2007 CONFIRMED SPEAKERS


Click on a speakers name to view their Bio.


SPEAKER ORGANISATION COUNTRY
Nick Baskett Matta UK
John Blackley Global Information Security Services, Dell USA
John Ceraolo JM Family Enterprises USA
Michael Coady CA Consulting USA
Professor Brian S. Collins Department of Transport UK
Jon Colombo Cap Gemini UK
Lawrence D. Dietz Tal Global USA
Aaron Earle AE&E Corporation USA
Gerhard Eschelbeck Webroot AUSTRIA
Todd Fitzgerald National Government Services LLC USA
Jim Gamble Child Exploitation and On-line Protection Centre UK
Lynn Griffin 23es UK
Erik Guldentops IT Governance Institute BELGIUM
Simon Gunning Digilog UK
Michael Hirschfeld Department of Finance & Administration AUSTRALIA
Brian Honan BHConsulting IRELAND
David Lynas COSAC Chairman IRELAND
Scott A. Miller Boeing USA
John O'Leary Computer Security Institute USA
Gerry O'Neill Inforisca UK
Justin Peltier Peltier & Associates USA
Mark Rasch FTI Consulting USA
John Rockwood Independent Consultant USA
Dr E. Eugene Schultz High Tower Software USA
Brad Smith Computer Institute of the Rockies USA
Mike Softley Ultima Risk Management Ltd UK
Dr. Peter Stephenson Norwich University USA
Krina A. Snider Sprint Nextel USA
Andrew Townley Archistry Limited IRELAND



From 1992 when Nick started his career at Quotient Plc, the company that made the London Stock Exchange settlement system, Nick has performed a technical management role at companies like Mondas Plc and Cap Gemini before heading up IT at Killik & Co Stockbrokers in 1995, eventually becoming an equity partner and running IT and Operations.

Nick set up Matta in 2001 to bring professional consultancy in Information Security to the financial markets and beyond. Recently, Matta has expanded to include a Technologies company focussing on bringing an innovative product to market, and Nick is Managing Director of this new venture.





A native of Scotland, educated at the University of Glasgow, John's first Information Security position was with a financial services company in Louisville, KY. He began work there in security systems administration and rose to become Director of Information Security And Business Contingency Planning. During that time, John also became a member of the faculty at Eastern Kentucky University advising on the university's Loss Prevention program.

Moving to Texas in 1992, John was Director of Information Security and Business Continuity Planning for one of the nation's Fortune 100 corporations - the financial services arm of Temple Inland corp. In 1995, John became Senior Consultant for Europe's largest dedicated Information Security consultancy and carried out engagements for national and multi-national organizations in such locations as Seoul, Mauritius, Brussels, London, Lisbon and Dublin.

Returning to Texas, John joined Netigy (now Thrupoint) as Regional Information Security Practice Manager, contributing to the information security effort in the south-central region of the United States. He had responsibility for business development, training and delivery in the information security practice.

John then moved to Peltier And Associates, a boutique information security consultancy, where he managed operations and led the delivery in that company's large-scale projects.

Today, John is employed at Dell Inc. in Austin, Texas where he focuses on information security policy and standards and the implementation of an information risk management process.

John has co-authored three books, published a number of articles in the business press and has been a speaker at conferences and seminars around the world. He teaches on subjects such as privacy management, policy creation and implementation, risk management and information security management systems.






John is currently the Director of Information Security at JM Family Enterprises, a recognized leader in the US automotive distribution industry. He has been with JM since late 2005. John is a CISSP and has been in the IT business for 22 years, the last 17 focused on security and has worked previously with Citrix, Siemens and VNU Publishing. He has been a past speaker at COSAC, CSI and COMPSEC conferences.






Mr. Coady is a Global Vice President with CA Inc. with seventeen years of Privacy and Technology experience. During the past 12 years he has worked with two Big Five Firms and lead Forensics and Security investigations both in the public and private sector. Mr. Coady has worked with Computer Task Forces around the world and has developed an enterprise security methodology to help mitigate risks to companies. Mr. Coady has also played vital architecture and implementation experience during deployment of Identity and Access Management technologies with large corporations.

