2nd Annual IT Security Conference for the Oil and Gas Industry Proceedings

IT Security Web Banner Ad (for API website)

2nd Annual IT Security Conference for the Oil and Gas Industry Conference Program

Due to the large file size of each .pdf presentation, it may take a while to open. For quicker viewing, you may wish to save the file to your computer.

Monday, November 5, 2007
I3P Security Forum
I3P Control System Security: Security Education and Hands-On Demonstrations

Tuesday, November 6, 2007

"Delivering America's Energy Security" Keynote

John Felmy, API

E-Discovery Keynote

Mark Rasch, FTI Consulting

A-1 Life in the Fast Lane: Navigating U.S. and Global Privacy and Security Issues

Ruth Hill Bro, Baker & McKenzie, LLP

   "Life in the Fast Lane: Government Enforcement and the Risks of Privacy Noncompliance"
   "Managing Privacy Risks in an Information Driven World"
   "What a Tangled Web We Weave: The Top 10 Web Site Privacy Mistakes Made by U.S. Companies"

B-1 Securing the Mobile Workforce: Securing the Device vs. Securing the Information - Where Should Your Money Go?

Mobile Security: Jeff Camiel, Jefferson Wells

Enabling the Remote Workforce: Kevin Rowney, Vontu

Chevron Case Study: Jay White, Chevron

A-2 Identity Management in the Oil and Gas Industry: The Transportation Worker Identification Credential (TWIC)

   TWIC Enrollment Port Brief: Justin Wright, Deloitte & Touche
   Ryan Lupton, Deloitte & Touche
   C.P.O Mark Wilkins, US Coast Guard
   Rob Ream, Shell

B-2 Downstream - Payment Card Industry-Data Security Standard (PCI-DSS), Retail Point-of-Sale (POS) Systems and Data Security

PCI Compliance within the Petroleum Industry: Michael Dahn, Aegenis

PCI Preperation: Branden Williams, VeriSign

A-3 Web Application Security - Protecting the Front Lines

Diana Kelley, Burton Group


B-3 Risks of Cyber Impacts on Critical Control Systems
Vendor Research Perspective: Eric Byres, Byres Security
Government Research Perspective: Charles Palmer, I3P
Asset Owner Perspective: Dave Scheulen, BP

Wednesday, November 7, 2007

Communicating the Value of Security and Risk Management Keynote
Randy Krotowski, Chevron

Case Study: Alignment of IT Security with Business Processes

Dan Chisum, ConocoPhillips

A-4 Metrics Discussion

Benchmark Lessons Learned Case Study: Michael Lewis, Chevron

Aggregate Oil and Natural Gas Industry 2006-2007 Benchmark Results from API & Getronics: Doug Webb, Getronics

B-4 Best Practices in Security Event Management

Shell's Implementation: Sridhar Balaji, SourceSentry / Shell

BP's Lessons Learned: Dan Hill, BP

Williams Lessons Learned: Paul Tucker, Williams

A-5 Ensuring the Security of the Digital Oilfield: A Holistic View

Holistic Security Drivers: Douglas Jacoby, Baker Hughes
Ross Philo, CISCO


A-6 Business Process - Third Party Connectivity
How to Control Third Party Access: Matt Ege, KPMG Alternatives to Control Third Party Access: Greg Salyards, 2FA Technology Baker Hughes Lessons Learned: Michael Bland, Baker Hughes

B-6 Security and Risk Implications of the Convergence of Data Due to Virtualization
Dennis Moreau, Configuresoft

Thank you for attending the 2nd Annual IT Security Conference for the Oil and Gas Industry.

See you at the 3rd Annual IT Security Conference, November 11-12, 2008, at the Omni Houston. Mark your calendars now!