FBI INFRAGARD - Kill your neighbors with FBI/CACI intelligence!

[Dig]

BAck to the reality of the Infragard "Kill Your Neighbor" agenda:

~~~~~~~~~~~~~~~~~~~~~

InfraGard Nations Capital Members Alliance (INCMA) - Defense SIG | Members Only Executive Seminar
http://incmasigdefense.eventbrite.com/
Wednesday, September 03, 2008 from 10:30 AM - 12:00 PM (ET)
Fairfax, VA
 
Event Details

Please join your fellow INCMA members for an exclusive members only meeting.

The InfraGard Defense Industrial Base SIG (Sector Interest Group) is hosting it's third quarter event for 2008. We are developing our DIB Framework for CIP in the NCR including the use of software applications to map critical assets owned by the private sector and the utilization of other self-assessment tools.

In addition, we will review our vital focus on proactive, preemptive and relevant Defense Sector Chief Security Officer (CSO) strategies for DoD Mission Assurance and our Critical Infrastructure Protection.

Can we rely on the education of our end users of information resources to do the right thing if our technological controls fail or are missing?

As a topic of discussion share your opinion of the right balance of user awareness and technical controls that have proven effective in the warfighter community and those who support them. Behavioral controls (that which we teach and enforce) may either be more, less or equally effective than the technological controls (that which we buy and install).

It would appear that behavioral controls might be more effective in the regimented workflows of the Defense community than in the private sector. What are the best practices your organization is leveraging to reduce risk and to what extent is it working? Is it worth the effort to assess workflows to find specific risks to mitigate or use an all-encompassing approach, such as encrypting everything? If using encryption, share with us your costs of no incidents, that is in general, how much is being spent (or lost) dealing with encryption of information that hasn't been compromised?

These questions, (and we encourage others), will be addressed in our September Defense SIG event.

TOPICS FOR THIS MEETING WILL BE FOCUSED ON:
End User Education
Malware Protection at user desktops
Enterprise Digital Rights Management
Insider Threat Protection Software
Whole Disk encryption
Dual Factor Authentication


We will continue to cover the current priorities in the National Capital Region (NCR) and the critical public/private infrastructure interdependencies with Defense Companies such as IDA, CACI, Stanley Associates, ICF International, SAIC, Booz Allen Hamilton, Northrop Grumman, Raytheon, BAE Systems, Lockheed Martin, General Dynamics and more. If you are an employee of a Defense company or you are a "Subject Matter Expert" (SME) that services the Defense Industrial Base in our metro area, please join us.


Our interactive meeting will continue our process and establish the leadership roles for the remainder of the year.

Thank you to our facilities sponsor CACI International for hosting this event. Ever Vigilant, CACI provides the professional services and IT solutions needed to prevail in today's defense, intelligence, homeland security and federal civilian goverment arenas.

Please Read:

Due to the fact that we are meeting at a secure facility and their policy requires advance information, we urge you to please register a minimum of 7 days in advance. PLEASE do not register unless you are a current cleared member in good standing, this means that you have already received your InfraGard membership card and number. As a courtesy to our sponsor who has limited seating, please DO NOT register unless you are certain you can attend the briefing.
If you or your organization would like to co-sponsor this or a future SIG event please let us know and we will be in contact with you directly.

