A Logo

Feel free to include my content in your page via my
RSS feed

Help Irongeek.com pay for
bandwidth and research equipment:

Search Irongeek.com:

Affiliates:
ISDPodcast Button
RootSecure Button
Social-engineer-training Button
Irongeek Button

Web Hosting:
Dreamhost Logo
Help Irongeek.com pay for bandwidth and research equipment:

paypalpixle


NIST and your risky application - Conrad Reynolds Louisville InfoSec 2013 (Hacking Illustrated Series InfoSec Tutorial Videos)

NIST and your risky application - Conrad Reynolds
Louisville InfoSec 2013

A well executed risk assessment is a crucial element in an effective security program; good risk assessments will help prevent security incidents from occurring. This interactive session will engage the audience in an overview of the NIST risk management procedures. We will discuss an example (eCommerce) covering the key concepts: assessing risk, responding to risk, and monitoring risk. Target audience: project managers, development managers, team leads, business analysts, and auditors. A grasp of the basics of risk management is helpful, but no programming experience is necessary.

Conrad has held a variety of positions in IT Audit, Application Development, Management, and Web Security in Fortune 50, non-profit, and government sectors. He has been implementing and advising on IT security solutions for several years. He currently hacks government web apps for a living.

Back to Louisville InfoSec 2013 video list

Printable version of this article

15 most recent posts on Irongeek.com:


If you would like to republish one of the articles from this site on your webpage or print journal please contact IronGeek.

Copyright 2014, IronGeek
Louisville / Kentuckiana Information Security Enthusiast