Cybersecurity: The Intentional Enterprise in an Uncertain World Monday, July 19, 2010 — 9:00 - 12:30

9.00 - 9.05 Welcome Allen Brown, President & CEO, The Open Group Allen Brown, is President and CEO of The Open Group. The Open Group is a global consortium that enables the achievement of business objectives through IT standards — it makes standards work.

9.05 - 10.00 Keynote — Succeeding in a Cyber World In the wake of cyberspace, the fifth domain, new vulnerabilities and threats are confronting all organizations. Lt. General (Ret) Raduege serves as the co-chairman for the Center for Strategic and International Study's (CSIS's) Commission on Cybersecurity for the 44th Presidency. The Commission released its first report in December 2008, which included 3 findings and 25 recommendations for President Obama to consider, and more importantly, stressed the need for a comprehensive national strategy to secure cyberspace. The Commission’s work has been publically recognized by the President, as well as other notable security organizations, and they are currently working on a second set of recommendations. Today we are facing a new ‘WMD’ threat – that is ‘weapons of mass disruption.’ That disruption can wreak havoc on our county’s economic, transportation, and electrical grid systems. This growing cyber threat creates a new addition to organizational missions, achieving cyber situational awareness. In this provocative presentation, General Raduege will discuss the state of the cybersecurity threat, review the Commission's findings, address the President's cyber policies to date, and discuss the need for cyber collaboration going forward. Lt. General Harry D. Raduege, Jr. (USAF, Ret) Chairman, Deloitte Center for Cyber Innovation Lieutenant General Harry D. Raduege, Jr. (USAF, Ret) is Chairman of the Deloitte Center for Cyber Innovation, which develops cyber solutions for clients grappling with the need for increasingly interdependent information networks, spanning both the public and private sectors.  General Raduege retired after serving 35 years in the U.S. military.  He worked in the areas of technology, including telecommunications, space, information, and network operations.  He served more than 17 years in joint duty assignments.  In his last position, he led Department of Defense net-centric operations as the Director of the Defense Information Systems Agency.  In that role, he directed planning, engineering, and implementation of interoperable communications and intelligence systems serving the needs of the President, Secretary of Defense, Joint Chiefs of Staff, combatant commanders, and the military Services.   Notably, he led efforts to restore communications to the Pentagon following the September 11th terrorist attacks; upgraded Presidential communications; and led the successful expansion of the Department's Global Information Grid through a $1 billion transformational communications program.     General Raduege was also appointed by the Secretary of Defense as the Commander of the Joint Task Force for Global Network Operations and Deputy Commander for Global Network Operations and Defense for the U.S. Strategic Command.  In these roles, he was the first commander assigned responsibility for directing the operation and defense of the Global Information Grid to assure timely and secure net-centric capabilities across the entire Department.   He also served as the Manager of the National Communications System and led our Nation's efforts to prioritize the restoration of telecommunications throughout New York City and the Pentagon following the 9/11 terrorist attacks. Prior to his last assignments, Raduege directed command and control systems for North American Aerospace Defense Command, U.S. Space Command, and Air Force Space Command.  He also served as the Chief Information Officer for all three commands, was the architect for computer network defense and attack capabilities established within the Department of Defense, and was the National spokesman for the Department during the successful "Year 2000" computer roll-over efforts. General Raduege directed command and control communications at the U.S. Central Command for 3 years, including the relocation efforts required after the Khobar Towers bombing.  Earlier, he served as the first commander of the Air Force C4 Agency and was the Joint Chiefs of Staff architect for all satellite communications supporting over 500,000 deployed military members during the Gulf War in 1991. General Raduege serves as a senior counselor to The Cohen Group; on the World Board of Governors of the United Services Organizations (USO); on the Executive Council of the Network Centric Operations Industry Consortium (NCOIC); as co-chair of the Center for Strategic and International Studies’ (CSIS) Commission on Cyber Security for the 44th Presidency; as a senior cyber security advisor to the EastWest Institute (EWI); as the cyber ‘tiger team’ chair for the University of Maryland University College (UMUC); as a member of the U.S. Global Leadership Coalition (USGLC) National Security Advisory Council and; on the Board of Directors and Executive Committee of Armed Forces Communications and Electronics Association (AFCEA) International. He also serves as an advisor to the Defense Science Board, and is a member of the Board of Trustees and chairs the Technology Committee for Capital University in Columbus, Ohio.