Mr. Coady has worked with many U.S. and European based clients implementing the European Privacy Directive in the early 1990's. He is a renowned National Speaker for Privacy and Security as it relates to HIPAA, GLBA and SOX compliance. He has managed over 60+ Health Insurance Portability and Accountability Act (HIPAA), EU Privacy Directive (EUPD), Gramm-Leach-Bliley Act (GLBA), Sarbanes Oxley (SOX) engagements nationwide for clients in the public and private sector.





Professor Brian Collins became the Department for Transport's Chief Scientific Adviser in October 2006. He is also Professor of Information Systems at the Defence College of Management and Technology (DCMT), Cranfield University. He is the DCMT academic leader for all ICT research and education, and his personal research focuses on information management using next generation information and communication technology. Brian is a graduate of Oxford University where he read Physics and also obtained his doctorate in Astrophysics. His early career was in the scientific civil service, culminating as Deputy Director of RSRE and then Chief Scientist at the Government Communication Headquarters. He then worked in the private sector at KPMG, Wellcome Trust and finally as Chief Information Officer for Clifford Chance. He has been an adviser to several Government Departments on Identity management, information assurance and ICT in general.

His publications include 'Trust and Crime in Information Societies' jointly edited with Professor Robin Mansell of LSE, and a chapter in the book 'The Fourth Resource, Information and its Management' edited by David Best, entitled 'Practicalities of Information Management'. He speaks widely on matters to do with Identity Management, Information Assurance and Security and Information and Communications Technology in general.

He is a Fellow of the British Computer Society and a past Vice President, a Fellow of the Institute of Engineering and Technology and a past Vice President, a Fellow of the Institute of Physics and Fellow of the Royal Society of Arts and Design.





Jon Colombo is a Managing Consultant with Capgemini's UK Security Consulting Practice where he leads the Management and Governance Competency.

Jon started work as an archaeologist, with degrees from London and Oxford. In the mid '80s he moved into the field of IT, gaining an MBA from City University in 1993. In the early 90's he switched to Business Continuity, setting up the function at Smith New Court Securities. He has worked in 'pure' Information Security roles for the last 13 years, setting up and running Information Security functions at United Friendly Insurance and WestLB AG, London, before moving to Capgemini in 2003.

Jon is a qualified CISSP, CISM and MBCI, regularly publishes on a variety of Information Security topics and serves on the editorial boards of Information Security Bulletin and Computers and Security.





Lawrence Dietz has over 30 years of diversified military and commercial information security experience. At Symantec Corporation for 6 years, he served most recently as Senior Director of Government Solutions. Other roles included Corporate Strategist, Director of Enterprise Marketing for North America, and Director of Market Intelligence, Analyst and Government Relations. A well respected analyst, he held key analyst roles with Zona Research and Giga Information Group. Mr. Dietz has been an analyst of the market for information security products and services since 1978. He has published a wide array of articles and reports and is a sought after speaker.

A licensed attorney in California and a recognized authority in compliance, Dietz has lectured internationally on SOX and other critical legal issues related to the Internet and Electronic Commerce. He retired as a Colonel in the U.S. Army Reserve, where assignments include a variety of Intelligence and PSYOP positions. He holds BS in BA from Northeastern University, MBA from Babson College, JD from Suffolk University, LLM in European Law from Leicester University, United Kingdom and Masters in Strategic Studies from the U.S. Army War College.





Aaron Earle has been securing computer and network systems just shy of a decade. In this time he has accumulated seventeen certifications and one corporation. Aaron Earle has been involved with System Auditing, Vulnerability Assessment, Security Architecture, and Corporate Policy Writing. Aaron is an avid speaker and instructor for many security organizations world wide. He has taught for prestigious security organizations such as Computer Security Institute (CSI) and Information Systems Security Association (ISSA). Aaron has also instructed personnel from almost every United States three or four letter government agency including NSA, FBI, and DOD. Aaron Earle's talent has taken him around the world informing, educating, and safeguarding governments and companies alike.

