Secure Information from the Flagpole to the Foxhole
Kevin Cox
Program Manager, Information Security Tools Team,
IT Security Staff Department of Justice
Co-Chair, Mobile Technology Tiger Team Federal CIO Council
May 22, 2013 at 15:00
ABSTRACT
BIO
KEVIN COX, PMP, CISSP, is Assistant Director for Information Security Technologies for the CIO's IT Security Staff of the Department of Justice (DOJ). In that role, he works with his team and with DOJ Bureaus and Components to implement enterprise security solutions that strengthen the DOJ's IT security posture and provide near real-time awareness. Kevin also serves as a Co-chair of the Federal Mobile Technology Tiger Team (MTTT). The MTTT was responsible for addressing Milestone 10.2 (Government Use of Mobile Technology--Barriers, Opportunities, and Gaps) of the Federal Digital Government Strategy (DGS). The MTTT is currently supporting DOD, DHS, and NIST in addressing DGS Milestone 9.1 (Government-wide Mobile and Wireless Security Baseline).
Prior to his current roles, Kevin served as the Program Manager for the DOJ Computer Emergency Readiness Team (DOJCERT) and served as a project manager and Unix system administrator for a major server consolidation project. He holds an MA in Public Policy from West Virginia University and an MA in Divinity from the University of Chicago.
_____________________
DANIEL FORD has been an information security professional for more than 15 years, and has worked for notable organizations such as XM Radio, Secure Computing, McAfee, Nominum, and Accuvant. He has extensive experience running security programs within the government segment; his most notable role was as Director of Network Security at the Transportation and Security Administration, which was the largest managed service contract within the federal government. Dan joined Fixmo in 2012 to drive security and technology innovation within Fixmo's suite of Mobile Risk Management solutions. In his role at Fixmo, he is directly responsible for global security and information assurance initiatives – researching trends, discovering security vulnerabilities and exploits, building strategic partnerships; and attaining industry certifications - as well as product innovation. Dan holds an M.S. in Information Assurance/Computer Forensics from Capitol College and is completing his D.Sc in Information Assurance from Capitol College with a dissertation focus on enterprise smartphone security. Recently, Dan has been appointed to Capitol College's advisory board for their information assurance program.
_____________________
Mobility
Daniel Taylor
Microsoft
May 22, 2013 at 15:00
ABSTRACT
BIO
DANIEL TAYLOR achieved his first professional job in the IT industry in 1977 while serving in the US Army
where his military occupational specialty was as a Computer Operations/Programming Specialist. He later
completed Officer's Candidate School, taking his commission as a US Army Reserve Officer. As a commissioned
officer, he held leadership positions as a Data Center Officer, Security Officer, NBC Warfare Officer, and Training Officer.
In the early 1980's, he switched his technology focus from IBM mainframes, Novell, Banyan, Borland, to Microsoft
technologies. He still continues delivering IT training, IT solutions and guidance covering the complete IT Spectrum.
Daniel has worked at Microsoft since 2000 and exclusively covered the Federal/Public Sector business:
-as an Enterprise Developer Consultant focused on Visual Studio and the Secure Development Lifecycle;
-as a Senior Security Technical Specialist focused on Microsoft's Platform Security strategies, solutions and products;
-as a Senior Data Center Technical Specialist focused on Microsoft Data Center, Cloud, Virtualization and Security strategies,
solutions and products.
He also works extensively on Microsoft's client/mobile strategies, solutions and products.
Before joining Microsoft, he established and ran his own business that encompassed IT Consulting/Solutions Integration,
Consumer Retail locations as well as Health and Fitness for 10 years. He also has been a Senior System Analyst working
for the Navy at the DoNINPO project office as well as private businesses.
He is a regular speaker regarding Microsoft Security technologies, strategies, and best practices in customer engagements,
architectural design sessions, and Executive Briefing Councils. He has delivered at such events as TechEd, Gartner IT Security
Summit, AFITC, VA IT Summit and others. While at Microsoft, he has also functioned as one of the master trainers for the
Microsoft Defense in Depth program (Windows 2000/2003) that was delivered to partners, customer and Microsoft staff in the
US, London, Australia, and Japan.
Daniel has been a certified professional in the IT industry since 1988 and a Microsoft Certified Trainer since 2000 and
currently holds several certifications which he actively keeps updated:
SSCP, CISSP, CISA, CISM, CEH, NSA(IAM), MCSA:Security, MCSE:Security
Security+, CIW Security Analyst, TruSecure (ICSA), CCSPA, MCTS:Forefront, MCTS:ISA Server
MOUS/expert, MCP+I, MCP+Site Building, MCDST, MCTS:Vista:W2K8, MCITP:EST, MCT
MCAD, MCSD, MCSD.NET, MCDBA, Microsoft Solutions Framework Practitioner
MCSE+Internet, MCSA:Messaging, MCSE:Messaging, MCITP:SA, MCITP:EA
Linux+, CCSA/CCSE+ (NG AI \ NGX), CCMSE (NGX \ NGX+VSX)
He continues to research and deploy information technology solutions and study/monitor industry trends as part of his normal
job duties and as one of his hobbies.
_____________________
Mobility
Brian Hajost
SteelCloud
May 22, 2013 at 15:00
ABSTRACT
BIO
BRIAN HAJOST is a 30-year veteran of the computer technology industry with extensive experience in IT integration,
IT security, and mobility within both the federal and commercial markets. Mr. Hajost is currently the President
and CEO of SteelCloud, Inc. which provides plug and play security-compliant mobile solutions to the Department of
Defense (DoD). He is also responsible for SteelCloud's Information Assurance (IA) products that enable DoD components,
system integrators, and product vendors reduce 90% of the effort needed to comply with DoD technical security policy
mandates.
Mr. Hajost has served as the Chair of the AFCEA DC Defense and Intelligence Mobile Steering Committee since the
committee's inception in 2011 and is currently on the AFCEA DC board of directors. Mr. Hajost is a member of the
NIAP core Technical Community focused on developing the protection profile requirements for Mobile Device Management.
Previously, he served as a board member of Leadership Fairfax. He has three current patent applications covering systems
and information assurance and secure mobile application distribution. Mr. Hajost holds a BS in Industrial Marketing
from Miami University, Oxford, Ohio. Mr. Hajost has active DoD and civilian security clearances.
_____________________
Moderator
Dr. Robert "Rocky" Young
OSD
BIO
DR. ROBERT YOUNG is a Cyber Security & IT Specialist, Defense Information Assurance Program, Office
of the Secretary of Defense, DoD Chief Information Officer (CIO). Previously, he was a professor
at the IRM College since 2002. Prior to that, he was Chief of 11th Wing
Information Assurance Office, USAF, providing policy guidance, technical support, and administrative
oversight of communication, computer, emission, and information security requirements. Dr. Young
spent 21 years in the Air Force and is also a certified physician assistant who continues to work in
that capacity. Dr. Young is an expert on Information Security (INFOSEC), Information Assurance (IA)
and Information Operations (IO). He has presented widely on IA issues in healthcare, challenges related
to wireless networks, cyber security, and network and systems security principles, safeguards, and
practices. Recent presentations include "Information Assurance Management Issues: Security Awareness,
Education, and Training" and "Development of a Course to Meet the Clinician's Need for Increased
Awareness of Information Security Requirements.
_____________________