FBI Cyber Task Force Update + Implementing Security Compliance Through DevOps Automation / Splunk My Logs Please!
May 19, 2020 by CJ LogsdonREGISTER HERE
A Zoom account is required for this special event.
Monday June 1st, 2020 / 6:30 PM (PST)
WHO: Southwest CyberSec Forum
WHEN: 1st Monday of each month 6:30 PM (MST)
WHERE: Virtual Zoom Meeting: Register Here or use **Direct Link **to Meeting.
WHY: To stay current with new cyber threats, explore new security technologies, and network with your peers.
FREE: No membership fees, no RSVP’s
Sponsor: Check Point Software
Our thanks to Check Point Software for sponsoring this months meeting!
Check Point Infinity is the first consolidated security across networks, cloud and mobile, providing the highest level of threat prevention against both known and unknown targeted attacks to keep you protected now and in the future.
Contact: Enterprise Team: AZ,NM,NV Brian Besse: Territory Manager BBesse@CheckPoint.com 949-521-3590 Jon Fallon: Security Engineer JFallon@CheckPoint.com Michael Reuland: Business Development MReuland@checkpoint.com Katie Schweger Renewals Specialist KSchwege@checkpoint.com
[6:30-6:35 PM]
Announcements
- Announcements and Updates (~5 min)
[6:35-6:50 PM]
Cyber Security Community updates
- Cyber threat update with Erik Graham (~15 min)
[6:50-7:05 PM]
Sponsor Segment
- Short presentation by our sponsor (~15 min)
[7:05-7:50 PM]
Implementing Security Compliance Through Automation
Joseph Bennet - Lead Consultant Contino, Aaron Brock - Lead Consultant Contino, Jason Lutz, NPA - Senior DevOps Consultant, Security
Topic:
Hybrid cloud change control and compliance can be manual, cumbersome and not scale well. Joseph, Aaron and Jason will present how they migrated a manual process of log ingestion for clients AWS flow logs into an automated process driven by what are typically considered DevOps tools such as Git, Ansible, Jenkins, Terraform and Trumpet. This reduced the process timeline from days to hours, and allowed different teams to more effectively collaborate in managing the process. This mash-up of tools and how they were used provides important lessons for the future of Security Automation. Don’t miss this highly technical presentation which will include demo code and interactive chat session with the presenters.
Bio:
Joseph: Joseph Bennet has 14 years working in the IT industry, and 7 years as a consultant ups killing clients and their staff in the deployment, management, and use of various technologies. Joseph Bennet's includes a wide range of industries including financial, entertainment as well as public sector experience working with organizations such as the US Patent and Trademark Office and the Army Research Laboratory.
Aaron: Aaron N. Brock, is passionate about delivering solutions which create business value for clients. His forte is to tightly integrate iterative technological improvements with people-focused learning and upskilling, creating an environment where positive change is encouraged. He continues to evangelize a Cloud-First approach following DevOps best practices. Aaron has extensive experience in Docker, K8s, Jenkins, Ansible, Terraform and more. He continues to work with a wide breadth of companies across a variety of industries ranging from gaming to large financial institutions, and has experience at every level of the software development lifecycle.
Jason: Passionate in building cloud security programs, implementing open source technologies, and addressing information security risk. As a certified ISO 27001 Lead Implementer: he understands what it takes to build and reinforce information security management systems (ISMS) with a specialized focus on cloud implementations. He continuously increases his security, compliance and technical skills; combining these skills to create a unique amalgamate of knowledge to offer to our clients.
[7:50-8:40 PM]
FBI Cyber Task Force Update
by FBI Special Agent Paul Schaaf, also Phoenix Co-Infragard Coordinator
Topic:
Paul and team will provide an update from the FBI Cyber Task Force on the onslaught of on-line misinformation and how it is going to force our society to change the way we consume information and trust sources.