IT DefPat (Defense Patrol)

Midway through 2009.
Looking for new job
(and wonder where the last year went)

tom.herald@lmco.com
Sent from my BlackBerry® wireless device
http://securitypro.infosecurity.name

Sent from my BlackBerry® wireless device
http://securitypro.infosecurity.name

------Original Message------
From: Yahoo! Reminder
To: securitypro@sprint.blackberry.net
Sent: Sep 18, 2008 4:41 PM
Subject:

09 Spring Conference , 9/18/2008, 5:00 pm (geekmotu)

09 Spring Conference
Date: Thursday, September 18,
2008
Time: 5:00 pm, Eastern Daylight Time (GMT
-04:00, New York)
Meeting Number: 487 576 417

Meeting Password: (This meeting does not require a
password.)

Please click the link below to see more
information, or to join the meeting.

-------------------------------------------------------

To join the online meeting

-------------------------------------------------------

1. Go to
https://vitech.webex.com/vitech/j.php?ED=113550177&UID=0

2. Enter your name and email address.
3. Enter the
meeting password: (This meeting does not require a
password.)
4. Click "Join Now".

-------------------------------------------------------

% 0aTo join the teleconference only

-------------------------------------------------------

Call-in toll number (US/Canada): 1-650-429-3300

-------------------------------------------------------

For assistance

-------------------------------------------------------

1. Go to https://vitech.webex.com/vitech/mc
2. On the
left navigation bar, click "Support".

You can
contact me at:
psimpkins@vitechcorp.com

1-210-267-1152

To add this meeting to your calendar
program (for example Microsoft Outlook), click this
link:

https://vitech.webex.com/vitech/j.php?ED=113550177&UID=0&ICS=MI&LD=1&RD=2&ST=1&SHA2=yb363OnpfBbtinCvmfa07uj-fL/dnOPukanQK-NVxas=

The playback of UCF (Universal Communications Format)
rich media files requires appropriate players. To view
this type of rich media files in the meeting, please
check whether you have the play ers installed on your
computer by going to
https://vitech.webex.com/vitech/systemdiagnosis.php

Sign up for a free trial of WebEx

http://www.webex.com/go/mcemfreetrial

http://www.webex.com
We've got to start meeting like
this(TM)

IMPORTANT NOTICE: This WebEx service
includes a feature that allows audio and any documents
and other materials exchanged or viewed during the
session to be recorded. By joining this session, you
automatically c

Sent from my BlackBerry® wireless device
http://securitypro.infosecurity.name

looking at Ars Technica Guide
http://arstechnica.com/guides/buyer/guide-200711.ars/3
and Maximum PC

MBD (ars)
Gigabyte GA-P35-DS3P, which has built-in gigabit Ethernet, Dolby 7.1 channel audio onboard, eight SATA connectors, one IDE connector, Firewire, support for up to eight USB 2.0 ports, two PCI-Express x16 slots (x16 and x4 electrical), three PCI-e x1 slots, and two PCI slots. Reports are that this board overclocks quite well, from the official 1333mhz maximum speed of the P35 chipset up to 1600mhz, 1800mhz, and higher.

CPU (ars)
As most consumer applications and games prefer high clock speeds rather than the two extra cores, the Core 2 Duo E6750's 2.66GHz clock speed, 1333MHz FSB, and 4MB of L2 cache is a better value than a Core 2 Quad in this situation.

RAM
2 - 4 GB, DDR2-800

VID
PNY Geforce 8800GT
RV670-based Radeon HD 3870 is an excellent,
nVidia's new G92-based Geforce 8800GT 512MB is slightly more expensive.
Slightly lower-end, the AMD Radeon HD 3850 is the new card of choice, outperforming all of its competition at the sub-$200 price point for the moment, including the Geforce 8600GTS and Radeon HD 2600XT.

Sound
Creative X-Fi XtremeGamer

HD - have
netwk - on board

Case
Antec Solo
Cases with 120mm fans and damped hard disk mounts are now easy to find, such as the Antec P182, Thermaltake Tsunami, Antec NSK6580, Antec NSK4480, Coolermaster Centurion 5, Lian-Li PC-V1000BPlus II

Power
premium 500W in current

Monitor
NEC 20WMGX2 20" LCD
24"?HP LP2465, Dell 2407WFP-HC, and BenQ FP241W. For those whose tastes run towards the traditional 4:3 aspect ratio rather than the 16:10 widescreens, the HP LP2065, Dell 2007FP, and Viewsonic VP2030b are excellent choices

