The Northeast Ohio ISSA Security February Meetup

February 2010 Chapter Meeting What: A Year of ISO 27001 and 27002 (17799) When: February 11, 2010 - 1pm to 5pm Where: Parma South Branch of the Cuyahoga County Library Cost: Free! As we will continue in our series titled: "A Year of ISO 27001 and 27002," we are very pleased to have Gary Sheehan and Rick Blanch teach us about access control as it pertains to the ISO standard. You will find a brief overviews of Gary and Rick and their presentations at the end of this article. In this month's Tech Talk, Craig Campbell will give an overview of a very popular open source port scanner: Nmap and it's graphical user interface called Zenmap. Finally, Steven Dove will give us an update on our hacking challenge. If you missed January's meeting and would like to participate in our hacking challenge, please find the link to it in the "Links of Interest" section of our website. And remember, prizes will be given to the challenge winners. February's Presentation Overviews: ISO 27002 - ACCESS CONTROL (Gary Sheehan) Information technology governance, compliance and security play an integral role in managing enterprise risk. To be effective, risk and security must be addressed from a business perspective, using business terminology and metrics. In this presentation we will discuss how ISO 27002 guides you through managing access to your IT infrastructure, while ensuring you focus on those controls that support your organization's goals and objectives. In particular we will cover: * ISO 27002 Basics, Terminology & Definitions * User Access Management * Network Access Management * OS Access Management * Application Access Management * Remote Access Management AUTHENTICATION STRATEGIES FOR IDENTITY ASSURANCE (Rick Blanch) There are a variety of authentication solutions on the market today ranging from simple, password driven, single sign-on solutions to complex risk based engines. We will discuss what these solutions are, when they should be used and what some of the compliance drivers are. If you have any questions about this event in general, please contact Craig Campbell at campbcr@neoissa.org.