Events

SecureState has announced that Info Security Products Guide, the industry's leading information security research and advisory guide, has named SecureState a double global excellence award finalist for the 2012 Global Excellence Awards in the Best Overall Security Company of the Year and Top Blog categories. These prestigious global awards recognize security and IT vendors with advanced, ground-breaking products and solutions that are helping set the bar higher for others in all areas of technologies. What started in 2001 as a 3-person consulting firm, has now, 10 years later, grown into an internationally respected information security company with clients in both government and commercial sectors.

Learn how to use your security mindset to play with the big boys to drive your program and your career!

In a recent study of 441 Corporate CEOs, CFOs and Financial Executives, 60% plan increased investment in Enterprise Risk Management (ERM) over the next three years. In light of this, many CISO’s are intensifying the manner in which they organize the planning and delivery of security and compliance around risk.    

Risk is always a challenging discussion for anyone, execs included, since the formulas vary and many of the most critical variables are unknown.  Worse yet, others are unknowable!  How are analytical techniques regarding unevaluated information of great complexity and corporate sensitivity going to be utilized going forward?  By finally filling in the underpinnings of the simple risk equation [Risk = Threat X Vulnerabilities – Controls], we’ll explain how this could have a profound effect on how you manage your security program. 

In addition, Experts predict that there will be 1 Trillion devices connected to the internet by 2013.  But these devices are very different than what we saw 2 years ago.  Today, these devices are consumer grade tablets, Smartphone’s, embedded chips, games etc… and as time progresses, the vast majority of these are communicating over wireless technologies.  Users of these devices are increasingly bringing them to work and mixing business use and application with personal/Social media usage.

SecureState and Cisco will show you how to get top-down support and use bottom-up advances to understand where organizations are going, how risk management is changing, and how to improve security’s (and possibly your) stature. These topics and more will be addressed in this interactive seminar!

Location:   Cisco System Offices

323 North Shore Drive, Suite 300

Pittsburgh, PA 15212

When:  Tuesday, November 22, 2011

1:30PM – 4:30 / REGISTRATION 1:00PM

Registration required:

Click here or call 216.927.8200

Please join us for the Cleveland OWASP meeting on Thursday, November 3rd from noon to 2 p.m. at the SecureState Headquarters (23340 Miles Road, Cleveland, OH 44128)

As always, OWASP is free and open to the public but you must RSVP and seats are filling up fast! 

Lunch will be provided.  Please RSVP to Sabrina Powers via email spowers@securestate.com

John Jacott will be presenting, “The Mobile App Top 10 Risks”

Abstract:

Rapid adoption of mobile devices and mobile apps has created a significant and unbounded security risk for the enterprise. The mobile app threat is quickly progressing from simple “premium SMS and call” attacks that directly monetize by running up the victims bill, to full- blown mobile botnet functionality. Enterprises must recognize the need to enable a mobile workforce with meaningful applications that allow them to be productive while maintaining the security of sensitive data on the device and internal networks.

Modern mobile applications run on mobile devices that have the functionality of a desktop or laptop running a general purpose operating system. In this respect many of the risks are similar to those of traditional spyware, Trojan software, and insecurely designed apps. However, mobile devices are not just small computers. Mobile devices are designed around personal and communication functionality which makes the top mobile applications risks different from the top traditional computing risks.

Mr. Jacott will discuss the mobile app top 10 list and provide some insight into mobile research conducted.

Speaker Bio: Mr. Jacott has over 15 years of experience and leads Veracode’s Solutions Enablement group for partners and strategic accounts. His extensive auditing experience, lately as PCI QSA and IRCA Lead Auditor for Information Security Management Systems provides a complete and pragmatic perspective on application security and information security controls. He has worked as an Information Security Consultant and Information Security Program Manager for several large Fortune 100 firms.

The Black Hat Briefings remains the biggest and the most important technical security conference series in the world by remaining true to our core value: serving the information security community by delivering timely, actionable security information in a friendly, vendor-neutral environment.

