ISC/RMI banner

Information Security Compliance and Risk Management Institute:
Where Information Technology, Law and Risk Management Converge

September 16-17, 2009

University of Washington
UW Tower Auditorium
Seattle, Washington

About the Institute

The Information Security Compliance and Risk Management Institute (ISC-RMI) is an annual interdisciplinary event jointly sponsored by:

  • University of Washington's Center for Information Assurance and Cybersecurity
  • Shidler Center for Law, Commerce and Technology

The mission of the Institute is to bring IT and information security professionals, attorneys and auditors together with concerned academics and public officials for two days of discussion and advanced learning about the arts, sciences and laws of electronic information and IT use and protection.

Who Should Attend

  • Compliance and privacy officers
  • Information assurance auditors
  • Attorneys
  • IT professionals
  • Information security professionals
  • University faculty
  • Public officials
  • Managers of technology and network systems
  • Systems architects
  • Network security officers
  • Financial managers
  • System administrators
  • Web and software developers
  • Administrators for health records or student records
Please keep me informed about ISC/RMI conference updates.
Email
Confirm your email address

The Changing Environment of Information Security: Dealing with New Technologies, New Threats and New Laws

The information security risk environment seems to be in constant change, perhaps never more so than in 2009. New technologies and application like cloud computing, social networking, virtual worlds and ever-more-powerful smartphones have great potential benefits, but do we really know their risks and how to manage them? Cybercriminals are more organized and sophisticated than ever - are cyberwarriors coming next? And what new strategies and legal actions will the new administration pursue that may enhance, or hinder, our ability to deal with these threats and vulnerabilities?

In order to address these issues, Co-Directors John R. Christiansen and Barbara Endicott-Popovsky are pleased to announce the 2009 Information Security Compliance and Risk Management Institute. The Institute is an annual interdisciplinary event for information technology and security professionals, attorneys and auditors for advanced learning and improvement of the arts, sciences and laws of electronic information and information technology use and protection.

The Institute will be held September 16 - 17 on the University of Washington campus in Seattle. This year's Institute will focus on the identification and management of risks posed by key new technologies, emerging and growing threats to our networks and data, and new laws, legal strategies and theories which affect organizations' information security governance and management.

Attendees will have the opportunity to hear from and interact with leaders in information technology implementation, information security, law and audit, and work with them in breakout sessions to develop recommendations for governance and management strategies and public policy recommendations for dealing with the new information security environment.

This program is appropriate for anyone responsible for information technology or security, risk management and legal compliance for any organization which depends on information technology and electronic information.

Speakers

September 16 Keynote Presentation
Washington State Attorney General Rob McKenna

September 17 Keynote Presentation
Richard (Dickie) M. George, Technical Directore, Information Assurance Directorate, National Security Agency

September 17
Cloud Security Intensive
Half-day session co-sponsored by the Cloud Security Alliance

Other featured speakers and presentations include:

Ana Marie Merico, J.D., University of Arizona School of Law and David Spiro, Ph.D., The Strategy Practice, LLC: Rethinking Identity in Systems and Laws

Daniel J. Ryan, J.D., National Defense University and Julie Ryan, Ph.D., George Washington University: Biological Systems and Models in Information Security

Scott L. David, J.D., K&L Gates and Holly Towle, J.D., K&L Gates Data Protection: >Toxic Waste: What Common Dangers Do They Create and What are the Policy Implications?