Aaron Earle has provided wireless security services for the biggest wireless company in the world, along with secure wired and wireless network architecture for the biggest automaker in the world. Aaron Earle is a Published Author, Chief Executive Officer, and a renowned Information Security Expert.





Gerhard Eschelbeck is the CTO and senior VP of engineering at Webroot Software. He has held executive roles with Qualys, Network Associates, McAfee, and founded IDS GmbH, acquired by McAfee. He is a published author, an inventor of CVSS, and holds numerous patents in the field of managed network security. He earned masters and PhD degrees in computer science from the University of Linz, Austria.





Todd Fitzgerald, CISSP, CISA, CISM serves as a Medicare Systems Security Officer for National Government Services, LLC (NGS), Milwaukee, WI which is the nation's largest processor of Medicare claims, and subsidiary of WellPoint, Inc. (NYSE:WLP) the nation's largest health insurer.

Todd was named as a finalist for the 2005 Midwest Information Security Executive (ISE) of the Year Award, nominee for the national award, judge for the 2006 central region awards, and has moderated several ISE Executive Roundtables in 2006. Todd has authored articles on Information Security for The 2007 Official ISC2 Guide to the CISSP Exam, Information Security Magazine, The Information Security Handbook, The HIPAA Program Reference Book, Managing an Information Security and Privacy Awareness and Training Program, and several other security-related publications. Todd is also a member of the Editorial Board for ISC2 Journal/Information Systems Security Magazine and Darkreading.com security publication and is frequently called upon to present at national and local conferences. Todd serves on the Board of Directors for the HIPAA Collaborative of Wisconsin, and is an active leader, participant and presenter in multiple industry associations such as Information Systems Security Association (ISSA), Blue Cross Blue Shield Information Security Advisory Group, CMS/Gartner Security Best Practices Group, Workgroup for Electronic Data Interchange (WEDI), Information Systems Audit and Control Association (ISACA), Executive Alliance Information Security Executive Roundtables, and others.

Todd has 28 years of Information Technology experience, including 20 years of management. Prior to joining NGS, Todd held various broad-based senior Information Technology management positions for Fortune 500 organizations such as American Airlines, IMS Health, Zeneca (subsidiary of AstraZeneca Pharmaceuticals), Syngenta, as well as prior positions with Blue Cross Blue Shield of Wisconsin.

Todd holds a B.S. in Business Administration from the University of Wisconsin-LaCrosse and a MBA with highest honors from Oklahoma State University.





Jim Gamble has a strong background in counter terrorism and was Head of Special Branch Intelligence in Belfast, Northern Ireland. Here he was in charge of all counter terrorism and operations relating to Irish terrorism in the UK and overseas. Having joined the Police Service of Northern Ireland in 1982 (formerly the Royal Ulster Constabulary) he set about securing a wide range of command experience serving as both a uniform and detective officer in what was one of the most challenging policing environments in the UK.

At the end of 2001, Jim took up a leading role with the National Crime Squad for England and Wales as an Assistant Chief Constable and, in 2004, as Deputy Director General. His extensive portfolio included a number of key disciplines that provided a cutting edge service to national and international law enforcement. These include responsibility for professional standards, legal services and firearms policy. Jim was also responsible for the UK's National High Tech Crime Unit, co-ordination of Operation Ore - the UK's largest ever investigation into online child abuse - and the national Paedophile Online Investigation Team.

Jim Gamble is passionate about keeping one step ahead of criminals through the use of technology to combat crime, particularly crimes against children. To this end, Jim led the creation of the Virtual Global Taskforce to bring together law enforcement agencies from around the world to fight online child abuse. He is the ACPO lead for online child abuse and for child trafficking and co-chairs the ACPO Data Communications Group. In this role, he has represented the Home Secretary in Europe on matter of data retention.

