Track 3: CyberGov: Managing Risks, Delivering Results

Securing the cyber-world has assumed paramount importance. An environment of trust in cyberspace has become a necessary condition for our future progress, while information superiority and situational awareness have become increasingly critical. Competing dynamics and the need to balance information sharing and privacy, interoperability, cost, risk and mission make governance and cyber security even more complex. This track will focus on finding the right balance between security and risk management, while securing the homeland and enhancing the military's war fighting capability, facilitating commerce, promoting health, protecting the environment and other missions of government.

8:30 AM – 9:15 AM; Track 3 Introduction
Larry Clinton, President, ISA Alliance (Invited)

9:15 AM – 10:30 AM; Track 3, Panel 1
Securing the Supply Chain
This session will discuss the cyber supply chain, which includes the entire set of key actors and their organizational and process-level interactions that plan, build, manage, maintain, and deliver the mass of IT systems and infrastructure that compose our cyber environment. Compromises can come from a range of sources and affect hardware and software delivered right out of the box. Counterfeit components, systems and applications add complexity. Speakers will address key efforts to address these issues and challenges, including that new “Anti-Tamper” technology initiatives are largely classified and unavailable to be shared broadly.

Moderator: John Nagengast, Executive Director, AT&T
Panelists:
Zal Azmi, Senior Vice President, CACI
Jennifer Bisceglie, Interos Solutions Inc.
Joe Jarzombek, Director for Software Assurance, Global Cyber Security Management, National Cyber Security Division, Department of Homeland Security

Learning Objectives:

Examine the challenges and issues surrounding how today’s technologies, developed in a competitive market are supplied to customers.
Can information sharing reduce supply chain integrity risk and provide best practices when proprietary software and hardware are infected with malware? Does any of the new proposed legislation provide help?
How can defense, federal agencies and intelligence community in partnership with the private sector transform current culture to improve information sharing? What approaches to acquisition will strengthen the security of the supply chain?
What are the best practices and key steps to make better use of available information and training within government and the private sector to enhance situational awareness and decision making for this critical area? Are there any lessons learned from other industries (e.g. food supply) that are applicable to IT?


10:45 AM – 12:00 PM; Track 3, Panel 2
US Cyber Command: Defining Mission within DoD and the Nation
This session will review the new US Cyber Command’s mission, responsibilities and authorities – and how these transition in time of cyberwar. How will the concept of operations for the new command interface with NSC, the IC, DHS, DOJ and other government agencies involved in cyber-security? How will the command be resourced and what are the expected budget impacts to other federal agencies? How do we train the cyber warrior and defender workforce?

Moderator: Charlie Croom, Vice President, Cyber Security Solutions, Lockheed Martin
Panelists:
Rob Carey, Director of Strategy and Policy, U.S. Fleet Cyber Command/U.S.10th Fleet
John Gilligan, President, Gilligan Group, Inc.
Phil Reitinger, Deputy Undersecretary of the Department’s National Protection and Programs Directorate, Department of Homeland Security (Invited)
Karen Evans, National Director, US Cyber Challenge
Jacob Olcott, Counsel, Senate Committee (invited)

Learning Objectives:

Explore the Comprehensive National Cybersecurity Initiative (CNCI) which set the stage for significant changes in US national security policy with regards to Cyber Security.
Understand better the US Cyber Command role and mission as a principal component of our national cyber security capability, as well as the new responsibilities it defines for the DoD and NSA and what that means for the military and to the rest of government.


1:45 PM – 3:00 PM; Track 3, Panel 3
Taking it to the Net: Security Boon or Bane
Interoperability has always been a logical and necessary goal of businesses, governments and militaries to maximize resources, ensure strong ROI, and outpace competition. It has been central to delivering more complete and effective services and enabling sound decision-making to protect our troops. By extension, Net Centric Operations continued the drive to optimize the interconnected nature of an evolving cyber-world. However, it may be time to ask that in our rush to optimize interoperability in an ever-more connected world, do we create vulnerabilities and weaknesses that undermine the greater mission?

Moderator: Michael Glenn, Director Risk Management Information Security and CISO, Qwest
Panelists:
Bob Dix, Vice President, U. S. Government Affairs & Critical Infrastructure Protection Juniper Networks
Matt Coose, Director, Department of Homeland Security National Cybersecurity Division - Federal Network Security Branch, Department of Homeland Security
Sherri Ramsay, Director of the National Security Agency/Central Security
Service (NSA/CSS) Threat Operations Center
Learning Objectives: Understand the opportunities and vulnerabilities associated with the increasing reliance on networking and IT for critical infrastructure functions. How does this increased reliance affect Power Grid security? Financial Transactions? Water Distribution? Transportation Systems? What is the effectiveness of infrastructure protection pilots? What vulnerabilities do net-centric approaches bring to our capabilities to wage war and defend the country? How do training exercises and pilot projects prepare the nation to better protect our critical infrastructure?

3:15 PM – 4:30 PM; Track 3, Panel 4
IT Optimization: Affordability with Security
This panel will examine strategic frameworks and tactical implementation guidance for federal agencies in developing common segment architectures for information systems that deliver secure and interoperable services at lower costs. How will these frameworks address cloud security challenges and balance cost savings and optimization with risk? The session will also discuss approaches to acquisition that can enable IT optimization goals.

Moderator: Peter Mell, Computer Scientist ,National Institute of Standards and Technology
Panelists:
Richard Spires, Chief Information Officer, Department of Homeland Security
Patrick Schambach, Vice President & General Manager, Homeland Security & Law Enforcement Programs, CSC
Katie Lewin, Director, Cloud Computing Program, General Services Administration

Learning Objectives:

Understand better commonalities that allowed frameworks and architectures to better group and arrange activities and the functions/details that comprise them.

Review improved control over work flows and events to provide clarity into the organizational forces driving performance and how IT optimization extends beyond acquisition of new systems or the consolidation of existing hardware.

Explore expanding the approach to better handle security and cost of services at the heart of the enterprise.

Look at the updated frameworks and local implementation guidance that maintain enterprise commonalities and handle the shift to cloud based services. These will become increasingly important as cost of services moves to operational budgets.

4:30 PM – 4:35 PM; Track 3 Wrap Up