SANS Institute

SANS WhatWorks in Mobile Encryption Summit

The value of this summit lies in the shared-awareness generated among the communities interested in the encryption/DAR issue. - Brian Fancher, USMC

If you are implementing mobile data encryption or plan to, you won't find a better source of information that SANS What Works in Mobile Data Protection Summit. That's where you'll learn what works and what doesn't.

Dates:

Welcome Reception & Early Registration: December 2, 2007

Summit: December 3 - 4, 2007

- Encryption Summit: WhatWorks In Using Encryption To Protect Mobile Data?

Post Summit Courses: December 5 - 6, 2007

- SANS Security Essentials :: Day 4 :: SEC-401

- IP Packet Analysis :: SEC-452

- Introduction to Bots and Worms :: SEC-453

- Next Evolution in Digital Forensics - Hands On :: SEC-526

- What's New for Security in Windows Vista? :: SEC-530

- Power Search with Google (formerly Google Hacking & Defense) :: SEC-550

Summit Venue:

Walt Disney World Dolphin Resort

NOTE: Mention that you are attending the SANS Institute conference to get the discounted rate.

Overview of the Encryption Summit

Last year's front page news was full of data breaches, stolen laptops, and lost data. Today this kind of news is being accompanied by articles about restitution to victims and crackdowns by the FTC on companies with lax security practices in place. No company wants to see its name in any of these headlines. No CEO, board member or top government official wants to see their organization cited in either kind of article.

The SANS Encryption Summit is an in-depth program featuring user-to-user discussions focused on lessons learned, mistakes to avoid, and technologies and processes that work in protecting sensitive data on laptops and desktops. The Summit is an interactive program with ample opportunity to get your questions answered by those who have already fought the wars. You will leave the summit with concrete, actionable information you can deploy as soon as you return to work.

What Will You Learn at the Mobile Encryption Summit?

1. The problems encryption solves and the ones it doesn't.
2. Which vendors to put on your short list for laptop encryption.
3. Critical mistakes other companies and agencies made in deploying encryption - particularly how they accidentally turned people's computers into bricks.
4. How to make sure data on laptops and other mobile devices cannot be used by thieves.
5. What to include in your procurement documents to be sure the encryption vendor delivers what you need.
6. What encryption is built into Windows XP and Windows VISTA and their strengths and weaknesses.
7. How encryption is being built into disks that will be coming with your laptops and whether or not you still may need an enterprise encryption management solution.

Six Questions to Be Answered at the Mobile Encryption Summit

1. How can organizations use encryption and other security steps to avoid disclosing the loss of mobile devices storing sensitive information? What is the legal framework?
2. What are the key criteria for choosing a mobile data encryption package, which are the leading programs, and how do they measure up?
3. What processes work best for rolling out mobile data protection across large enterprises and what are the biggest mistakes made by the pioneering users?
4. How can encryption be integrated with Active Directory and LDAP?
5. Can protection of data on desktops be justified?
6. Is there a way to lower the cost of acquiring encryption software for all systems?

Who Should Attend?

• Security, operations, and help desk managers should attend as a team. Organizations that care about protecting sensitive information need managers who can reliably work together to deploy the right technologies and process to secure that information. Joint attendance at the Summit will go a long way toward getting everyone reading off the same page.
• Security auditors and incident handlers who need to know the key problems that may arise in using encryption.
• Security architects and CTOs who are trying to determine what technologies and processes are most critical for protecting sensitive information stored in their organizations.
• Consultants tasked with helping organizations design the right defenses to protect their sensitive information on laptops and desktops.

How Good Are SANS Summits?

Here's more from people who attended the last Summit:

• Wonderful information and recommendations. I will definitely use Dr. Cole's 'Top 10' when choosing an encryption solution. - Dana DesPlanques, Fort Lewis College
• This summit provided a concise but well rounded perspective of encryption topics, from vendors as well as companies in the private sector and government.
- Richard Enyart, FedEX

The Organizing Committee

• Alan Paller, SANS
• Joni C. Clark, Seagate Technology
• Jon-Michael Brook, ERUCES