In November 2005 Jim Gamble was appointed by the British Government as Chief Executive of the new Child Exploitation and Online Protection Centre. The Centre formally started work in April 2006.

Jim has a diploma in Applied Criminology and Policing Studies and is currently studying for a MSc in Criminal Justice at Cambridge University.

He is married with three children.





Lynn Griffin was called to the Bar in 1991 since which time she has developed a practise in all levels of criminal courts centered on the prosecution of intellectual property crime, fraud, hi-tech crime and professional discipline/regulation.

Lynn leads the Intellectual Property Crime team within 23 Essex Street. She has extensive experience of not only of public and private prosecutions, or prosecuting for local government trading standards departments but also working with in-house legal teams and City firms. Amongst her current cases, she is leading counsel for the prosecution in an alleged conspiracy to defraud with 12 defendants being prosecuted privately on behalf of the film and music industry.

Lynn's disciplinary practice is centered on healthcare regulatory tribunals. She appears regularly on behalf of the General Medical Council ("GMC"), conducting cases involving a wide range of alleged professional malpractice including, allegations of poor performance, fraudulent/dishonest behaviour, the mis-prescription of drugs, indecent behaviour and general misconduct.

Lynn is also fully trained in dealing with the many cases involving vulnerable witnesses. She has substantial experience in video and TV link cases where the witnesses were children or vulnerable adults and also in cases where technology has been used to create indecent images and attempt to conceal them or avoid liability.

Amongst her training and speaking commitments in 2006 Lynn has presented papers at the Anti Counterfeiting Group annual conference, and the Trading Standards Institute Conference and Exhibition [Excel]. She is a regular contributor to 23 Essex Street's programme of continuing professional development for barristers and solicitors, as well as a registered supervisor of pupil barristers and an advocacy trainer.

Recognised as a leading junior in several legal directories and guides to the legal industry including the Legal 500 and Chambers and Partners within her spheres of expertise, she is ranked as a "leading junior" in Chambers and Partners' Clients Guide to the UK Legal Profession in the category of "Professional Discipline".

She is renowned for her "extreme thoroughness" [2005] and is described as "One of the better juniors in the field," Lynn Griffin "makes all the right noises." [2006]





Erik Guldentops, CISA, CISM is active in several committees of the IT Governance Institute and an executive professor in the Management School of the University of Antwerp, Belgium, where he teaches the subjects of IT security and control, IT governance and risk management. In 2001, he retired as director of security of SWIFT, where he also previously held the position of chief inspector. He initiated and has headed the development of COBIT since the early 1990.





Simon Gunning CFE direct's DigiLog's technical services including voice analysis and call centre risk solution packages, (forensic tape analysis, third party screening, interview assessments), investigation support and training, investigations, IT security awareness training. Digilog has a strong presence in insurance, banking, police and government, accountancy, human resource departments and call centres.





Michael is Assistant Secretary, Strategic Partnerships Branch in the Australian Commonwealth Department of Finance and Administration and has executive responsibility for both Physical Security and Records Management within that agency.

He has previously held roles with a number of Australian government agencies responsible for delivering a range of Commonwealth services to the Australian community. He has been involved in both business and technology systems, advising on issues such as security, audit outcomes and risk management. He was previously the head of Technology Security for the Australian Taxation Office.

Michael has been involved in Security for the past 7 years and has been effectively educated by a group of excellent technical staff. He has been involved in a number of working groups defining the direction of whole of government initiatives in both E-Government and e-security including the "Secure Communications" and "On-line Authentication" working groups.

He takes a leadership role in the delivery of security services to the organisation focussing on risk analysis, governance and assurance, policy and awareness in building effective and practical security measures. Prior to entering the Technology Security arena he held positions in Information Technology managing the delivery of workflow and imaging solutions as well as managing IT Training in a number of departments.

