Gartner Security & Risk Management Summit

Over the last 14 years in information technology and security, Eric Ahlm has gained a broad prospective on challenges that face vendors and end users alike. During the course of his career, Mr. Ahlm has advised both Fortune 500 and SMB clients on global security projects, run a security research lab studying attack methods and the effectiveness of off-the-shelf technologies designed to stop them, conducted client-engaged ethical hacking services, performed regulatory compliance gap analysis consulting, created and delivered professional and managed security service offerings, and been actively engaged in the public forum to discuss findings and experiences. Through this journey, Mr. Ahlm has gained a deep understanding of client-facing security issues and how vendors can best position to solve these issues, gaining them market share. He has seen the industry through several different vantage points and advised a broad range of influencers through his work as a security consultant, strategic advisor, security vendor, channel manager, professional and managed services product manager, and ethical hacker. This has allowed him to advise such roles as client-side security executives, line-of-business management, investors, vendor product marketing, audit and compliance teams, service product marketing and general IT executive management in such key vertical markets as healthcare, retail, banking and finance, manufacturing, hospitality, services, and energy industries.

Ant Allan, Ph.D., is a Research Vice President in Gartner Research. He is a core member of the identity and access management (IAM) research community and specializes in IAM program management and in key "authentication" and related "administration" technologies, processes, policies and best practices.

Chris Ambrose specializes in helping clients develop a vendor management discipline and manage their most strategic IT vendor relationships. His coverage extends into application outsourcing, guiding clients across the entire process from building their sourcing strategy to managing their externally sourced environment. He specializes in the outsourcing of enterprise packaged applications (e.g., Oracle and SAP), covering the management and maintenance of the applications. Additionally, Mr. Ambrose is the Gartner Lead Analyst on IBM and has responsibility for covering the broad strategy and capabilities of IBM globally.

Ron Arden is Vice President of Fasoo USA. He has over 25 years of strategic planning, marketing, sales, business development, consulting and technical experience in the information technology industry. Prior to working for Fasoo, he was Vice President of Strategy and Marketing at eDocument Sciences, LLC where he drove document security, cloud and collaboration strategies and solutions. Ron has held executive, management and technical positions at numerous organizations, including IKON Office Solutions, Digital Equipment Corporation and Wang Laboratories. He holds a B.S. in Electrical Engineering from the University of New Hampshire.

Dmitriy Ayrapetov is the Director of Product Management for Dell SonicWALL network security products, covering firewalls, wireless and the associated security services. Prior to this position, Dmitriy worked in product management and software engineering roles at SonicWALL and as an engineer at enKoo Inc., an SSL VPN startup acquired by SonicWALL in 2005. Dmitriy holds an MBA from the Haas School of Business at U.C. Berkeley and a BA in Cognitive Science at UC Berkeley.

Dmitriy Ayrapetov is the Director of Product Management for Dell SonicWALL network security products, covering firewalls, wireless and the associated security services. Prior to this position, Dmitriy worked in product management and software engineering roles at SonicWALL and as an engineer at enKoo Inc., an SSL VPN startup acquired by SonicWALL in 2005. Dmitriy holds an MBA from the Haas School of Business at U.C. Berkeley and a BA in Cognitive Science at UC Berkeley.

Gaurav Banga is Co–founder & CEO of Bromium. Before founding Bromium, he was CTO and SVP, Engineering at Phoenix Technologies Ltd, where he drove the transition from the classic BIOS product to the UEFI standard, fostering quicker innovation in the PC's firmware layer. At Phoenix, Gaurav also led the creation of HyperSpace, the world's first firmware–integrated client hypervisor. Prior to Phoenix, Gaurav was VP of Product Management at Intellisync. He was also Co–founder and CEO of PDAapps, the creator of VeriChat, a mobile IM solution, acquired by Intellisync in 2005. Dr. Banga started his industry career at NetApp, where he worked for over 5 years on the Data ONTAP system and led the creation of the virtual filer (vFiler) product.

Jay brings more than 12 years of security experience to BlackBerry where he serves as Security Director for the BlackBerry Security Group. He works closely with government agencies, strategic and carrier sales teams and key customers to champion security policy for BlackBerry mobile devices. Prior to joining RIM, Jay was vice president of marketing at Intrusion Inc., a pioneering company in data leak prevention appliances. His previous roles include vice president of product management at ScanSafe (now Cisco), the world’s first managed web security start-up; consultant in the wireless industry; as well as various security product management and marketing roles at 3Com and Hewlett–Packard. He started his career in the energy sector, working for Schlumberger in the Middle East and South America as senior field engineer, as well as ARCO (now BP) as senior planning analyst. Jay holds a degree in Engineering Physics from Queen’s University, Canada, an MBA from INSEAD, France, and is a Certified Information Systems Security Professional (CISSP). Jay is based out of Dallas.

Brandon is an IT Risk Manager for the Travelers IT Risk Management team. Brandon joined Travelers Insurance in 2002 and has a total of 20 years of IT experience. During his IT career at Travelers, Brandon has had responsibility for teams in architecture, development, production support and testing across Travelers. Brandon is currently working on a Master of Business Administration from the University of Hartford in West Hartford, Connecticut and received a Bachelor of Science in Management Information Systems from Miami University in Oxford, Ohio.

Major Linus J. Barloon II is a Cyberspace Officer assigned to the White House Communications Agency (WHCA) as the Chief of Cyber Operations Division in the J3 Directorate, Joint Base Anacostia-Bolling, Washington, D.C. Major Barloon has been active duty for the last 22 years, being trained as a FB-111A Avionics Technician and as a Ground Radio Maintenance technician. After 12 years being enlisted, Capt Barloon was selected for Officer Training School and earned his commission on 28 Jun 2002. Since his commissioning, he has served in many leadership roles, including: Network Operations Security Center Crew Commander, Flight Commander of both the Air Force Network Red/Blue Team and his current position.

Steve Bennett was named Symantec’s chief executive officer in July 2012. Prior to that, Bennett joined Symantec’s board of directors in February 2010 and became chairman in 2011. Bennett previously led Intuit serving as president and chief executive officer from 2000 to 2007. At Intuit, Bennett combined the company’s historic innovative and customer-driven expertise with strategic and operational rigor. Intuit revenue grew to $2.7 billion in fiscal 2007 from less than $1 billion in fiscal 2000. Under Bennett’s leadership Intuit grew its existing businesses while simultaneously expanding into new markets, such as online banking and healthcare. Bennett joined Intuit after a 23-year career at General Electric, where he managed complex and diverse organizations from consumer appliances to financial services. During his career at GE, he held a variety of key management roles in numerous areas of the business, including GE Capital e-Business, GE Capital Vendor Financial Services, GE Electrical Distribution and Control, GE Appliances, GE Medical Systems and GE Supply. He currently serves on boards at American Airlines and parent company AMR Corporation, along with Qualcomm. Bennett graduated from the University of Wisconsin with a bachelor’s degree in finance and real estate

Dr. Robert F. Brammer is CEO of Brammer Technology, LLC. His consulting includes cybersecurity, big data, electric power, and advanced networking. He retired in 2011 as VP and CTO for Northrop Grumman's Information Systems Sector. Dr. Brammer has a Ph.D. in mathematics from the University of Maryland. He is a Fellow of both the Society of Photo-Optical Instrumentation Engineers and the American Meteorological Society. He has served on advisory boards for DOD, the National Research Council, the National Science Foundation, and NASA. Security Magazine named Dr. Brammer as one of the 25 most influential people in the security industry.

F. Christian Byrnes is a managing vice president in Gartner. His team is distributed across the globe and covers the management of risk-related programs such as Information Security, Business Continuity, Privacy and Compliance. In addition, he consults with leading organizations worldwide on technology direction, security trends and best practices.

French Caldwell is a Vice President and Gartner Fellow in Gartner Research, where he leads governance, risk and compliance research. Mr. Caldwell advises executive clients and program managers of Global 2000 companies and government agencies on strategies, markets, public policy and processes. He leads strategic research and advisory projects on governance, risk management and compliance (GRC), corporate governance, enterprise risk management (ERM), vendor risk management, IT risk management, public policy and legal developments, social risk management, and strategic information risk analysis. He advises on emerging issues in public policy and corporate affairs such as Dodd-Frank Whistleblower rules, U.K. Bribery Act, third-party risk management and cross-border compliance. He led the ground-breaking White House-sponsored cyberterrorism war game, Digital Pearl Harbor, and has appeared on international news programs, including a documentary on the History Channel. He established Gartner research and advisory programs on knowledge management, digital society, government, public policy, and risk management and compliance.

At Motorola Solutions, Paul Carugati is responsible for leading the information security architecture teams towards a risk-based approach to asset protection and security management. Carugati’s notable accomplishments include developing an effective cyber-defense strategy, overseeing tactical initiatives for protection against cyber-threats, architecting new types of data-centric protection environments, implementing a new threat assessment model for all external business/partner connections and Internet facing applications, as well as leading efforts to architect and consolidate network and WLAN intrusion detection/prevention systems throughout all of Motorola's global footprint.

