Adventures in (Dynamic) Network Segmentation or And That's How I Got This Scar

Presented at RVAsec 2017, June 8, 2017, 2 p.m. (50 minutes)

Network segmentation is a great way to build a foundation for a thorough approach to defense in depth as part of your security program. The benefits can be great, but the path is not without some risk of its own. This talk with review some of the challenges and successful strategies to create a solid and sustainable practice on getting your arms around what is out there and on your network. The presenters, fresh from a large scale project to do this at a health system, will cover tips, tricks, pitfalls and the like to let you approach this very useful tool with your eyes wide open.


Presenters:

  • Shannon Yeaker - Impact Makers
    Shannon Yeaker, PMP, CISA, CAHIMS is a Lead Consultant with Impact Makers in the Governance, Risk and Compliance (GRC) Practice. She is a dynamic IT professional with extensive experience in Information Security, control design, risk management, project and process management at a Fortune 200 company in the financial services industry. She is a certified Project Management Professional (PMP), a Certified Information Systems Auditor (CISA), Certified Associate in Healthcare and Information Management Systems (CAHIMS) and holds additional certifications in Business Process Management, Agile, Lean and Scrum. Shannon is a member of the Virginia Chapter of the Information Systems Audit and Control Association (ISACA). Currently serving as a Project Manager assisting a $3.5 billon healthcare system with multi-year and multi-million dollar information security transformation program. She manages the delivery of secure network segmentation to over 30,000 endpoints in 7 states.   Shannon was previously with Capital One, for more than 20 years. She has a Master’s Certificate in Project Management from George Washington University and a Bachelor of Science in Psychology from James Madison University.
  • Rick Lull - ePluis
    Lifelong geek turned security consultant after stops as a desktop tech, server bubba, and network jockey. Rick is a healthcare IT survivor, and is now playing Horatio on the bridge for hire with a local technology consulting company, advising clients on security strategy and operations. He currently holds CISSP, CCNP-Security and NSE4 certifications and previously held CEH and CNA certifications. He has promised to not make fun of any manufacturers during his talk.

Links:

Similar Presentations: