FENG FORUM

Topic: How to Build a Cybersecurity Roadmap

Speaker: Richard Peters, Principal - Cybersecurity, UHY Consulting, Inc.

Agenda:
- 7:45 - 8:00 am: Sign into Zoom Meeting
- 8:00 - 8:50 am: Presentation
- 8:50 - 9:00 am: Questions

Presentation:
It’s no longer possible to prevent, or sometimes even detect, every cybersecurity attack and the sudden escalation of a remote workforce has complicated the threat landscape even more. This makes moving from a reactionary based security posture (firefighters) to a proactive stance imperative. Fighting security fires is neither efficient or cost effective and cyber insurance can only help so far, assuming it’s even a covered event. Effectively addressing these cybersecurity challenges requires a reasonable plan of action, a cybersecurity roadmap!

Knowing there are limited dollars and time to apply toward cybersecurity, Richard will share some security frameworks and tools to assess your current cybersecurity posture and build a cybersecurity roadmap that is based upon risk. Risk will be presented as the primary guidance on what and where any spending toward cybersecurity should be placed. Participants should gain an understanding of where to start or improve a cybersecurity posture, how to prioritize spending and efforts, and common controls and tools for reviewing your security posture.

Speaker’s bio:
Richard Peters brings over 20 years of experience managing, performing, and delivering information technology security solutions. This experience includes technology risk management, IT auditing, IT security assessments, internal auditing, attack-and-penetration testing services, and security analysis in domestic and global entities in the energy, technology, financial, and manufacturing industries.

Mr. Peters is skilled in designing, assessing, and testing against multiple security standards and frameworks, including ISO 27001/27002, Payment Card Industry Data Security Standard (PCI DSS), COBIT, and the National Institute of Standards and Technology (NIST). He has been a professor at the University of Houston teaching information security. He is a frequent speaker and leader at major security conventions around the country.

Mr. Peters has considerable experience within the information security and auditing/assessment niche. He has knowledge and background in client/server environments, mainframes, and databases, as well as application and hardware experience. He has provided PCI-related services for over 14 years, including PCI DSS assessments, PA DSS assessments, and ASV services. Mr. Peters also has experience communicating with and between executive leadership and technical teams regarding understanding of risk.

EDUCATION: University of Texas at Austin, B.B.A., Finance

Richard Peters, CISA, CDPSE, CISSP, QSA
Principal - Cybersecurity, UHY Consulting, Inc.
[email protected]
713.325.8684