Sol Cates (@solcates) was promoted to the role of CSO at Vormetric in February 2013. As CSO, he is responsible for ensuring Vormetric’s internal security profile remains robust while also understanding how security is perceived and used by IT/IS and how it drives technical decision making and buying behavior at the boardroom level. Cates partners with teams through the company to engage both customers and partners, and he speaks publicly to elevate industry understanding of data security best practices in today’s complex cyber threat landscape. The technical depth and understanding of the information security space Cates has developed over the last 17 years is rooted in the intelligence community, financial services industry and other large enterprise organizations. He originally joined Vormetric in 2003, when he spent four years as a systems engineer. After holding a similar role at SignaCert (acquired by Harris) for three years, Cates returned to Vormetric in November 2009 as director of field engineering and solutions architecture. In this role, he grew and led a world-class technical sales team to great success, by installing understanding of the business, not just the technology. An active problem solver, he built the original prototype of Vormetric Toolkit, which enables enterprise and cloud service provider (CSP) customers to automate and accelerate their data security deployments. Cates’ career also includes technical sales, engineering and support leadership roles at Tripwire, Symantec and Spectra Physics. He has developed many real-world solutions for customers, including iPhone and Android applications as well as elastic SaaS platforms.

David Cearley is a vice president and Gartner Fellow in Gartner Research and is a leading authority on information technology. As a member of Gartner Research, Mr. Cearley analyzes emerging business and technology trends and explores how these trends shape the way individuals and companies derive value from technology. His current research is focused on cloud computing and how Internet and Web technologies, standards and business models are impacting the IT landscape.

Jonathan is SVP and CISO for Live Nation Entertainment, the world’s leading live entertainment and eCommerce company, including Ticketmaster, Live Nation Concerts, and more. Jonathan is responsible for the implementation and monitoring of the enterprise-wide IS strategy and IS program for Live Nation Entertainment and its subsidiaries worldwide. Formerly CISO at NBCUniversal, Jonathan has deep experience with risk identification and mitigation, vulnerability remediation, security-based incident response, regulatory and compliance activity. He is an industry award winner (ISE West “People’s Choice” Award, 2012, T.E.N. Executive Leadership Program) , recognized leader, and popular speaker.

Anton Chuvakin is a Research Director in Gartner's GTP Security and Risk Management group.

Advanced threats require defenses across the threat kill chain at each stage inclusive of call-home and containment against data theft. Security intelligence before, real-time defenses during and sandboxing analysis after provides full life cycle threat protection. Web and email security gateway evolution now includes point of click real-time defense in any location, malware sandboxing, using DLP as a defense as well as global security intelligence for telemetry on threat communications.

Paul Connelly is Vice President of Information Privacy & Security/CISO for Hospital Corporation of America. He is responsible for privacy and security compliance, protection of sensitive information, and the security IT systems. Paul has twenty-nine years of experience in information security. He started as an InfoSec analyst at the National Security Agency; then became the first CISO at the White House, where he served under Presidents Reagan, Bush, and Clinton at the White House Communications Agency; and then became a partner leading the Washington, DC information security consulting practice at PricewaterhouseCoopers. He has been at HCA since 2002. Highlights of Paul’s experience include: • Winner of the 2009 Information Security Executive of the Year Award for North America • Winner of the Frank B. Rowlett Trophy- the federal government’s national award for individual achievement in the Information Security field, 1992 • Inducted into the White House Communications Agency Hall of Fame, 1998

Ruggero Contu is a Leading Analyst on security markets at Gartner, where he is also backup Agenda Manager helping with the development of research content in this area. His main area of focus is the worldwide security software markets, with expanding research also on cloud-based security services and small or midsize business (SMB) markets. His research on security is also developed with a particular focus on regional trends. He has considerable experience in providing advice to security providers to assist them in the design of their optimum go-to-market and messaging strategy. He is based in the Egham, U.K., office.

Alan Dabbiere is the chairman at AirWatch, driving the company’s vision, direction and growth plans. Dabbiere is also the president of AJD, LLC, a privately held investment company, and he serves on the Board of Directors of the Technology Association of Georgia (TAG). Prior to AirWatch, Dabbiere founded Manhattan Associates (NASDAQ:MANH), the world’s leading supply-chain execution software company, where he served as president and CEO from 1990 through the end of 1999. He received both his bachelor’s degree in chemistry and his MBA from Indiana University.

Alan Dayley is a Research Director at Gartner on the IT Leaders team, focusing on data archiving software, information governance (IG), file analysis/data profiling and object-based storage.

Mario de Boer, Ph.D., is an Analyst in the Gartner for Technical Professionals Security and Risk Management Strategies team. He covers endpoint and email encryption, mobile device security, Web browser security, and client virtualization security.

Evelyn de Souza is senior data center and cloud security strategist for the Security Technology Group at Cisco. She is responsible for developing best security practices and controls for next-generation data centers and cloud models. To this end, Evelyn cochairs the Cloud Security Alliance Cloud Controls Matrix and is focused on harmonizing efforts with groups such as the Open Data Center Alliance. Evelyn is also an active blogger and runs the Ask the Datacenter Security Expert column on Cisco.com as well as a series of blogs on Internet evolution and the 21st-century network.

Evelyn de Souza is senior data center and cloud security strategist for the Security Technology Group at Cisco. She is responsible for developing best security practices and controls for next-generation data centers and cloud models. To this end, Evelyn cochairs the Cloud Security Alliance Cloud Controls Matrix and is focused on harmonizing efforts with groups such as the Open Data Center Alliance. Evelyn is also an active blogger and runs the Ask the Datacenter Security Expert column on Cisco.com as well as a series of blogs on Internet evolution and the 21st-century network.

Piero leads a team responsible for product marketing of Symantec’s endpoint, server, messaging and web security solutions. Piero has more than 15 years experience building, marketing and selling mobility and security solutions to enterprises and SMBs. Prior to joining Symantec, Piero held product management, product marketing and sales positions with iPass, CompuServe Network Services, UUNET and MCI WorldCom. Piero holds an MBA with an emphasis in Information Systems and Marketing and a Bachelor of Arts in Political Science and Economics from the University of California, Davis.

As a Research Director for infrastructure protection, Jeremy D'Hoinne assists Chief Information Security Officers to develop strategies against network threats. His research focuses on network security.

Russ Dietz is the chief technology officer and executive vice president of products for Websense, a global leader in unified web security, email security, mobile security and data loss prevention (DLP). He is responsible for leading Websense security technology and product strategy, innovation and research and development. He also oversees the Websense engineering, product management and security labs teams. Dietz has more than 30 years of experience in the technology and security space. With a proven track record of success as CTO for multiple high-tech companies, he has achieved landmark results with hardware, software and systems security companies. Dietz is also a recognized pioneer and innovator in the cloud computing and virtualization security solution areas. In addition, he currently holds more than 20 patents in encryption, authentication and network traffic behavior and analysis in the United States, European Union, Japan and China.

Russ Dietz is the chief technology officer and executive vice president of products for Websense, a global leader in unified web security, email security, mobile security and data loss prevention (DLP). He is responsible for leading Websense security technology and product strategy, innovation and research and development. He also oversees the Websense engineering, product management and security labs teams. Dietz has more than 30 years of experience in the technology and security space. With a proven track record of success as CTO for multiple high-tech companies, he has achieved landmark results with hardware, software and systems security companies.

Ben Doyle is Director of I.T. Applications for Enterasys Networks. Ben has more than 15 years of experience in I.T, sales and operations. Spending the early part of Ben's career in sales was a tremendous benefit to his I.T. career and allowed him to cultivate the skills needed to keep I.T. closely aligned with the business. For the last 5 years, Ben has been transforming the I.T. environment at Enterasys through the innovative use of cloud solutions. Enterasys currently has 19+ cloud applications serving every aspect of the business - including finance, supply chain, human resources, sales, marketing and engineering.

Mr. Eriksen researches and writes about how industrial companies manage the safety, reliability and sustainability of their production/manufacturing operations. As a former production engineer in the petroleum industry he knows from direct experience the challenges and opportunities which exist to improve performance in these mission critical areas. His research addresses application areas such as maintenance, repair, and operations (MRO), health and safety, energy management, environmental monitoring and control, and operational risk management (ORM). His expertise also encompasses enabling technologies such as remote monitoring and mobile technology.

As VP of Business Development and Marketing, Maria has the dual responsibility of conducting business development, aligned with the strategy of Secunia, as well as developing the marketing unit and the marketing activities for external communication. Prior to joining Secunia in 2009, Maria co-founded IDEALIZER, a danish consulting company, specialised in writing business plans and conducting market analysis. From 2005 to 2008 Maria worked at Russell Reynolds Associates as a Research Assistant. Maria holds a B.Sc. in International Business and an M.Sc. in Finance & Strategic Management from Copenhagen Business School.

