Putting the Information Systems Security Pieces Together

This event qualifies for .7 CEUs

This event qualifies for 7 CPEs

Overview of the Workshop:

Information systems security is considered one of the top priorities for most CIOs and agency heads. There are many pieces to security management, compliance and reporting requirements. The new FISMA regulation emphasizes on the importance of including an Information Security Continuous Monitoring (ISCM) program as part of agencies Information Technology (IT) Security Program. With new FISMA requirements on one hand and OMB requirements/DHS reporting requirements and NIST special guidance and standards on the other hand, many executives, managers and staff often face challenges trying to comply with security regulations while maintaining an increasingly resilient IT security and privacy management Program.

This Potomac Forum Training Workshop will put the pieces together for information systems security requirements and help agencies comply with the many requirements while minimizing the burden on staff. Workshop attendees will gain an understanding of:

The requirements of the FISMA 2.0 and how they affect the CIO metrics and reporting,
The best practices for aligning the ISCM strategy with the new FISMA 2.0 requirements, and
The changes to NIST SP 800-53 in Revision 4.

What You Will Learn:

The requirements and expectation of the new FISMA 2.0
How to address FISMA 2.0 and ISCM requirements in developing an effective security program
- ISCM and FISMA FY14 reporting guidance, methodology and requirements from both a CIO and IG perspective
Additional understanding of ISCM, Continuous Monitoring – Continuous Diagnostics – What Agencies Need to Know and to Do
How to Develop, Maintain and Implement ISCM Strategy
Guidance on Assessing and Developing Staff and Resources for your ISCM Strategy
Current trends in ISCM products and services
ISCM Lessons Learned from Federal information security executives
Independent Evaluations of ISCM from an IG audit perspective
Using Continuous Monitoring Diagnostics for Better Authority To Operate “ATO” Decision Making

Why You Should Attend:

Receive guidance on the latest OMB memos
Understand Continuous Monitoring – Continuous Diagnostics and OMB M-14-03
Agency security executives, managers, staff, CIOs, and oversight organizations need to understand the various documents related to Information Systems Security
Attendees with ISC2 certifications will receive CEUs

Who Should Attend:

ISSOs, ISSMs and security staff
Executives who must “sign off” on Authority to Operate “ATO”
CIOs, CISOs, CTOs, CFOs, Deputies, Associates and Staff
Compliance and Enforcement Officers
System and network administrators who play a role in FISMA and continuous monitoring
Executives, Managers, and Staff Responsible for FISMA Compliance
Staff who are focusing on security assessment and authorization (traditional C&A) and continuous monitoring issues
IGs and Auditors who must perform independent reviews (IG reviews are required by Nov 15, 2014)
Program Managers Developing or Maintaining IT Systems
IT Professionals Interesting in Improving IT Security
State Government Security managers who voluntarily adapt the NIST and FISMA Guidelines and Standards for their States

Format:

Presentations by professional in Implement Information Security Continuous Monitoring (ISCM), NIST and FISMA compliance consultants
Panel discussions led by experienced government and industry experts

Speaker and Presenter Information

Keynote Speaker:

Dr. Ron Ross

NIST FELLOW

Leader, FISMA Implementation Team

National Institute of Standards and Technology (NIST)

Leader, Joint Transformation Initiatives Interagency Working Group
Author of SP800-53 Rev 4

Guest Speakers:

Tim Ruland

Chief IT Security Officerand CISO

US Census Bureau

Instructors:

Carrie Boyle

Manager, Cybersecurity Solutions

Grant Thornton Global Public Sector

Nsiona N. Di Bassinga

Manager, Information Assurance Solutions

Grant Thornton Global Public Sector

Relevant Government Agencies

Air Force, Army, Navy & Marine Corps, Intelligence Agencies, DOD & Military, Office of the President (includes OMB), Dept of Agriculture, Dept of Commerce, Dept of Education, Dept of Energy, Dept of Health & Human Services, Dept of Homeland Security, Dept of Housing & Urban Development, Dept of the Interior, Dept of Justice, Dept of Labor, Dept of State, Dept of Transportation, Dept of Treasury, Dept of Veterans Affairs, EPA, GSA, USPS, SSA, NASA, Other Federal Agencies, Legislative Agencies (GAO, GPO, LOC, etc.), Judicial Branch Agencies, State Government, County Government, City Government, Municipal Government, CIA, FEMA, Office of Personnel Management, Coast Guard, National Institutes of Health, FAA, Census Bureau, USAID