Day 1 – Conference Presentations 3rd Annual Security Automation Conference & Exposition NIST, DISA, NSA Gaithersburg, Maryland, September 19-20, 2007 Day 1 – Conference Presentations 8:00 - 8:45 Registration, Coffee, & Packet Pickup (Expo open at 10am each day) 8:45 - 9:00 Cita Furlani, Director Information Technology Laboratory, (NIST) Opening Remarks and Conference Overview 9:00 – 10:00 Bob Lentz, Deputy Assistant Secretary I&IA (OASD) Keynote Computer Network Defense (CND) – Using SCAP Standards (DEMO) Moderator – Michelle Iversen Panel – Joe Wolfkiel, Dan Schmidt, Ryan Larson, Larry Frank 10:00 - 10:20 Tim Grance, Manager, Systems and Network Security Group, (NIST) NIST ISAP/SCAP Initiatives & Status Break 10:20 - 10:30 Break 10:30 - 11:00 Ron Knode, LEF Associate, (Adjunct Faculty Towson State) Digital Trust 11:00 - 12:00 Dennis Heretick, Chief Information Security Officer, (DOJ) Automating FISMA Compliance Using SCAP (DEMO) Moderator – Mischel Kwon Panel Discussion 12:00 - 1:15 Lunch 1:15 - 1:55 Richard Hale, Chief Information Assurance Officer, (DISA) DISA Initiatives in Automating STIG Compliance 1:55 - 3:00 Sherrill Nicely, Deputy Associate Director, (DNI) Security Framework Convergence – 800-53, DCID6/3, HIPAA, DoD IA Moderator – Ron Ross Panel – Ron Ross, Glenda Turner, Matt Scholl, Lorraine Tunis Doo 3:00 - 3:15 Break 3:15 - 4:00 John Streufert, Chief Information Security Officer, (State Dept.) Correlating Security Data – Using SCAP Standards (DEMO) Moderator – TBA 4:00 - 5:00 Vendor Talks (AppSec, Belarc, Cenzic, & Gideon Technologies) 5:30 - Conference Dinner – Holiday Inn, Gaithersburg (301) 948-8900

Day 2 – Conference Presentations September 20, 2007 Day 2 – Conference Presentations 8:30 – 9:00 Coffee, etc. 9:00 – 10:00 Karen Evans, Office of Management and Budget (OMB) Keynote OMB Deep Dive – Securing Agency Desktop Computing Moderator – TBA Panel Discussion 10:00 – 10:30 Ron Ross, FISMA Implementation Team, Project Lead (NIST) FISMA Phase II and Automation 10:30 - 10:45 Break 10:45 - 12:00 John Pescatore, Vice President & Gartner Fellow, (Gartner Group) Private Public Partnership and Industry value for Using SCAP Moderator – Alan Paller, SANS Institute Panel Discussion 12:00 - 1:15 Lunch 1:15 - 2:00 Tony Sager, Chief, Vulnerability Analysis and Ops, (NSA) Automation Landscape 2:00 - 2:30 Peter Mell and John Banghart, SCAP Compliance Team, (NIST) SCAP Certification Testing 2:00 - 2:15 McAfee 2:15 - 2:30 Microsoft Corporation 2:30 - 2:45 nCircle 2:45 - 3:00 Patchlink 3:00 - 3:15 Secure Elements 3:15 - 3:30 Break 3:30 - 3:45 Security Associates 3:45 - 4:00 SignaCert 4:00 - 4:15 Symantec 4:15 - 4:30 Telos/Xacta 4:30 - 4:45 Tenable 4:45 - 5:00 ThreatGuard 5:00 - 5:15 Closing Remarks National Institute of Standards and Technology - Red Auditorium 100 Bureau Drive Gaithersburg, Maryland 20899 Please visit: http://nvd.nist.gov/events.cfm for updates or call Teresa Vicente @ 301.975.3883