Reboot Communications Limited

12th Annual Privacy and Security Conference
Security and Privacy - Is there an app for that?

February 16th - 18th, 2011

Hosted by the Province of British Columbia Victoria Conference Centre
Victoria, BC, Canada

Notional Agenda

* = invited

Sessions marked with the logo indicates the session will be webcast live.

Wednesday, February 16, 2011
Pre-Conference Privacy and Security Workshops
9:00am – 4:00pm	All day workshops Workshop L: Flex 4 Desktop and Mobile Training (Colwood II) Duane Nickull, Senior Technical Evangelist, Adobe Systems, Inc. Join Adobe Senior Technical Evangelist Duane Nickull for an intensive boot camp on Flex 4. The session will be largely hands on and attendees will learn the key new developments in Flex 4 and Flex 4.5, the latter being optimized for mobile. Attendees will learn the internal Flex 4 component architecture and how to take advantage of the new IDE’s capabilities. Each attendee will leave with all the source code on their computer as well as pointers to resources for continued learning. Preparation: To take this course, attendees will need to arrive with Adobe Flash Builder 4.5 installed on their laptops. There is a free 60 day trial available at labs.adobe.com. Additionally, if you have an unlocked Android mobile device, please bring it with a cable to tether to your computer. If not, you may use the mobile emulator. Additional software may be distributed during the course including an emulator to write applications for the BlackBerry Playbook device as well as some general course assets.
9:00 – 12:00	Morning workshops Workshop A: Virtualization (Theatre) Brian Duckering, Senior Manager, Endpoint, Symantec Virtualization is one of the largest and most enduring initiatives in IT today, and can have broad implications for IT budgets, end-user productivity, infrastructure configuration, and, yes, Privacy and Security. But what is virtualization, really? Aren’t there different types of virtualization? Is it good or is it bad? How do we make decisions about things we don’t quite understand? This workshop is designed to demystify the topic of virtualization and to differentiate the various types of virtualization in plain English. For example, what is the difference between server virtualization, desktop virtualization and endpoint virtualization? At the end of this workshop, you will have practical knowledge to help you make good decisions about virtualization. How to evaluate different technologies – what will help and what might hurt your privacy and security exposure. What technologies to adopt and what to avoid to address specific problems and objectives in your organization. This workshop is designed to benefit all experience levels. Workshop B: iSMART and You: Managing Your Risk (Oak Bay) Ken Prosser, Security Specialist, Information Security Branch, Office of the Chief Information Officer, Ministry of Citizens’ Services, Province of British Columbia Join Ken Prossser, Security Specialist, BC Government to review the process of doing a Security Threat and Risk Assessment (STRA), how to use the information Security Management and Risk Tool –iSMART, and how to implement and report the results of the review. This will be a 2 ½ hour session with a demo of the iSMART tool. Workshop C: Identity Management (Saanich) Denny Prvu, Senior Principal Consultant, CA Technologies This workshop is non-vendor specific and is designed for professionals who are involved in designing and implementing an Identity Management strategy in their organizations. The purpose of the workshop is to help build a successful Identity and Access management strategy suitable to their organization. Providing information, guidelines and interactions, the workshop will allow individuals to design a customized roadmap to a successful IAM implementation. The course is will cover the following: Key IAM business drivers. IAM components needed for a complete platform. Business and financial benefits of IAM. Key stakeholders to be approached with any IAM strategy. Methods to overcome challenges and obstacles and create acceptance and commitment to the IAM project. The complete IAM decision making process. IAM planning and implementation stages. Key success factors for any successful IAM strategy. Effective IAM business cases. Guidelines for early, quick action on IAM implementation. The course is designed to include both experiential and informative learning. New concepts will be introduced. Participants will have the opportunity to apply some of the newly learned concepts to their own strategy issues through individual exercises. In addition, small group activities and large group discussions will enable the participants to receive an additional dimension of IAM strategy through others’ experiences and challenges. The course is intended to empower participants with the knowledge required to succeed in developing and implementing their IAM strategies. Workbooks and content will be provided. Workshop D: Acrobat X Pro, ADOBE (Colwood I) Michael Cooper, Director of Training and Development, ADOBE Experience the full power of Acrobat Dynamic PDF to deliver next-generation PDF communications with Adobe® Acrobat® X Pro software. Customize PDF Portfolios with layouts and color palettes. Automate multi-step tasks. Enjoy improved optical character recognitions (OCR), integration with Microsoft SharePoint, and services at Acrobat.com. Join us for a demonstration of the top features of Adobe® Acrobat® X Pro software and learn how to: Add documents, e-mail, spreadsheets, and rich media into a single compressed PDF Portfolio. Create and distribute PDF Forms, then collect the data even from free Adobe® Reader® Users. Streamline your team's reviews and approvals. Create searchable PDF documents from scanned paper using the new ClearScan OCR. Protect confidential information with security and redaction tools. Reuse scanned content with greater accuracy through improved optical character recognition (OCR) and spot and correct OCR errors. Use the new Action Wizard to automate, standardize, and share multistep tasks for PDF production. Workshop H: Information Security Horizons for 2011 - The Impact of Wiki leaks and other Emerging Issues (Sidney) Norm Chan, Systems Engineer, McAfee Michael Legary, Principal of Seccuris Inc. From our first civilian accounts of international cyber warfare impacting Canadian businesses, the confrontational relationship of privacy and security in our organizations and critical failures of secure infrastructure we all rely on, 2010 has been a game changing year for information security across the globe. Michael Legary, Seccuris and Norm Chan, McAfee, will discuss some of the largest impacts we will see within our countries, organizations and communities in the New Year. Michael will introduce some of the key research Seccuris Labs has been working on to help understand and mitigate these impacts as well as introduce some of the community security initiatives going on across Canada. And Norm will discuss how you can move from reactive, to an optimized security state by putting in place a strategic, and connected, security framework.