----------------

InfraGard - Nations Capital Members Alliance

Creating Critical Resiliency in Metropolitan Washington, DC INCMA consists of a growing membership of professionals who are creating a more resilient Critical Infrastructure in the Washington, DC metro area. These include defense industrial base, water supply systems, electrical energy, emergency services, law enforcement, health systems, gas and oil, storage and delivery, transportation, banking, and telecommunications. Our membership is voluntary yet exclusive and is comprised of individuals from both the public and private sector. The main goal of the Washington, DC Nations Capital Chapter of InfraGard is to promote ongoing dialogue, education, community outreach and timely communication between public and private members. Furthermore, to achieve and sustain risk-based target levels of capability to prevent, protect against, respond to, and recover from all hazards or events, and to minimize their impact on lives, property, and the economy. http://InfraGardNationsCapital.org

[Dig]

News Release
http://www.caci.com/about/news/news2008/11_17_08_NR.html
CACI International Inc · 1100 North Glebe Road · Arlington Virginia 22201   


CACI Appoints Zalmai Azmi as Senior Vice President, Strategic Law Enforcement and National Security Programs

Former FBI Chief Information Officer Led Bureau's IT Modernization Program

Arlington, VA, November 17, 2008 - CACI International Inc (NYSE:CAI) announced today that it has appointed Zalmai Azmi, former Chief Information Officer for the Federal Bureau of Investigation (FBI), as Senior Vice President for Strategic Law Enforcement and National Security Programs. Mr. Azmi joins CACI after leading the development and modernization of the FBI's information technology (IT) program for the past five years. In his new role, Mr. Azmi will leverage his unique federal IT and national security expertise to help grow CACI's name recognition, thought leadership role, and related market share in the law enforcement and national security arena, and assist in the identification of acquisition candidates and initiatives to support the company's growth.

After coming to the FBI in 2003 and being named Chief Information Officer in 2004, Mr. Azmi guided the bureau through its largest-ever technology upgrade. This included the development of the FBI's next-generation information and case management system, and the creation of a knowledge base and assets that enable the FBI to participate fully in information-sharing programs within the intelligence and law enforcement communities, as well as to acquire and adopt commercial best practices.

Prior to the FBI, Mr. Azmi served as Chief Information Officer for the Executive Office for the United States Attorneys. Here, Mr. Azmi developed and implemented a long-term strategic technology plan and created the organization's first information systems security office. Moreover, he was detailed to an intelligence agency and twice deployed to Afghanistan in support of military operations on the ground. Mr. Azmi also served in the United States Marine Corps.

Mr. Azmi has also recently been appointed to the Board of Directors of the InfraGard National Members Alliance. InfraGard is a public-private alliance between the FBI and the 27,000-plus FBI-vetted volunteer members who are the owners and operators of the country's critical infrastructure.

"I am pleased and excited to join CACI," Mr. Azmi said. "CACI has an outstanding reputation and record of support as a provider of valuable, high-quality services and solutions for national security. I look forward to contributing to the growth of CACI's capabilities in strategic law enforcement and national security while continuing to support our country's national security objectives."

CACI President and Chief Executive Officer Paul Cofoni said, "We are proud to have Zalmai Azmi on our team. He brings exceptional experience at the nexus of law enforcement, security, and intelligence that CACI is focused on as part of our strategic growth plan, and he offers hands-on, senior-level expertise in the critical areas of networks and cyber security. His appointment is a key element in CACI's corporate commitment to helping our clients defeat the threat of global terrorism."

CACI International Inc provides the professional services and IT solutions needed to prevail in today's defense, intelligence, homeland security, and federal civilian government arenas. We deliver enterprise IT and network services; data, information, and knowledge management services; business system solutions; logistics and material readiness; C4ISR integration services; cyber security, information assurance, and information operations; integrated security and intelligence solutions; and program management and SETA support services. CACI services and solutions help our federal clients provide for national security, improve communications and collaboration, secure the integrity of information systems and networks, enhance data collection and analysis, and increase efficiency and mission effectiveness. We add value to our clients' operations, increase their skills and capabilities, and enhance their missions. CACI is a member of the Fortune 1000 Largest Companies of 2007 and the Russell 2000 index. CACI provides dynamic careers for approximately 12,400 employees working in over 120 offices in the U.S. and Europe. CACI is the IT provider for a networked world. Visit CACI on the web at www.caci.com.