Irma Fabular is a senior managing partner with Gartner Consulting. She leads the North America Consulting industry practices for education, academic medical centers and healthcare providers. Ms. Fabular has more than 25 years of experience in various aspects of information technology strategic planning, acquisition, implementation and project management. She has led many consulting engagements focused on optimizing the contributions of information technology solutions and resources to organizational performance and transformation. Her areas of expertise include strategic planning, governance, IT services management, application software and integration service procurement, portfolio management, project and program office development, and independent verification and validation. Ms. Fabular has worked with several large organizations in education, healthcare, government and other nonprofit industries.

Kevin Faulkner has over 20 years experience in developing and marketing IT security, infrastructure, and networking solutions for companies including Trend Micro, Hewlett-Packard, Microsoft, ArcSight and Genesys Telecommunications. His current focus area is advanced threat protection for targeted attacks and APTs.

Joseph Feiman, Ph.D., is a Research Vice President and Gartner Fellow in Gartner Research. Mr. Feiman focuses on application and data security, software life cycle security, application security testing, application fortification, data masking, data privacy, database protection, security intelligence, cloud applications/systems™ security, application and data security as a service.

KEITH FERRAZZI, the world’s foremost expert on relationship development, is the author of the #1 New York Times bestseller Who’s Got Your Back. His first book, Never Eat Alone, redefined professional networking today. As founder and chairman of the consulting, training, and research firm Ferrazzi Greenlight, Ferrazzi counsels the world’s top enterprises on how to dramatically accelerate the development of business relationships to drive sales, spark innovation, and create team cohesion. Ferrazzi created myGreenlight, an online learning academy for “people skills” that delivers an exclusive program aimed at sales people and business professionals. Ferrazzi has been published in The Wall Street Journal, Harvard Business Review, Inc., and Fast Company, and has appeared on The Today Show, Good Morning America, CNBC, Larry King, and other national TV. Ferrazzi’s foundation, Big Task Weekend, is an impactful, invitation only event that brings together a diverse group of visionary leaders from top organizations to facilitate partnerships to solve the world’s biggest challenges. He lives in Los Angeles and New York, and can be found online at keithferrazzi.com and myGreenlight.com.

Peter Firstbrook is a leading authority on anti-malware and anti-spam. As a research director with Gartner, Mr. Firstbrook is responsible for all topics related to the endpoint security, secure Web gateway and secure e-mail gateway markets. He helps companies select strategic technology vendors and products, negotiate the best product price, and implement best practices.

A seasoned executive with over 25 years of leadership experience, Patricia (Patti) Flynn is currently an independent consultant to Fortune 500 companies, focusing on companies in regulated industries. She recently served as the Vice President of eCompliance at Fidelity Investments where she was responsible for the compliance of electronic communications, including email, chat and social media for over six years. Having played a critical role in establishing social media standards for the financial services industry, Patti was asked to dedicate her time to social media compliance in April 2012 and reported into Fidelity's social media practice group. Prior to her most recent role at Fidelity, she held varied intrapreneurial executive roles, including Chief of Staff for Distributed Computing and Product Manager of Fidelity.com. Patti joined Fidelity Investments from Dragon Systems, where she led worldwide sales, marketing and product management organizations. Previously, Patti also held roles with Gold Hill Computers and Xerox. In addition, she co-founded the New England eDiscovery Consortium and sits on many industry panels and is a frequent speaker on the topic of web and social media risks and compliance.

Jasvir Gill is the Founder and CEO of AlertEnterprise and has more than 20 years of experience in security, compliance and access management. Prior to Alert Enterprise, Jasvir was the Founder and CEO of application security company Virsa Systems. An early pioneer in establishing governance risk and compliance as a software market segment, Jasvir drove the growth of Virsa as an enterprise software provider signing up over 400 major customers. Virsa Systems was acquired by SAP which led to the formation of the SAP GRC Access Control product line. In 2007 Jasvir left SAP to establish AlertEnterprise.

John E. Girard is a VP and distinguished analyst in Gartner's Info Security and Privacy Research Center. He specializes in business security and privacy solutions for wireless and mobile road warriors, extranet, remote offices and teleworkers.

Ian Glazer is a Research Vice President and the Agenda Manager on the GTP Identity and Privacy Strategies team. He leads IdPS' coverage for authorization and privacy. Topics within these two main areas include externalized authorization management, XACML, federated authorization, privacy by design, and privacy programs. Other topics he covers include user provisioning, identity and access governance, access certification, role management, identity data quality, and national identity programs. Mr. Glazer is also a member of the National Strategy for Trusted Identities in Cyberspace (NSTIC) Identity Ecosystem Steering Group's Management Council. As an at-large delegate to the Management Council, he ensures that all voices are heard among the wide range of industries, technologies, and advocates for whom identity, privacy, and NSTIC are crucial.

Chris Gullett designed and manages the information security and asset protection program at Allegiant Travel Company - an innovative travel services company that is one of Forbes’ America’s Best Small Companies and the parent of successful ultra-low cost carrier Allegiant Air. Prior to Allegiant, Gullett started the information security program at the world's leading casino gaming systems manufacturer – International Game Technology. Gullett also served as Information Security Architect at global hospitality company MGM Resorts International and as an IT consultant to Kimberly-Clark Corporation. He lives with his wife, Cristy, in Las Vegas.

Manish has nearly 15 years of experience in product management, product strategy, and product marketing at technology companies such as Cisco, McAfee, Redback Networks, and Intel. From 2007 to 2012, Manish held a vice president position at McAfee where he led product strategy for a $300M+ product portfolio. He earned his M.B.A. in Marketing, Finance, and Strategy from the Kellogg Graduate School of Management, an M.S. in Engineering from the University of Maryland, and a B.S. in Engineering from the Delhi College of Engineering.

Suzanne Hall is Vice President, Information Technology for the American Red Cross. The American Red Cross, founded by Clara Barton in 1881 and headquartered in Washington, DC, is the premier organization for disaster relief and a major U.S. provider of blood products to the healthcare industry. Suzanne is responsible for the technology strategy and delivery for the Multi-Channel Commerce and Security unit, focusing on traditional and emerging channels to increase revenue and reach for Fundraising, Health and Safety Programs, Marketing and Communications. Suzanne joined the Red Cross in late 2008 as the Chief Information Security Officer (CISO) and continues to lead the enterprise security strategy and direction. Suzanne is a transformative leader experienced as aligning complex organizations and resources to meet strategic goals. She is an industry recognized expert in technology management who enables business through technology solutions, risk management, and compliance programs. Suzanne brings a wealth of information technology management experience to the organization, including expertise in new technologies such as social media, web based services and e-commerce. Prior to the Red Cross, Suzanne was CIO for Lerner Enterprises and the Washington Nationals Baseball Club. In this role Suzanne led the efforts to build the most technologically advanced Ball Park in the major league. Before baseball, Suzanne was Director, IT Operations and Security at AARP, responsible for the technology functions for over 50 locations across the US. Suzanne holds a BS degree in Business Management and Accounting from The American University in Washington, DC. She also is a Certified Public Accountant, and Certified Information Systems Auditor.

Robert Hamilton is the Director of Product Marketing for Data Loss Prevention at Symantec and has over 6 years of experience helping organizations reduce the risk of data loss. Prior to Symantec, Robert held various product management and marketing roles at RSA, Postini, NetApp and HP.

Erik Heidt is a Research Director on the GTP Security and Risk Management Strategies team. His research focus areas include IT risk management, IT GRC, application security and cryptographic controls. While Mr. Heidt has more than 20 years of IT industry experience, since 2004 he has focused on information security and risk management, including roles in IT risk management, application security and information security program design.

Jay Heiser is a Research Vice President specializing in the areas of IT risk assessment and management, collaboration security, security policy and security organization. Current research areas include cloud and SaaS computing risk and control, technologies and processes for the secure sharing of data with external partners, security program management, and the writing and enforcement of corporate policies.

Gary Hemminger joined LogLogic in 2009. Hemminger brings over 20 years of experience in product management, systems engineering, and software development with leading networking companies such as Brocade Communications, Foundry Networks, and IP Infusion. At Brocade (Formerly Foundry Networks), Hemminger ran product management & marketing for the enterprise switching, application delivery controller and security products. Prior to that, he was Vice President of Marketing at IP Infusion. Hemminger attended Stanford University, where he received an MS in Computer Science, and UC Berkeley, where he received a BA in Computer Science.

Karyn Higa-Smith is a Program Manager at the Science and Technology Directorate under the Homeland Security Advance Research Projects Agency, Cyber Security Division. The Cyber Security Division is working to strengthen America’s security and resiliency by providing knowledge products and innovative technology solutions for the Homeland Security Enterprise–comprised of homeland security practitioners across the country and at all levels of government, in industry and academia. Higa-Smith heads research in the areas of Identity Management and Privacy Enhancing Technologies. She earned her Bachelors of Science degree in Computer Engineering at Clemson University and is a certified Identity Management professional from the Naval Postgraduate School. She has over 10 years of experience in Information Assurance and Information Security Auditing, Analysis, and Assessments for the U.S Department of Defense and Homeland Security. • Published Paper at 2010 IEEE International Conference on Technologies for Homeland Security titled: Modeling the federal User Identity, Credential, and Access Management ICAM decision space to facilitate secure information sharing • 2009 GISLA Nominee and Finalist

Adam Hils is a Research Director with Gartner Research. He covers network security, including intrusion prevention systems (IPS), enterprise firewalls and UTMs. In addition, Mr. Hils provides advice to budget-constrained midsize enterprises about prioritizing security investments.

