Treadstone 71 White Papers & Commentary

Press Release

Speaking Engagements:

2nd Annual Athens Forum on Information Security - January 2009

RSA 2009

Source Conference 2009

CSO Online Blogs

Subscribe to Jeff Bardin's blog by Email

What Makes A Successful Training Program

Communicating to the C's

2 Vendor Megatrends and What They Mean to You

A CISO's lesson in building a security plan

McAfee Analysts Day - 2007

Email Security

The Model-As Problem

Looking for Practical Perspectives to IAM

Clean Pipes - Less Sewage

SC eConference & Expo - Combating Data Theft

Communicating Security Issues to Executives - Standards

Security Stockwatch

Whitepapers

Data Genomes and Persistent Security - Protecting Information at its Inception - May 2008 (posted January 2010)

Internet Leukocytes Need Your Help - July 2009

Risk Governance Model - February 2009

Current State of Cyber Insurance - January 2009

Personal Speaking Engagements at Treadstone 71 and Other Organizations

Seventh National HIPAA Summit – Case Studies in HIPAA Security Assessments, Baltimore, MD

Card Tech Secure Tech – What You Are Will Secure Your Enterprise – Orlando, FL

Wall Street – Building a World Class Security Organization, New York, NY

HIPAA Security - Healthcare Financial Management Association (HFMA), Lewiston, Maine

HIPAA Security - Maine Medical Association (Multiple Maine Locations)

ISACA – IT Governance with Military Precision – War Gaming, Boston, MA

Encrypted Email – HIPAA Security - New Hampshire-Vermont Strategic HIPAA Implementation Plan (NHVSHIP), Lebanon and Concord, NH

Babson College CIMS Seminar – Bringing Security to the Boardroom – December 2005

SecureworldExpo (Executive Steering Committee Boston / Atlanta) March and May 2006

IDG Forum June 2006 – Building Security In

Gartner Security Summit – Washington, DC June 2006 – Bringing Security to the Boardroom

ISACA CACS Orlando, Fl May 2006 – RBAC and Identity Management

ISACA InfoSec Mgmt – Risk Management and Security in the SDLC – Sep 2006, Las Vegas

RSA Security Selection Committee – 2007

RSA Conference 2007 Building Security In and RBAC and Identity Management – February 2007

Northeastern University Graduate Level Seminar on Risk Management – February 2007

SecureworldExpo (Executive Steering Committee Boston) March 2007

McAfee Investors Conference New York June 2007

IDG How to Show Value with Information Security (June – New York / September – San Francisco) 2007

RSA Europe October 2007 Building an InfoSec Program with Limited Budget and Little Support

FS-ISAC Webinars (September, October, November 2007 and February / March 2008)

Secureworld Expo Boston – Cyber Jihad March 2008

RSA 2008 The Illusion of Due Diligence (Seminar) and Experienced Professionals Track – Doing More with Less

Secureworld Expo Atlanta – Cyber Jihad – Opening Keynote – April 2008

FS-ISAC May 2008 Member Meeting and Conference – St. Petersburg – Conspiracy to Commit Security

Hacker Halted June 2008 Myrtle Beach – Cyber Jihad closing keynote

Forrester Security and Risk September 2008 – Keynote address

RSA Europe 2008 – Cyber Jihad

Hellenic American Union 2009 Athens, Greece – Building Security Based upon Risk – Keynote address

RSA 2009 – Cyber Jihad / Building a Closed Loop Information Assurance Model / Security Awareness & Training

Hacker Halted 2009 Miami

Source Conference 2009 Boston

FS-ISAC 2009 St. Petersburg

SecureworldExpo - Detroit, Seattle, Dallas 2009
Hacker Halted 2009 Hyderbad

Hacker Halted 2009 Kuala Lumpur

ISO17799, OCTAVE, CISSP, CISM, Sarbanes Oxley, SOX, CobiT, 27001, ISMS, ISO-27001, ISO 27001, ISO27001, 27005, 27002, GRC, prevention, 17799, proactive, FISMA, defense in depth, arabic, jihadi, cyber jihad, cyber terrorism, holistic security, 201 CMR 17, governance, risk, compliance, Jeff Bardin, Wireless Security, CMM, ITIL, ITSM, Sarbanes Oxley, security awareness, risk, threat, threat matrix, security metrics, ISO1779 training, 21 CFR 11, NSA IAM, BITS, risk management, security in the sdlc, secsdlc, security program, security strategy, business impact analysis, Treadstone 71, bourne, CISM, penetration testing, risk, GRC, detective controls, preventative controls, HIPAA, GLBA, Graham-Leach-Bliley, SAS 70, intrusion detection, interim CISO, interim CIRO, CIRO, CISO, chief security, FFIEC, financial services, trust, continuity, risk assessment, maturity, vulnerability scans, data classification, assessments, disaster recovery, homeland security, security metrics, rosi, roi, training, security posture, threat vulnerability pairs, vulnerability management, security services, information security, risk management, business risk, controls, holistic security, defense in depth, Governance, Risk and Compliance, information risk management