* What to expect from this year’s FISSEA conference
The Federal Information Systems Security Educators’ Association is one of my favorite organizations. Although the organization was founded in 1987 to help federal government information systems security professionals, it is open to all information systems security professionals, trainers, educators, and managers responsible for information systems security training programs in federal agencies.
In addition, says the Web-site blurb, “There are NO membership fees; all that is required is a willingness to share your products, information and experiences.”
I have been attending FISSEA conferences for years and think they are a wonderful resource for everyone involved in security awareness, training and education. Everyone I have ever met there has been friendly, cooperative and intelligent (an amazing statement but true). It was at FISSEA that I met my good friends Louis Numkin, K. Rudolph and Gale Warshawsky who later collaborated on the chapter in the _Computer Security Handbook, 4th Edition_ covering security awareness.
This year’s conference will be on March 22 and 23 at the Bethesda (Md.) North Marriott Hotel and Conference Center. The agenda hasn’t been posted on the Web site yet, but I received the preliminary version in the mail and it looks great. Highlights include presentations on:
* Writing a strategic training plan.
* Writing a security plan.
* Role-based training for the system development life cycle.
* Transforming an organization by maintaining a sustainable security awareness training and education program.
* Spyware defense.
* How a search engine can be used as a reconnaissance tool by potential attacker.
* Developing and implementing a CIRT team.
* Five ways to determine if your training program is reality or Fantasy Island.
* Running the river – reading and responding to end-users.
* Advanced awareness, training and education techniques.
* The new NIST security standards and guidelines for FISMA (Federal Information Security Management Act).
I will present a review of my own Web site called “Security training and awareness materials: Mich’s grab bag.”
I hope to see you there!