Jerry oversees the development of WhiteHat’s cloud-based static application security testing (SAST) service. Prior to WhiteHat, Mr. Hoff was co-founder and managing partner of Infrared Security, a leading application security professional services firm. Mr. Hoff is an experienced application security consultant with years of professional development and training delivery. He is also the lead of the OWASP AppSec Tutorial Series.

Mike is an expert in the networking and security fields with over 15 years of experience spanning everything from penetration testing to building large organizations creating security products and services. As the founding CEO of a startup Mike is responsible for defining the company’s strategy and product vision as well as range of other things both big and small (he’s been known to take out the trash on more than one occasion).

Paul Howell is the University Chief Security Officer and directs the Information and Infrastructure Assurance (IIA) office. Paul has more than 30 years of experience in IT security. He began his career at the university as a student employee in CAEN at U-M's College of Engineering, eventually becoming the manager of the systems group. During his nine years at CAEN, Paul built their security architecture, wrote the SYNCTREE program, performed user advocate functions and participated in several successful cyber-criminal prosecutions. He was a member of the IT Secure committee, one of the first groups focused on IT security at U-M. In the 1990s, Paul also worked as a freelance firewall consultant and installed close to 60 firewalls in government offices, as well as small and large businesses. Paul joined MERIT in 1999, where he performed traffic analysis, responded to security incidents and conducted security training for MERIT customers. He was the co-principle investigator on the Lighthouse Project with Professor Farnam Jahanian, which lead to the formation of Arbor Networks. In 2000, Paul joined the newly-formed organization MAIS as their first security officer. His accomplishments at MAIS include successfully implementing the first firewall, performing the organization's first risk assessment and building the security architecture for the enterprise data centers. In April, 2004, Paul accepted the position of Chief Information Technology Security Officer and established the university's first campus-wide IT security office, Information Technology Security Services (ITSS), which became IIA in 2009. Paul holds a bachelor's degree from U-M in computer science, and a master's degree in information security from Eastern Michigan University. He is a Certified Information Systems Security Professional (CISSP), and Certified Information Security Manager (CISM), and has taught information assurance at EMU and Walsh College. Paul is a founding board member of Infraguard and the Michigan Technology Crime Investigation Association, and earned a commendation from then-Attorney General Jennifer Granholm in 2001 for his work with the State of Michigan's high-tech crime unit. Paul has one son and enjoys high-performance driving in his BMW M3.

Richard Hunter is vice president and Gartner Fellow in Gartner's CIO Research Group, where his recent work has focused on issues of interest to CIOs, including risk and value. Mr. Hunter is the author of the acclaimed books "World Without Secrets" (Wiley, New York, 2002) and "IT Risk" (with George Westerman, Harvard Business Press, Boston, 2007). His most recent book, "The Real Business of IT," also co-authored with George Westerman, was published by Harvard Business Press in October 2009, and was named by CIO Insight Magazine as the best business/IT book of 2009 in December of that year. Mr. Hunter is in much demand as a speaker and advisor to CIOs.

As Chief Information Security Officer for the State of Nevada, Christopher Ipsen is responsible for the security oversight of the state’s enterprise data and network infrastructure. Mr. Ipsen chairs the Nevada Information Technology Security Committee and is a member of both the Nevada Commission on Homeland Security and the Nevada Technological Crime Advisory Board. Mr. Ipsen is a graduate of the University of Nevada, Reno and holds national certifications as Certified Information Security Professional (CISSP), an Information System Architectural Professional (ISSAP), and a Certified Information Security Manager (CISM).

Kelly Kavanagh is a Principal Analyst in Gartner's Information Security & Privacy program. Mr. Kavanagh focuses on professional and managed services for network and Internet security. He conducts research on end-user requirements and vendor portfolios and market strategy for security consulting, implementation and integration, and managed services. He assists Gartner clients in understanding various security service providers and offerings, and in finding appropriate solutions to specific needs. He also provides advice on evaluating, selecting and deploying security information and event management technology and vulnerability management products and services.

Tom Kellermann served as a Commissioner on The Commission on Cyber Security for the 44th Presidency and serves as an advisor to the International Cyber Security Protection Alliance (ICSPA), and the National Board of Information Security Examiners Panel for Penetration Testing. Tom is a Professor at American University's Kogod School of Business and is a Certified Information Security Manager (CISM). Formally holding the position as Vice President of Security for Core Security. Previously, Tom was the Senior Data Risk Management Specialist for the World Bank Treasury Security Team, where he was responsible for internal cyber-intelligence and policy and for advising central banks around the world about their cyber-risk posture and layered security architectures. He co-authored the book "E-safety and Soundness: Securing Finance in a New Age."

Tom Kellermann served as a Commissioner on The Commission on Cyber Security for the 44th Presidency and serves as an advisor to the International Cyber Security Protection Alliance (ICSPA), and the National Board of Information Security Examiners Panel for Penetration Testing. Tom is a Professor at American University's Kogod School of Business and is a Certified Information Security Manager (CISM). Formally holding the position as Vice President of Security for Core Security. Previously, Tom was the Senior Data Risk Management Specialist for the World Bank Treasury Security Team, where he was responsible for internal cyber-intelligence and policy and for advising central banks around the world about their cyber-risk posture and layered security architectures. He co-authored the book "E-safety and Soundness: Securing Finance in a New Age."

Gil Keteltas is an e-discovery advocate in significant and complex litigation and advises global companies on the creation and deployment of discovery responseprograms. As a trial lawyer and litigator, Gil is not simply an e-discovery consultant, he directs the discovery process in the trenches of litigation, informed of the risks and opportunities that electronically stored information presents. Gil is editor of, and a regular contributor to, Baker Hostetler’s Discovery Advocate blog. Gil is active in The Sedona Conference, serves on the Advisory Board of Georgetown Law’s Advanced E-Discovery Institute, Planning Committee and faculty and regularly teaches seminars on electronic discovery and electronic evidence. His publications include chapters in Electronic Evidence: Law and Practice (“Discovery of Electronic Evidence,” ABA Section of Litigation, 2d Ed. 2008), E-Discovery and Data Privacy: A Practical Guide (“U.S. E-Discovery,” Kluwer Law Int’l 2011) and Calculating and Proving Damages (“Damages and Discovery,” Law Jrnl. Press 2011).

Chris King is director of product marketing for Palo Alto Networks. Previously, Mr. King held strategic and product marketing roles at Blue Coat Systems, including responsibility for marketing and strategy for MACH5, Blue Coat’s application acceleration solution – which he launched and helped grow to a $160 million/year business. Prior to joining Blue Coat in June of 2004, Mr. King spent over 8 years as an information technology analyst for META Group. An internationally recognized expert on information security, Mr. King has consulted with hundreds of large IT organizations, spoken before a variety of audiences, and is often quoted in trade and business press. Before META Group, Mr. King managed an international network for Securities Registration Depository, and was employed by Ernst & Young. Mr. King holds a B.A. from George Mason University.

Sam King is responsible for Veracode’s corporate development and product strategy functions.In this role, Ms. King is responsible for Veracode's product management, product marketing and messaging, corporate development strategy and execution, M&A activities, analyst relations and building key industry relationships and strategic alliances. Ms. King is a well recognized speaker and has presented on behalf of Veracode at key industry events and venues such as RSA, Gartner and InfoSec. Ms. King co-authors and leads the development of Veracode’s State of Software Security reports. Ms. King joined Veracode from VeriSign (formerly Guardent), where she was a key contributor in many different areas during her six-and-a-half year tenure. Working within the managed security services (MSS) group, she held product management and marketing responsibilities and also managed professional services and customer relationship management teams. Prior to VeriSign, she served as Technical Project Manager for i-cube/Razorfish, where she led major customer engagements ranging from legacy system transformations of mainframe business applications to development of large scale custom applications and web applications. Ms. King received her Masters of Science and Engineering in Computer and Information Science from University of Pennsylvania and her BS in Computer Science from University of Strathclyde in Glasgow, Scotland. Ms. King was the recipient of the prestigious Charles Babbage Award given to the student with the highest academic achievement in the graduating class.

Pravin Kothari is the founder and CEO of CipherCloud. He founded CipherCloud in 2010 when he recognized that while the cloud was disrupting enterprise IT with explosive growth, the security technologies had not kept pace and enterprises were losing control over their sensitive data. Pravin is driving the rapid growth of CipherCloud by managing its business, strategy, and operations. Pravin is a security visionary with more than 20 years of experience building industry-leading companies and bringing innovative products to market. Pravin was the Founder & CTO of Agiliance, a leading Security Risk Management company, and Co-founder & VP Engineering of ArcSight, a leading security company, which was acquired by HP for $1.6 billion. Previously, Pravin was Co-founder & Chief Architect at Impresse Corporation and also held technical leadership positions at Verity, Attachmate, and Tata Consultancy Services.. Pravin holds over a dozen patents in security technologies and is the inventor behind CipherCloud’s groundbreaking cloud encryption technology. Pravin holds an MS degree in Computer Science from the Indian Institute of Technology (IIT), Bombay. He is a Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), and Charter Member of TiE, a global organization dedicated to the advancement of entrepreneurship.

