The Binomial Bookstore

IT SECURITY ESSENTIALS FOR THE BUSINESS PROFESSIONAL
VIDEO (VHS or CD)
by WatchIT

“Scott Helmers, a partner with Massachusetts-based consulting firm, Harvard Computing
Group a, talks about IT security from technical and business standpoints. In an interview,
Deloitte and Touche partner Rena Mears discusses how to measure ROI for security
investments. The program also includes a case study featuring Kevin Hardcastle, IT manager,
Data Security, at Blue Cross and Blue Shield of Missouri, who discusses his organization's
successful security program. Helmers examines the technologies involved in IT security, and
describes how they are used to meet three key challenges: authentication of people and
computers, privacy, and integrity of data. He also offers best practices and
recommendations. After watching this program, business and technology managers will
understand how the elements of information security affect their organizations' use of
computers and the Internet. In addition, they will know how to recognize and overcome the
hazards associated with insufficient security, and how to measure ROI for a security
initiative.”

“Viewers of the CD and online versions of the program can easily access white papers that
include 'Privacy: 10 Items You Should Address'; 'Protect Your Knowledge Base: How to Put
Together a Workable Security Plan'; 'Two-Factor Authentication: Making Sense of All the
Options'; 'The Principles of Enterprise Security Policy and Decision Making' and 'Maximizing
the Value of Network Intrusion Detection.' Among the more than 90 Web links included are:
'A Practical Guide to Biometric Security'; 'Developing an Information Security Policy'; 'Making
Passwords Secure'; 'Most IT Security Problems Are Self Inflicted'; 'Seven Elements of Highly
Effective Security Policies'; 'Understanding Password Cracking'; 'The Truth About Computer
Virus Myths and Hoaxes'; 'What Is a Digital Signature?'; 'What Kind of Firewall Do You
Need?'; 'Why Use Encryption?' and 'Calculating Return on Security Investment.'“

- - - - - - -

PROGRAM TOPICS:

* INTRODUCTION
* AGENDA INCLUDING EXPERT INTERVIEWS AND CASE STUDIES
* PROGRAM ROI

* CHALLENGES, RISKS AND TECHNOLOGIES ASSOCIATED WITH IT SECURITY
* Three Key IT Security Challenges Must Be Met
* Three Key IT Security Challenges: Authentication
* Three Key IT Security Challenges: Privacy
* Three Key IT Security Challenges: Data Integrity
* Why the Three Key IT Security Challenges Must Be Met
* Developing Effective IT Security
* Developing Effective IT Security: Local Area Networks
* Developing Effective IT Security: Organizations With Multiple Locations
* Developing Effective IT Security: Encryption and Authentication Are Essential
* Four Categories of Key IT Security Technologies
* Key IT Security Technologies: Access Control
* Key IT Security Technologies: Access Control – Passwords; Automatic Log Off; Remove
Privileges Upon Termination; SecurID; Two-Factor Authentication; Smart Cards; Biometric
Devices; Biometric Devices Plus Smart Cards
* Key IT Security Technologies: Information Security
* Key IT Security Technologies: Information Security – Antivirus Tactics; Encryption and
Digital Keys; DES and Triple DES; Single-Key Encryption; Dual-Key Encryption; Backup;
Firewalls; Intrusion Detection Systems; Vulnerability Scanning Systems
* Key IT Security Technologies: Network Security Protocols
* Key IT Security Technologies: Network Security – The PPTP Protocol
* Key IT Security Technologies: Network Security – The IPsec Protocol
* Key IT Security Technologies: Network Security – The SSL Protocol
* Key IT Security Technologies: Network Security – Wireless Technologies
* Key IT Security Technologies: Transaction Security
* Key IT Security Technologies: Transaction Security – Digital Signatures
* Key IT Security Technologies: Transaction Security – Digital Certificates
* Key IT Security Technologies: Transaction Security – Public Key Infrastructure

* ROI MODELS FOR IT SECURITY INVESTMENTS
* Rena Mears: Building a Business Case for IT Security
* Rena Mears: The Life Cycle of Data Affects ROI
* Developing the Return on Security Investment
* Rena Mears: Implementing a Data Strategy – Authentication and Authorization
* Rena Mears: Case Study – Upgrading Authentication and Authorization
* Organizations Have Shown a Compelling Business Case Based on Cost Avoidance
* Rena Mears: The Incidence and Costs of Viral Breakouts Have Increased Dramatically
* Rena Mears: Costs Associated With Viral Breakouts
* Rena Mears: Have a Holistic Approach to Security and Privacy
* Research Groups Have Made Progress in Quantifying Return on Security Investment –
ROSI
* Old Methods of Justification Will Continue Until More Data Becomes Available

