Association For Enterprise Integration (AFEI)

Enterprise Security Management

SPRING FORUM in SEATTLE
June 17 - 18, 2008
Event Number 8A02

Hyatt Regency Bellevue
900 Bellevue Way NE
Bellevue, WA 98004
(425) 462-1234

ESM - the new DOD doctrine for a holistic approach to information assurance.

Video Highlights of the 2007 ESM Fall Festival can be seen here, and the agenda can be found here.

ESM Definition

Purpose

This conference will continue and focus the exchange of community perspectives which began at the September 2007 ESM Fall Festival to increase understanding and awareness of ESM across both the public and private sectors by engaging government, industry and allies. Our objectives are to:

Understand operational demands and market pressures that drive ESM solutions
Develop and refine architectural concepts for future ESM capabilities
Identify available commercial and Government solutions and innovative
approaches to address critical ESM gaps
Discuss ESM challenges for federating external partner operations

Major Topics:

Federated Operations - Reaching to External Partners
Role of Commercial Standards - Proprietary vs. Open Source
Scaling for a Global Enterprise
Balancing Privacy and Confidence
Dynamic Policy Management
Privilege Management
IA and Cyber Defense

	SPONSORED BY


	In Conjunction with


	Information Assurance Working Group

Key Speakers

	Tony W. Sager - NSA Mr. Sager is the Chief of the Vulnerability Analysis and Operations (VAO) Group, part of the Information Assurance Directorate at the National Security Agency. The mission of the VAO organization is to identify, characterize, and put into operational context vulnerabilities found in the technology, information, and operations of the DoD and the national security community and to help the community identify countermeasures and solutions. This group is known for its work developing and releasing security configuration guides to provide customers with the best options for securing widely used products.

No Picture	Robert McGraw - NSA Mr. McGraw is the Technical Director for the Information Assurance Architecture and Systems Security Engineering Group at the National Security Agency (NSA). His group is responsible for defining the information assurance capabilities for the Department of Defense’s (DoD) Global Information Grid, which will transform DoD’s approach for communications and information management. They are also responsible for providing Information Systems Security Engineering services to a vast array of DoD and other government programs.

	Marcia Weaver - NSA Ms Marcia Weaver is the Chief of the Enterprise Security Management Special Program Office. Enterprise Security Management provides the foundation for defending and protecting an enterprise, for ensuring the trust and integrity of enterprise information, and allows flexible and fine-grained control of information sharing. Ms. Weaver has 25 years experience at NSA, ten of those years within the Information Assurance field. Her previous experience before her current position was in the DoD’s National Information Assurance Research Laboratory (NIARL) as the NIARL Program Manager.

	Mary Ann Davidson - Oracle Mary Ann Davidson is the Chief Security Officer at Oracle Corporation, responsible for Oracle product security, as well as security evaluations, assessments and incident handling. She represents Oracle on the Board of Directors of the Information Technology Information Security Analysis Center (IT-ISAC), is a member of the Global Chief Security Officer Council, and is on the editorial advisory board of SC Magazine.

	David Aucsmith - Microsoft Mr. Aucsmith is the Security Architect and Chief Technology Officer of the Security Business & Technology Unit at Microsoft Corp. He is responsible for defining the overall security architecture for Microsoft® products, including the Windows® platforms and solutions based on these platforms. He is currently working on a unified security architecture that spans Microsoft’s products. In addition, he is responsible for government-specific features in the Windows platform. Before joining Microsoft in August 2002, Aucsmith was the chief security architect for Intel Corp. from 1994 to 2002.

	Bill Vass - Sun Microsystems Mr. Vass is the President and COO, Sun Microsystems Federal, Inc. He joins Chairman Scott McNealy in continuing to help government organizations solve their unique challenges through sustainable computing and military grade built-in security products like the Trusted Solaris(TM) OS, identity management software and the latest industry leading Sun Fire(TM) systems and StorageTek(TM) solutions. He also served as Chief Information Officer of Sun Microsystems, Inc., where he was responsible for all aspects of Sun's global IT infrastructure and line-of-business application development, support and maintenance, including information service delivery and security.

	Jeff Jonas - IBM Entity Analytic Solutions Mr. Jonas is a Distinguished Engineer at IBM and Chief Scientist of Entity Analytic Solutions, IBM Software Group. He is responsible for shaping the overall technical strategy of next generation identity analytics and the use of this new capability in the overall IBM technology strategy. The IBM Entity Analytic Solutions group was formed based on technologies he developed as the founder and chief scientist of Systems Research & Development (SRD). Today, he applies real world and hands on experience in software design and development to drive technology innovations while delivering higher levels of privacy and civil liberties protections.