There are statements made herein which do not address historical facts, and therefore could be interpreted to be forward-looking statements as that term is defined in the Private Securities Litigation Reform Act of 1995. Such statements are subject to factors that could cause actual results to differ materially from anticipated results. The factors that could cause actual results to differ materially from those anticipated include, but are not limited to, the following: regional and national economic conditions in the United States and the United Kingdom, including conditions that result from terrorist activities or war; changes in interest rates; currency fluctuations; failure to achieve contract awards in connection with recompetes for present business and/or competition for new business; the risks and uncertainties associated with client interest in and purchases of new products and/or services; continued funding of U.S. government or other public sector projects, based on a change in spending patterns, or in the event of a priority need for funds, such as homeland security, the war on terrorism or rebuilding Iraq; government contract procurement (such as bid protest, small business set asides, etc.) and termination risks; the results of government investigations into allegations of improper actions related to the provision of services in support of U.S. military operations in Iraq; individual business decisions of our clients; paradigm shifts in technology; competitive factors such as pricing pressures and/or competition to hire and retain employees (particularly those with security clearances); material changes in laws or regulations applicable to our businesses, particularly in connection with (i) government contracts for services, (ii) outsourcing of activities that have been performed by the government, (iii) competition for task orders under Government Wide Acquisition Contracts ("GWACs") and/or schedule contracts with the General Services Administration; and (iv) accounting for convertible debt instruments; our own ability to achieve the objectives of near term or long range business plans; and other risks described in the company's Securities and Exchange Commission filings.

[Dig]

About Infragard
http://sanantonio.bizjournals.com/gen/company.html?gcode=CEA03E0837CF49BE9D98B2B4B59BE95C&section=press_releases

The goal of InfraGard is to promote ongoing dialogue and timely communication between members and the FBI. InfraGard members gain access to information that enables them to protect their assets and in turn give information to government that facilitates its responsibilities to prevent and address terrorism and other crimes.
Infragard Executives
Kathleen L Kiernan [CEO of Kiernan Group]
John Jackson [Chicago Chapter President]
Chris Mathews [Mobile Chapter Vice President]
Phil Froehlich

[Dig]

"Zalmai Azmi, former Chief Information Officer for the Federal Bureau of Investigation (FBI), as Senior Vice President for Strategic Law Enforcement and National Security Programs."


HE IS THE CHARACTER IN LIVE FREE OR DIE HARD AS A GOOD AMERICAN WHO LOVES FREEDOM.

THIS IS BULLSHIT!!!!

THIS IS A CON JOB!!!!

[Satyagraha]

Deputized: CACI Needs a few good employees....

With unemployment skyrocketing, soon the only jobs will be related to spying on Americans, sorting the data collected while spying on Americans, implementing programs designed based on the data collected from spying, and managing the programs that were designed - all in an effort to gain and secure control of the people:



Managing the Defense Department's Business with Industry

CACI's Wide Area Workflow (WAWF) application gives government contractors a web-based enterprise solution for managing all invoices and payments with the Department of Defense. WAWF handles over $260B in transactions across all services annually. WAWF reduces interest charges paid by the government by tens of millions of dollars annually and supports industry by providing a single system to interact with the DoD.

Rapid Deployment Communications – In Theater, On the Move

CACI is a leading communications network provider for the warfighter, working with the U.S. Army to rapidly deploy state-of-the-art communications infrastructure for high visibility missions in remote tactical zones worldwide.

Smart Networks Protected by Trusted Access

CACI solutions and services provide agility, efficiency and economies of scale to support numerous Intelligence Community, Defense Department and federal civilian agency missions. They help ensure secure and reliable information access and sharing for highly classified and sensitive network environments supporting government customers in the homeland and around the world.
 To learn more about our Cyber Security, Information


Solutions from Litigation Support to Document Exploitation

The Mega 3 contract with the Department of Justice provides DOJ with the latest automated litigation support technologies and services, supplying attorneys with a competitive edge needed to win or settle their cases. CACI's HighView® Document Exploitation (DOCEX) application enables automated solutions for the capture, transformation, organization and discovery of data, information and knowledge.


Enterprise Solutions from Sea to Space

CACI's Data Network Plus program provides services for approximately 40,000 U.S. Coast Guard personnel, offering connectivity between Coast Guard locations within the U.S. and the Coast Guard's host computer resources. Our solutions also support Defense Information System Network satellite transmission services on a global scale with an experienced team providing IT integration services.

We Assist, Advise and Support Organizations to Counter Asymmetric and Irregular Threats
CACI offers customers highly qualified special operations and intelligence professionals who provide a wide range of expert security and intelligence support services to government and commercial customers to contend with threats at home and abroad. We assist customers in developing integrated solutions to address complex threats through security assessments and planning, systems integration, intelligence support and analysis, security assistance, security and intelligence training, strategic communications and technology assessments.

