The Security Catalyst<title>» potomac forum http://www.securitycatalyst.com Michael Santarcangelo delivers Awareness that Works™ Wed, 01 Sep 2010 14:21:48 +0000 en hourly 1 http://wordpress.org/?v=3.0.1 Michael J. Santarcangelo, II is a human catalyst. An expert who speaks on information protection – including compliance, privacy and awareness – Michael energizes and inspires his audiences to change the way they protect information. His passion and approach gets results that change behaviors. As the voice of optimism in an industry of doomsayers, Michael has recently completed his first book, Into the Breach (www.intothebreach.com), which provides the wisdom and answers executives need to defend their organization against breaches while discovering how to increase revenue, protect the bottom line and efficiently manage people, information and risk. In this podcast series, Michael shares ideas, research and strategies for your success. Michael Santarcangelo | The Security Catalyst clean Michael Santarcangelo | The Security Catalyst michael@securitycatalyst.com michael@securitycatalyst.com (Michael Santarcangelo | The Security Catalyst) Copyright 2009 The Security Catalyst. All Rights Reserved. A catalyst for engaging, empowering and enabling individuals; turn insiders into allies who reduce business risk! security, risk, privacy, compliance, breach, awareness, training, catalyst, confidentiality, integrity, availability, cissp, cism, cisa, cpp The Security Catalyst<title>» potomac forum</title> http://www.securitycatalyst.com/wp-content/plugins/powerpress/rss_default.jpg http://www.securitycatalyst.com Security Catalyst Show – February 16 2009 – Certification & Accreditation http://www.securitycatalyst.com/security-catalyst-show-%e2%80%93-february-16-2009-%e2%80%93-certification-accreditation/ http://www.securitycatalyst.com/security-catalyst-show-%e2%80%93-february-16-2009-%e2%80%93-certification-accreditation/#comments Mon, 16 Feb 2009 17:18:46 +0000 Michael Santarcangelo http://www.securitycatalyst.com/?p=1106

Welcome to the Security Catalyst Program – bringing you the ideas, insights and tools necessary to change the way people protect information. I am Michael Santarcangelo, your personal catalyst on this journey. Thanks for listening!

Binders stackOn today’s program, we explore Certification and Accreditation with the help of three experts who share an absolute wealth of knowledge.

A few quick notes

1. Into the Breach is available as an eBook and signed Hardcover from www.intothebreach.com Learn more about how to engage users, restore responsibility and hold people to account. In fact, this book lays out how to reduce costs without increasing risk, turn insiders into allies and manage people, information and risk better.

2. For 2009, I am excited to announce the expansion of the Security Catalyst Blog – with the awesome Catalyst Contributors. Visit the blog each day to get a fresh perspective

3. I’m in the process of revamping the podcast series for 2009. I know a lot of people are struggling – and in addition to being a voice of optimism, I’m building a team to share information and strategies necessary for making a difference this year. If you want to contribute, or if you are facing a challenge and need some help – shoot me an email: securitycatalyst@gmail.com

Stay tuned for more information.

For today’s program, I am joined by Mike Smith, Graydon McKee and Joe Faraone to discuss C&A.

Links at a glance

The presentation that started the idea for this episode: http://www.slideshare.net/rybolov/why-care-about-government-security?src=embed

Graydon, Joe, and Mike teach 2-day C&A workshop and a 5-Fridays NIST Framework for FISMA workshop for the Potomac Forum. http://www.potomacforum.org/

Graydon’s blog: http://www.ascensionriskmanagement.com/BlogOne/

Papers and presentations: http://www.ascensionriskmanagement.com/BlogOne/paperspresentations/

Mike’s blog:http://www.guerilla-ciso.com/

Papers and presentations: http://www.guerilla-ciso.com/papers-and-presentations

The most relevant NIST publications are special publications 800-37 and 800-53, available here: http://csrc.nist.gov/publications/PubsSPs.html

About the Experts

Mike Smith

Michael Smith is a Manager in the Audit and Enterprise Risk Services organization of Deloitte & Touche LLP, where he leads engagements to provide security services to both commercial enterprises and government agencies. Prior to Joining Deloitte, Michael served as the Chief Information Security Officer with the Unisys Federal Service Delivery Center based in Reston, Virginia.  His scope of responsibility included both providing governance and managing risk for several data centers, Security Operations Center, Network Operations Center, and Server Management Team.