Laird Pisto, J.D., Multicare Health System and Paul VanAmerongen, CISSP, MultiCare Health System: Legal and IT Coordination in a Complex Health System

C. Matthew Curtin, CISSP, InterHack: Using Science to Combat Data Loss: Analyzing Breaches by Type and Industry

Ann Geyer, M.B.A., J.D.: Security Breach Management Across Multiple Jurisdictions

Agenda

Wednesday, September 16, 2009

8:25 - 8:30 a.m.Welcome and Introductions

8:30 - 9:15 a.m.Security Lessons for the Future from IT Architectures of the Past
John R. Christiansen, Christiansen IT Law

9:15 - 10:15 a.m.Data Protection and "Toxic Waste" – What Common Dangers Do They Create and What are the Policy Implications?
Scott David, J.D., K&L Gates
Holly Towle, J.D., K&L Gates

10:15 - 10:30 a.m.Break

10:30 - 11:30 a.m.Legal and IT Coordination in a Complex Health System
Laird Pisto, J.D., Multicare Health System
Paul VanAmerongen, CISSP, MultiCare Health System

11:30 - 12:15 p.m.Seeking the True Cost of Data Breaches: Numbers. Trends. Future.
Thomas Ng; Aaron Weller; Michael Davison; Wayne Glover, University of Washington Information School MSIM Program

12:15 - 1:15 p.m.Lunch

1:15 - 2:00 p.m.Using Science to Combat Data Loss: Analyzing Breaches by Type and Industry
C. Matthew Curtin, CISSP, Interhack

2:00 - 3:00 p.m.KEYNOTE PRESENTATION
Rob McKenna, J.D., Washington State Attorney General

3:00 - 3:15 p.m.Break

3:15 - 4:15 p.m.Rethinking Identity in Systems and Laws
Ana Maria Merico, J.D., Rogers College of Law, University of Arizona
David Spiro, Ph.D., The Strategy Practice

4:15 - 5:00 p.m.Security Breach Notification Across Multiple Jurisdictions
Ann Geyer, M.B.A, J.D., The Tunitas Group

5:00 - 5:30 p.m.Moderated Audience Q&A on Security Breach Issues
Moderator: David Matthews, Deputy Chief Information Security Officer, City of Seattle

5:30 - 7:00 p.m.Reception

Thursday, September 17, 2009

8:25 - 8:30 a.m.Welcome and Introductions

8:30 - 9:30 a.m.Biological Systems and Models in Information Security
Daniel J. Ryan, M.B.A., J.D., Professor of Systems Engineering, National Defense University
Julie Ryan, Ph.D., George Washington University

9:30 - 10:30 a.m.Security Perspectives from "The Other Washington"
Jake Schaffner, Senior Advisor for Science & Technology, U.S. Department of Defense Information Operations & Strategic Studies
Brian R. Morrison, J.D., Special Assistant to the Deputy Assistant Secretary, Cyber Security and Communications, Department of Homeland Security

10:30 - 10:45 a.m.Break

10:45 - 11:45 a.m.KEYNOTE PRESENTATION
Richard (Dickie) M. George, Technical Director, Information Assurance Directorate, National Security Agency

11:45 - 12:15 p.m.Moderated Audience Q&A on Federal Security Perspectives

12:15 - 1:00 p.m.Lunch

1:00 - 1:45 p.m.Understanding the Cloud: Cloud Computing Business Models
Charles Mount, CEO, OneHub
Brian Daniel Eisenberg, Software AG

1:45 - 2:45 p.m.Managing Third Party Risk and Compliance in the Extended Enterprise
Michael Rasmussen, J.D., Corporate Integrity, LLC

2:45 - 3:00 p.m.Break

3:00 - 4:30 p.m.Security, Risk and Compliance in Cloud Computing
Mark Esterberg, Microsoft
Ward Spangenberg, IOActive
Barbara Wald

4:30 - 5:30 p.m.CISO Roundtable on Cloud Computing
Leading information security officers respond to cloud computing issues; CISO, presenters and audience in moderated Q&A
Moderator: Jim Reavis
Kirk Bailey, CISSP, CISA, University of Washington
Jeff Lowder, CISSP, Disney Interactive
Michael Hamilton, CISSP, City of Seattle
Eric Cowperthwaite, CISSP, Providence Health & Services

Conference Location

UW Tower
4333 Brooklyn Ave. NE
Seattle, WA

  • Main entrance at the corner of Brooklyn Ave. NE and NE 45th St.
  • Second entrance from parking garage via skybridge over 12th Ave. NE.
Map showing UW Tower location

Driving Directions

Traveling I-5 South - Take the 45th Street exit from I-5 (exit # 169.). At the traffic light at NE 45th Street turn left heading east (towards the main UW Seattle campus.) The UW Tower is about 5 blocks up on the right between 12th Ave. NE and Brooklyn Ave. NE.