Key focus areas include

• Critical Infrastructure Protection
• Anti-Terrorism/Force Protection
• Commercial Security
• Transportation Security
• All Hazards Protection

Deploying Radio Frequency Identification (RFID)

CACI is at the forefront in helping the U.S. Navy implement RFID. The Bangor RFID Evaluation pilot project combines business process reengineering of the warehouse operations at the Bangor submarine base, installs an Enterprise Resource Planning warehouse management system and integrates RFID hardware and software to allow more efficient material receipt and inventory management.

Controlled Information Sharing for Critical Operational Missions

CACI, along with its industry leading partners, is addressing the most demanding and complex security and domain environments to help its government customers design, develop and implement innovative multi-level security and cross domain solutions. These help ensure secure information access and sharing in some of the most highly classified and sensitive network environments.

Some of the job openings at CACI: What are these guys staffing up for...?
http://www.caci.com/job/pro.shtml

Subject Matter Expert (EOD and IED)
Location: Vienna, VA
Secret Clearance Required
Description: Candidate provides expertise in technology enterprise management to support the Technology and Requirements Integration Division (TRID) in the Joint IED (IED) Defeat Organization's (JIEDDO) mission of supporting Combatant Commanders' efforts to defeat IEDs as weapons of strategic influence. Candidate has extensive knowledge and experience in materiel technologies to include but not be limited to electronics, radio/radar energy, high power microwave energy, armor, electro-optical/infrared sensors or explosives detection aligned to the organization's efforts to defeat IEDs. Candidate must demonstrate the necessary skills associated with the search for and analysis of the same materiel technologies.

Virtual Interviewing for TS/SCI – Full Scope (Lifestyle) Polygraph Candidates! Must have an active (or within 24 months) TS clearance with SCI access and Full Scope (Lifestyle) polygraph.


Credentialed Investigators. If you are a credentialed OPM Investigator with an active DoD Top Secret clearance you may be eligible to become a full-time or contract investigator for CACI. Please email your resume to esanborn@caci.com.


Data, Information and Knowledge Management Services
We deliver a full spectrum of services and solutions that allow our customers to automate the knowledge lifecycle from data capture to information understanding.

(e.g., Parsing the billions of bytes of data collected from We the People via surveillance)

We apply CMMI Level 3 best practices to provide solutions based on integrated commercial products, custom development and support systems operations and maintenance.
Opportunities are available for Software Developers, System Administrators, Project Managers, Systems Architects, Software Engineers, Developers, Test Engineers, Trainers, Database Analysts, Network Engineers

Enterprise IT and Network Services
We support our customers' critical networked operational missions by providing tailored end-to-end enterprise information technology (IT) services for the design, establishment, management, security and operations of client infrastructure.
Opportunities are available for System Integrators, Developers, Security Engineers, Software Engineers, Security Administrators, Database Analysts, Program Managers, Information Security Specialists, Systems Analysts, Software Developers, Communications Specialists

Logistics and Material Readiness
Our operational capabilities span the supply chain, including logistics advance planning, demand forecasting, total asset visibility (including the use of RFID) and lifecycle support for weapons systems.

so...(there you have it...the chips, once implanted, need managers...)

Our logistics services are a critical enabler in support of peacetime readiness and combat sustainability objectives.
Opportunities are available for Financial Analysts, Test Engineers, Project Managers, Network Administrators, Logistics Analysts, Program Control Analysts, Functional Analysts, Programmers, Data Analysts, Systems Administrators, Document Specialists

[Satyagraha]

What unemployment? Kroll needs more help - they've been Deputized....

Kroll is a world leader in investigations, technology, and security. We are headquartered in New York with offices in more than 65 cities in over 33 countries.
Our diverse roster of more than 3,800 global employees includes some of the most experienced and forward-thinking experts in:

* litigation,
* technology,
* finance and forensic accounting,
* compliance and integrity
* business intelligence,
* investigation,
* background screening, and
* security consulting.