He has a diverse background and has been managing major projects since the mid 80's. He began his career as a programmer and project manager on IT systems and holds a Bachelor of Engineering, a Diploma in Education and a Master of Business Administration.





Brian Honan has over 20 years experience in the IT industry working with high profile companies and clients and has extensive experience in managing and delivering projects and services. Brian has in-depth technical experience which is backed up by his strong business knowledge. Brian's key strengths are his technical knowledge, his ability to translate business goals into IT objectives and his commitment to deliver projects on time and under budget.

All of Brian's work is standards driven, whether that is ITIL and BS 15000 for Service and Operations Management, PAS 56 for Business Continuity or BS 7799 for IT Security projects. Brian is a certified BS 7799 Lead Auditor and can advise clients on how to implement their Information Security Management System, audit their ISMS or assist clients in achieving compliance or registration to the BS 7799 standard.

Brian has worked with organisations of varying sizes, from small to medium based businesses, to large companies and multinationals. Brian has also worked extensively with Government departments both in Ireland and the United Kingdom and has provided advice to various Government security agencies and the European Commission.

Brian is a member of the Information Systems Security Association, a working member of the GAISP project developing IT Security standards, a member of the British Standards Institute, the Irish Computer Society and was a founding member of the Irish Corporate Windows NT User Group.

Brian is recognised as an industry expert on topics such as information security and has addressed a number of major conferences relating to the management and securing of information technology. Brian has recently presented at Ireland's National IT and e-Security Summit 2007 & 2006, the Effective Implementation & Management of IT System 2007, SANS Amsterdam and other industry specific events.

Brian has also had a number of technical papers published and has been technical editor and reviewer of a number of industry recognised publications. Brian is currently a member of the editor board for the SANS (SysAdmin, Audit, Network, Security) Institute's weekly SANS NewsBites a semi-weekly electronic newsletter.





David Lynas FBCS SCM, is the founder and chair of COSAC, Managing Director of the David Lynas Consulting Group, the co-author of SABSA, and Director of the SABSA Institute. He is a Fellow of the British Computer Society and the only professional from outside North America ever to be honoured with the Computer Security Institute's Lifetime Achievement Award.

David is currently enjoying his twenty-fifth year of experience in Information Security, during which he has been invited to provide strategic advice to governments and industry clients on every continent. He has a proven record of success in leading literally hundreds of projects across the broad spectrum of business sectors. His work has ranged from solving local business security issues up to high-profile national and global strategic initiatives with budgets of hundreds of millions of dollars.

David is co-author and developer of SABSAŽ the leading Methodology for designing business-driven Security Architecture and resolving complex business security issues. He is also co-founder of the SABSA Institute (www.sabsa-institute.org) charged with world-wide development and governance of the method and the professionals who use it. He is the co-author of 'Enterprise Security Architecture: A Business-Driven Approach' (ISBN 1-57820-318-X) commissioned to be the definitive and most comprehensive information security management reference ever published.

David is in constant demand as a presenter and speaker and has delivered major presentations, key notes, and training seminars on more than forty different aspects of Information Security, Strategy, and Architecture around the globe. Approximately 15,000 Information Security, Audit, IT professionals and Business Executives have attended David's seminars and presentations in the past three years.





Scott A. Miller, MTM, CISSP is a Security Integration Engineer for The Boeing Company where he is responsible for developing processes and delivering information protection solutions to enterprise customers. Prior to his current position, Scott was a Systems Engineer at Boeing responsible for architecting and designing network and infrastructure systems for delivery to the US Dept. of Defense. Prior to joining Boeing in 1999, Scott also worked as systems administrator, application developer, IT instructor, and wireless network engineer.





