Agenda

IT HEALTHCHECKS: YOUR ROUTE TO EFFECTIVE SECURITY RISK MANAGEMENT 

In this practical, informative session, IT security experts NCC Group will demonstrate how you can implement an IT Healthcheck process which forms part of a continuous risk
management lifecycle to safeguard your organisation’s IT security rather than a ‘tick in the box’. They will demonstrate how this all-round security approach addresses categories of risk not covered elsewhere and how it can provide concrete evidence that your security investment is both effective and compliant. 

The session will examine where an IT Healthcheck can go beyond simply supporting corporate audit requirements and assessment of compliance, and can add real value ranging from checking the performance of external service providers/vendors through to supporting incident response when a breach occurs. The session will also highlight the limitations of security assessment and testing processes, and the dangers of complacency. The NCC Group team will draw on real-life examples of thousands of security testing and consultancy projects carried out on behalf of hundreds of high-profile clients to illustrate the subject. 

• The session will provide practical guidance to delegates on:
• Risk assessment – accurately identifying your IA needs
• Defining the scope – networks, workstations, applications
• Effective procurement – defining and communicating your requirements
• Distribution of results – identifying your reporting requirements
• Avoiding complacency – acting on recommendations and thinking ahead

Speaker: Paul Vlissidis, Technical Director, NCC Group

With over 20 years experience in IT, Paul is a recognised expert on all aspects of IT and Internet security. He heads technical research and new product development for the Ethical Security Testing division of NCC Group – the leading independent provider of IT security consultancy and testing services. He previously held senior IT security roles within the nuclear industry