A 17-year veteran of the information security industry, Mark Kraynak is responsible for Imperva’s marketing, product management and corporate strategy. He also serves on the Board of Directors of Imperva’s majority owned subsidiary, Incapsula. Prior to Imperva, he led product marketing at Check Point Software Technologies Ltd., and held a position in marketing at CacheFlow (now BlueCoat Systems). Earlier in his career, he provided technology architecture consulting for Fortune 500 clients with Ernst & Young's Center for Technology Enablement. Kraynak holds a BSC in Electrical Engineering and English from Duke University, and a Masters of Fine Arts in Literature from American University

Gregg Kreizman has 30 years of IT industry experience. Prior to Gartner, Mr. Kreizman served in several technical and managerial roles for The World Bank, U.S. federal government contractors and state government. Following five years supporting clients as part of Gartner's Government Industry Research team, he moved to the Security, Risk and Privacy group. There he supports Gartner's cross-industry client base and covers single sign-on, password management, identity federation, identity as a service (IDaaS), the evolving Internet identity protocols and their nexus with enterprise identity and access management systems, and general identity and access management topics. Mr. Kreizman also covers electronic signature, an area of increasing client demand.

Ramon Krikken is an Analyst in the Gartner for Technical Professionals Security and Risk Management Strategies team. He covers software/application security; mobile application security and service-oriented architecture (SOA) security; structured and unstructured data security, including database security, data masking, redaction and tokenization; encryption and key management; security monitoring and security analytics; security metrics; and virtualization and cloud computing security as it pertains to the other categories.

George Kurtz is a serial entrepreneur who is co-founder and CEO of CrowdStrike, a cutting edge big data security and active defense technology company focused on helping enterprises and governments protect their most sensitive intellectual property and national security information. George Kurtz is also an internationally recognized security expert, author, entrepreneur, and speaker. He has over twenty years of experience in the security space and has helped hundreds of large organizations and government agencies around the world tackle the most demanding security problems. His prior roles include McAfee’s Worldwide Chief Technology Officer and General Manager. Prior to joining McAfee, Kurtz was Chief Executive Officer and founder of Foundstone, Inc., which was acquired by McAfee in October 2004. He also authored the best selling security book of all time, Hacking Exposed: Network Security Secrets & Solutions.

A security industry veteran, Mary Landesman has been researching malware and security events since the Michelangelo virus appeared in February 1991. As a senior security researcher for Cisco TRAC, a division of Cisco SIO, Landesman analyzes large data sets to determine the latest web-based threats and security trends. Her analytic skills enabled her to be the first to discover Gumblar in 2009 and the first widespread compromise of web-hosting servers in late 2006. Prior to joining Cisco through the ScanSafe acquisition, Landesman was a senior manager for the Microsoft Anti-Malware Research and Response Team, where she employed her data analytics skill to kick off the first Microsoft Annual Security Reports. During the height of the email worm wars, Landesman was the malware response coordinator for FrontBridge Technologies, where she was responsible for discovering new outbreaks and writing the defensive rules for presignature quarantine. Her other security industry roles have included product manager for InDefense, Inc. and technical support supervisor for Command Software Systems. Landesman has also consulted to various other security firms throughout the years, including Shavlik Technologies, AV-Test.org, Trend Micro, and ReversingLabs. Landesman has published a multitude of security-focused articles in a variety of publications, including Virus Bulletin, Elsevier, PC World, and ZDNet. She has also presented at several conferences, including e-Crime Congress, Virus Bulletin, RSA, and Gartner. In 2009, 2010, and again in 2011, Landesman was awarded a Microsoft MVP for her role in furthering consumer security. In 2010, Apollo Research declared Landesman the most quoted security researcher for malware and phishing and third most quoted for security overall. In 2012, eWeek magazine listed Landesman as one of the "10 Women in Information Security that Everyone Should Know."

Philip Lieberman, the founder and president of Lieberman Software, has more than 30 years of experience in the software industry. In addition to his proficiency as a software engineer, Mr. Lieberman is an astute entrepreneur able to perceive shortcomings in existing products on the market, and fill those gaps with innovative solutions. He developed the first products for the privileged identity management space, and continues to introduce new solutions to resolve the security threat of privileged account credentials. Mr. Lieberman has published numerous books and articles on computer science, has taught at UCLA, and has authored many computer science courses for Learning Tree International. He has a B.A. from San Francisco State University.

Philip Lieberman, the founder and president of Lieberman Software, has more than 30 years of experience in the software industry. In addition to his proficiency as a software engineer, Mr. Lieberman is an astute entrepreneur able to perceive shortcomings in existing products on the market, and fill those gaps with innovative solutions. He developed the first products for the privileged identity management space, and continues to introduce new solutions to resolve the security threat of privileged account credentials. Mr. Lieberman has published numerous books and articles on computer science, has taught at UCLA, and has authored many computer science courses for Learning Tree International. He has a B.A. from San Francisco State University.

Philip Lieberman, the founder and president of Lieberman Software, has more than 30 years of experience in the software industry. In addition to his proficiency as a software engineer, Mr. Lieberman is an astute entrepreneur able to perceive shortcomings in existing products on the market, and fill those gaps with innovative solutions. He developed the first products for the privileged identity management space, and continues to introduce new solutions to resolve the security threat of privileged account credentials. Mr. Lieberman has published numerous books and articles on computer science, has taught at UCLA, and has authored many computer science courses for Learning Tree International. He has a B.A. from San Francisco State University.

David is a seasoned security professional with 20 years of experience in risk management, information security, compliance, and policy development. David manages security and compliance for Fiberlink Communications, heading SAS70-Type2 and SOC2 Type 2 audits. David also recently led Fiberlink through audits to receive Federal Information Security Management Act (FISMA) authorization from GSA for Fiberlink’s MaaS360 Cloud Service offering. David helped design Fiberlink’s cloud architecture model and is an active member of the Cloud Security Alliance including co-chair of their Mobile Working Group.

Avivah Litan is a Vice President and Distinguished Analyst in Gartner Research. Her area of expertise includes fraud detection and prevention applications, authentication, identity proofing, identity theft, and other areas of adaptive access management, information security, and risk. She also covers the PCI compliance program, tokenization, and the security aspects of payment systems.

Jorge Lopez is a vice president and distinguished analyst based in the United States, where he focuses on issues of concern to business executives, especially the CEO, and their relationship to IT and the CIO. His research includes CEO concerns, global industry scenarios, strategic change, and cost optimization. He has produced research that includes how CEOs view their challenges and what IT should do about them, radical IT cost cutting, how to overcome IT as a constraint to business change, how to reduce the risk of IT, and how to improve the business strategic value and alignment of IT. In addition, he works with key IT vendors and services providers to improve the effectiveness of their business strategy and value to their customers.

Brian Lowans, Ph.D., is a Principal Research Analyst within the Secure Business Enablement group, which is part of the Information Security and Privacy research organization of Gartner Research. Dr. Lowans focuses on a range of security issues, including structured and unstructured data encryption, database audit and protection, public key infrastructure, key management and intellectual property management and strategy, as well as other information security and risk topics.

Christina Lucero focuses on healthcare payer research for healthcare Core Administration functions, BPO, Fraud and Abuse, Product Configuration and ICD-10. She also covers payer focused Cloud services, Mobile Applications and Social analytics.

Neil MacDonald is a Vice President, Distinguished Analyst and Gartner Fellow Emeritus in Gartner Research, based in Stamford, Connecticut. Mr. MacDonald is a member of Gartner's information security and privacy research team, focusing on securing next-generation virtualized and cloud-based computing environments from advanced attacks. Specific research areas include endpoint protection, virtualization security, application security, protection of cloud-based workloads and protection from advanced targeted attacks using context-aware security and big data analytics approaches. He is currently Gartner's Lead Analyst on HP.

ohn Maddison has more than 20 years experience in the telecommunication, IT Infrastructure and security industries. Previously he held positions as General Manager Data Center division and Senior Vice President Core Technology at Trend Micro. Before that Senior Director of Product Management at Lucent Technologies. He has lived and worked in Europe, Asia and the United States. John graduated with a Bachelor of Telecommunications Engineering degree from Plymouth University, United Kingdom.

Eric Maiwald covers infrastructure security, where he advises clients on technical controls (such as firewalls, NAC and intrusion detection) and on overall security architecture. Mr. Maiwald also covers mobile security (such as controls on mobile devices) and overall mobility strategy (including the development of a mobility reference architecture). He has more than 20 years of experience in information security as a security engineer, security officer, consultant and analyst.