* IT SECURITY CASE STUDY: BLUE CROSS AND BLUE SHIELD OF MISSOURI
* Kevin Hardcastle: IT Security Case Study – Blue Cross and Blue Shield of Missouri
* Kevin Hardcastle: IT Security Case Study – Promoting Compliance With Government
Regulations
* Kevin Hardcastle: IT Security Case Study – Policies for Day-to-Day User Processes
* Kevin Hardcastle: IT Security Case Study – Technologies Supporting Security Policies
* Kevin Hardcastle: IT Security Case Study – Best Practices Supporting Security
* Kevin Hardcastle: IT Security Case Study – Calculating ROI in Security Is Tricky
* Kevin Hardcastle: IT Security Case Study – The Value of Security: Controls and Measures

* BEST PRACTICES AND RECOMMENDATIONS FOR ESTABLISHING EFFECTIVE IT
SECURITY
* Establishing Effective IT Security: Maintain Your Security Technology
* Establishing Effective IT Security: Train Users and Managers Adequately
* Establishing Effective IT Security: Enforce Policies and Practices
* Establishing Effective IT Security: Grow Security Along With the Organization
* Establishing Effective IT Security: Match Security to the Organizational Structure

* SUMMARY AND CONCLUSION

- - - - - - -

SCOTT HELMERS

“Scott Helmers is a partner with the Harvard Computing Group, where he manages the
education practice in addition to consulting on e-business technology and process issues.
He has worked in several dozen countries and has delivered seminars in India, Ireland, Egypt,
Jordan, Singapore, Malaysia, Canada, and the United States since 2000. Scott is the creator
of the acclaimed 'Driver's Ed for the Information Superhighway' seminar series. In the years
before joining Harvard Computing Group, Scott ran his own consulting firm, and held positions
in business development, product management, technical support and software development
for several companies, including Action Technologies, Cabletron Systems and Wang
Laboratories.”

- - - - - - -

KEVIN HARDCASTLE

“Kevin Hardcastle is manager of IT Data Security for Blue Cross and Blue Shield of Missouri.
He has been working in application development, network management, e-commerce Web
engineering, and data security since 1984. He has presented at conferences that include
Faculty Member for The Internet Security Conference 2000, held in San Jose, where he
spoke about HIPAA security regulations; and Common Sense Approach and The Federal
HIPAA Conference 2000 for Market Access, held in Washington D.C., where his topic was
HIPAA security regulations and BS7799 best practices”

- - - - - - -

RENA MEARS

“Rena Mears, a partner with Deloitte & Touche, is the marketplace leader of the company's
Security Services practice in Northern California, and one of the firm's leading practitioners of
global privacy. She has more than 15 years experience in management consulting, with an
emphasis on the design and implementation of secure systems and process solutions. Rena
has been Deloitte & Touche's partner-in-charge of significant global privacy projects involving
privacy assessments, the design of methodologies for surveying and inventorying personally
identifiable information across large entities, the development of privacy risk frameworks, and
the design and implementation of secure infrastructures. In addition, she has advised her
clients on issues involving the European Union Data Protection Directive, Safe Harbor,
Gramm-Leach-Bliley, and HIPAA. Rena regularly presents at conferences and workshops,
speaking on subjects related to data privacy, cross border data flows, secure architecture
and public key infrastructure implementation. Rena is a Certified Information Systems
Security Professional (CISSP), Certified Information Systems Auditor (CISA) and Certified
Public Accountant (CPA). She is also a member of the American Bar Association Information
Security Committee, the American Institute of Certified Public Accountants Information
Technology Committee, and a founding member of the IBM Privacy Management Council.”

- - - - - - -
AVAILABLE ON:
Videotape, CD-ROM
- - - - - - -

2002, Video (45minutes)
Order #DR687VHS OR DR687CD
SPECIAL ORDER ITEM.

The Binomial Bookstore

Videos

Rothstein Associates Inc.