Traveling I-5 North - Take the 45th Street exit from I-5 (exit # 169.) Get into the far right turn lane. At the traffic light turn right onto NE 45th Street heading east (towards the main UW Seattle campus.) The UW Tower is about 5 blocks up on the right between 12th Ave. NE and Brooklyn Ave. NE.

Parking

A car is not necessary for conference participants who will be staying in University area hotels. The recommended hotels are walking distance from the UW Tower or a shuttle is provided by the hotel. For participants who will be arriving by car, parking is available on surrounding streets (Brooklyn, 43rd, 12th) or in University of Washington parking lots. UW Tower garage parking has limited visitors parking and closes at 6:00 p.m. Bicycle parking is available in front of the UW Tower, and major METRO bus routes run near the building.

UW Visitors Information Link with travel information and campus maps: http://depts.washington.edu/mediarel/temp/vc.shtml

Seattle Weather

Summer temperatures in Seattle are generally mild. The average daytime high temperature in September is 69°F (21°C) and the average nighttime low temperature is 51°F (11°C). Current weather forecast for Seattle.

Lodging

A limited number of rooms are reserved at a conference rate. Conference guests should reserve early and make reservations directly with the University Inn or Watertown Hotel. Specify you are with the ISCRMI Conference.

University Inn
4141 Roosevelt Way NE
Seattle, WA 98105
(206) 632-5055
Toll free: 800-733-3855
Single: $139 per night plus tax (Deluxe Room); $129 per night plus tax (Standard Room)

Watertown Hotel
4242 Roosevelt Way NE
Seattle, WA 98105
(206) 826-4242
Toll free: 866-944-4242
Single: $159 per night plus tax
Additional adults will be charged $10 per person per night. The conference rates are available until August 17, 2009

Registration Information

Fees:

$695 + $35 non-refundable registration fee before September 2, 2009
$825 + $35 after September 2, 2009

Please complete the information below

First Name
Middle Initial
Last Name
Position
Organization
Street Address
City
State or Province
Country
Zip or Postal Code
Telephone
Fax
E-mail Address*

*for registration confirmation and updates.

Institute Fees

The institute fee includes conference materials, participation in conference sessions and refreshment breaks.

On or before September 2, 2009 After September 2, 2009
Institute Fees $695 + $35 non-refundable registration fee $825 + $35 non-refundable registration fee

Cancellation policy

If you cannot attend the Institute, a refund of the registration fee less the $35 non-refundable registration fee will be granted if requested in writing by Wednesday, September 2, 2009. No refunds will be granted for cancellations received after that date. However, please note that if you are unable to attend, you may send another person in your place.

University of Washington reserves the right to cancel the conference in the event of low enrollment or other circumstances beyond its control. The total amount of liability of UW Educational Outreach will be limited to a refund of the registration fee. Attendees who purchase non-refundable airline tickets do so at their own risk.

The University of Washington provides equal opportunity in education without regard to race, color, creed, religion, national origin, sex, sexual orientation, age, marital status, disability or status as a disabled veteran or Vietnam era veteran in accordance with University policy and applicable federal and state statutes and regulations.

The University of Washington is committed to providing access and reasonable accommodation in its services, programs, activities, education and employment for individuals with disabilities. To request disability accommodation, contact the Disability Services Office at least ten days in advance of the event: 206-543-6450 (voice); 206-543-6452 (TTY); 206-685-7264 (fax); dso@u.washington.edu.

ISC-RMI was approved for CLEs by the Washington State Bar Association in both 2007 and 2008. Check back for more information on CLEs for this year's institute.