Download: Implementing an Incident Response Process

Thursday, February 1st is our first meeting with Derek
Milroy on "Implementing an Incident Response Process".
Derek has been a local ISSA Member for many years and
is always educational & entertaining. Details of his
presentation & bio can be found below.

Address
Microsoft Facility
3025 Highland Ave.
Suite 300
Downers Grove, IL.

Feb 1 - Abstract:
Implementing an Incident Response Process
Derek Milroy, Security Engineer, Corp-Sec Project

This presentation will outline a framework for
implementing an Incident Response process that
ensures incidents are handled in a consistent
manner. Having an Incident Response process is
necessary to comply with security related
regulations. This framework addresses compliance
concerns as well as ensuring that a consistent,
reliable process for handling incidents is in place.
The framework presented has proven to be effective
in environments varying in size from dozens to tens
of thousands of hosts. Free and commercial product
usage will
be discussed as they relate to the framework.

BIO:
Derek Milroy, MCSE, GSEC, CISSP, CISA
Derek has been implementing security in corporate
environments, as both an internal employee and as a
consultant, for the past seven years. Prior to
focusing on security, Derek was a systems
administrator in Novell and Windows LAN/WAN
environments which gives him an excellent
operational background. He has implemented and
maintained Firewalls, IDS/IPS, VPN, Network Security
Monitoring (SIM/SEM), Vulnerability Management,
Patch Management, and other security technologies
for various employers and clients. He focuses
heavily on securing Microsoft hosts and
Forest/Domain Architectures. He has hardened
thousands of hosts in environments ranging from less
than a dozen servers and a handful of workstations
to enterprise environments with over three thousand
servers and tens of thousands of workstations. He
has also implemented Incident Response
Processes/Procedures and has performed as a lead
responder, performing forensics on Windows systems
and trace and traps on the network as needed.
Please Sign in to RSVP.

The Feb 1 Meeting is from 3-5pm at Microsoft's Downers
Grove facility on Highland Ave, just south of I-88.
Exact address & conference room details will be posted
on the website next week. Beverages & light snacks
will be served.

Signups closed for this event