John G. O'Leary, CISSP, is Director of Education for the Computer Security Institute. A computer security practitioner since the mid-1970's, he has designed, implemented, maintained, administered, troubleshot, managed, consulted on and taught security for networks ranging from single-site to multi-national with very different security needs. His background spans programming, systems analysis, auditing, project management, operations, production control, customer service, troubleshooting and quality assurance. He also taught every semester for ten years at the University of Texas at Dallas Graduate School of Management, covering a wide range of Management Information Systems courses. John has preached the value and methodologies of computer security to audiences around the world. He is the winner of the 2004 COSAC Award.





Gerry O'Neill is a regular COSAC presenter and participant, with over 20 years experience in information security, risk management audit and governance - from the various perspectives of systems analyst, IT auditor, security consultant and CISO. He is a strong believer in the philosophy of sharing of experience to drive and build our profession, and also has the honour of having been the presenter of the opening session at the very first COSAC, now fourteen years ago. Gerry is managing director of Inforisca Services Limited, an independent consulting business in IT Security, Risk Management and Control Governance & Assurance. These services build on his extensive personal network of industry and professional colleagues and clients, across the UK and globally.

He also holds the role of Senior European Representative for I-4 (the International Information Integrity Institute), a global top-100 member forum with aims of fostering information sharing and developing strategic thinking on threats, implications and responses around business risk and security. Previously, he was Head of Group IT Risk for a major banking Group, where he was responsible for developing and maintaining all aspects of the Group's strategy for IT Risk. This included definition of IT security policy, thought leadership on security and risk management, and functional leadership for the IT security community across the Group. Policy compliance, data protection and regulator liaison on IT risk issues also fell within his scope.

Prior to this, he has held a number of security and risk management roles in leading consultancy organisations, such as PricewaterhouseCoopers, CMG Admiral and the National Computing Centre.






Justin A. Peltier is a Senior Security Consultant with extensive experience in firewall and security technologies. Mr. Peltier currently holds ten certifications in an array of technology and security products and is the author or co-author of several security books, including "Information Security Fundamentals" and "How To Manage a Network Vulnerability Assessment" and is currently working on "Security Testing: Practices, Guidelines and Examinations".

Mr. Peltier has been involved in implementing, supporting and developing security solutions and has taught courses on many facets of IT security including, Vulnerability Assessment and CISSP preparation.

He has also directed the security practice development and trained at the corporate level with companies like, Suntel Services and Netigy.

Justin has taught classes for a variety of training institutes and companies all across the United States, Europe and Asia.





Mark D. Rasch joined FTI as managing director in the Technology practice in February 2007. He brings over 24 years of experience in the information security field, having served for nine years as the head of the United States Department of Justice computer crime unit, and having prosecuted key cases involving computer crime, hacking, computer fraud and computer viruses. As managing director at FTI, Mr. Rasch will be focused on helping clients in the areas of computer security, privacy and incident response.

Mr. Rasch has spent the last 15 years consulting with commercial and governmental clients on matters related to computer security, regulatory compliance, and electronic evidence handling and computer incident response. For the past 3 years he was the senior vice president and chief security counsel and Solutionary. Prior to Solutionary, Mr. Rasch helped establish the SAIC Center for Information Protection (CIP), a business unit within SAIC dedicated to commercial information security consulting. Starting with 9 people, the CIP developed first into Global Integrity Corporation, a wholly owned SAIC subsidiary, and then was acquired by Predictive Systems, Inc. Prior to that, he was in private practice with the Washington, D.C. office of Arent, Fox, Kintner, Plotkin & Kahn.

While at the Department of Justice, he was responsible for investigations of computer hacking cases including those of the so-called "Hannover Hacker" ring, Kevin Mitnick and was the lead prosecutor in United States v. Robert T. Morris, against author of the Cornell Internet Worm in 1988. He helped the FBI and Treasury Department develop their original procedures on handling electronic evidence. He created and taught classes at the FBI Academy and the Federal Law Enforcement Training Center on electronic crime and evidence. He also investigated, prosecuted and handled appeals on complex white-collar criminal cases involving consumer protection fraud, banking and securities fraud, insider-trading, public corruption, Department of Defense procurement and contract fraud, counter-intelligence matters, export control, pharmaceutical fraud, and violations of federal mail fraud, wire fraud, tax fraud and Foreign Corrupt Practices Act laws. He was co-counsel in United States v. Lyndon LaRouche, as well as complex cases against organized crime figures.

