May 6, 2025 | The Hotel UMD, College Park, Maryland
|

Conference Agenda by Track

Cloud Compliance Track
Cross-Compliance Track
Data Privacy Track
Enterprise Compliance Track
Plenary Session
Frank Briguglio

The Importance of Identity Governance and Administration (IGA) in Compliance Frameworks (C13c)

4:45 pm - 5:15 pm
Frank Briguglio
Anil Karmel

Ensuring Security, Trust and Assurance via CSA STAR (C12c)

2:45 pm - 3:15 pm
Anil Karmel
Ranil Dassanayaka

Considering a Dramatically Different Paradigm to Ensure Security; How the Dynamic and Abstracted Infrastructure can be More Secure than Ever (C12b)

2:15 pm - 2:45 pm
Ranil Dassanayaka
Robert Ames
Anthony Valentine

Cloud Compliance Panel Discussion: Should There be a Standard International Reference Architecture to Make Cloud Compliance Easier? (C13a)

3:45 pm - 4:45 pm
Anthony Valentine
Anil Karmel
Mark Houpt
Martin Rieger
Tim Weil

Taking Compliance to the Cloud (Tools and Techniques Using ISO Standards) (C12a)

1:45 pm - 2:15 pm
Tim Weil
Chris Williams

Assessment and Compliance for the Cloud (C11b)

12:15 pm - 12:45 pm
Chris Williams
Siobhan Moran
Martin Rieger

How Do I Get Started With FedRAMP? (C11a)

11:45 am - 12:15 pm
Martin Rieger
Kris Martel
Michael South

Cloud Compliance Keynote: Security & Compliance: A Driving Force Behind Moving to the Cloud (P10c)

9:45 am - 10:15 am
Michael South

How to Leverage Common Criteria for FedRamp (R22b)

2:00 pm - 2:30 pm
How to Leverage Common Criteria for FedRamp (R22b)
Ed Moyle

Cross Compliance on a Budget—Strategies for Addressing Multiple Regulatory Frameworks without Breaking the Bank (R21b)

11:30 am - 12:00 pm
Ed Moyle
Walter Williams

A Frankenstinean Approach to an Information Security Management System: Implementing ISO 27001 with the CIS CSC (R22a)

1:30 pm - 2:00 pm
Walter Williams
Joshua Marpet

Blockchain and GDPR – How do you forget what cannot be forgotten? (D22a)

1:30 pm 2:00 pm
Joshua Marpet
Scott Lyons
Steve Crutchley

Optimizing Compliance Management using Regulatory Libraries and Mappings: A Perspective on Data Security and Privacy Compliance (R21a)

11:00 am - 11:30 am
Steve Crutchley
Brian Alexander
Willibert Fabritius

The ISO 27000 Ecosystem (R20c)

10:00 am - 10:30 am
Willibert Fabritius
Sanjay Basu

ISO 27000 Certification Helping Organizations in GDPR Compliance (R20b)

9:30 am - 10:00 am
Sanjay Basu
Neelov Kar
Erika Voss

Cross-Compliance Track Keynote Presentation: The Road to Compliance Starts with You (R20a)

9:00 am - 9:30 am
Erika Voss
Jonathan Cantor

Data Privacy Track Keynote: Privacy by Design (D20a)

9:00 am - 9:30 am
Jonathan Cantor

Data Privacy: GDPR and Beyond (D22a)

1:30 pm - 2:00 pm
Data Privacy: GDPR and Beyond (D22a)
Kelly Kuchta

Digital Data in the Age of “The Breach” (D21c)

12:00 pm - 12:30 pm
Kelly Kuchta
Tim Lowman

Adapting GDPR Requirements to Meet NIST 800-53 Rev. 5 (D21b)

11:30 am - 12:00 pm
Tim Lowman
Adapting GDPR Requirements to Meet NIST 800-53 Rev. 5 (D21b)
Steve Jones

Minimizing the Impact of Data Breaches in Dev and Test Databases (D21a)

11:00 am - 11:30 am
Steve Jones
Henry Sienkiewicz

Data Protection: Security In The Cyber Environment (D20b)

9:30 am - 10:00 am
Henry Sienkiewicz
Kimberly Lucy

Introducing ISO/IEC 27552 Privacy Information Management System (D20c)

10:00 am - 10:30 am
Kimberly Lucy
Neil Witek

Enterprise Compliance Panel Discussion: Certification Pitfalls and Lessons Learned (E12b)

2:15 pm - 3:15 pm
Neil Witek
Heather Reis
John Linkous
Willibert Fabritius
Michael Powell

GDPR: Beyond the Talk, Let’s Get to Execution (E13c)

4:45 pm - 5:15 pm
Michael Powell
Tom Garrubba

What Third Party Risk Means to your Enterprise Compliance (E13b)

4:15 pm - 4:45 pm
Tom Garrubba
Andrea Hill

Beyond Asset-Based Risk (E13a)

3:45 pm - 4:15 pm
Andrea Hill
Angela Osborne
Shane York

Managing an ISO 27001 Certification Program in the Age of Acquisitions (E12a)

1:45 pm - 2:15 pm
Shane York
Daryouche Behboudi

ISO 27001 as a Foundation for a Common Controls Framework (E11b)

12:15 pm - 12:45 pm
Daryouche Behboudi
Scott Zelko

Compliance Overview – The Options and What They Mean (P10d)

10:20 am - 11:00 am
Scott Zelko
Ryan Mackie
James Goldstein

Enterprise Compliance Track Keynote Presentation: ISO 27000, What’s in It For Me (E11a)

11:45 am - 12:15 pm
James Goldstein
Dave Ziska

CSfC PMO Program Updates and Process Improvements; Ask the PMO Panel (P11a)

11:00 am
Dave Ziska
Mike Devine
Nathan Degruttola
Sam Green
John Dunker
Kimberly Lucy

Current Frameworks vs. the Threat of Future Technologies (P23)

3:00 pm - 4:00 pm
Kimberly Lucy
Joe Warren
Tim Lowman
Ryan Mackie
Willibert Fabritius
David Lacey

Cybersecurity Risk and Compliance: Past, Present and Future (P10b)

9:10 am - 9:40 am
David Lacey

Opening Plenary Keynote Presentation (P10b)

9:10 am - 9:50 am
Opening Plenary Keynote Presentation (P10b)