Next SPIN Meeting

September Meeting Topic: Information Security Requirements for Applications – a Proactive Approach to Information Security Presenter: by Robert Childs, Vice President and Information Security Officer, First Community Bank Date: Wednesday, September 17, 2008 Time: 11:30 AM to 1:00 PM Location: UNM Continuing Education  1634 University Blvd. NE,  Albuquerque, New Mexico 87131 Click here for a map   Thanks to UNM Continuing Education for the use of their facilities!   Meeting Agenda:    11:30 - 11:45   Registration and networking  11:45 - 12:00   SPIN business    12:00 -  1:00    Speaker and Lunch Topic: When new application systems are migrated to production, how do you ensure security is built in up front and compliance requirements are maintained?  How will a new application affect your IT controls or compliance standing? A proactive approach to ensure information security controls are implemented for new systems is to require an ‘Information Security Plan’ to be defined for all new application systems. This presentation will discuss the policy needed to make this happen, how to integrate with your project management methodology and the details of developing the security plan using a template approach.  A sample policy and security plan template will be provided.  Presenter: Robert Childs is currently Vice President and Information Security Officer for First Community Bank. He heads up the information security functions for the bank. His responsibilities include meeting SOX, GLBA and bank IT compliance requirements; IT risk and vulnerability management; and management and development of the information security program. Previously, he was the Information Security Manager and Analyst for PNM Resources.  He has approximately 28 years of corporate work experience, in both management and staff positions.  This includes 9+ years in information security and 11 years in the IT auditing field. He has worked for companies such as Blue Cross Blue Shield, American Express Bank, Gulf Oil and EDS. He has a MBA in International Management from Thunderbird School of Global Management, and a BBA from University of Texas at Austin.  He is a CISSP, CISM and CISA.  He is currently Treasurer and past President of the InfraGard NM Chapter.

October

•   The Current Version of CMMI, Version 1.2: What It Is, Is It Effective, What Does It Look Like, and What are the Critical Steps to Implementing CMMI as the Model for Process Improvement?

Dr. Nestor K. Ovalle ("Nick") is an authorized CMMI Instructor, a Partner with the software Engineering Institute, and a software quality engineer at Los Alamos National Laboratory.

November

•    The Art of the Interview