He has taught evidence law at the Catholic University School of Law, and white collar and computer crime at the American University School of Law. He has taught other computer and privacy law courses and incident response classes at the University of Fairfax, George Washington University, George Mason University, and James Madison University. He has also lectured at Stanford University, Harvard University and Harvard Law School.

Mr. Rasch is frequently featured in news media on issues related to technology, security and privacy including. He has appeared on or been quoted by NBC News, MSNBC, Fox News, CNN, The New York Times, Forbes, PBS, The Washington Post, NPR and other national and international media. He writes a monthly column in Symantec's Security Focus online magazine on issues related to law and technology and is a regular contributor to Wired magazine.





JJohn is an Independent Information Security Consultant currently working for the Ohio Department of Education, where he acts in an advisory and consultative role in implementing a complete Information Security Management Program. With more than 17 years experience in Security Certification & Accreditation of Information Technology Systems in both the United States Department of Defense (Trusted Systems) and Private sector (Fortune 100 financial services company). John has 7 years experience with implementation and compliance with Visa CISP (PCI) and BS7799 / ISO 17799.





Dr E. Eugene (Gene) Schultz, Ph.D., CISM, CISSP, is the Chief Technology Officer at High Tower Software, a company that develops security event management software. He is the author/ co-author of five books, one on Unix security, another on Internet security, a third on Windows NT/2000 security, a fourth on incident response, and the latest on intrusion detection and prevention. He has also written over 100 published papers. Gene is the Editor-in-Chief of "Computers and Security" and is an associate editor of "Network Security" and "Information Security Bulletin". He is also a member of the editorial board for the SANS NewsBites, a weekly information security-related news update and is on the technical advisory board of three companies. He has been an adjunct professor of computer science at Purdue University, where he taught courses and participated in research in the CERIAS (Center for Education and Research in Information Assurance and Security) program.

He has received the NASA Technical Excellence Award, the Department of Energy Excellence Award, the Information Systems Security Association (ISSA) Professional Achievement and Honor Roll Awards, the ISACA John Kuyers Best Speaker/Best Conference Contributor Award, the Vanguard Conference Top Gun Award (for best presenter) twice, the Vanguard Conference Director's Award, and the National Information Systems Security Conference Best Paper Award. Additionally, Gene has been elected to the ISSA Hall of Fame.

While at Lawrence Livermore National Laboratory he founded and managed of the U.S. Department of Energy's Computer Incident Advisory Capability (CIAC). He is also a co-founder of FIRST, the Forum of Incident Response and Security Teams. Dr. Schultz has provided expert testimony before committees within the U.S. Senate and House of Representatives on various security-related issues, and has served as an expert witness in legal cases.





Brad Smith (RN,CISSP) started his computer training in 1971 and is still going strong. In 1996 his software "2the BedSide" was a national HIMSS award winner. His company, the Computer Institute of the Rockies was selected as the 2005 Microsoft Small Business Solution Partner of the Year for their innovative and cost effective business solutions.

He is a frequent speaker at the American Medical Informatics and the American Nursing Informatics conferences, where he makes complex ideas simple to grasp. Brad is known for his high-energy style of presenting and the real-world experiences he shares during these sessions.

Brad is one of the few RN's and CISSP's in America. He was the sponsor of the 1st Internet Nursing Grand Rounds, 1st webcast to rural Montana's for continuing education credits (1997) and 1st online chat between the Montana Nurses Association and the American Nursing Association.

Brad values an active session where everyone is encouraged to share their ideas. RN, ASCIE, BS-Psy MCNPS, CISSP, NSA-IAM.