1:00 – 4:00	Afternoon workshops Workshop E: Digital Forensics and eDiscovery (Oak Bay I & II) Francis Graf, President, FDR Forensic Data Recovery Inc. Megan Ritchie, Manager, FDR Forensic Data Recovery Inc. Distinguishing Digital Forensics from eDiscovery – how do you know which you need? Digital Forensic Best Practices- practical applications eDiscovery Best Practices – practical applications Identifying potential sources of digital evidence and Electronically Stored Information (ESI) Identifying the potential “land-mines” of digital evidence preservation collection and analysis Practical strategies for managing the digital evidence collected The audience will benefit from an understanding of the importance of collecting and preserving digital evidence, or electronically stored information (ESI) in a manner that satisfies current court standards. The audience will learn the potential sources of digital evidence as well as the unique challenges associated with preserving, collecting and analyzing digital evidence from each of these sources. Francis will use real world examples from his firm’s experience providing digital forensics and eDiscovery professional services to government organizations, police departments and corporations. These case examples will illustrate current best practices and provide strategies for mitigating the risk of losing or overlooking critical evidence in a variety of cases, from human resources computer misuse allegations to privacy breaches and criminal cases. Workshop F: Privacy by Design: From Resolution to Reality (Theatre) Ken Anderson, Assistant Privacy Commissioner, Province of Ontario Steven Dougherty, Cyber Security & Privacy Architect, Global Center of Competency for Energy and Utilities, IBM Karl Martin, President & CEO KMKP Engineering Faizal Javer, Director Business Operations, Intel/Cogno Vision Don MacPherson, Senior Manager, Deloitte "Every business needs to listen to Ontario's Privacy Commissioner Ann Cavoukian and design privacy principles and practices into their operations" proclaimed Don Tapscott in the Globe & Mail. At Reboot, find out how you too can successfully translate Privacy by Design (PbD) into great practice. After sharing an update about the PbD foundational principles, you'll hear from a savvy entrepreneur who made PbD a cornerstone of his success. A senior member of a major multi-national business will explain how PbD was used to secure trust in leading-edge energy operations. You'll also learn how a innovative public organization embraced PbD and biometrics to create a winning difference for tricky surveillance problems. As a bonus, hear how Privacy by Design has been a major factor in the recent consultations of the U.S. Department of Commerce, the FTC, and the Consultation on the EU Commission's comprehensive approach on personal data protection in the European Union. You too can be a privacy leader. We'll show you how with practical, proven steps using Privacy by Design. Join the privacy movement! Workshop I: E-marketing Workshop: complying with Canada’s Online Protection Legislation (Colwood I) Shaun Brown, nNovation LLP Andre Leduc, Industry Canada Canada’s Online Protection Legislation (“COPL”) was passed in December, 2010, and will likely come into force in September of this year. While Canadian marketers have always been required to comply with privacy legislation - as well as the U.S. CAN-SPAM Act in many cases – COPL establishes a number of important new requirements. This workshop will provide participants with the information they need to develop an e-marketing policy that effectively complies with the new online protection legislation. In particular, participants will gain an understanding of: Key requirements under COPL when sending commercial electronic messages, including how the Canadian law differs from the U.S. CAN-SPAM Act Enforcement and penalties, and how to avoid being penalized for ‘honest mistakes’ Intersections between COPL and the Personal Information Protection and Electronic Documents Act Participants are encouraged to come prepared to raise any questions that they may have about the new legislation. Workshop G: Trust and Information Sharing within Government: an IM/IT practitioner’s perspective (Saanich) John Zimmermann, Chief Security Architect Justice Sector, MSB IT Services Division Roger Evans, Senior Technical Architect, OA Solutions Inc. Ratko Spasojevic, Security Consultant Glenn Mahoney, Chief Application Architect, Enterprise Architecture Group, Information Technology Services Division This workshop will focus on some of the technology perspectives related to design and implementation of information sharing within a government systems context. The presenters are all technology practitioners, with experience in the implementation of multiple government systems. Any implementation details discussed will be oriented to high-level system design and technology standards. Workshop J: Data Loss Prevention (DLP) (Esquimalt) Martin Kyle, Principal, Sierra Systems Gene Lee, SE, RSA - the Security Division of EMC You may have heard about it—after all, the whole WikiLeaks story is a result of data loss—but how do you prevent it? How much risk is really involved? Is the technology ready to help? The Forrsights Security Survey of Q3 2010 found that 12% of IT decision-makers are planning to implement DLP in the next 12 months, 15% have already implemented it, and 36% are interested but have no definite plans. Your networking