1. JAMIE S. HERMAN, C|CISO, CISM, CISSP MANAGER OF INFORMATION SECURITY ROPES & GRAY LLP

2.  50% - attacks on companies with fewer than 2500 employees  1719 – Average number of attacks per 1000 users  80 – FBI estimates more than 80 major US law firms were compromised in 2011  Exponential growth – 6x more malicious links (2012)

4.  Software that interferes with normal operation of your computer  Generally executes without your knowledge or consent  Can damage or disable your computer, or steal firm information  Includes viruses, trojans, works, and spyware

5.  Phishing campaign  Social Engineering  Unencrypted Media  Elevated privileges  Malicious websites

9. Perception…

10.  Critical aspect of Information Security  Client/Matter intake  How can you protect what you don’t know?  Many flavors (government, industry, business model)  Role Based Access Control (RBAC)  Need to know  Data Vaults

11.  Visibility  Data Leak Prevention (DLP)  Reporting  Client protection and retention  Compliance and competitive advantage

12. Hot Topics  Secure file sharing  Email encryption  Removable Media Encryption  Social media/personal email access  Mobile devices (BYOD)

15.  http://www.darkreading.com http://www.darkreading.com  http://www.infosecisland.com http://www.infosecisland.com  http://www.threatpost.com http://www.threatpost.com  http://www.krebsonsecurity.com http://www.krebsonsecurity.com  http://www.dhs.gov/dhs-daily-open-source-infrastructure-report http://www.dhs.gov/dhs-daily-open-source-infrastructure-report  http://www.us-cert.gov/ncas/current-activity http://www.us-cert.gov/ncas/current-activity  https://isc.sans.edu/ https://isc.sans.edu/  https://isc.sans.edu/reportfakecall.html https://isc.sans.edu/reportfakecall.html

16. Remember Security is Everyone's responsibility! Sec-U-R-IT-y………You Are It!