Wireless Security / Introduction To PKI
ISACA-CMC - Spring Seminar 2009
Presented by: SecureIT

Dates: Monday - Tuesday, May 4 - 5, 2009

Place: The Conference Center at the Maritime Institute
            692 Maritime Blvd
            Linthicum Heights, MD 21090
            (410) 859-5700

Planned CPEs: 14

Time:

Price:

Member pricing includes all ISACA members and Baltimore chapters of the IIA, AGA, ISSA and CFE.

Payment/Registration: Prepayment and pre-registration are required. Please follow the following links to:

REGISTER AND PAY BY CHECK
or call Joanie Miller at (717) 664-8037 by Friday, April 10th. Make checks payable to ISACA-CMC. Please include the registrant's name with the check and mail to:

Cancellation Notice: Full refunds will be given if registration is cancelled prior to Friday, April 10th. Refunds will not be given after that date. Attendance is transferable. ISACA Central Maryland Chapter reserves the right to cancel this event if there is not sufficient participation. Participants will be notified the week of April 13th in the event that the seminar has been cancelled. Paid registrations will be refunded. 

Hotel Accommodations: For those living outside of commuting distance to the Conference Center, hotel reservations can be made at the Maritime Institute hotel at the ISACA group rate, which includes dinner and breakfast. To make reservations, call Maritime at (410) 859-5700. Hotel guests also receive free shuttle service from the BWI airport and the BWI Amtrak train station, but must call the Maritime hotel to schedule pickup.

Wireless Security:
Day One will address the fundamental security issues related to WLANs. The focus of the course will be providing an understanding of wireless security concepts and control techniques, along with appropriate technical details to illustrate and expand on these concepts. The course will discuss the basic mechanics of the cryptographic techniques and protocols used in WLANs so that auditors and security professionals will have an ample understanding of the underlying technologies. (This means that this course will contain some highly technical material related to encryption and wireless network frame formats.) Some commonly used WLAN security audit and hacking tools (such as Aircrack) will be discussed at a high-level in the course. However, this class will not provide detailed walkthroughs on how these tools can be used in a security review.

Intoduction to PKI:
Day Two provides the background on encryption techniques and other components of a PKI system so that auditors can identify the main areas of risk associated with this technology. The course will especially focus on the key risk and control functions provided by Certification Authorities, including generation and protection of keys and revocation of certificates. The importance of the Certification Practice Statement and the role of periodic third party audits (such as the AICPA's WebTrust program for Certification Authorities) will be discussed in the context of RFC 2527 and the American Bar Association PKI Assessment Guide.

Instructor Bio: 
Robert Andrews,CISSP, CCE, GSEC

Robert Andrews is co-founder of P3 Strategic, a SecureIT alliance partner. He currently is CTO and lead investigator, as well as a security consultant and trainer. He previously was the lead instructor and program coordinator of the IT Security and Forensics Associate Degree program at Pittsburgh Technical Institute. His service experience includes working with several Fortune 500 companies and governmental agencies at the local, state and federal levels. His experience also includes teaching high level security certification programs, CISSP and Cisco boot camp classes around the nation. Rob has been a technical editor for and has collaborated on several IT certification manuals for Course Technology and McGraw-Hill. He has also been the KeyNote Speaker at many National Information Technology seminars including those for the Security Conference & Expo 2003 presented by Cadre, Florida Association of Postsecondary Schools and Colleges, Pittsburgh Technical Institute, the American InterContinental University, and several ISSA/ISACA organizations nationwide.