and security departments are likely planning to implement DLP in the near future. This workshop will help you understand the concepts, tools, and potential implementation strategies for a data loss prevention initiative. Come and learn from the experts at Sierra Systems and RSA, The Security Division of EMC. We will take you through a risk assessment process for confidential information looking at the threats, vulnerabilities, and potential impact to your business. We will walk through a set of best practices for preventing enterprise data loss and we will show you how to identify, monitor, and protect data in use, data in motion, and data at rest. Come prepared to roll up your sleeves and do a little work—we will provide some materials and worksheets for your own use and we will also demonstrate some of the technology solutions available to assist you in your efforts. Workshop K: Privacy & Security Workshop – Identifying your Personal and Sensitive Data (Langford) Terry Harper, Symantec National DLP Specialist - Canada Sharon Perkins, Chief Privacy, Security and Compliance Officer, HP Advanced Solutions Inc. In today’s regulatory and compliance environment, organizations face tremendous hurdles working to identify and secure sensitive data. Over the past few years, hundreds of millions of personal data records have been exposed due to security breaches. Sensitive information is not simply on one server; it is distributed across networks on desktops, laptops, and servers and buried within long-since forgotten files and e-mails. What is sensitive data? How can you identify it across your enterprise? This workshop is focused on practical approaches for answering these questions and will utilize case studies and live demonstrations to illustrate these approaches.

Sessions marked with the logo indicates the session will be webcast live.

Thursday, February 17, 2011
7:30 – 8:25 Lobby	Registration
8:25 – 8:35 Salon A/B	Call to Conference Keith Baldrey, Global Television
8:35 – 8:45 Salon A/B	Welcome Remarks Honourable Mary McNeil, Minister of Citizens’ Services (Introduction by Deputy Minister Kim Henderson)
8:45 – 9:05 Salon A/B	Session 1 - Keynote Elizabeth Denham, Privacy Commissioner of British Columbia The value of privacy: In an era of breathtaking technological innovation and cultural shifts in public attitudes, safeguarding personal privacy is more challenging than ever. Regulators face unique and pressing issues in their quest to find a balance between protecting privacy rights supporting business innovation and ensuring transparency and accountability in government. Commissioner Denham will share her perspective, priorities and approach to privacy regulation in British Columbia.
9:05 – 9:50 Salon A/B	Session 2 - Keynote Jeff Jarvis, Associate Professor and Director, Interactive Journalism, City University of New York’s Graduate School of Journalism, author of What Would Google Do? Privacy and publicness are not mutually exclusive; one depends upon the other. Still, in our current mania over privacy, we should pause and be concerned whether we risk giving up the benefits of the connections that the internet enables. Just as we have privacy advocates, do we also need publicness advocates?
9:55 – 10:35	Session 3 – Concurrent Keynotes Dr. Michael Geist, Canada Research Chair of Internet and E-commerce Law, University of Ottawa (Salon A/B) PIPEDA @ 10: What The Next Decade Might Hold As PIPEDA enters its second decade, this presentation will take a look at back at the key themes and trends of the first ten years and look ahead to the key battleground issues in the months and years ahead. Brian Contos, Director Global Security Strategy & Risk Management, McAfee (Theatre) Threats and Trends in Security Business is constantly and rapidly evolving—according to a recent Gartner report, CIOs are transitioning from managing resources to demonstrating value in business terms. Forty-two percent of CIOs surveyed in Gartner’s 2010 CIO Agenda Survey said they have direct responsibility for raising business performance and, by 2013, CIOs say their focus will move from process improvement to innovation, competitive advantage, and customer growth. In parallel, the threat landscape from malicious insiders to advanced persistent threats is changing faster than most IT organizations can cope with. The delicate balance of enabling the business and keeping it secure requires executives to stay informed about these changes so that they can consider them when making decisions. Not so long ago, all you had to protect at your organization were stationary computing systems in designated physical locations. Today, you need security that protects a virtual network of people, networks, services, and applications that can be anywhere at any given moment. Web 2.0, the consumerization of IT, and other trends have added enhanced capabilities as well as complexity. Security needs to achieve the same ubiquity. In achieving this goal, perhaps the greatest enemy is complexity derived from silos of unconnected assets. This presentation has been created to educate and inform. It is based on customer use cases and feedback regarding critical issues from organizations across various government and commercial organizations around the globe. Based on this feedback and analysis from McAfee Labs, attendees will explore several critical areas across threats, trends and business priorities that can be positively impacted by a security connected strategy.