	Russ Housley - Vigil Security & IETF Mr. Housley formed Vigil Security, LLC with the goal of helping customers design and implement diligently watchful security solutions. He is co-author of the book Planning for PKI:Best Practices Guide for Deploying Public Key Infrastructure, published by John Wiley & Sons. Before starting Vigil Security, he worked at the Air Force Data Services Center (AFDSC), Xerox Special Information Systems (XSIS), SPYRUS, and RSA Laboratories. His security research and standards interests include security protocols, certificate management, cryptographic key distribution, and high assurance design and development practices. He is currently Chairman of the Internet Engineering Task Force (IETF).

	Chris Fedde - SafeNet Mr. Fedde is President and Chief Operating Officer of SafeNet, a global leader in information security providing complete security utilizing its encryption technologies to protect communications, intellectual property and digital identities. Throughout his tenure at SafeNet he has been a key contributor to building the company's security presence in the Federal Government and the financial community.

- Back to top -

Who Should Attend:
government and industry policy leaders (HSPD-12, PIV TWIC, IA, I&AM) industry security experts product developers system integrators government technologists academia experts and researchers foreign partners
Why Attend:
Understand operational and market demands that drive ESM solutions Develop and refine architectural concepts for future ESM capabilities Identify commercial and Government solutions and innovative approaches to address critical ESM gaps Discuss ESM challenges for federating external partner operations

Agenda

The secure enterprise of the future is flexible, dynamic, federated, assured and transparent – its critical data is protected and mission-essential processes persist in the face of determined, hostile attacks on its networks. Security is an integral part of all organizational information processes and enterprise services.

To reach our vision, the Department of Defense is pursuing the goal of managing enterprise Information Assurance (IA) processes, services and assets within all global operating paradigms, under shortened decision cycles, and using new, innovative and dynamic information-age enterprise environments as an effective force multiplier.

Enterprise Security Management (ESM) provides the foundation to make information superiority a reality. Providing comprehensive services to manage IA across the enterprise, enables mission operators to tailor the enterprise for its full-spectrum of missions.

This conference will continue and focus the exchange of community perspectives which began at the September 2007 ESM Fall Festival to increase our understanding and awareness of ESM across both the public and private sectors by engaging government, industry and allies.

This event promises to be stimulating and provocative through interactive presentations, panel discussions, and networking opportunities.

View the Program Brochure and Agenda here (PDF)

- Back to top -

ESM Defined

The information enterprise of the future is flexible, dynamic, federated, assured and transparent – its critical data is protected and mission-essential processes persist in the face of determined, hostile attacks. Security is integral to the enterprise, and the information services, business processes and mission operations that rely on them.

Enterprise Security Management (ESM) provides the foundation to optimize the enterprise for its intended use, whether in warfare or day-to-day business operations. Providing comprehensive services to manage IA across the enterprise enables operators to tailor the enterprise for the full spectrum of its uses.

The Department of Defense is pursuing a goal of managing enterprise Information Assurance (IA) processes, services, and assets within global operating paradigms, under shortened decision cycles, and applying new, innovative and dynamic information-age enterprise environments as an effective force multiplier. We are finding that these same underlying drivers, albeit within different operational settings, across the public and private sectors as well.

Industry and Government are seeking the same new technologies, practices, and approaches to policies that will institutionalize enterprise-wide security. Together, they pursue the promise of standard security solutions to which both the public and private sectors can subscribe.

Download the NSA Brochure here

Registration

Online registration is now CLOSED!
Please contact Betsy Lauer 703 247-9473 for assistance.

For new customers please take a moment to complete the New Account process and then complete your registration. Please retain your Customer/Member ID and password for future reference.

You will receive an Event Registration Confirmation e-mail immediately upon receipt of your payment online, so please ensure that your e-mail address is complete and accurate.

Registration Fees

Event Number 8A02	Early (Before 05/30/08)	Regular (5/30/08 - 06/13/08)	On-site (on/after 06/13/08)
Government*	$325	$425	$525
AFEI Member	$625	$725	$825
Industry Non- Member	$895	$995	$1095

*active-duty military and full-time government employees only

Online registration closes June 13. Registrations after June 13 must be on-site and at the on-site conference rate.

- Back to top -

Confirmations and Receipts
You will receive an emailed confirmation after you use the CONFIRM button on the web page. When registering online, please review your information then “submit” and “confirm” your entry. PLEASE check your account information for accuracy (i.e.: spelling of name, address, company name, email address, phone number, etc.).

If all required information is input correctly, you will see “Thank you for your registration!”. If you do not receive an emailed confirmation after submitting your registration, your registration is incomplete and was not received. Please call Betsy Lauer immediately at (703) 247-9473 for assistance.

Registration by Fax
Complete the registration form (PDF) with payment information and fax to 703-522-3192

FAX registrations must be received before noon, Thursday, June 12, 2008.

Registration by Mail
Complete registration form (PDF) and mail with payment to:

AFEI Event #8A02
2111 Wilson Blvd., Suite 400
Arlington, VA 22201-3601

Mail registrations must be received by Thursday, June 12, 2008.

