1. Day 1 – Conference Presentations
3rd Annual Security Automation
Conference & Exposition
NIST, DISA, NSA
Gaithersburg, Maryland,
September 19-20, 2007
Day 1 – Conference Presentations
8:00 - 8: Registration, Coffee, & Packet Pickup (Expo open at 10am each day)
8:45 - 9: Cita Furlani, Director Information Technology Laboratory, (NIST)
Opening Remarks and Conference Overview
9:00 – 10: Bob Lentz, Deputy Assistant Secretary I&IA (OASD) Keynote
Computer Network Defense (CND) – Using SCAP Standards (DEMO)
Moderator – Michelle Iversen
Panel – Joe Wolfkiel, Dan Schmidt, Ryan Larson, Larry Frank
10: :20 Tim Grance, Manager, Systems and Network Security Group, (NIST)
NIST ISAP/SCAP Initiatives & Status Break
10: :30 Break
10: :00 Ron Knode, LEF Associate, (Adjunct Faculty Towson State)
Digital Trust
11: :00 Dennis Heretick, Chief Information Security Officer, (DOJ)
Automating FISMA Compliance Using SCAP (DEMO)
Moderator – Mischel Kwon
Panel Discussion
12: : Lunch
1: : Richard Hale, Chief Information Assurance Officer, (DISA)
DISA Initiatives in Automating STIG Compliance
1: : Sherrill Nicely, Deputy Associate Director, (DNI)
Security Framework Convergence – , DCID6/3, HIPAA, DoD IA
Moderator – Ron Ross
Panel – Ron Ross, Glenda Turner, Matt Scholl, Lorraine Tunis Doo
3: :15 Break
3: :00 John Streufert, Chief Information Security Officer, (State Dept.)
Correlating Security Data – Using SCAP Standards (DEMO)
Moderator – TBA
4: :00 Vendor Talks (AppSec, Belarc, Cenzic, & Gideon Technologies)
5: Conference Dinner – Holiday Inn, Gaithersburg (301)

2. Day 2 – Conference Presentations
September 20, 2007
Day 2 – Conference Presentations
8:30 – 9: Coffee, etc.
9:00 – 10: Karen Evans, Office of Management and Budget (OMB) Keynote
OMB Deep Dive – Securing Agency Desktop Computing
Moderator – TBA
Panel Discussion
10:00 – 10:30 Ron Ross, FISMA Implementation Team, Project Lead (NIST)
FISMA Phase II and Automation
10: : Break
10: :00 John Pescatore, Vice President & Gartner Fellow, (Gartner Group)
Private Public Partnership and Industry value for Using SCAP
Moderator – Alan Paller, SANS Institute
Panel Discussion
12: :15 Lunch
1: :00 Tony Sager, Chief, Vulnerability Analysis and Ops, (NSA)
Automation Landscape
2: :30 Peter Mell and John Banghart, SCAP Compliance Team, (NIST)
SCAP Certification Testing
2: : McAfee
2: : Microsoft Corporation
2: : nCircle
2: : Patchlink
3: : Secure Elements
3: : Break
3: : Security Associates
3: : SignaCert
4: : Symantec
4: : Telos/Xacta
4: : Tenable
4: : ThreatGuard
5: : Closing Remarks
National Institute of Standards and Technology - Red Auditorium
100 Bureau Drive Gaithersburg, Maryland 20899
Please visit: for updates or call Teresa Vicente @