10:35 – 10:55 Lobby	Morning Break
10:55 – 12:10	Session 4 - Concurrent Panels Panel A: Social Media; Transformation of social interaction & individual behavior (Theatre) This panel will examine how social media tools like Facebook, Twitter and Foursquare are changing concepts of privacy and publicity. How should companies, users, and privacy advocates respond to greater sharing of personal information online? Moderator: Alice Marwick, Postdoctoral researcher, Microsoft Research Speakers: Fiaaz Walji, Country Manager, Canada, Websense Kate Raynes-Goldie, Department of Internet Studies, Curtin University, Australia Lori Ruff - The LinkedIn Diva, Chief Learning Officer, Integrated Alliances Lori Bieda, Executive Lead, Customer Intelligence, the Americas SAS Institute Panel B: Information Regulation – The Federal Approach (Salon A/B) This panel will examine the legal, policy and political issues at play in a number of recent federal legislative initiatives. These include, the recently passes anti-spam law, the pending PIPEDA amendments and the pending lawful access bill. Moderator: Jacob Glick, Canada Policy Counsel, Google Speakers: Dr. Michael Geist, Canada Research Chair of Internet and E-commerce Law, University of Ottawa Shaun Brown, Counsel, Law Office of Kris Klein Suzanne Morin, Assistant General Counsel & Privacy Chief, Bell Canada Robin Gould-Soil, Director PIPEDA Investigations, Office of the Privacy Commissioner of Canada Panel C: Identity Management; Who are you? The architecture of trust. (Saanich) The panel will discuss their perspectives on the future of Identity Information Management. Topics will include the effect of cultural differences around the world, technology developments, trust and privacy perspectives, and how organizations can prepare their infrastructures for participation in the digital economy of the future. Moderator: Ian Bailey, Executive Director Architecture & Standards Branch Office of Chief Information Officer Speakers: Jeff Crume, Distinguished Engineer, IT Security Architect, IBM Gordon Hannah, Principal, Deloitte & Touche LLP Sharon Perkins, Chief Privacy, Security and Compliance Officer, HP Advanced Solutions Inc. Greg Turner, Consultant, Sierra Systems
12:15 – 1:30 Salon A/B	Session 5 - Luncheon Keynote Michelle Dennedy, Founder & CEO, The iDennedy Project (Crystal Ballroom) Today's privacy and security professionals face a more complicated and interesting problem set than ever before. Financial challenges and a complex compliance environment make the challenge irresistible to the brave of heart. In this session we will discuss some of the top trends and predictions for the future and how we as information professionals can step up to the challenge. Trevor Hughes, President & CEO, International Association of Privacy Professionals (Salon A/B) Toward Data Environmentalism The myriad channels through which data flows have little friction in the digital era. Organizations gather and store data in exponentially increasing volume. Yet consumers have many concerns that include keeping data private and secure and protected against misuse to managing what and how data is shared with businesses and governments and across communities. Low-friction data channels can be considered valuable information ecologies that are increasingly vulnerable to abuse and scrutiny. Our ability to keep data flowing to create value is threatened by strained policy and regulatory responses at all levels, from corporations to governments. To protect these ecologies of information and ensure they flourish, we must establish a new ethos of data environmentalism and a build new class of data environmentalists who can manage the security and privacy of data while enhancing the availability and value of that data. This innovative session uses examples from modern art and popular culture as well as social and industrial history to illustrate how personal data has become inextricably linked to our everyday lives –and why it is critical to balance effective regulatory and security controls on data with recognition that data flow is essential to our economy and culture.
1:30 – 2:10 Salon A/B	Session 6 – Keynote Speaker Jules Polonetsky, Co-chair and Director of the Future of Privacy Forum, former Chief Privacy Officer at AOL (Salon A/B) Solving the Consumer-Business Privacy Battle – With More Data, Not Less! Online companies talk about privacy, but need data to maximize profits. Consumers worry that their personal information is being used to target or profile them. Drawing on his experience in senior roles in government, industry and privacy advocacy, Jules will argue that there is only one path to achieving privacy, profit and personalization.