Retired US Navy Captain | Expert on Leadership and Innovation David Marquet single-handedly “turned his ship around” when he became captain of the USS Santa Fe, a nuclear powered submarine which had a crew ranked dead last in retention and operational standings. By treating his crew as leaders, not followers, Marquet’s sub went from “worst to first.” Marquet addresses audiences who want to create empowering work environments that release the passion, initiative, and intellect of everyone on their team. Marquet is the author of Turn the Ship Around! How to Create Leadership at Every Level. Fortune magazine called it the "best how-to manual anywhere for managers on delegating, training, and driving flawless execution." A US Naval Academy graduate, Marquet served in the US submarine force, where he commanded the nuclear-powered fast-attack submarine USS Santa Fe, stationed in Pearl Harbor, Hawaii. The Santa Fe continued to win awards after his departure and promoted a disproportionate number of officers and enlisted men to positions of increased responsibility, including nine subsequent submarine captains.

Frank Marsala is a Vice President responsible for the Telecommunications Equipment and Services sectors for Gartner Invest. In this role he analyzes and expands upon the work produced by Gartner industry analysts covering the telecom equipment and service sectors, with an eye toward the need of the investment community.

Rob McMillan covers information and IT security topics such as strategic planning, security policy and governance, data loss prevention, security incident response, threat intelligence services, risk management, cloud security issues, and security metrics. He brings firsthand experience with nine years in the financial services industry at executive level within one of the largest banks in the world. Prior to this, Mr. McMillan spent 12 years within the university sector, including nine years with specialist security incident response teams. He has been a key participant in broader industry initiatives within Australia and is co-author of a book on the legal implications of IT security.

Stephen oversees all aspects of global marketing and product management at Absolute Software including corporate communications, product marketing, demand generation, and the company’s presence on the web. Stephen most recently served as Senior Director, Global Web Marketing and Marketing Operations at business intelligence vendor Business Objects. In this role, he led the company’s worldwide online branding effort and developed the internet as a primary marketing channel. His diverse 18 year marketing career also includes senior marketing positions with Crystal Decisions and Citizens Bank of Canada.

Dave Monnier is a Security Evangelist and Fellow at Team Cymru, a specialized Internet security research firm based in Lake Mary, Florida, USA. Team Cymru specializes in understanding the economic aspects of online crime and Dave excels at describing the complex nature of the underground economy to both executives and technologists alike. Understanding that real- world security involves both technology and business considerations, Dave helps organizations to fully consider their security and policy decisions in real- world terms. Dave has traveled the world presenting security ideas and solving organizations hardest problems. With over fifteen years of experience in a wide-range of technologies, Dave brings a wealth of knowledge and understanding to every situation. Dave began his career as an intelligence photographer in the United States Marine Corps and moved into the technology sector performing UNIX and Linux administration in academic and high performance computing environments where he helped build some of the most powerful computational systems of their day. Subsequent to systems administration, Dave moved into Internet security, having served as a Lead Security Engineer for a Big ten University and later helped to launch the Research and Education Networking ISAC, part of the formal U.S. ISAC community. Dave joined Team Cymru in 2007 where he has served as their Senior Engineer and later as a Security Evangelist. In 2010, Dave was granted the title of Team Cymru Fellow, a highest honor of Team Cymru.

John Morency is a research vice president who covers the management of disaster recovery and IT resiliency. He also focuses on compliance, security and risk management issues related to the implementation of effective disaster recovery.

Admiral Mike Mullen served as the 17th Chairman of the Joint Chiefs of Staff (2007-2011). He was the principal military advisor to President George W. Bush and President Barack Obama, as well as two Secretaries of Defense. He led the military during a critical period of transition, overseeing the end of the combat mission in Iraq and the development of a new military strategy for Afghanistan. He advocated for the rapid development and fielding of innovative technologies, championed emerging and enduring international partnerships and advanced new methods for combating terrorism—all of which directly culminated in the elimination of Osama bin Laden. As Joint Chiefs Chairman, he spearheaded the repeal of Don't Ask, Don't Tell. In addition, he successfully led the matrix, consensus-based, complex organizational model of the Joint Chiefs of Staff. Mullen has deep experience in leading change in complex organizations, executive development and succession planning, diversity implementation, crisis management, strategic planning, budget policy,congressional relations, risk management, technical innovation and cyber security. He is widely recognized as an “honest broker” in his key leadership roles as the trusted advisor to both President Bush and President Obama. He maintains strong relationships with leaders around the globe. He and his wife, Deborah, remain staunch advocates of veterans and their families on a broad range issues including drawing public attention and institutional focus to the challenges of post-traumatic stress, combat-related brain injury, military suicide, care of the wounded and veteran homelessness. A native of Los Angeles, Mullen graduated from the U.S. Naval Academy in 1968. He commanded at every level in the Navy including three ships, an aircraft carrier battle group and a fleet. His final four-star command was in Europe for NATO. His fleet experience culminated in his assignment as the Navy's highest ranking officer, the 28th Chief of Naval Operations (2005-2007). Mullen earned a Master’s of Science degree in Operations Research from the Naval Postgraduate School and completed the Advanced Management Program at the Harvard Business School.

Mark Nicolett is a vice president in Gartner Research. His research in the security, risk and compliance area focuses on security information and event management, database activity monitoring, vulnerability management, configuration audit, and IT governance risk and compliance management.

Trish Oelrich is a senior executive with extensive business risk and compliance knowledge. She has over 30 years experience in corporate governance, compliance, audit, information systems, accounting and IT security. A strategic thought leader on emerging and existing risk issues, she has a primary focus on protecting shareholder value and a company’s reputation. Ms. Oelrich has depth and breadth in pharmaceuticals, financial services (including insurance, banking and securities), healthcare and manufacturing. Her expertise includes regulatory compliance; business, financial and IT process controls; forensic investigations, data integrity; business continuity; data privacy; IT security; IT quality management processes and Sarbanes-Oxley. She effectively integrates the appropriate risk mitigation activities into business, IT strategies and operational processes in cost-effective ways. With her leadership organizations have successfully taken business risks while protecting their assets, reputation, intellectual property, personally identifiable information, financial data, and continuity of business processes. Ms. Oelrich is a Director for PHI Holdings, Inc. a Fortune 250 Energy/Utility company located in Washington, D.C. She is a member of the Audit Committee and Governance/Nominating Committees of the Board. Ms. Oelrich has established a global risk management program at GlaxoSmithKline Pharmaceuticals (GSK) that embedded risk management into the daily operations of the organization focusing on cost-effective compliance solutions and information monitoring. Prior to becoming VP of Global Risk Management, Trish was VP of US Financial and World-wide IT Internal Audit services, and throughout her career at GSK participated on the senior IT leadership team. At Ernst & Young, Ms. Oelrich was Partner in charge of the Information Systems Audit and Security practice and consulted to the financial services, manufacturing and healthcare industries. She managed the consulting practice and delivered all information systems audit and security consulting services to over 400 clients. In addition she was lead financial audit partner on various engagements. Ms. Oelrich is presently a doctoral student at Fielding Graduate University in the School of Human and Organizational Development. She has been a Board member and Treasurer for various non-profit organizations including Fielding Graduate University, Girl Scout Council of Chicago, the Information Systems Audit and Control Association, and SAFE Bio-Pharma Association. Her financial expertise helped these organizations establish financial stability. She remains well networked through the National Association of Corporate Directors (NACD), Women Corporate Directors (WCD), Greater Philadelphia Senior Executive Group (GPSEG), Executive Women of New Jersey (EWNJ), AICPA, New Jersey CPA Society, and the Information Systems Audit and Control Association. Academic Credentials: B.B., Accounting and Information Systems, Western Illinois University

Lawrence Orans focuses on network security research. He assists chief information security officers and other security professionals in developing network-based strategies for mitigating security threats. His recent research notes and presentations have addressed vulnerabilities in the Internet infrastructure and how enterprises can mitigate these risks. Other research highlights BYOD security challenges and strategies for protecting against advanced targeted threats. With his 15 years at Gartner, Mr. Orans has nearly 30 years of experience in the IT industry. He has held systems engineering positions with IBM, 3Com and Bay Networks, where he helped customers migrate from SNA to TCP/IP networks.

Eric Ouellet is a vice president in Gartner, where he is responsible for research activities and content delivery relating to data loss prevention (DLP); enterprise digital rights management (EDRM); PKI/PKO: Certificate Authorities (CA); database, application and storage encryption; encrypted e-mail; and virtualization and risk management.

Mr. Parris brings over 20 years of technology infrastructure and business experience to Currenex and the eExchange division within State Street Global Markets. Previously, Mr. Parris worked in the Network Service Provider team at Cisco Systems, held business development roles at IPC Information Systems/IXnet, Moneyline Telerate as well as advisory roles in various startups and acquisitions prior to joining Currenex in 2007. Mr. Parris holds a Bachelor of Arts in Political Science from the University of North Carolina at Chapel Hill along with numerous technical certifications and awards. He is a frequent speaker and industry contributor on datacenter strategy and low-latency, high-performance infrastructure design and operations.

