The Information Security Compliance and Risk Management
Institute (ISC-RMI) is an annual interdisciplinary event
jointly sponsored by:
University of Washington's Center for Information
Assurance and Cybersecurity
Shidler Center for Law, Commerce and Technology
The mission of the Institute is to bring IT and
information security professionals, attorneys and auditors
together with concerned academics and public officials for
two days of discussion and advanced learning about the
arts, sciences and laws of electronic information and IT
use and protection.
Who Should Attend
Compliance and privacy officers
Information assurance auditors
Attorneys
IT professionals
Information security professionals
University faculty
Public officials
Managers of technology and network systems
Systems architects
Network security officers
Financial managers
System administrators
Web and software developers
Administrators for health records or student records
Please keep me informed about
ISC/RMI conference updates.
Email
Confirm your email address
The Changing Environment of Information
Security: Dealing with New Technologies, New Threats and
New Laws
The information security risk environment seems to be in
constant change, perhaps never more so than in 2009. New
technologies and application like cloud computing, social
networking, virtual worlds and ever-more-powerful
smartphones have great potential benefits, but do we really
know their risks and how to manage them? Cybercriminals are
more organized and sophisticated than ever - are
cyberwarriors coming next? And what new strategies and
legal actions will the new administration pursue that may
enhance, or hinder, our ability to deal with these threats
and vulnerabilities?
In order to address these issues, Co-Directors John R.
Christiansen and Barbara Endicott-Popovsky are pleased to
announce the 2009 Information Security Compliance and Risk
Management Institute. The Institute is an annual
interdisciplinary event for information technology and
security professionals, attorneys and auditors for advanced
learning and improvement of the arts, sciences and laws of
electronic information and information technology use and
protection.
The Institute will be held September 16 - 17 on the
University of Washington campus in Seattle. This year's
Institute will focus on the identification and management
of risks posed by key new technologies, emerging and
growing threats to our networks and data, and new laws,
legal strategies and theories which affect organizations'
information security governance and management.
Attendees will have the opportunity to hear from and
interact with leaders in information technology
implementation, information security, law and audit, and
work with them in breakout sessions to develop
recommendations for governance and management strategies
and public policy recommendations for dealing with the new
information security environment.
This program is appropriate for anyone responsible for
information technology or security, risk management and
legal compliance for any organization which depends on
information technology and electronic information.
Speakers
September 16 Keynote Presentation
Washington State Attorney General Rob McKenna
September 17 Keynote Presentation
Richard (Dickie) M. George, Technical Directore,
Information Assurance Directorate, National Security
Agency
September 17
Cloud Security Intensive
Half-day session co-sponsored by the Cloud Security
Alliance
Other featured speakers and presentations include:
Ana Marie Merico, J.D., University of Arizona School of
Law and David Spiro, Ph.D., The Strategy Practice, LLC:
Rethinking Identity in Systems and Laws
Daniel J. Ryan, J.D., National Defense University and
Julie Ryan, Ph.D., George Washington University:
Biological Systems and Models in Information
Security
Scott L. David, J.D., K&L Gates and Holly Towle,
J.D., K&L Gates Data Protection: >Toxic Waste: What
Common Dangers Do They Create and What are the Policy
Implications?
Laird Pisto, J.D., Multicare Health System and Paul
VanAmerongen, CISSP, MultiCare Health System: Legal and IT
Coordination in a Complex Health System
C. Matthew Curtin, CISSP, InterHack: Using Science to
Combat Data Loss: Analyzing Breaches by Type and
Industry
Ann Geyer, M.B.A., J.D.: Security Breach Management
Across Multiple Jurisdictions
Agenda
Wednesday, September 16, 2009
8:25 - 8:30 a.m.Welcome and Introductions
8:30 - 9:15 a.m.Security Lessons for the Future from IT
Architectures of the Past John R. Christiansen, Christiansen IT
Law
9:15 - 10:15 a.m.Data Protection and "Toxic Waste" – What
Common Dangers Do They Create and What are the Policy
Implications? Scott David, J.D., K&L Gates
Holly Towle, J.D., K&L Gates
10:15 - 10:30 a.m.Break
10:30 - 11:30 a.m.Legal and IT Coordination in a Complex Health
System Laird Pisto, J.D., Multicare Health
System
Paul VanAmerongen, CISSP, MultiCare Health
System
11:30 - 12:15 p.m.Seeking the True Cost of Data Breaches: Numbers.