2:15 – 2:45	Session 7 – Business Breakouts Alon Sadeh, Symantec (Theatre) Ease the Pain of Windows 7 Migrations Windows 7 migrations are disruptive arduous task which take a lot of planning and resources. Symantec will discuss an exciting new concept to ease migrations - full end user self service migration workflow template. The template consists of a planning module and a migration automation module. We will discuss the major elements of workflow namely: Software Assessment – Utilizing the Symantec Inventory Solution to prioritize compatibility testing and cross-references against MS published list of known compatible applications. Hardware Assessment – Utilizing the Symantec Inventory Solution to identify systems capable of in-place upgrades. An additional provided SMP report can help identify those that can be upgraded to be Win 7 capable. Migration project Defaults – Define which applications should always be installed after a migration job. Migration project creation and configuration Migration execution Denny Prvu, Senior Principal Consultant, CA Technologies (Saanich) Data Loss Prevention – The ultimate Goal and ultimate Destination. Can you really secure your end point? The regulatory environment is changing. Find out what organizations, as well as the public and private sector need to consider to best protect themselves from data leaks. Are inspection techniques, classification just catch phrases? Is Data at rest, or Data in motion a concern for your organization? Are you vulnerable for a data loss? We’ll talk about: What are some of the tools and what do they do? Are you detecting, or inspecting? Should you be detecting or preventing? What has been successful? How do you prepare? For many years, within information technology we have defined and implemented security to protect access to electronic information and the location where it is located Content monitoring, filtering and data loss prevention techniques and technologies are now at the forefront at securing your data. Experiences have allowed us to redefine the approach to looking at Data Access Security and the Policies behind it. Bill Dupley, Chief Solutions Manager, HP Canada (Salon C) Secure Advantage Protecting the modern IT infrastructure from the forces that seek to infiltrate and compromise it may very well be one of the most difficult jobs facing the public and private sectors today. Criminals have shifted from stealing from banks to stealing the identities of individuals. Threats from both inside and outside have increased dramatically. These threats demand a security architecture, that will defend data & resources, protect infrastructure, networks & applications, and validate compliance to audit & regulations as a whole. During this session William Dupley HP Canada’s Chief Solution Executive will discuss the elements and technologies required to build a comprehensive Security Architecture to achieve these security outcomes. Spiros Angelopoulos, Oracle Enterprise Architect (Oak Bay) Reduce Attestation Processing Costs and Boost Compliance with Oracle Identity Analytics Can you attest that the right users have access to your IT systems and unauthorized user access has been removed? Are your compliance cycles never ending? Are your IT staff and budget resources under constant pressure to do more with less? Would your business lines like faster insight into user privileges that are easy to understand? The latest December 2010 Forrester Consulting Total Economic Impact report discusses how Oracle Identity Analytics reduces attestation processing costs and boosts compliance. Join to us to gain insight on how you can: Accelerate compliance—Consolidation and correlation of identity data, together! with a 360-degree view of user access and automated IT controls, give you rapid compliance Strengthen governance—Organizations can better analyze and control risk using actionable dashboards; advanced role mining and analytics; and rich reporting capabilities Empower business—Presentation of identity and access data in business-relevant formats offers greater transparency and sound intelligence to support business decisions Norm Chan, Systems Engineer, McAfee (Esquimalt) Join McAfee for this informative session on how their “Core Protection” strategy enables enterprises to reduce risk, attain compliance, and achieve operational efficiencies — all while protecting data, systems, and networks from current and emerging threats. With an integrated approach to security, McAfee delivers solutions that not only safeguard you from the latest threats, but also save you time and money, and ensure that your workforce can safely use the latest mobile, virtual, and state-of-the-art technologies.
2:45 – 3:00 Lobby	Afternoon Break
3:00 – 4:15	Session 8 – Concurrent Panels Panel A: Behavioral Targeting (Theatre) Behavioural targeting and web monitoring have enormous implications for privacy: businesses are increasingly creating tailored advertising by collecting and tracking consumers’ online browsing behaviour. Regulators, business leaders and privacy advocates discuss trends, challenges and solutions on the international scene. Moderator: Elizabeth Denham, Information and Privacy Commissioner for British Columbia Speakers: Justin Weiss, International Privacy, Yahoo Inc. Jules Polenetsky, Co-chair and Director of the Future of Privacy Forum, former Chief Privacy Officer at AOL Paula Gignac, Canadian Interactive Advertising Bureau Colin McKay, Director of Research, Office of the Privacy Commissioner Panel B: The ‘Naked’ Traveler – is all this necessary? (Salon C) “No privacy rights within 100 miles of U.S. border” – the headline screams. With the proliferation of airport screening and border checks, the travelling public is exposed to increased collection of personal information. There are demands for greater sharing of passenger data with other governments. Have we gone too far? Have we met our goal for increased security? The panel will explore the privacy and security issues from technological, legal, and organizational perspectives. Come expecting a lively and informative discussion. Moderator: Bill Trott, Privacy Officer, University of Victoria