Certified security experts and engineers will discuss and share new, proven and effective worldwide accepted security processes and policy that will help companies define clear procedures, guidelines and practices for configuring and managing security in your environment. 

The topics are as follows:

1. THE THREATS ARE REAL

Being aware of threats and vulnerabilities is the first step in making your information system more safe and secure. This presentation will show the audience that security threats are real : Natural Threats, Intentional Threats and Unintentional Threats.

2.  SECURITY FRAMEWORK AND METHODOLOGIES

This is a presentation and actual demonstration of various hacking tools and techniques with the end goal of understanding the appropriate countermeasures to protect critical IT assets. Participants can readily pick up action items and tools that could be applied to personal computers or organization's network in order to verify if exposures and vulnerabilities exist. This presentation and demonstration would likewise help explain why various layers of security are needed.

3.  BUILDING BLOCKS OF I.T. SECURITY

This presentation would show why various layers of security are needed and what specifically do these layers or building blocks address. The presentation likewise focuses on various implementation strategies like "one-stop-shop" vs. "best-of-breed" approach, carefully laying down the framework for better integration and interoperability of the different layers of security.

4.  SSL VPN DESIGN AND DEPLOYMENT

This presentation addresses one of the major IT Challenges today - Secured Mobile Communications. It would define what SSL VPN is and what the different deployment strategies are. This would provide an objective analysis of the various SSL VPN solutions in the market today and a panel discussion would be held where each solution provider would be represented to address questions from the audience.

5.  VOIP SECURITY

Voice over IP (VoIP) adoption is growing at a rapid rate as corporations move voice traffic from dedicated phone networks to converged networks where voice, video, and data coexist. VoIP technologies give organizations increased voice services such as delivering voice mail to traveling employees over e-mail and lower operational costs for long distance and other phone services.

Yet the benefits come with security risks. Placing voice traffic on the data network exposes it to the same attacks - worms, buffer overflows, and more - that plague the existing network infrastructure. This topic will show how to enable secured services such as VoIP and present a VoIP Security Checklist to ensure that everything is in order with your implementation.

6.  WIRELESS SECURITY

Wireless LANs provide enterprises with a flexible technology that reduces deployment costs when compared to traditional "wired" networks. They enable workers to move from area to area without losing connectivity. It is important to understand that intruders can launch attacks against a wireless LAN without leaving the forensic evidence found in traditional attacks. The intruder does not leave an audit trail - such as a traceable IP address assigned by an ISP - when he or she ceases participation in the WLAN. This presentation will enable you to enforce best practices in securing Wireless Networks.

7.  INCIDENT RESPONSE AND COMPUTER FORENSICS

This presentation will provide clear instructions on how to deal with an intrusion incident or breach in security. A clear process or methodology which various organizations may adopt to strengthen their IT Security infrastructure will be shown. This would cover deterrence all the way up to preserving electronic evidences for possible prosecution.

8.  GLOBAL SECURITY STANDARDS: ISO-17799

As Information Technology environments become more and more complex, managing and securing these computing infrastructures become more critical. Many corporations around the world turn to standard best practices for consistent and more manageable implementation of controls. Globally-accepted best practices provide corporations with industry-proven ways to standardize their processes, and manage their IT Infrastructures. This presentation explains what ISO-17799 is and why it's important.

Don't miss this unique opportunity to learn the best practices and listen to reviews of cutting-edge technology for stringent security standards from the security experts.  Come and join the Powertips "Security Secrets and Strategies" conference on March 16, 2006 (Thursday), 8:00am to 5:00pm at the Grand Ballroom of Dusit Hotel Nikko.  Tickets are available at all SM TicketNet outlets.  You can also register online at www.infochat.com.ph or call 911-5555. 

The Powertips Security conference is supported by the International Information Systems Security Certification Consortium, Inc., or (ISC)² and the Philippine Certified Information Systems Security Professionals "PH-CISSP".

Security is a Journey, not a Destination.