Presentation:

This session will delve into the development process of defining a strategic direction for information security within a company.  A methodology will be covered that is common within the principles of strategy development, but it will also examine the peculiarities of security (ROI, prioritization, and risk management) as well as discuss the workings of the methodology for strategy justification.  The fundamentals of a proprietary tool will be demonstrated also to illustrate the justification process.

Chris Kostick is a Senior Manager within the Security and Technology Solutions (STS) practice of Ernst & Young LLP and is the lead security specialist in the areas of network and wireless security, cryptographic services, and security information and event management within Ernst & Young's Security Architecture Center in Baltimore , MD.  He has over 16 years of experience in the information security field starting his security career at NSA in telecommunications and operating system security, and 19 years of experience in information technology.  Mr. Kostick has also taught graduate level courses on the topics of TCP/IP Networking and Networking Security at Johns Hopkins University for a number of years.  He has a Masters of Computer Science from Johns Hopkins University and a Bachelors of Mathematics from Marshall University .