Trends. Future. Thomas Ng; Aaron Weller; Michael
Davison; Wayne Glover, University of Washington Information
School MSIM Program
12:15 - 1:15 p.m.Lunch
1:15 - 2:00 p.m.Using Science to Combat Data Loss: Analyzing
Breaches by Type and Industry C. Matthew Curtin, CISSP,
Interhack
2:00 - 3:00 p.m.KEYNOTE PRESENTATION Rob McKenna, J.D., Washington State
Attorney General
3:00 - 3:15 p.m.Break
3:15 - 4:15 p.m.Rethinking Identity in Systems and Laws Ana Maria Merico, J.D., Rogers College
of Law, University of Arizona
David Spiro, Ph.D., The Strategy Practice
4:15 - 5:00 p.m.Security Breach Notification Across Multiple
Jurisdictions Ann Geyer, M.B.A, J.D., The Tunitas
Group
5:00 - 5:30 p.m.Moderated Audience Q&A on Security Breach
Issues Moderator: David Matthews, Deputy Chief
Information Security Officer, City of
Seattle
5:30 - 7:00 p.m.Reception
Thursday, September 17, 2009
8:25 - 8:30 a.m.Welcome and Introductions
8:30 - 9:30 a.m.Biological Systems and Models in Information
Security Daniel J. Ryan, M.B.A., J.D., Professor
of Systems Engineering, National Defense University
Julie Ryan, Ph.D., George Washington
University
9:30 - 10:30 a.m.Security Perspectives from "The Other
Washington" Jake Schaffner, Senior Advisor for
Science & Technology, U.S. Department of Defense
Information Operations & Strategic Studies
Brian R. Morrison, J.D., Special Assistant to the Deputy
Assistant Secretary, Cyber Security and Communications,
Department of Homeland Security
10:30 - 10:45 a.m.Break
10:45 - 11:45 a.m.KEYNOTE PRESENTATION Richard (Dickie) M. George, Technical
Director, Information Assurance Directorate, National
Security Agency
11:45 - 12:15 p.m.Moderated Audience Q&A on Federal Security
Perspectives
12:15 - 1:00 p.m.Lunch
1:00 - 1:45 p.m.Understanding the Cloud: Cloud Computing Business
Models Charles Mount, CEO, OneHub
Brian Daniel Eisenberg, Software AG
1:45 - 2:45 p.m.Managing Third Party Risk and Compliance in the
Extended Enterprise Michael Rasmussen, J.D., Corporate
Integrity, LLC
2:45 - 3:00 p.m.Break
3:00 - 4:30 p.m.Security, Risk and Compliance in Cloud
Computing Mark Esterberg, Microsoft
Ward Spangenberg, IOActive
Barbara Wald
4:30 - 5:30 p.m.CISO Roundtable on Cloud Computing
Leading information security officers respond to cloud
computing issues; CISO, presenters and audience in
moderated Q&A Moderator: Jim Reavis
Kirk Bailey, CISSP, CISA, University of Washington
Jeff Lowder, CISSP, Disney Interactive
Michael Hamilton, CISSP, City of Seattle
Eric Cowperthwaite, CISSP, Providence Health &
Services
Conference Location
UW Tower
4333 Brooklyn Ave. NE
Seattle, WA
Main entrance at the corner of Brooklyn Ave. NE and
NE 45th St.
Second entrance from parking garage via skybridge
over 12th Ave. NE.
Driving Directions
Traveling I-5 South - Take the 45th
Street exit from I-5 (exit # 169.). At the traffic light at
NE 45th Street turn left heading east (towards the main UW
Seattle campus.) The UW Tower is about 5 blocks up on the
right between 12th Ave. NE and Brooklyn Ave. NE.
Traveling I-5 North - Take the 45th
Street exit from I-5 (exit # 169.) Get into the far right
turn lane. At the traffic light turn right onto NE 45th
Street heading east (towards the main UW Seattle campus.)
The UW Tower is about 5 blocks up on the right between 12th
Ave. NE and Brooklyn Ave. NE.
Parking
A car is not necessary for conference participants who
will be staying in University area hotels. The recommended
hotels are walking distance from the UW Tower or a shuttle
is provided by the hotel. For participants who will be
arriving by car, parking is available on surrounding
streets (Brooklyn, 43rd, 12th) or in University of
Washington parking lots. UW Tower garage parking has
limited visitors parking and closes at 6:00 p.m. Bicycle
parking is available in front of the UW Tower, and major
METRO bus routes run near the building.
Summer temperatures in Seattle are generally mild. The
average daytime high temperature in September is 69°F
(21°C) and the average nighttime low temperature is
51°F (11°C). Current weather
forecast for Seattle.
Lodging
A limited number of rooms are reserved at a conference
rate. Conference guests should reserve early and make
reservations directly with the University Inn or Watertown
Hotel. Specify you are with the ISCRMI
Conference.
University
Inn
4141 Roosevelt Way NE
Seattle, WA 98105
(206) 632-5055
Toll free: 800-733-3855
Single: $139 per night plus tax (Deluxe Room); $129 per
night plus tax (Standard Room)
Watertown
Hotel
4242 Roosevelt Way NE
Seattle, WA 98105
(206) 826-4242
Toll free: 866-944-4242
Single: $159 per night plus tax Additional adults will be charged $10 per person per
night. The conference rates are available until August 17,
2009
Registration Information
Fees:
$695 + $35 non-refundable registration fee before
September 2, 2009
$825 + $35 after September 2, 2009
Cancellation policy
If you cannot attend the Institute, a refund of the
registration fee less the $35 non-refundable registration
fee will be granted if requested in writing by Wednesday,
September 2, 2009. No refunds will be granted for
cancellations received after that date. However, please
note that if you are unable to attend, you may send
another person in your place.
University of Washington reserves the right to cancel
the conference in the event of low enrollment or other
circumstances beyond its control. The total amount of
liability of UW Educational Outreach will be limited to a
refund of the registration fee. Attendees who purchase
non-refundable airline tickets do so at their own
risk.
The University of Washington provides equal
opportunity in education without regard to race, color,
creed, religion, national origin, sex, sexual
orientation, age, marital status, disability or status as
a disabled veteran or Vietnam era veteran in accordance
with University policy and applicable federal and state
statutes and regulations.
The University of Washington is committed to providing
access and reasonable accommodation in its services,
programs, activities, education and employment for
individuals with disabilities. To request disability
accommodation, contact the Disability Services Office at
least ten days in advance of the event: 206-543-6450
(voice); 206-543-6452 (TTY); 206-685-7264 (fax); dso@u.washington.edu.
ISC-RMI was approved for CLEs by the Washington
State Bar Association in both 2007 and 2008. Check back for
more information on CLEs for this year's
institute.