The knowledge presented at Black Hat USA 2011 will offer you a look into what concerns the security research community today and in the future. This year’s Las Vegas event will host over 50 training courses from top experts in the field, feature seven Briefings tracks of the latest security research and two workshop tracks dedicated to practical application and demonstration of tools, techniques and open source applications to aid in securing your infrastructure.

Be sure to catch SecureState's Tom Eston presenting "Don't Drop the SOAP: Real World Web Service Testing for Web Hackers."

Meet some of Geauga Humane Society's Rescue Village adoptable animals and contribute to a great cause while getting your car cleaned.

SecureState will be donating 100% of the proceeds to Rescue Village.

Located at 23340 Miles Rd, Bedford Hts, 44122

Rain date:  July 29th

SecureState's Jake Garlie presents "Data Mining, It's your Data" walking us through the data mining maze and explains how to get out. Jake performs many assessments including Penetration Tests, Web Application Security Assessments, and Wireless Assessments. In his tenure with SecureState, Jake has worked with organizations across a variety of industries, providing him with the expertise and knowledge of the different ways each industry secures their data.

Join us as SecureState's Tom Eston presents "Attacking and Defending Apple iOS Devices in the Enterprise"

IT loves to use Apple iPhones and iPads, but hates supporting them. For most environments, they represent the exception, and are not subject to standard corporate controls. The reason the exception is allowed is usually the fact that the CEO bought an iPhone and iPad the day they were released, and then quickly filled them with sensitive corporate data. With their portability and popularity, it is only a matter of time before one of these devices ends up missing. How worried should you be?  This presentation will cover the latest real-world attack techniques for compromising Apple’s iOS devices, introduce a new assessment methodology that can be used by penetration testers, and discuss the latest defensive techniques for securely deploying iOS devices within your enterprise.

“Making the move from Security to Risk Management” Plus Analyzing the threat problem and Cisco’s revolutionary new threat-based strategy for Security Risk

 Learn how to use your security mindset to play with the big boys to drive your program and your career!

 In a recent study of 441 Corporate CEOs, CFOs and Financial Executives, 60% plan increased investment in Enterprise Risk Management (ERM) over the next three years. In light of this, many CISO’s are intensifying the manner in which they organize the planning and delivery of security and compliance around risk.    

Risk is always a challenging discussion for anyone, execs included, since the formulas vary and many of the most critical variables are unknown.  Worse yet, others are unknowable!  How are analytical techniques regarding unevaluated information of great complexity and corporate sensitivity going to be utilized going forward?  By finally filling in the underpinnings of the simple risk equation [Risk = Threat X Vulnerabilities – Controls], we’ll explain how this could have a profound effect on how you manage your security program. 

As we strive and struggle to address the technological advances and the risks inherent in them, the solutions are not always simple, linear problems.  They are multi-dimensional and inter-related, and require a new approach to tried-and-true methods of the past.

SecureState and Cisco will show you how to get top-down support and use bottom-up advances to understand where organizations are going, how risk management is changing, and how to improve security’s (and possibly your) stature. These topics and more will be addressed in this interactive seminar!

 Registration required:  Click here or call 216.927.8200

As you move from the security guy to CISO, can you elevate your program with Risk Management?

You’ve taken the beneficial (and required) steps to build your security program. While there is a lot more to do, a new dynamic is emerging in companies– Enterprise Risk Management. Learn what you can do to get ahead of this curve and answer the most vexing question from Executive Management – How do you know Risk if you don’t even know what threat is? 

 SecureState and Cisco will address such topics as:

 •       Why do so many executives see Security as inadequate?

•       Can you realistically evaluate the strength and readiness of your security infrastructure?

•       How can you get ahead of the game on risk with threats, vulnerabilities, and controls?

•       A practical, useful security risk equation that you can use without killing its success.

•       Why does addressing threat in the risk equation help with one of the most vexing issues plaguing security risk management today?

•       Where is Cisco going with their strategic direction? 

•       How are they “jumping the curve” on threat management?

•       How can you use your security risk way of thinking to not only get a seat at the table, but lead the table?