10.00 - 10.05 Spotlight - Security Forum

10.05 - 10:50 The Financial Management of Cyber Risk: An Implementation Framework for CFOs This presentation provides concrete, actionable recommendations for developing strategies that cross both functional and departmental boundaries to mitigate the dangers and consequences of cyber risk. Larry Clinton, President, Internet Security Alliance Larry Clinton is President and CEO of the Internet Security Alliance (ISA) ISA is a multi-sector industry group created by the former Chairman of the House Committee on Intelligence and Carnegie Mellon University. ISA’s mission is to integrate advanced technology with the business needs of the owners and operators of the Internet and create enlightened public policy leading to a sustainable and secure Internet. ISA represents major corporations from the Aviation, Banking, Communications, Defense, Insurance, Manufacturing, Technology and Security industries. ISA has articulated its pro-market approach to cyber security through its two editions of the “Cyber Security Social Contract.” When the Obama Administration released its own policy paper for cyber security, the first document quoted was the ISA Social Contract. In fact the Administration’s Executive Summary both begins and ends by citing the ISA and more than a dozen ISA white papers are cited in the Administration’s policy review, far more than any other source. In 2009 the US State Department sent Larry to Estonia to brief the NATO Cyber Security Center of Excellence on the ISA Social Contract model. ISA’s two other most recent publications are “The Financial Management of Cyber Risk” and “50 Questions Every CFO should be asking about Cyber Security.” As a result of his work at ISA, Larry is known as one of the most reliable sources on cyber security in Washington, D.C. He has been featured on CBS News, CNN, C-SPAN, CNBC “Power Lunch” and CNBC, “Squawk on the Street”. In addition he is frequently included in numerous print and radio media outlets including the Washington Post. Larry has also written numerous articles and best practice manuals on cyber security and has served as editor of two professional journals on the subject. Larry is regularly called upon to testify before both the U.S. House and Senate. Prior to his work with ISA, Larry held a teaching position at the University of Illinois and was the Legislative Director for the current Chairman of the U.S. House Subcommittee on Telecommunications and the Internet, Rick Boucher. In addition, Larry was the Vice President of the US Telephone Association (now the US Telecom Association) prior to joining ISA in 2002.