Kroll is a subsidiary of Marsh & McLennan Companies, Inc. (NYSE: MMC), the global professional services firm and Fortune 500 company.

Careers

Kroll, the world's leading risk consulting company, helps clients reduce risks, solve problems and capitalize on opportunities. Our investigative analysts conduct interviews, research online databases, and employ proprietary techniques to provide intelligence to our clients.


Our legal technologies experts use cutting-edge software to help attorneys comb through hundreds of thousands of documents to find information that's vital to their case.
(no experience with evidence fabrication required, we provide on-the-job training...)

Our background screening investigators verify the credentials and review the backgrounds of thousands of employment candidates every year.

Our data recovery engineers rescue seemingly lost business information or documents using advanced recovery technology and cleanroom techniques.

Our identity theft investigators help victims of ID theft determine the extent of their exposure to risk and restore their identities to pre-breach status.

Our security experts provide security planning, assessment and design services that protect landmark buildings and facilities.

Offices    Toll-free numbers:
  North America 24-Hour Toll Free  (800) 675-3772
  International 24-Hour Collect  (212) 833-3350
 

To get contact information for any of Kroll's more than 60 offices worldwide, please click on the appropriate link:
  
Argentina
Australia
Austria
Brazil
Canada
China
Colombia
France
Germany
India
Italy
Japan
Mexico
Poland
Russia
Singapore
South Africa
South Korea
Spain
Switzerland
United Arab Emirates
United Kingdom

United States

 Kroll Offices - United States     Print List
Kroll Corporate Headquarters
1166 Avenue of the Americas
New York, New York 10036
United States
Toll Free: 888-209-9526
Phone: 212-593-1000
Fax: 212-593-2631

Bastrop
1025 Main Street
Bastrop, Texas 78602
United States
Phone: 512-321-4421
Fax: 512-321-1746

Boston
99 High Street
14th Floor
Boston, Massachusetts 02110
United States
Phone: 617-350-7878
Fax: 617-350-0151

Chicago
10 South Wacker Drive
Suite 1200
Chicago, Illinois 60606
United States
Toll Free: 800-756-1575
Phone: 312-681-1500
Fax: 312-234-9902

Dallas
Comerica Bank Tower
1717 Main Street
Dallas, Texas 75201-7357
United States
Toll Free: 888-436-8616
Phone: 214-965-0000
Fax: 214-965-0282

Des Moines (ID TheftSmart Plan Administrator)
P.O. Box 14524
Des Moines, Iowa 50306-9332
United States

Eden Prairie (Kroll Ontrack Headquarters)
9023 Columbine Road
Eden Prairie, Minnesota 55347
United States
Toll Free: 800-349-3762
Phone: 952-937-1107
Fax: 952-937-5750

Gretna (Substance Abuse Testing)
1111 Newton Street
Gretna, Louisiana 70053
United States
Toll Free: 800-433-3823
Phone: 504-361-8989
Fax: 504-361-1530

Houston
1000 Main Street
Suite 3000
Houston, Texas 77002
United States
Phone: 713-276-8757
Fax: 713-276-8455

Los Angeles
777 South Figueroa Street
Suite 2400
Los Angeles, California 90017
United States
Toll Free: 877-505-5340
Phone: 213-443-6090
Fax: 213-443-6050

Los Angeles (Kroll Ontrack)
18350 Mt. Langely Street
Suite 140
Fountain Valley, California 92708
United States
Toll Free: 800-872-2599
Phone: 714-641-0530
Fax: 714-641-1543

Loveland (Kroll Factual Data)
5200 Hahns Peak Drive
Loveland, Colorado 80538
United States
Toll Free: 800-929-3400
Phone: 970-663-5700
Fax: 970-663-7533

Lyndonville (Kroll Factual Data)
2074 Darling Hill Road
Lyndonville, Vermont 05851
United States
Phone: 802-626-8474

Miami (Latin American & Caribbean Headquarters)
1200 Brickell Avenue
20th Floor
Miami, Florida 33131
United States
Phone: 305-789-7100
Fax: 305-789-7159

Morristown
44 Whippany Road
PO Box 1966
Morristown, New Jersey 07962
United States
Phone: 973-401-5100
Fax: 973-401-5058

Napa (Kroll Factual Data)
521 Alexis Court
Napa, California 94558 <---- C'mon... this is not seriously a "WORK" office, right?? Entertainment perhaps?
