1. From Where Will The Next Generation of CISOs Come? FISSEA March 22, 2005 2:00 pm Moderator: Jane Scott Norris, CISSP, CISM Chief Information Security Officer, Department of State

2. From where will the next generation of CISOs come? Agenda: Introduction of panel Review of questions for discussion Opening statements Discussion of questions/issues Questions from audience Closing remarks

3. From where will the next generation of CISOs come? Panel: Dr. Diana Gant, National Science Foundation James L. Golden, CISSP, US Postal Service Marc H. Noble, CISSP-ISSAP, CISM, FCC

4. From where will the next generation of CISOs come? What is the background and experience of current CISOs? Where does the CISO fit in the organization? What are the workforce challenges for today’s CISOs? What are you doing to prepare your successor? How is the CISO role evolving? From where will future CISOs come?

5. What is the background and experience of current CISOs? What are examples of the credentials of current CISOs? What positions have current CISOs held previously? Are there common attributes of successful CISOs?

6. Where does the CISO fit in the organization? Is there standardization on a title? To whom does the CISO report? Does your agency have a CPO, CRO, CSO and are these titles held by different people? Do you see these functions merging in the future?

7. What are the workforce challenges for today’s CISO? How do federal CISOs build and retain a professional information security workforce? How does the nation build a professional IT security workforce? What recent developments, with respect to information security in agencies, have driven changes in the IT security workforce?

8. What are you doing to prepare your successor? What career opportunities exist in meeting the changing roles and requirements of information security professionals in government? Is there a professional IT security career path? What are the skill sets required of the CISO? How are you preparing possible successors?

9. How is the CISO role evolving? Information Security to Information Assurance Risk Management True C-Suite member? To whom should the CISO report? What skills will future CISOs require?

10. From where will the next generation of CISOs come? What experience will best prepare the CISO? Are there new or changing degree courses that adequately prepare CISOs?

11. From where will the next generation of CISOs come? Questions from the audience

12. From where will the next generation of CISOs come? Contact Information : Jane Scott Norris Chief Information Security Officer U. S. Department of State Email: norrisjs@state.gov