Speakers: Mark Duncan, President, AeroEdge Consulting Murray Rankin, Partner, Heenan Blaikie Karl Martin, President & CEO KMKP Engineering Graeme Norton, Canadian Civil Liberties Association Kris Constable, Technical Advisor, PrivaSecTech Panel C: Data Breaches and “Three R’s”: Report, Recover and Remediate (Salon A/B) Uh-oh... A data breach has occurred in your organization! Was it a privacy breach or a security breach? What is the difference and how common are they? What should you do when they happen? This session will look at the elements of privacy and security data breaches, standard data breach laws and policies, how they work and what practices and procedures make them most effective. Moderator: David Flaherty, Information Policy Consultant Speakers: Michelle Dennedy, Founder & CEO, The iDennedy Project Sharon Polsky, President & CEO AM¡NAcorp.ca, President CAPAPA Terry Harper, National Data Loss Prevention Specialist- Canada, Symantec Miyo Yamashita, PhD., Partner, Enterprise Risk, Deloitte
4:20 – 5:05	Session 9 – Concurrent Keynotes Mohammad Akif, National Security & Privacy Lead, Microsoft (Salon A/B) “Securing the Cloud” Cloud computing has drawn the attention of senior technical and business decision makers in Canada as it promises to reduce cost, improve service and enable organizations to focus its resources on its core business. However, there are some key questions that need to be resolved before cloud computing can be widely adopted. These questions revolve around regulatory compliance, service level agreements and privacy and security. In this session, Mohammad Akif will discuss the status of cloud security and how the industry is planning to address the security issues and concerns. He will also discuss how IT and business leaders can make an informed choice about cloud computing and provide an analysis of the risks and benefits based on real world examples. Meghan Stabler, Senior Director, CA Technologies (Theatre) “Privacy, Identity and Cloud – Should You Carry Handcuffs?” The business drivers for cloud computing are compelling: opportunities for businesses and government agencies to focus greater resources and energy on their core competencies, driving innovation, service efficiency and cost reduction, and a flexible IT. But with the increasing adoption of cloud comes growing risk and concerns about data privacy, access and increased risk if processes are not implemented. If we need to provide data flexibility to the business, and therefore the user, how secure should you be without hand cuffing business innovation and operation? Data privacy and security risks have represented increasingly serious business management issues. These risks become more complex and challenging in a ‘cloudy’ enterprise; personal and business-confidential data and information are now stored, processed and communicated, on systems that could be external to the enterprise, in organizations having their own security risk management policies and controls. Now the core components of information security must be managed with greater care by multiple organizations. Executives must therefore understand that in the migration to cloud computing, the implementation and audit of security and privacy risk management policies and controls, once solely an enterprise function, are now distributed across the 'cloud' environment, imposing novel requirements for assessing and managing risk, as well as enhanced governance and more finely calibrated security management policies and practices.

Sessions marked with the logo indicates the session will be webcast live.

Friday, February 18, 2010
7:30 – 8:30 Lobby	Registration
8:50 – 8:55 Salon A/B	Call to Conference Keith Baldrey, Global Television
8:55 – 9:40 Salon A/B	Session 10 - Keynote Sean Doherty, Chief Technology Officer, Enterprise Security Group, Symantec Are you trying to do more with less? You’re not alone. So are the bad guys! The mega trends in Information Technology of virtualization, the cloud and mobile computing can offer great benefits in terms of efficiencies. However these savings are not just restricted to the world of legitimate IT, increasingly they are being used by malicious outsiders to generate data breaches using less resources. In this presentation we will explore how some of these technologies are being exploited by malicious outsiders. We will then look at the strategies that can be used to counter these threats, and how the same mega trends are shaping the future of security.
9:45 – 10:25	Session 11 – Concurrent Keynotes Chris Swecker, retired Executive Assistant Director, FBI; and former Global Security Director, Bank of America (Theatre) Malignant Social Networks: How Virtual Criminal Enterprises Present the Greatest Threat to Our Privacy and Financial Security. Government Agencies, Financial Institutions, and Insurance Companies have been leaders in expanding delivery of a wide range of services, benefits and products via the internet and are planning for the future medium, mobile communication channels. While electronic services are a boon to commerce, customer convenience and business expansion, these technological miracles provide a perfect medium for predatory fraud networks to steal personally identifiable information which is a fungible commodity that can be used to impersonate customers, loot accounts and steal benefits with great effect. Based on number of incidents, monetary losses, and psychological impact electronic crimes targeting consumers, government agencies and business firms have become the most pervasive crime problem of this millennium. In his presentation, Chris will share real-world examples and discuss what executives should be doing to protect constituents and clients from the peril that pervasive fraud can reap. Berin Szoka, Founder & President of TechFreedom (Salon A/B) How can governments protect consumers while preserving the benefits of individualized data collection and use—such as increased relevance of advertising, greater funding for "free" digital media and services, and more precisely tailored messaging? Szoka will outline a principled, pro-consumer alternative to highly restrictive information controls.
