details

2:45PM - 3:10PM

Room: Johnny Blood/Willie Davis Room

Abstract

This session is to discuss determining the correct control, doing a gap assessment vs what you already have, implementation roadmaps and monitor for controls effectiveness.

Presented By

Lisa Niles - Director of Solution Integrations & CISSP

More Details

2:45PM - 3:10PM

Room: Paul Hornung Room

Abstract

Amazon Web Services continues to grow in popularity and many organizations are benefitting from securely operating cloud services. While every organization hopes they will benefit from utilizing the "Cloud," hope is not a strategy. Let's discuss together a checklist for success to make sure yours is one of those organizations who do benefit from the cloud!

Presented By

Aaron Howell - Systems Engineer

More Details

2:45PM - 3:10PM

Room: Bart Starr Room

Abstract

Is your InfoSec Program making you more secure? Are you investing in the right areas? What are the right areas? It is difficult to manage what you do not understand and even more difficult to secure what you are not managing. This talk will explore SynerComm's methodology for completing a risk assessment. From defining scope to validating controls and assessing risk, SynerComm will walk your organization through the assessment of risk.

Presented By

Bill Curtis - Sr. Information Assurance Consultant

More Details

3:10PM - 3:25PM

3:25PM - 3:50PM

Room: Johnny Blood/Willie Davis Room

Abstract

This session will explore what needs to be validated to assess, measure, and improve the effectiveness and efficiency of your Information Security program.

Presented By

Brian Judd - VP Information Assurance

More Details

3:25PM - 3:50PM

Room: Paul Hornung Room

Abstract

Security Incident and Event Management (SIEM) is a powerful tool in any organization but it is generally a reactive solution. Rounding out SIEM with Security Orchestration, Automation and Response (SOAR) adds a proactive and more holistic element to your security. Learn more about SOAR and how your organization can benefit from some of its tenets.

Presented By

Nate Ressel - Solution Architect

More Details

3:25PM - 3:50PM

Room: Bart Starr Room

Abstract

Data breaches in 2017 were worse than those in 2016, and the 2016 breaches were worse than 2015, and so on. Are information security programs learning the lessons from organizations in the news? Probably not, as many of the reported breaches are due to failures of basic information technology processes. Simply put, organizations are failing at fundamental security tasks which if implemented would lead to fewer breaches and greater security for their data. We will explore the basics, why they matter, and when failure to implement the basics led to breaches you may have heard of (and some you may not have). To be effective at defining and deploying a strategy you must understand the rules (customers, frameworks, ISMS). This session will explore the elements necessary to define, assess, improve, & mature your information security program. Start with the basic blocking and tackling and the rest will become evident.

Presented By

Bill Curtis - Sr. Information Assurance Consultant

More Details

3:55PM - 5:00PM

Room: Johnny Blood/Willie Davis Room

Abstract

Emphasizing the practical, we will take this time to recap some of the key concepts from earlier sessions and run through a case study of how one organization is making 'rubber meet road' in a highly regulated compliance environment.

Presented By

5:00PM - 5:30PM

Room: American Family Insurance Gate

Abstract

Shuttles will depart at approximately 5:30pm for the Milwaukee Area.