Assura is a consulting and services firm focused on Information Technology Governance, Risk and Compliance (IT GRC) with concentrations in cybersecurity, business continuity planning, IT audit and audit defense.
Rapid7 is engineering better security with simple, innovative solutions for IT security’s most critical challenges. Our security data and analytics solutions collect, contextualize, correlate, and analyze the security data you need to dramatically reduce threat exposure and detect compromise in real-time. They speed investigations so you can halt threats and clean up systems fast. Plus, our analytics give you the specific information you need to systematically improve security processes within your organization. Unlike traditional vulnerability assessment or incident management, Rapid7’s comprehensive data collection, attacker intelligence and user-behavior analytics give you immediate insight into the security state of your assets and users from the endpoint to the cloud. We offer unmatched capabilities to spot intruders leveraging today’s #1 attack vector, compromised credentials.
G. Mark Hardy is founder and President of National Security Corporation and has provided cyber security expertise to government, military, and commercial clients for over 30 years. Also founder of CardKill, Inc., he is a retired U.S. Navy Captain, and an internationally recognized expert who has presented at over 250 events world-wide. He serves on the Advisory Board of the National CyberWATCH Center. A graduate of Northwestern University, he holds a BS in Computer Science, a BA in Mathematics, a Masters in Business Administration, a Masters in Strategic Studies, and holds CISSP, CISM, GSLC, and CISA certifications.
GE is building the world by providing capital, expertise and infrastructure for a global economy. GE Capital has provided billions in financing so businesses can build and grow their operations and consumers can build their financial futures. We build appliances, lighting, power systems and other products that help millions of homes, offices, factories and retail facilities around the world work better.
IOActive
As its CEO, Jennifer Steffens spearheads all aspects of IOActive’s global CEO business operations and drives the company’s strategic vision. Jennifer brings a wealth of industry and business experience to the company, having been an early member of several successful startups.
Earlier in her career, Jennifer was a Director at Sourcefire, where she helped build and grow its run rate from $250K to over $35M in just four years. She helped commercialize the Snort open source intrusion detection and prevention technology and built several service offerings around research initiatives. Prior to joining IOActive, Jennifer came to Seattle to help startup GraniteEdge reinvent itself. While there, she led initiatives to restructure the company and developed a product strategy that ultimately secured two additional rounds of funding. With over ten years of industry experience, Jennifer has held senior management positions at Ubizen, NFR Security, and StillSecure.
Jennifer is a well-respected media source, appearing in InfoSecurity Magazine, SC Magazine, Good Morning America, BBC, Reuters, The Guardian, and CBS News. She has been invited to give keynote presentations at a variety of conferences such as HackInTheBox. Jennifer is a member of EWF, ISSA, and OWASP.
RVAsec Keynote
Michelle Schafer heads up Merritt Group’s Security practice where she applies more than a decade of hands-on PR-related security experience spanning every discipline. She is known for creating and implementing strategic communications campaigns that drive results for clients such as Venafi, CrowdStrike, Ionic Security, Mach37, BlackHat and more.
Michelle has presented at Security B-Sides DC/Las Vegas and ISSA events and was recognized as a top influencer in the security community in 2010 and has been quoted in “Women in Security” stories.
Tim Wilson is the Editor in Chief of the number one security trade publication, DarkReading.com.
Hasty Headlines in InfoSec: Don’t Be Fooled by Everything You Read!
This session will discuss why some data breaches like Sony and Target get much more media attention than others and what enterprises can do to keep their names out of headlines, or at least be prepared when or if it ever happens to them. It will also give you an inside look at how security media determine what’s major news and what’s not and how PR “spin” is all part of the process.
FishNet Security is the No. 1 provider of information security solutions that combine technology, services, support and training. Since 1996, the company has enabled clients to manage risk, meet compliance requirements and reduce costs while maximizing security effectiveness and operational efficiency. FishNet Security is committed to information security excellence and has a track record of delivering quality solutions to over 5,000 clients worldwide.
Bob Stratton is a serial security startup guy. He is General Partner at Mach37, a business accelerator for security product startups. He was a pentester before you could buy it in a box, ran security for a tier-1 ISP, and helped launch one of the very first commercial network IDS products. He has been a Director of a major security software company’s research lab, and worked on the investment side to help bring a variety of new technologies to market. When he’s not hacking on ancient hardware, scanning satellites, or coaching startups, he might be flying airplanes, building radios or experimenting with fragrance chemistry.
How Security Products Could Change the World, and Often Don’t.
Many security professionals find themselves wondering how it is that some security products ever made it into the market. If you’ve ever asked yourself that, wondered why the “good” seems to be the enemy of the “best,” or thought you might be able to do it better than the current players, this may be a talk for you. This talk will cover the things that have to happen in order to successfully bring a security product to the market, who is arrayed against it from day 1 (you may not have heard of some of them), and what it takes for a consultant to be in 100,000 places at once. Warning: thin-skinned consultants, bloviating product vendors, and ethereal marketing people may find some aspects of this talk objectionable. Professional discretion is advised.
SLAIT Consulting is an Information Technology consulting services company that specializes in delivering customized, creative IT solutions for customers in the commercial and public sector. SLAIT is headquartered in Virginia Beach, VA, with regional branch offices in Richmond, VA; Greenbelt, MD; Raleigh, NC; and New York, NY.
Oscar Insurance
Jaded Security Guy
You’re HIPAA certified and Bob just killed someone from the parking lot
My friend Bob is undergoing Chemo and his wife asked him to get a copy of his medical records for a second opinion. Bob being an obedient husband had to jump through hoops to get copies of HIS records thanks to the monotony that we know as HIPAA.
So one day while Bob is waiting for his treatment he notices that the facility has several blatant physical security issues which could allow someone of a more shady nature to obtain his health records without jumping through hoops. Follow Bob in his adventures..