10:25 – 10:45 Lobby	Morning Break
10:45 – 12:00	Session 12 - Concurrent Panels Panel A: Data Stewardship (Saanich) “Information is a key asset of any organization and should be managed within a known governance model, roles and accountabilities. Information governance and data stewardship are important aspects of overall information management frameworks in many government sectors. This session will explore three different sectors of government and a SAS Institute representative and how they are addressing these concepts.” Moderator: Chris Norman, Chief Data Steward, Ministry of Health Services, Province of BC Speakers: Phil Jennings, Lead Director Strategic Policy & Information Management, Ministry of Health Ron Warden, Senior Data Architect, Education Sector, Province of BC Peter Friesen, Data Architect, Ministry of Citizens Services Elaine Dawson, Director of Enterprise Data, Ministry of Citizens Services Marc Smith, Principal Solutions Architect, SAS Institute Panel B: Leaks, Leaks and more Leaks; Securing Cyber Space (Salon A/B) Leaks and More Leaks questions conventional wisdom that we are getting ahead of the curve: data leaks are occurring more often than ever before. Our panel of experts will address what are we doing right, what have we been doing wrong and what can an organization do - immediately - to improve their data leak posture. This panel is designed to be highly interactive, encouraging audience questions and spirited debate so the audience comes away with new insights and approaches to a worsening problem. Moderator: Winn Schwartau, Chairman, M@D Partners, LLC, Author: Information Warfare, CyberShock, Pearl Harbor Dot Com, Time Based Security and Internet & Computer Ethics. Speakers: Denny Prvu, Senior Principal Consultant, CA Technologies Brad ‘Renderman’ Haines, Author, Director, Renderlab Dean Turner, Director, Global Intelligence Network, Symantec Security Response Derek Manky, Senior Security Strategist, Fortinet Panel C: "Move It, Don’t Lose It! The Challenges of Data Portability" (Theatre) When you upload your personal information to a social media site, do you still “own” that personal information? And if you want to download it again and move it to another platform, should you be able to do that? What if your information has been integrated with other people’s information or become part of an integral part of an application? This panel will examine the technological and ethical issues surrounding data portability and discuss the privacy and security standards that need to be in place to ensure effective information controls. Moderator: Gary Dickson, Information and Privacy Commissioner of Saskatchewan Speakers: Chris Conley, Technology & Civil Liberties Fellow, ACLU Mathew Ingram, Senior Writer, GigaOM.com Peter Reid, HP Enterprise Business Privacy Officer.
12:00 – 1:15	Session 13 - Luncheon Keynote Dave Nikolejsin, CIO, Government of British Columbia (Salon A/B) Citizens @ The Centre: BC Gov 2.0 BC’s strategy for service transformation and the strategy IM/IT enablers required for success. Dave Nikolejsin will present an overview of the Citizens @ The Centre strategy and discuss how this is going to translate into priority projects for the strategic enablers, including identity information management, and service transformation initiatives. Dave will address the changes underway for how IM/IT projects are planned, assessed, prioritized, and funded. Sigrid Arzt, Commissioner of the Federal Institute for Access to Public Information and Data Protection (IFAI), Mexico (Crystal Ballroom) Security and Privacy in the Mexican context Over the last eight years Mexico has been constructing a framework on privacy and security. The country faces considerable challenges in matters of security and privacy given the technological developments in the field of telecommunications and social networks. IFAI is faced with the test of educating our society with respect to matters of privacy in a context of considerable societal asymmetries. Only very recently is that Mexico joined the group of countries that have a specific legislation for data protection. Yet, having the legislation is not enough if its society doesn’t regard this as a human right. For IFAI this is regarded as a basic cultural change for the next decade.
1:15 – 1:55	Session 14 – Concurrent Keynote Speakers Ritchie Leslie, Director Western Canada, TELUS Security Solutions (Salon A/B) Security and Privacy – Canadian priorities in the post recession Web 2.0 melting pot Each year, TELUS conducts the only study of IT and network security issues, concerns and practices based on Canadian government and private sector organizations. As we exit the end of the “crisis period” of the most recent recession, TELUS will present its observations of what is changing in the world of security and why. We’ll focus on the pressures raised by funding constraints and the security and privacy issues raised by the pervasive use of social media and Web 2.0 applications across organizations. TELUS will present findings drawn from its ground breaking research with the Rotman School of Business, as well as from its work as an R&D provider to security product vendors and as a security solution provider to over 250 public and private sector organizations in Canada. Kevin Cochrane, VP of Enterprise Marketing, Customer Experience, Adobe (Theatre) Citizen Engagement Management Description: The Web is defining, or redefining, the entire public service experience. Online experiences are deeply embedded in the fabric of today’s society. Most everything a citizen does as a consumer involves the Web either directly through enabling technologies or indirectly by the expectations established by other Web-driven experiences. This represents both opportunity and challenges for Government agencies serving citizens or enabling public servants. Traditional IT systems were not designed to support the interactivity of the Web. Back-end systems force users to adapt to the way the systems work and cobble together public service interactions that are limited by the constraints of how database tables and web services were built -- not the way citizens and public servants actually behave. Adobe Systems recently acquired Day Software, a leading Web content management provider, to help government agencies address this challenge and leverage the Web to extend mission success and evolve with these expectations. For government agencies, this means enabling public servants to better assist people in need and people at risk through online enablement, improved service delivery and outreach. Join, Kevin Cochrane and discover best practices agencies can utilize to address these challenges and leverage the Web to extend mission success and evolve with these expectations.