United States
Phone: 800.788.8389
Fax: 800-788-8386

Nashville (Background Screening Headquarters)
100 Centerview Drive
Suite 300
Nashville, Tennessee 37214
United States
Toll Free: 800-697-7189
Phone: 615-320-9800
Fax: 615 320 9916

New York
1166 Avenue of the Americas
New York, New York 10036
United States
Toll Free: 888-209-9526
Phone: 212-593-1000
Fax: 212-593-2631

New York (Kroll Ontrack New York Metro)
Gateway Plaza
1 Harmon Meadow Blvd.
Secaucus, New Jersey 07094
United States
Toll Free: 800-872-2599
Phone: 201-770-0400
Fax: 201-770-0440

Philadelphia
8 Penn Center
1628 JFK Boulevard
Suite 1600
Philadelphia, Pennsylvania 19103
United States
Toll Free: 800-549-7189
Phone: 215-568-2440
Fax: 215-568-7270

Reston (Consulting)
Two Freedom Square
11955 Freedom Drive, Suite 550
Reston, VA 20190
United States
Phone: (703) 796-2850
Fax: (703) 796-2851

Reston (Kroll Ontrack Washington D.C. Metro)
11411 Isaac Newton Square South
Reston, Virginia 20190
United States
Toll Free: 800-872-2599
Phone: 703-821-8101
Fax: 703-821-2539

Reston (Security)
11411 Isaac Newton Square South
Reston, Virginia 20190
United States
Phone: 866-361-9710

Richmond
450 Southlake Blvd.
Richmond, Virginia 23236
United States
Toll Free: 800-977-9130
Phone: 804-378-9130
Fax: 804-379-5919

San Francisco
345 California Street
Suite 1300
San Francisco, California 94104
United States
Phone: 415-743-4800
Fax: 415-743-4811

Washington, D.C.
1255 23rd Street, N.W.
4th Floor
Washington, D.C. 20037
United States
Phone: 202-263-6787
Fax: 202-263-7833

Westminister (Background Screening)
700 Corporate Center Court
Carroll County Commerce Center
Suite K
Westminster, Maryland 21158
United States
Phone: 410-386-8700
Fax: 800-787-1234 (US only)

[Satyagraha]

Kroll Corporate Management:

Corporate Management Ben Allen
President and Chief Executive Officer

Mike Hellriegel
Chief Financial Officer

Sabrina Perel
General Counsel

James Bucknam
Executive Vice President,
Risk Management and Compliance

Interesting resume by Buckham...

• James Bucknam is Executive Vice President for Risk Management and Compliance, and a member of the Executive Committee of Kroll. In addition to his responsibilities as a corporate officer, Jim oversees major client engagements, including some of the firm’s highest profile investigative and monitoring assignments.
  
  Jim joined Kroll in 1997 as a Managing Director in the New York office. From 1999 through 2001, he served as Regional Managing Director in charge of the firm’s Northeast Region. He was appointed as a corporate officer in December 2002 and was promoted to his current position in January 2005.
  
  From 1993 through 1996, Jim served as Senior Advisor to former FBI Director Louis J. Freeh. In that capacity, he advised Director Freeh on numerous matters, involving domestic and foreign law enforcement officials and government leaders. These matters included creating the Economic Espionage Act, as well as negotiating bilateral and multilateral efforts to combat international crime. Jim traveled extensively overseas with and on behalf of Director Freeh and helped shape the FBI‘s efforts to enhance its foreign law enforcement presence.
  
  On behalf of Director Freeh and Attorney General Janet Reno, he coordinated a wide range of law enforcement policy issues involving the investigative agencies of the Justice Department and the Treasury Department, forging historic agreements among them. In 1994, he received the Attorney General’s Distinguished Service Award for coordinating multi-agency efforts in support of the Attorney General’s Anti-Violent Crime Initiative.