Earl Perkins is a Research Vice President in Systems, Security and Risk at Gartner. His focus areas include: (1) identity and access management (IAM), including user administration/provisioning; (2) identity and access governance (IAG); (3) externalized authorization management; (4) IAM consulting, system integration, managed services, and IAM for cloud; (5) IAM strategy, markets and futures; and (6) industrial control or operational technology (OT) security.

Lawrence Pingree's responsibilities include the coverage of information security technologies and markets, security program execution, advanced threats, network-based security technologies, mobile device security and cloud-related security issues. The emphasis of his research is on providing insights to the security vendor community. His inquiry and research goals are to provide technology providers with critical insights on the latest security market trends, technology alignments and potential partnerships and to aid technology providers competing in the security markets. He achieves these goals for technology and service providers by reviewing their businesses. This includes examination of their marketing efforts, go-to-market strategy, currently employed technologies, technology development plans and various other business attributes to identify the key competitive differentiators and competitive strategies that providers should use to navigate the market. On inquiry with end users, Mr. Pingree is focused on identifying the best opportunities and technologies to address strategic customer requirements and providing insights into the strategies they may need to employ in order to successfully combat the advancing threat landscape by leveraging security technologies.

As a senior research analyst, Khushbu Pratap provides advice and develops research within the governance, risk and compliance (GRC) domain. Her focus and interest are internal audits, risk assessments, vendor risk management, controls monitoring, privacy compliance issues, ISO 27000 series and compliance initiatives in the payment card industry and cloud infrastructures. She develops role-specific research and analyzes trends in addition to advising senior management and board members on their individual or joint GRC initiatives. Ms. Pratap previously led the Governance, Risk, and Compliance practice for a boutique consulting firm based out of India. She led and delivered successful engagements for some key accounts in the telecom, banking, and insurance industry.

Trevor Pressley is responsible for City of Raleigh's information security posture. He ensures organization goals are aligned by developing information security policies, developing an enterprise security strategy and by raising organizational awareness.

Paul Proctor is a vice president, distinguished analyst, and the chief of research for security and risk management. He helps organizations build mature risk and security programs that are aligned with business need. His coverage includes board reporting, KRI development, risk assessment and GRC technologies. His ground-breaking research in Risk-Adjusted Value Management helps organizations integrate risk and corporate performance.

Over 19 years of IT security and general IT experience. Former CISO at ING Direct and Philadelphia Insurance, having worked in heavily regulated environments, particularly in financial services. Have built and turned around security programs, including implementation of Vulnerability Management, Application Security, Monitoring & Incident Response, Engineering, Privacy, Reporting, Customer Security, Information Lifecycle Management, and Architecture programs. Designed leading security programs for on-line activity, including web and mobile based transactional services.

Chandra Rangan is the Senior Director of product marketing for Symantec's enterprise security & mobility product portfolio. He has 12+ years experience in the technology industry, including Gartner, McKinsey & Company and IBM Asia. Chandra holds an MBA from the Tuck School of Business at Dartmouth College, and a Bachelors in Computer Science from the National University of Singapore.

Lisa Reshaur is the General Manager for Microsoft’s Enterprise Business Continuity Management Program. She sets that standards for the Company’s BCM program which includes continuity, recovery and resiliency. Lisa earned a Ph.D. from the Disaster Research Center where she focused on studying businesses in disasters. Prior to joining Microsoft, Lisa worked for PricewaterhouseCoopers where she spent 14 years working with clients help them improve operational excellence and build, improve and sustain risk and compliance programs. Lisa earned a Six Sigma Black Belt, is a Certified Business Continuity Professional (CBCP) and is in the process of earning her Certified Risk Management (CRM) designation.

Wes Rishel covers personal health records, electronic health records, semantic interoperability, health information exchanges, enterprise master patient index, application integration, Health IT standards, natural language processing, vocabulary service providers and voice recognition He has worked in health IT for 35 years. Prior to Gartner he ran product development for healthcare IT vendors and consulted with medical centers on their architecture for application integration. Rishel serves on the Federal advisory Committee on Health IT standards. He served on the board of directors of HL7 for 25 years, spending two years as Chair. He has also served on the boards of HIMSS, WEDI, CCHIT and the eHealth Initiative. Awards: Louis M. Sullivan Award (WEDI), Ed Hammond Award (HL7).

As Chief Security Strategist for Citrix Systems, Kurt Roemer leads the security, compliance, risk and privacy strategies for Citrix products. As a member of the Citrix CTO Office, he drives ideation, innovation and technical direction for products and solutions that advance business productivity while ensuring information governance. An information services veteran with more than 20 years of experience, Mr. Roemer's credentials include the Certified Information Systems Security Professional (CISSP) designation, he served as Commissioner for the US public-sector CLOUD2 initiative, and he led efforts to develop the PCI Security Standards Council Virtualization Guidance Information Supplement for the payment card industry while serving on the Board of Advisors. He regularly contributes his expertise on security-related topics in global online, print and broadcast media.

Barry Runyon focuses on healthcare provider research, including underlying and emerging technologies such as mobility, clinical and patient portals, vendor neutral archives, legacy decommissioning, remote hosting and cloud service delivery models, and enterprise awareness. Mr. Runyon also covers organization, governance and compliance issues associated with these research areas and to a lesser extent, topics surrounding the patient experience and telemedicine. Mr. Runyon has over 30 years of IT experience both inside and outside of the healthcare. Prior to joining Gartner he served as the Chief Technology Officer at the University Medical Center in Tucson, Arizona.

Jonathan has been a senior member of Quest’s team since 1999. Working with both the security and performance management product lines, he has designed, architected, and implemented solutions for the largest and smallest customers Quest has. When the Quest One Identity Solution was launched, Jonathan took the position as its chief evangelist. Now he directs all business development & product strategy efforts for the growing IAM solution, working with partners, channels and building programs to raise awareness. Previous to Quest, Jonathan was a presales consultant at Platinum Technology focusing on the security, access control and SSO solutions. Jonathan graduated from Fordham University in 1996 with a degree in Philosophy.

Jonathan has been a senior member of Quest’s team since 1999. Working with both the security and performance management product lines, he has designed, architected, and implemented solutions for the largest and smallest customers Quest has. When the Quest One Identity Solution was launched, Jonathan took the position as its chief evangelist. Now he directs all business development & product strategy efforts for the growing IAM solution, working with partners, channels and building programs to raise awareness. Previous to Quest, Jonathan was a presales consultant at Platinum Technology focusing on the security, access control and SSO solutions. Jonathan graduated from Fordham University in 1996 with a degree in Philosophy.

Philip S. Schacter is team manager for security and risk management strategies (part of the Burton Group acquisition). His focus of research is network security, security architecture, security governance, network identity and policy systems, remote work infrastructure, and security for tablets and other BYOD devices.

Tom Scholtz is a Research Vice President in Gartner, where he advises clients on security management strategies and trends, and is an acknowledged authority on information security policy design, security organizational dynamics, and security management processes. Based in the United Kingdom, Mr. Scholtz is a regular presenter at European industry events.

Donna Scott is a vice president and distinguished analyst in Gartner Research. She is responsible for research in the areas of cloud computing, real-time infrastructure, business availability, business continuity/disaster recovery and IT operations management. She focuses on best practices for IT operations management and architecture, end-to-end IT service management, 24/7 availability and hybrid cloud computing research.

Mark Seward CISA, is currently Senior Director, Security and Compliance Marketing at Splunk Inc. He has over 10 years of experience in the IT security management profession as a security practitioner and product manager with experience in log management and vulnerability management including extensive security work for the US Treasury Department. Mark has a Master of Science in Information Technology and a Federal CIO certification from the University of Maryland.

Gordon Shevlin brings more than 25 years of technical, sales, marketing and management experience in the technology sector. Gordon is currently Chief Executive Officer and particle owner of Allgress, Inc. His previous position as Executive Vice President of FishNet Security resulted from his partial ownership and position as EVP of Sales with Siegeworks. During his tenure at SiegeWorks, he grew the company from 3 employees to 120 employees, with a West Coast and International presence and led its successful acquisition by FishNet. Previously Gordon has held positions with both Nokia and ODS. Additionally, Gordon has served multiple roles with ISSA including President and Vice President of Silicon Valley Chapter as well as CFO of ISSA International. He has held board positions for 3 consecutive terms. With his breadth of knowledge of the security industry, Gordon has been invited to serve on the advisory boards of 12 of the leading information security companies.

Vivek Shivananda is the Co-Founder/President and CEO of Rsam. Vivek has a history in creating high-growth technology businesses. Prior to founding Rsam, as COO of eB Networks Vivek successfully grew its $30 million information security and network infrastructure consulting services and eventually sold it to Inrange Technologies in 2001. Prior to eB networks, Vivek held several management positions at Cap Gemini. A respected member of the GRC community, Vivek is a guest speaker at industry conferences. Vivek is a CISSP and holds bachelors and masters degrees in electrical engineering and an MBA from Carnegie Mellon's Tepper School of Business.