10.55 - 11:25 BREAK

11:25 - 11.30 Spotlight — Cloud Computing

11.30 - 12.20 How Do We Build with Integrity and Buy with Confidence? Governments and large enterprises are cognizant and appreciative of the benefits of globalization. At the same time, they recognize their increasing reliance on commercial off-the-shelf (COTS) information technology (IT) components (software and hardware) to deliver mission critical operations. As cyber attacks increase in sophistication, stealth and severity, governments and larger enterprises have also begun to take a more comprehensive approach to risk management and product assurance. In addition to enhancing information security by improving security practices across the enterprise, governments and enterprises have begun inquiring about the practices information technology vendors use to protect the integrity of their products and services as they move through the global supply chain. This supply chain management challenge becomes increasingly more difficult when considering that, in today's global market place, building a product depends upon outsourcing and integrating components, subcomponents, proprietary and open-source components, hardware and software elements, from many sources, some known, some unknown, from around the globe. To address these challenges the U.S. Department of Defense (DoD) DDR&E tasked The Open Group with establishing a group, The Open Group's Acquisition Cybersecurity (ACS) Initiative, to promote an industry-wide effort where vendors identify the current best practices and processes that contribute to the secure and trusted development, manufacture, delivery, and ongoing operation of commercial products. Ms. Kristen Baldwin and Mr. Ken Hong Fong will discuss the driving factors behind this emerging need for identifying products that are "Built with Integrity", so that customers can "Buy with Confidence". Ms. Kristen Baldwin, Director, System Analysis; Systems Engineering Directorate within the Office of the Director, Defense Research and Engineering Ms. Kristen Baldwin is the Director for System Analysis within the Systems Engineering Directorate, Office of the Director, Defense Research and Engineering, Office of the Under Secretary of Defense (AT&L). She is a member of the Senior Executive Service. Ms. Baldwin serves as lead for development planning, cyber and system assurance, program protection, system of systems SE, early SE, and research and development efforts. She has been with OSD since 1998, where she has led the application of capabilities based planning in the acquisition process, with a focus on the integration of requirements, acquisition, and programming processes; served as Deputy Director, Software Intensive Systems; and managed the Tri-Service Assessment Initiative. Prior to OSD, Ms. Baldwin served as a Science and Technology Advisor in the Army’s Office of the Deputy Chief of Staff for Operations and Plans, and at the Dismounted Battlespace Battle Lab, Fort Benning, GA. Ms. Baldwin began her career at the US Army’s Armament Research, Development, and Engineering Center, Picatinny Arsenal, and is an expert in infantry weapons and munitions. Ms. Baldwin received a bachelor's degree in mechanical engineering from Virginia Tech and a master's in systems management from Florida Tech. Mr. E. Kenneth Hong Fong, Sr. Systems Engineering Analyst, within the Office of the Director, Defense Research and Engineering 35 years in leadership positions, 27 years in network and systems development. 25 years in Chief Technology Officer/Chief, Systems Engineering equivalent positions. Chief, Systems Division for the Defense Nuclear Agency and successor elements, GS-15 (1989-2000), developing nuclear C2 support, R&D, and business systems and networks. Led Y2K transition for all DoD Nuclear Chemical and Biological Systems (Y2K) Technical Director, GSA Public Buildings Service/Information System Modernization providing technical oversight to over 450 contract and 125 government staff (GS-15). Technical Architect for Veterans Administration Executive Information System concepts. (GS-15) Led or participated in 10 program support reviews for AT&L and ASD(NII). Led concept development for Coalition Shared Tactical Ground Picture for eventual NATO adaptation Led three reviews of DoD Programs of Record, in support of the National Security Presidential Directive 54 (Comprehensive National Cyber Security Initiative), and NDAA 2009, Section 254 requirements for supply chain Vulnerability Assessments. As a member of the DDR&E senior technical staff, Mr. Hong Fong created new systems engineering processes focused on meeting cyber security requirements for Department of Defense (DoD) Programs of Record (PORs). Guided the successful development of multiple Directive Type Memorandums, to instantiate through policy, needed process and POR direction changes in achieving Program Protection,  identification of critical program information, and the supply chain assurance for the critical components that instantiate the key capability Working as a Senior Systems Engineer, Mr. Hong Fong also currently provides acquisition oversight and program support for key infrastructure programs to support net-centric warfare. Programs of interest include the Joint Tactical Radio System, the GIG Network Enterprise Services Program, the, and the Warfighter Information Network-Tactical Program.  He was a core member of the Net-centric Operating Environment (NCOE) effort to define implement able threshold points for the GIG infrastructure. In addition to participation in the development and coordination of Network Centric Warfare oriented policy and guidance for acquisition of systems, he was an active participant in ensuring that DoD Information Technology standards are not only current but support the department’s transition to the GIG, and participated extensively in the Information Technology Standards Committee.   He was a key member of the WIN-T Nunn-McCurdy Study Team and the study team for Tactical Networks for Ground Forces. He has previously participated in various industry standards forums, was a key member of the Department’s effort to address Software Assurance, and lead the Engineering-in-Depth working group, collaborated on defense/industry IT industry outreach teams, and worked on multiple US/coalition initiatives for synthesizing US and coalition information for an enhanced situation awareness and battle management capability. He is the co-author of the Shared Operational Picture Exchange Service (SOPES) concept draft for the Object Management Group, which has been embraced by multiple international efforts as a baseline for coalition shared data services. Originally, a Chicago area native, Ken received his BA from Northeastern Illinois University (1971) and an MS from DePaul University in Management Sciences in the Public Service (1977).

12.25 - 12.30 Spotlight — Real-time & Embedded Systems Forum

12:30 - 2:00 LUNCH

Return to agenda