2:00 – 2:30	Session 15 – Business Breakouts Keith Andrews, Business Analyst, Ensemble (Theatre) Implementing Adobe Document Security Solutions in eGovernment This session will review the relevant Privacy and Security services available in Adobe LiveCycle ES 2.5. Following this review, the speaker will reference two or three eGovernment implementation case-studies, highlighting the respective business objectives, lessons-learned and results achieved. The session will conclude with a short Q&A period. Andrew Medd, Senior Manager, Consulting, Deloitte(Saanich) How can social media be leveraged by public sector organizations to improve policy outcomes, make better use of government data and enhance service delivery. Jeff Stiling, Sales Manager, Western Canada and NW US, Palo Alto Networks (Salon C) “Security versus Privacy – Which wins?” In these days of controversial airport pat-downs, the debate of where to draw the line in protecting one’s privacy while also maintaining a secure environment rages on. Like airport security, information security wrestles with this issue. To ensure inappropriate content (be it data or malware) is neither entering nor leaving an organization requires a fundamental feature – visibility to the traffic. If you can’t see the threat, the threat will succeed. But to see the threat requires exposure of potentially sensitive information to somebody, or something. This short presentation sponsored by TELUS will brush upon this topic and give a perspective of how to balance these two seemingly opposing concepts with responsible information security tools. Ed Rebane, Senior Security and Privacy Advisor, Bell Security Practice Leader (Oak Bay) Are you doing the right thing at the right time the right way? Don’t get fooled into thinking you are secure. Without context …do you really know? There are a lot of ways for a breach to happen. Bad guys only need to find one, but you need to protect against every possibility, or at least know what risk you are assuming. Ed will show you “how to look under the hood” when it comes to security. Is the solution you are implementing really going to help? Do you have context and perspective on the bigger picture? This session will give you the tools you need to make informed security decisions. Christopher Litton, Consulting Director, Justice Practice, Sierra Systems (Esquimalt) “Enabling the Shift with BC Justice – Transformation to BC Government 2.0” Citizen Centered Service. Service Transformation. Enabling Technology. Generational Shifts in Technology Adoption. These are the buzzwords and concepts embraced by Governments as they grapple with the realities of the Internet generation. There is an inexorable shift towards citizen-centered service delivery to meet the needs and expectations of the public. No government sector is immune - the BC Justice Sector is embracing new technologies and approaches in a coherent strategy for service delivery transformation. BC Justice has partnered with Sierra Systems to develop and deliver business solutions that will enable this shift. The BC Government has published a Transformation and Technology Strategy for the BC Public Service that aims to enhance the interaction between citizens and government. Self-service, online government services, citizen-centric services, effective technology tools, innovation to enhance value to citizens, and other drivers are shaping the plans for BC Ministries. Come and hear how Sierra Systems is helping the BC Justice Sector innovate and transform to support the BC Government 2.0 Strategy. Learn how these initiatives can be used to support your local transformation strategies. We’ll show you some of the innovative thinking and technologies that are delivering success.
2:30 – 2:45 Lobby	Afternoon Break
2:45 – 4:00	Session 16 – Concurrent Panels Panel A: Privacy in the Cloud (Theatre) Privacy is an important issue for cloud computing both in terms of legal compliance and consumer confidence and trust, and needs to be considered at every stage of design. Moderator: Ken Anderson, Assistant Privacy Commissioner, Province of Ontario Speakers: Evan Jennings, Product Manager, Cloud Computing, Bell Business Markets David Violago, Information Security Consultant, Seccuris Inc. Derick Cassidy, Security Lead, Office of the CTO, Oracle Canada ULC Panel B: Mobile Life (Salon A/B) This highly engaging and interactive panel will examine actions the enterprise needs to consider when deploying iDevices, Androids and other mobile technology. How does an organization manage and balance the security needs of their enterprise, the privacy of the employee as an individual - all the while employing a mixed combination of disparate devices owned by both the individual and the company itself. This panel is designed to be highly interactive, encouraging audience questions and spirited debate so the audience comes away with new insights and approaches to a worsening problem. Moderator: Winn Schwartau, Chairman, M@D Partners, LLC, Author: Information Warfare, CyberShock, Pearl Harbor Dot Com, Time Based Security and Internet & Computer Ethics. Speakers: Nicole Ozer, Technology and Civil Liberties Policy Director, ACLU Mathew Ingram, Senior Writer, GigaOM.com Chris Bender, Team Lead, Product Management RIM Brad Lever, President & CEO eCrypt Technologies Inc.
4:05 – 4:50 Salon A/B	Session 17 – Closing Keynote Jeff Wacker, Services Innovation Lead and HP Fellow, HP Enterprise Services We are now in the early stages of the 4th Wave of ICT – a world of information explosions, super-connectedness, embedded intelligence and value shifts. Join Jeff Wacker as he explores how this next wave of change will drive novel opportunities and problems, as well as challenge the status quo of the world as we have known it.
4:50	Closing Remarks Keith Baldrey, Global Television

Reboot Communications Ltd. reserves the right to make changes or amendments to the program and speakers, or to cancel sessions if enrollment criteria are not met, or when conditions beyond its control prevail. Please note that all sessions are filled on a first come, first seated basis. All recording devices and cameras are prohibited.