ISSA-Kansas City Chapter Event

July 28th, 2016

Please join ISSA chapter members and other security professionals at Rye Restaurant, Leawood, KS. You can view our monthly newsletter at www.kc.issa.org!

Topic: I have a SIEM, Now what do I do?

 

Topic Summary:

Whether it be compliance, management initiatives, or security maturity driven more and more companies are implementing SIEM technology. What we would like to discuss is what happens after a SIEM is in place and where it can assist any organization by increasing security posture, reducing time to discovery for security incidents, or simply increasing the power of a security analyst.

During this discussion we will go through some common benefits other than “filling the compliance checkbox” and give some great starting points "I have a SIEM, now what do I do with it!?" We will cover topics such as advanced correlation rules/searches, risk scoring, threat feeds, user behavior analytics and advanced use case development. Each of the topics comes with a riveting real world example of something we’ve seen at a client site.

 

 Speaker/Bio:

Sean White is an Information Security researcher and practitioner who has been searching for small needles in large hay stacks for over 14 years. Initially entering the IT workforce in 1995 as a telecom NOC technician, System Administrator and webmaster (back when that was a thing), Sean has been intimately involved with operational aspects of "big iron" computing for a long time.

Officially getting a "security" job in 2003, Sean was most concerned with day to day operational aspects of running a large network while simultaneously perfecting "InfoSec perfect play" from a defensive standpoint, and this lead naturally to a job on the "SEM team" of a large telco in 2005. From that point forward, he has been focused on engineering and architecting an information security posture that is most suited to withstanding attack and otherwise "failing gracefully" for the largest of organizations.

In 2010 Sean exited the telecom vertical and entered banking, and in 2014, he finally "sold out" to working for a vendor, (Splunk). The operational lessons from his early career is what Sean brings to every client he touches as a Security Consultant. His non work interests include a passion for wargaming, game theory, raising his 9-year-old daughter, and the lives and mating habits of the sea otter.

 

Date:  Thursday, July 28, 2016 from 11:30 AM to 1:30 PM

Agenda: 11:30-12:00 PM Greeting and registration 12:00 PM  -  1:00 PM - Meeting & Presentation 1:00 PM  -  1:30 PM - Questions, Answers & Networking  Menu: Chief's chooice of Salad and lunch entree.  Vegetarian option available, please inquire upon registration for the event. (Menu subject to change)   Price:  $20.00 for ISSA Members. $30.00 for Guests/Non-Members. Thank you for your attention and response. We look forward to seeing you at the event. If you have any questions about the event or how to register, please email our RSVP email, or contact the venue for directions. Remember to read our monthly news letter at www.kc.isssa.org  See you all!

Cheers!

Melissa Salazar
ISSA-Kansas City Chapter
rsvp@kc.issa.org

Register Now!