Mike Softley was the recipient of the COSAC Award for 2006. Mike has been involved in Information Security and, previously, Computer Audit since the mid 1980s, largely working within the financial services sector. A number of years were spent as an independent consultant where his work involved managing the Information Security Department of a number of investment banks. Since 2003, Mike has been a Senior Security Consultant with a UK based risk management consultancy team. His work includes helping clients in achieving compliance with ISO 27001, developing business continuity strategies and plans and implementing data protection management systems. Mike is also accredited by the British Computer Society to deliver the training for their ISEB qualification, Certificate in Information Security Management Principles (CiISMP).





Dr. Peter Stephenson, CISSP, CISM, FICAF is a writer, researcher and lecturer on information assurance and risk, information warfare and counter-terrorism, digital investigation and forensics on large-scale computer networks. He has lectured extensively on digital investigation and security, and has written or contributed to 14 books and several hundred articles in major national and international trade, technical and scientific publications. He is the Associate program director in the Master of Science in Information Assurance program at Norwich University where he teaches information assurance and digital investigation on both the graduate and undergraduate levels, a research professor at the Norwich University Applied Research Institutes and Chief Information Security Officer for the University.

He has lectured or delivered consulting engagements for the past 23 years in eleven countries plus the United States and has been a technologist for over forty years. He operated a successful consulting practice for over 20 years and has worked for such companies as Siemens, Tektronix and QinetiQ (UK).

Dr. Stephenson obtained his PhD in computer science at Oxford Brookes University, Oxford, England where his research was in the structured investigation of digital incidents in complex computing environments.

He is on the editorial advisory boards of "Information Systems Security", International Journal of Digital Evidence", and the "Norwich University Journal of Information Assurance". Dr. Stephenson is editor-in-chief of the "Journal of Cyber Conflict" and technology editor for SC Magazine.

Dr. Stephenson is a Fellow of the Institute for Communications, Arbitration and Forensics in the UK, and is a member of Michigan InfraGard and the International Federation of Information Processing Technical Committee TC 11, Working Group WG 11.9, Digital Forensics. He serves on the steering Committee of the Michigan Electronic Crime Task Force. His research is focused on information conflict.





Krina A. Snider is a marketing & communications professional with 20 years experience in strategic marketing, communications, advertising and public relations. Snider has a Bachelor's of Science in Technology - Commercial Graphics and is currently the Manager of Security Awareness for Sprint Nextel Corporation.

Snider is the corporate lead for developing and managing marketing and communications initiatives within the area of security. She manages security communications, presentations, education, and promotion efforts. Snider is charged with improving overall security awareness among all Sprint Nextel entities, associates and business partners; designing and managing the security web site and electronic communications; developing security communications that build knowledge base among all levels of the organization; enhancing the security training curriculum; and developing communication strategies for Corporate Security management.

Snider has successfully coordinated key marketing and communications initiatives for three Fortune 500 companies. She is a highly creative professional who applies a unique perspective in all that she does and is a charter member of the CSI National Security Awareness Peer Group.





Andrew is the founder and Managing Director of Archistry Limited, bringing over 12 years experience in delivering innovative solutions to the Mobile & Wireless Telecommunications, Public Sector, Financial Services and Software industries. His primary focus is helping organizations ensure they have the right technology strategy to deliver their business objectives.

Prior to founding Archistry, Andrew was a Manager and Technical Architect with BearingPoint Ireland where he was the Principal Design Authority and Enterprise Architect for the Irish Government's Public Services Broker-the SOA backbone of Ireland's e-government efforts.

Andrew is an active member of the SOA and Security communities, including holding the CISSP security certification and regularly speaking on these topics at conferences such as SOA for E-Government, InfoSeCon and worldwide OASIS events. He is a regular contributor to the US Government's SOA Community of Practice and has published articles in Information Security Bulletin magazine and the InfoQ on-line community.

Andrew is a member of the Association for Computing Machinery, the IEEE Computer Society and the Irish Computer Society.




All content on this web site © 2007 COSAC
- All Rights Reserved -