Use current internet commodities in innovative ways to solve security issues

bit torrent - modify, enhance to allow transferral of highly sensitive/classified data. theoretically, this should allow the highest classified information to be freely transferred over open, black, public networks

copyright brett osborne 2005-2007
securitypro@infosecurity.name

Accroches-toi a ton reve

FROM SANS NewsBites:


To formalize the methods to be used in implementing US government policy on buying "security baked in" more than 700 federal executives and business executives gathered at NIST to hear how to make it work. White House Cyber Czar Karen Evans, NSA's Vulnerability Chief Tony Sager, Gartner's Security VP John Pescatore, NIST ITL Director Cita Furlani, Office of the Director of National Intelligence's Security Chief Sherrill Nicely and DoD's top cyber strategist Michelle Iverson, Microsoft's Chase Carpenter and more than 15 commercial tools vendors provided guidance, tools, demonstrations of effectiveness of the new FDCC (Federal Desktop Core Configuration) and S-CAP (SecuritY Content Automation Process) initiatives.
-http://www.gcn.com/online/vol1_no1/45074-1.html
Where to find complete documentation:
[Editor's Note (Paller): Commercial companies like Apple, Intel, CA and HP are also supporting or architecting support into upcoming products (through their systems management platforms) the new S-CAP standard for automating vulnerability discovery and correction. Every large security company is building in S-CAP compliance (though a few are exaggerating when they say they already have it). Several Fortune 100 companies (and one Asian and two European governments) are finalizing strategies for taking advantage of the rapid patching and massive cost savings enabled by the FDCC. FDCC and SCAP are the best examples to date of the US government leading by example and large organizations are taking note. ]

online web app sec project

here is
http://danweber.blogspot.com/2007/09/about-firewalls-and-bonds.html
which is response to
http://blogs.zdnet.com/threatchaos/?p=479

Gosh do I have an opinion to this... I'll have to write it soon, wont I?

See issa officer mtg 070919 pdf and agenda.pdf
the AT&T call announces when everyone enters - annoying
al should mute; all not put telecon on hold

1230 EST - 1400 EST
with Howard Schmidt

Intl Board:
transition to suppt company
develop better accuracy, better server membership
annual reports by end of week

?strategic direction for issa internationally?:
better support (9500 members); most chapters self contained, others in need of support - make available/callctr-email-online; member renewal, who are members; growing chapters-#s, content, infra for suppt
?get you to visit chapters?:
119 chapters, visited 25 so far. set up others, hi pri. Contact Lynn

Ralph Poore, awards chair
for comms and presidents (comm, pres must nominate)
can self nom for ch of year, or comm award, hall of fame, sec pro of year
via poorer@acm.org

dana baumgart chapter@issa.org for promotionals
or lynn trainer

success/lessons learned:
TX - combined events with ISACA, InfraGard for win-win
SAC - DR/BC groups ASP, full day table top with CA state oes - dr exercise with state, city
MN - with ASIS
NoVA sherry Voigt - purch sharepoint, all info shared, all activities, manage emails; not allowed for members, ofcr only, future (gen infor on website)
KC - reg conf, with HTCIA, ASIS, INfraGard. IIM course in advance.
CapTX - website, with counters. if we home grown, inconsistent - intl to lead
TELL ISSA IN ADVANCE

TREAS WKSHP
(#6)
7 - ACCOUntability, motivation, GOALS (speakers, meetings, dev money), concrete measurement of success, projecting cash flow;
budget needs to be discussed regularly
8 vendor/sponsor
general or specific (grow/dev, event)
9-12 mo ch disbursements
ACH+email or check+list
slide 11 shows reconciling
jun06-feb07 some distributions not flowing
PP is an option now (costs to intl)
renewal may not be going smoothly - should check list - some chapters are losing half of members
if lapsed, get snail mail
CC the president
dir dep better; sent last monday (19 by check)
15 Chapter filing - over $25k gross, form 990
new: 990-N if less than$25 - electronic "postcard" (>12/31/06) 15 may 08 for 2007
patl@issa.
TAxID form (SS4?)
ISSA is 501(c)3
are chapter articles of incorp at interntl: chapters dont - bylaws
dir & ofcr liability ins?

survey - 17+
2/3 monthly meet
cash reserves need improvement - what does it take to sustain for year?
depend on sponsorship or members?
sf-silicon-infrgard pool moneys
survive 6 mo with no income/no worries; add for outreach, events. took 3 yrs at sil val
most income from conferences, financial/income from sponors
how to manage - email kevin
along with templating of websites, email campaigns
pp button on local sites?
use issa banner on local?
can host/mail on interl issa! chapter@issa kevin.richards@issa
speaker sharing
past presidents are good to retain

to post in chapter officer section of site

poland in January - speaking oppoortunity

*

Labels: annual, chapters, goals, ISSA, officers