Every time we have an event, articles fly around talking about what should have been done. This talk will address the point before you have an incident, and discuss what you should be doing right now to address the most risk in your organization. I will discuss basic practices which are reflected in many infosec frameworks from government requirements to community standards. Additionally I will look at advanced practices which are must haves, but require more time and investment and thus are more complex. There are probably no surprises here, but there is validation and explanation and perhaps ammunition you can use to help shore up and expand your security program. Ask me how!

Joel Cardella, CISM, has had over 25 years experience in IT and security, including previous work as a CISO for the North Americas. Joel has not only worked with a robust portfolio of technologies, but also has sharpened his skillset within multiple different industries including but not limited to: telecommunications, healthcare, and manufacturing. With a deep understanding of laws, regulations, guidelines, and professional standards for security, Joel seeks to impart knowledge, and ensure that organizations are empowered by their security posture, and are better able to enable their business to take better risk.

Back to Converge 2018 video list