Contact Betsy Lauer at (703) 247-9473 or [email protected] with any questions.

- Back to top -

How to Register for Others or Multiple Attendees On-Line
If you are registering another person or co-worker, (e.g. if you are registering your boss and/or co-worker(s), company/agency credit card holder registering several people, etc.), you must enter the respective email address, customer/member ID and password for each person you are registering, using their Customer ID account profile to register them.

Steps for Registering Others:

You must “log-in” under each individual’s Customer ID and password login information and complete their registration.

You must then “Logout” (button found in top right corner of the registration page, in the red section, next to“NDIA web site” & “Contact Us”) after submitting each registration.

To log back in for an additional registration, please click the “Find an Event” (middle tab found on the left menu tab options), then type in the event number under “Title”, then click “Go”.

Please click the “Register Now” button on the right. Please log back-in to register the next individual (repeating the steps above).

If you are registering another person, or are the credit card holder/purchasing agent, the confirmation email will be sent to the email address in the individual profile used when registering. Please check directly with that individual to make sure that they received the confirmation email.

If you do not receive an emailed confirmation after submitting your registration, your registration is incomplete and was not received. Please call Betsy Lauer immediately at (703) 247-9473 for assistance.

If all required information is input correctly, you will see “Thank you for your registration!”. You are now logged in. Please feel free to explore all of the services available.

Cancellations, Substitutions, and Requests for Refunds
All cancellations, substitutions, and requests for refunds must be done so in writing. Substitutions are welcome! Registrants who are unable to attend the meeting must fax (703 522-3192) or e-mail ([email protected]) their cancellation or refund request on or before May 30, 2008 to receive a refund.

No refunds will be issued for cancellations received after 5:00 PM EST on May 30, 2008.

Refunds can not be issued for no-shows.

A $75 administrative fee will be applied to ALL cancellations and refund requests received before May 30, 2008.

If requesting a substitution, please indicate if payment (if already received by NDIA) is to be transferred to the new attendee, or refunded and new registration created.

Identification Badges
Each attendee will be provided with an identification badge during registration. This badge must be worn while attending the event. All attendees must present a valid, government picture ID (Driver's License), when picking up their badge. Conference badges are to be worn at all times during the event.

Attire
The appropriate dress for this conference:

Industry/Contractors/Civilians: Business Casual (slacks and open collar)
Active Duty Military: Uniform of the Day

- Back to top -

Lodging

A small block of rooms has been reserved at the conference site:

Hyatt Regency Bellevue
900 Bellevue Way N.E., Bellevue, WA 98004
(425) 462 1234

	This AAA four-diamond hotel offers views of the Olympic and Cascade mountain ranges and is a part of the Bellevue Collection, the Northwest's premier shopping destination.

AFEI has reserved a block of rooms at the conference site hotel at the rate of $239.

This rate is available until May 25, 2008. Please contact the hotel directly for your rooming reservation and specify Enterprise Security Management.

- Back to top -

Sponsorships

AFEI offers a variety of sponsorship packages for this event. Please download the AFEI Sponsorship Prospectus (PDF) for additional details and contact AFEI to discuss your strategic marketing plan.

Exhibits and Technology Demos
AFEI is seeking vendors wishing to demonstrate their innovative, agile COTS technology solutions at the conference. Space is limited and is on a first-come, first-served basis. For details and prices download the application (pdf).

Contact Info: Betsy Lauer (703 247 9473)

- Back to top -

AFEI is a proud affiliate of the National Defense Industrial Association

--------------------------------------------------------------------------------

2111 Wilson Boulevard, Suite 400 • Arlington, VA 22201
Phone: 703-247-9474 • Fax: 703-522-3192

- Back to top -

4th DoD Open Technologies Conference
October 29, 2008

Information Sharing Federations
December 2, 2008

Warfighter's Vision
March 5-6, 2009


	AFEI is an affiliate of the National Defense Industrial Association


	Association For Enterprise Integration 2111 Wilson Boulevard, Suite 400 • Arlington, VA 22201 Phone: 703-247-9474 • Fax: 703-522-3192 For more information, e-mail [email protected] Directions to AFEI AFEI is an affiliate of the National Defense Industrial Association.

Enterprise Security Management

SPRING FORUM in SEATTLE June 17 - 18, 2008 Event Number 8A02

ESM - the new DOD doctrine for a holistic approach to information assurance.

Purpose

SPONSORED BY

Key Speakers

Agenda

View the Program Brochure and Agenda here (PDF)

ESM Defined

Download the NSA Brochure here

Registration

Lodging

This AAA four-diamond hotel offers views of the Olympic and Cascade mountain ranges and is a part of the Bellevue Collection, the Northwest's premier shopping destination.

Sponsorships

AFEI is an affiliate of the National Defense Industrial Association

SPRING FORUM in SEATTLE
June 17 - 18, 2008
Event Number 8A02