Graydon McKee

Graydon McKee is the Vice President and Chief Operating Officer of Ascension Risk Management LLC.  Graydon is an accomplished Risk Management/Information Security professional with extensive experience in developing and implementing Information Risk Management and Information Security Programs to clients in both the public and private sector.  He is a recognized leader in government regulatory compliance (Federal Information Security Management Act and the Defense Information Technology Security Certification and Accreditation Process compliance) and has taught the process to over 2,000 individuals representing over 600 federal government agencies and offices. 

Joe Faraone

Joe Faraone is a Senior Information Security Architect with GCI Corporation, based in Reston, Virginia with over 20 years’ experience in Information Security. Joe has delivered services for numerous Federal customers including Certification and Accreditation support, Security Governance Gap Analysis and Independent Validation and Verification (IV&V).  Over his career, he has served as Lead Independent Security Engineer, Manager and Architect of a managed security center for an Intelligence Community Agency, and has performed Certification and Accreditation services for several high-assurance systems.

No related posts.

]]> http://www.securitycatalyst.com/security-catalyst-show-%e2%80%93-february-16-2009-%e2%80%93-certification-accreditation/feed/ 1 accreditation,catalyst,certification,into the breach,potomac forum Welcome to the Security Catalyst Program - bringing you the ideas, insights and tools necessary to change the way people protect information. I am Michael Santarcangelo, your personal catalyst on this journey. Thanks for listening! On today’s program, Welcome to the Security Catalyst Program - bringing you the ideas, insights and tools necessary to change the way people protect information. I am Michael Santarcangelo, your personal catalyst on this journey. Thanks for listening! On today’s program, we explore Certification and Accreditation with the help of three experts who share an absolute wealth of knowledge. A few quick notes 1. Into the Breach is available as an eBook and signed Hardcover from www.intothebreach.com Learn more about how to engage users, restore responsibility and hold people to account. In fact, this book lays out how to reduce costs without increasing risk, turn insiders into allies and manage people, information and risk better. 2. For 2009, I am excited to announce the expansion of the Security Catalyst Blog - with the awesome Catalyst Contributors. Visit the blog each day to get a fresh perspective 3. I'm in the process of revamping the podcast series for 2009. I know a lot of people are struggling - and in addition to being a voice of optimism, I'm building a team to share information and strategies necessary for making a difference this year. If you want to contribute, or if you are facing a challenge and need some help - shoot me an email: securitycatalyst@gmail.com Stay tuned for more information. For today's program, I am joined by Mike Smith, Graydon McKee and Joe Faraone to discuss C&A. Links at a glance The presentation that started the idea for this episode: http://www.slideshare.net/rybolov/why-care-about-government-security?src=embed Graydon, Joe, and Mike teach 2-day C&A workshop and a 5-Fridays NIST Framework for FISMA workshop for the Potomac Forum. http://www.potomacforum.org/ Graydon’s blog: http://www.ascensionriskmanagement.com/BlogOne/ Papers and presentations: http://www.ascensionriskmanagement.com/BlogOne/paperspresentations/ Mike’s blog:http://www.guerilla-ciso.com/ Papers and presentations: http://www.guerilla-ciso.com/papers-and-presentations The most relevant NIST publications are special publications 800-37 and 800-53, available here: http://csrc.nist.gov/publications/PubsSPs.html About the Experts Mike Smith Michael Smith is a Manager in the Audit and Enterprise Risk Services organization of Deloitte & Touche LLP, where he leads engagements to provide security services to both commercial enterprises and government agencies. Prior to Joining Deloitte, Michael served as the Chief Information Security Officer with the Unisys Federal Service Delivery Center based in Reston, Virginia.  His scope of responsibility included both providing governance and managing risk for several data centers, Security Operations Center, Network Operations Center, and Server Management Team. Graydon McKee Graydon McKee is the Vice President and Chief Operating Officer of Ascension Risk Management LLC.  Graydon is an accomplished Risk Management/Information Security professional with extensive experience in developing and implementing Information Risk Management and Information Security Programs to clients in both the public and private sector.  He is a recognized leader in government regulatory compliance (Federal Information Security Management Act and the Defense Information Technology Security Certification and Accreditation Process compliance) and has taught the process to over 2,000 individuals representing over 600 federal government agencies and offices.  Joe Faraone Joe Faraone is a Senior Information Security Architect with GCI Corporation, based in Reston, Virginia with over 20 years’ experience in Information Security. Joe has delivered services for numerous Federal customers including Certification and Accreditation support, Security Governance Gap Analysis and Independent Validation and Verification (IV&V).  Over his career, he has served as Lead Independent Security Engineer, Manager and Architect of a managed security center for an Intelligence Community Agency, Michael Santarcangelo | The Security Catalyst clean