April 2023 Annual General Meeting - In Person Only

When:  Apr 20, 2023 from 08:00 to 18:00 (MT)
Associated with  Denver Chapter

Annual General Meeting

All day 8 hour CPE Event, free to members.

Schedule (click on each link below to see more details about that session):

8:30-10:00a - Scott Welle - Outperform the Norm
Outperforming leaders are not born; they’re made. We ALL have the capacity to “raise our game". This is a dynamic, high-energy presentation that will unlock your competitive advantage and give you an effortless action plan to put into place immediately. And you’ll have some fun too :)
Learn to:
  • Condition a mindset for maximum growth and success
  • Unleash sustainable energy, stamina and physical vibrancy
  • Challenge limiting beliefs about yourself you didn’t know you had
  • Adopt mental routines for increased confidence and resiliency


Scott Welle

https://scottwelle.com/speaking/

2-hour workshop on Leadership and Peak Performance

Scott Welle has spent more than 15 years helping people do this, personally and professionally. He has authored 9 bestselling books, has a Master’s degree in Sport Psychology, is an adjunct professor at St. Olaf University and consults with top performing business leaders and athletes, all with one common goal: to OUTPERFORM. He serves others by showing them how to tap into the mindset of challenging their self-limiting beliefs and aspiring to be their individual best every day.

10:00 - 10:15a - Break

10:15-11:15a - Tyler Fornes - Shift left and automate the rest: Building the SOC of the future
Today’s security operations center (SOC) is focused on accelerating capabilities to keep up with constantly evolving, complex threats. This approach has led to a solid foundation in automation, integration, and context to help security analysts respond quickly and efficiently. But with the ever increasing security signal and data at hand, security operations can easily be bogged down by overalerting, a heavy reliance on human knowledge, and the never ending struggle between time spent on reactive response vs. proactive mitigation. So how do we better empower the SOC of today to address these problems in the future? By leveraging automation and decision support, the SOC of the future enables analysts to spend less energy consumed by data—freeing up time for more impactful projects that help harden defenses and saves analysts’ best talents for work outside of the alert console. Join Tyler Fornes, Principal Solutions Architect at Expel, to:
  • Explore the shift from the traditional SOC to a model where integration, context and automation help increase the efficiency of security operations.
  • Examine the role of automation in helping analysts make smarter, better informed decisions in the face of cyber threats
  • Unlock the full potential of your security operations team to expand their role and capability in helping proactively identify vulnerabilities and secure the modern enterprise.


Tyler Fornes is a Principal Solutions Architect at Expel. Tyler formally led Expel's Global Response Team in performing incident response for both Expel's enterprise and cloud offerings. Prior to Expel, Tyler worked at FireEye after receiving a M.S. in Computing Security at the Rochester Institute of Technology.

11:15 - 11:30a - Break

11:30-12:30a - Brad Rhodes - Teaching CyberSecurity with Science Fiction
From "Star Trek" to "Star Wars" to "The Matrix" to "Minority Report" and even the recent "The Mitchells vs the Machines", Science Fiction is goldmine of technology concepts that have changed our world. At the same time these stories which have shaped the fabric of generations, they serve as guideposts of the need to have a security mindset in the modern world that boasts an increasingly connected internet everything. In Science Fiction we find every concept imaginable including Artificial Intelligence (AI), Social Media "credit scores", Virtual Reality, Hoverboards (which are sadly not real just yet), and more that can potentially be used for both good and bad driving us to:
  • ask questions about security
  • impacts on privacy
  • how technology impacts the world


Brad E Rhodes is a Senior Manager at Accenture Federal Services.  He is a Cybersecurity Engineer specializing in: Defense, Vulnerability Assessments, Threat Intelligence, Hunting, Incident Response, Risk Management, & Exercise Design Professional Certifications: CISSP-ISSEP, ISACA (CISM, CDPSE), PMP, GIAC (GLEG, GCED, GMON, & GCIH), EC-Council (C|EH, CNDA, CTIA, & E|CIH), CompTIA (CASP+, CySA+, Security+, PenTest+, Linux+, Cloud+, Project+), CCII, Safe Agilist Brad has 25+ years of professional experience with multiple specialties: defensive cyber operations (US Army Cyber Officer), incident response and handling, vulnerability assessments kinetic-cyber simulation implementation, blue vs red team cyber exercises (planning and execution), cyber risk management, information operations (incident communications and messaging (qualified US Army IO Officer)), geospatial information systems/intelligence (certified in Collection Operations), space operations (qualified US Army Space Operations Officer), satellite communications (wideband, protected, narrowband, and commercial systems), systems engineering disciplines, export control regulations and implementation, and policy and procedures development. Goals: Lifelong learning and growth leading to continued success in both my civilian and military (Army Reserve) careers balancing my priorities of faith, family, and service.

