You Are Not Alone: Pooling Regional Resources to Enhance Information Security Training Kris Monroe, CISA, CISSP Information Security Officer Ithaca College

INTRODUCTION  How organizations in Rochester, NY pooled their resources to develop an effective security awareness and training conference.  Suggested community resources to leverage  How to engage those resources 2

BRIEF HISTORY  The Rochester Security Summit is a collaboration of area organizations and the Rochester Chapter of the Information Systems Security Association (ISSA).  History of the Summit  Started in 2006  Fostered by Rochester Chapter of the Information Systems Security Association, University of Rochester and local organizations.  Planning Committee includes over 30 people from higher education, business, education, and area organizations.  The Summit features speakers and panels to help educate area security and IT professionals, business managers, organizations and the community on how to protect information systems and data. 3

SUMMIT AREAS OF FOCUS  The conference focused on the following areas over the years:  Technical Professional Track  Business Professional Track  Software Professional Track  Providing education opportunities for executives, CFO, CIO/CSO, business managers, security professionals, IT managers, technical specialists, help desk staff, or developer. 4

SUGGESTED COMMUNITY RESOURCES  Work with local or national security awareness groups, professional societies (e.g., ISSA, ISACA, InfraGard, OWASP, SANS, IEEE security & privacy group), College/University security groups or student groups (e.g., ACM student chapters, & student security groups) and K-12.  Leverage October National Cyber Security Month (NCSAM) 5

ROCHESTER SUMMIT COLLABORATORS  Area collaboration partners have included:  The Rochester Chapter of the Information Systems Security Association (ISSA),  The Rochester Chapter of the Information Systems Audit and Control Association (ISACA)  Rochester Open Web Application Security Project (OWASP) Chapter  Rochester Institute of Technology  University of Rochester Information Technology Office  Rochester Cyber Safety and Ethics Initiative  Area businesses and organizations 6

HOW TO ENGAGE  Join Security Organizations  Attend Meetings  Introduce Yourself  Get Involved 7

RESOURCE LINKS  OWASP   ISSA   ISACA  rs/Chapters_by_Region.htm rs/Chapters_by_Region.htm  Infragard   NCSAM   Rochester Security Summit  8