Julie Short is a Research Director and Research Agenda Manager at Gartner, focusing on the discipline of enterprise architecture (EA). She also has a risk management and compliance background. In her career, she has worked and managed all IT disciplines. She specializes in how EA integrates with and is consumed by the other IT disciplines, how risk management is integral to EA, incorporating EA as part of major initiatives, and the importance of defining governance from a business objectives perspective. She is also one of the past co-authors for the EA tools Magic Quadrant and has led research specifically on the functionality, selection, and implementation of EA tools.

Doug Simmons is Burton Group vice president of consulting services. His expertise is in enterprise, e-business and service provider security, risk management, data loss prevention, identity and access management, application and data security, network security, security policy and program development, PKI, messaging and collaboration services.

Michael Singer has been with AT&T since 1990 and recently joined the AT&T Business Solutions Growth Platforms team. He leads the planning and marketing of security solutions for mobility and wireline customers as well as the AT&T enterprise. His current focus is on emerging services that enable mobile workers to access Internet, cloud and private resources easily and securely. He has been granted several U.S. patents and has a strong background in analysis, development, operations and security.

As Director of Internal Audit at Johnson and Johnson, Inc, Ms. Smith is the eGRC (enterprise Governance, Risk, and Compliance) Program Lead. Her background comes from multi-disciplinary experience in multiple compliance roles, Audit, IT delivery and Supply Chain. In her multiple roles she has acted as a change agent with strengths in identifying collaboration and integration opportunities.

As the Director of Information Technology Engineering for CKE Restaurants, Inc., a $1.5 billion company that through its subsidiaries operates more than 3,300 franchised and company-owned restaurants in 42 states and 28 countries. He is responsible for providing the Company with strategic direction for using technology to enhance corporate security, productivity and profitability. He has more than 20 years of experience in the technology field, having held various technology management positions and consulting engagements at a number of companies in multiple Industries. Prior to joining CKE, He was a professor at both Harvard University and the Massachusetts Institute of Technology where he was involved with teaching, research and consulting. He has lectured in diverse fields at international conferences around the world. He has published more than 40 scientific publications in international peer-reviewed journals, written a technical book and in 1994, was awarded a patent in a nuclear analytic technique that today it is used by laboratories world-wide. He is a Fulbright scholar and holds three advanced degrees from the Massachusetts Institute of Technology (MIT), including a Doctorate in Physics.

Kristian Steenstrup is a Vice President and Gartner Fellow in Gartner Research and the Industry Services Director for the Energy and Utilities Industry Advisory Service. As a Gartner Fellow, he is involved in cross-topic research across Gartner, leading research on IT and operational technology alignment. Additionally, he conducts and delivers utilities industry research on industry-specific business systems, including EAM, and work and asset management systems, and is responsible for vendor analysis in these areas. Since joining Gartner, Mr. Steenstrup has published research on comparative ERP studies, analysis of business applications in various markets, and application of software technology in the energy and utilities industry.

John has nearly 30 years IT experience ranging from application development to Business Continuity program management. He has worked at Charter Communications since 2003 with a primary focus on disaster recovery efforts. John’s work over the past 3 years has evolved into management of the Business Continuity/Disaster Recovery program and implementation of tools and methodologies to improve resiliency and recoverability of business processes. John currently is the program director of the Midwest Continuity Planning Forum, a group of Business Continuity/Disaster Recovery business leaders in the St. Louis area.

Ray Wagner, Ph.D., is Managing Vice President of the Secure Business Enablement group, which is part of the Information Security and Privacy research organization of Gartner Research. Mr. Wagner focuses on a wide range of security issues, including identity and access management, Web services security, public-key infrastructures, digital rights management, the information security organization, and information security issues within emerging technologies.

Tim has extensive experience leading security consulting projects and he is a speaker at events hosted by RSA, ISC(2), the Association of Financial Crimes Investigators (IAFCI), SecureWorld and the CISO Executive Network. Tim is also a co-founder and Director for the Philadelphia ISC(2) chapter. Tim's focus is on application, mobile and network security, including online and mobile banking and assessment of emerging security technologies. Tim’s background is in ethical hacking and data protection strategy.

Dr. Walker co-developed one of the first courses on Enterprise Risk Management (ERM) and has done ERM training for executives and boards around the world. This training includes helping boards develop risk oversight practices, benchmarking ERM practices, advising organizations on ERM process development, and identifying black swans and unknown risks. He has also researched ERM at the headquarters of companies such as Wal-Mart, Microsoft, DuPont, Intuit, and others. He has written extensively on risk and ERM including the books Improving Board Risk Oversight through Best Practices, Making Enterprise Risk Management Pay Off and Enterprise Risk Management: Pulling it All Together. He has also coauthored several articles on ERM including: Is your Board Ready for ERM, The Strategic Advantage of ERM, Managing Risk: An Enterprise-Wide Approach, A Road Map to ERM, and ERM and the Strategy-Risk Focused Organization. Dr. Walker also served as a visiting fellow at the London School of Economics Centre for the Analysis of Risk and was a consultant to COSO on their Enterprise Risk Management framework. Additionally, Dr. Walker was selected as a 2011 Deloitte CFO scholar.

Andrew Walls is a Research Vice President in Gartner Research, where he specializes in information security practices, tools and markets in social media, enterprise governance, awareness/communications, directories, investigations, managed security services and security program management. Security practices and markets in the Asia/Pacific region are also a focus of his research agenda.

Juergen Weiss focuses on insurance industry research covering a broad range of business and technology topics relevant for both life and non-life insurers. His research areas include legacy modernization, cloud computing, mobile applications, social media and risk management. Among his focus areas are Solvency II, policy administration systems as well as billing and payment applications. Mr. Weiss manages the worldwide insurance research agenda within Gartner and has more than 15 years of IT experience. Prior to joining Gartner, he had several executive roles in product management, development and consulting at SAP AG where he was globally responsible for one of SAP's product lines in financial management.

Jeffrey Wheatman is a research director within Gartner's Information Security, Risk Management and Privacy research group. As an experienced analyst within Gartner's S&RM team, Mr. Wheatman works with senior security and risk management leaders to help them identify, assess and remediate IT-related risks within their environments.

John A. Wheeler is a Research Director with responsibility for covering compliance, risk management and leadership topics. His areas of specialty include enterprise risk management, internal audit, corporate governance and IT/operational risk. Mr. Wheeler is a recognized expert and frequent speaker/author on the effective use of risk management practices in large, complex organizations. He has more than 20 years of professional experience in a variety of financial operations, risk management and IT-related roles.

Experienced leader with Information Security and Information Technology background in e-commerce, medical, and non-profit industries. Experienced in establishing relationships between Information Security and strategic business partners. Experienced in creating sustainable business strategies, frameworks and processes to meet organizational objectives. Highly organized with excellent written and verbal communication skills. Lead various teams in both information security and systems architecture. Able to contribute positive impact both individually and as a member of a leadership team. Making it better without making it complex.

Belinda Wilson is Senior Director responsible for the Business Continuity Management (BCM) practice within Security and Risk Management. BCM includes disaster recovery, business continuity and crisis management.

Roberta Witty is a Vice President in Gartner Research, where she is part of the Risk and Security Management Programs group. Her primary area of focus is business continuity management and disaster recovery. Ms. Witty is the Key Initiative Lead for Gartner for IT Leaders (GITL) and chairs the BCM program at Gartner's annual Security & Risk Management Summit.

As Architecture Manager for Cigna, Curtis is responsible for improving application development and delivery by optimizing the software lifecycle. He has 16 years experience in improving process and developer productivity that deliver superior and trusted applications to drive competitive differentiation. Curtis has built his career by helping large enterprises modernize their application development and delivery by architecting and implementing DevSecOps processes that ensure trust and collaboration between development, QA, IT Ops, Legal and Security teams. He is a leading advocate for IT transformation through teaching these different enterprise silos how to partner for success.

Greg Young is a Research Vice President in Gartner. His primary coverage area is network security. He is the lead author for the Network Firewall Magic Quadrant, IPS Magic Quadrant and Infrastructure Protection Hype Cycle. He also co-authors the UTM Magic Quadrant.

Brian Zawada is a co-founder and the Director of Consulting for Avalution Consulting. Brian focuses on business continuity program design, implementation and continual improvement. Brian is a frequent author and speaker, serving on the Editorial Advisory Board of Continuity Insights magazine. He is also the Chairman and Head of the US delegation to ISO Technical Committee 223, the authors of ISO 22301, as well as an elected board member of the USA Chapter of the Business Continuity Institute (BCI). Brian is a Member of the BCI (MBCI) and is certified by the DRI as a Master Business Continuity Professional (MBCP).

Dionisio Zumerle is a Principal Research Analyst with Gartner Research. His research focuses on mobile security. His research coverage includes mobile device security, mobile application security, mobile and wireless network security, and the impact of consumerization of IT and BYOD on security. His research interests also include emerging technologies such as Near Field Communications (NFC) security and machine to machine (M2M) security.