12:30 - 1:45p - Lunch and ISACA Denver Chapter Update

1:45 - 2:45p - Paul W. Phillips III - ISACA International Update
Paul will provide an update from ISACA International on the topics below:

  • Certifications
  • Digital Trust
  • COBIT
  • CMMI
  • ISACA Mentorship Program
  • One-In Tech Foundation



Paul is the Director of Event Content Development for ISACA International. He holds a bachelor’s degree in Accounting and an MBA with concentration in both Management and MIS. He also holds an honorary Doctorate in Divinity from the Hope Seminary and Bible Institute. He is a Certified Information Systems Auditor, a Certified Information Security Manager, Certified Data Privacy Solutions Engineer and a Certified Personal Trainer. He has worked in corporate America in various capacities for 37 years. He has also worked as a part-time professor for several universities and other various institutions of higher learning for 20 years including Northwestern University, the University of Chicago, Lewis University, and Aurora University.

Paul is an award-winning international public speaker and has spoken for organizations such as the National Institute of Standards and Technology, of the US Department of Defense Department, ISACA International, MIS Training Institute, Institute of Internal Auditors, Shirley Ryan Ability Lab, Kemper Lakes Golf Club, Lincoln Challenge Military Academy, IMPACT Family Center, Teen Challenge, and various schools, churches, and conferences across North America, Africa and Europe.

Paul is the recipient of numerous awards including the Barnabas Award in March 2015, Impacting Our World Award in October 2015, the Man of Excellence Award in March of 2018, Bridging the Gap Award in March of 2020, and the Tied to Greatness Award in December of 2021

2:45 - 3:00p- Break

3:00-4:00p - Myles Satterfield - Tales from the Trenches and How to approach the cloud with incident response in mind
Attackers continue to exploit the cloud in both an opportunistic and targeted matter. A common theme for attackers over the last year was leveraging long term access keys to gain initial access to cloud environments. What happens when attackers get their hands on a set of these Amazon Web Services (AWS) access keys? How can we prepare to respond to the variety of incidents that can happen in the cloud in both the data and control plane? Join Myles Satterfield to:
  • Walk step by step through our process in detecting and responding to an AWS incident where an attacker compromised multiple long term access keys
  • Discuss how to approach incident response in the cloud and how to enable your team through automation and investigative mindset
  • Explore takeaways in how to protect your organization in the future


Myles Satterfield is a Manager of the Global Response Team at Expel. There, he leads a team of senior and principal analysts responsible for handling critical incidents for Expel’s customers. In this role, Myles helps customers stay ahead of their enterprise and cloud environments, 24/7—chasing down attackers, and leads his team as they adapt to ever-evolving tactics and attack techniques. Myles applies the lessons from his own incident response background to guide his current team in delivering world-class response for Expel’s customers. A graduate of Marshall University, Myles began his cybersecurity journey as a security operations center (SOC) analyst and has experience in detection engineering.

4:00- 4:15p - Break

4:15-5:15p - Carlin Dornbusch - Privacy in a Modern Era
Carlin Dornbusch, the President of https://www.americancsm.com/, will discuss:
  • recent privacy regulations
  • how to prepare your business to meet them
  • commonalities
  • evolution of the privacy market


Carlin Dornbusch, CISSP, President, AmericanCSM.com, is an innovative leader in Cybersecurity and Data Privacy. His company, American Cyber Security Management (https://www.americancsm.com/), brings proven methods, best-in-class tools, and deep knowledge of data privacy and security standards to every client engagement. AmericanCSM.com excels at creating custom privacy and security programs to meet the demands of modern threats and emerging compliance. Prior to starting AmericanCSM.com, Carlin worked for some of the most rapidly growing technology and solutions companies in the world, where Carlin and his teams developed hundreds of business leading solutions including digital transformation, workforce productivity, IT simplification, business automation, customer service, and market expansion. He has served in the roles of CTO, CIO, CISO, CPO and COO for companies ranging from early-stage revenues to $3B+, across a variety of industries. Carlin serves as the ISSA Denver Recording Secretary and is an active member of the Cloud Security Alliance (CSA), OWASP, and IAPP Denver. Carlin also holds a Certified Information Systems Security Professional (CISSP) certificate from ISC2 and is an ISSA Senior Member.

past event

Location

Sheraton Denver West
360 Union Blvd
Lakewood, CO 80228

Contact

Don Mapes
3038194393
don.mapes@rubinbrown.com