  
  From 1987 to 1993, Jim was an Assistant United States Attorney in the Southern District of New York. There, he gained broad experience in federal criminal investigations, trials, and appeals. In one major prosecution, he led a racketeering case to remove organized crime influences from the mason tenders union. For 18 months, he also served as Chief of the Narcotics Unit. In that role, he supervised the investigative and prosecutorial efforts of 15 to 20 Assistant United States Attorneys responsible for prosecuting international drug cartels and violent drug gangs.
  
  
  Jim Kelly
  Vice President,
  Human Resources
   
  

[Satyagraha]

Kroll is a part of this company...
 
MMC

The Businesses of MMC  

MMC (Marsh & McLennan Companies) is the premier global professional services firm providing advice and solutions in risk, strategy and human capital. Through our market leading brands, colleagues in more than 100 countries help clients identify, plan for and respond to critical business issues and risks.

Risk and Insurance Services

Marsh is the world leader in delivering risk and insurance services and solutions to clients. It provides global risk management, risk consulting, insurance broking, alternative risk financing, and insurance program management services for businesses, public entities, associations, professional services organizations, and private clients. Marsh is organized by client, industry, and risk categories to facilitate the global delivery of highly specialized products and services covering a wide spectrum of risks.

Guy Carpenter is the world's leading risk and reinsurance specialist, creating and executing reinsurance and risk management solutions for clients worldwide. It provides risk assessment analytics, actuarial services, highly specialized product knowledge, and trading relationships with reinsurance markets throughout the world. Client services also include contract and claims management and fiduciary accounting. Run-off services and other reinsurance and insurance administration solutions are offered through Guy Carpenter subsidiaries on a fee basis.

Consulting

Mercer is a leading global provider of consulting, outsourcing and investment services. Mercer consultants help clients design and manage health, retirement and other benefits, and optimize human capital. The firm also provides customized administration, technology and total benefit outsourcing solutions. Mercer’s investment services include global leadership in investment consulting and multi-manager investment management. Mercer’s global network ensures integrated, worldwide solutions for clients who wish to establish global policies and procedures while allowing for the flexibility to accommodate local cultural, legal and regulatory requirements. The firm's locally based professionals are also available to serve midsize companies and to address country-specific issues and opportunities.

The Oliver Wyman Group delivers advisory services to clients through three operating units, each of which is a leader in its field. Oliver Wyman is a top-tier global management consulting firm that combines deep industry knowledge with specialized expertise in strategy, operations, risk management, organizational transformation, and leadership development. Lippincott helps clients create, develop, and manage their corporate branding, identity, and image. NERA Economic Consulting advises corporations, law firms, and government entities on the economics of competition, regulation, public policy, finance, and litigation.

Risk Consulting and Technology
Kroll, the world's leading risk consulting company, provides a wide range of investigative, intelligence, financial, security, and technology services to help clients solve problems and capitalize on opportunities. Kroll serves a global clientele of law firms, financial institutions, corporations, nonprofits, government agencies, and individuals.
 
==================
Recent history
==================

2000
Jeffrey W. Greenberg is named chairman of MMC upon A.J.C. Smith's retirement.

Mercer acquires Delta Consulting Group and forms Mercer Delta Organizational Consulting, which works on issues of leadership, organization, and change.

Mercer Management Consulting acquires Análisis y Desarrollo de Proyectos, a Mexican firm, and St. Gallen Consulting, a Swiss-based firm with operations in Germany.

2001
MMC suffers profound personal loss when 295 members of its corporate family and 60 business associates perish in the terrorist attacks at the World Trade Center on September 11.

MMC helps form AXIS, a global insurance and reinsurance company, in response to the market dislocation following the World Trade Center attacks. AXIS is capitalized with more than $1.6 billion.

Mercer enhances its global rewards practice by acquiring Strategic Compensation Associates.

2002
MMC continues its efforts to ease the suffering of families of colleagues lost in the September 11, 2001 terrorist attacks. The MMC Victims Relief Fund pays out virtually all of its $22 million in contributions to provide support for the health, education, and welfare needs of the families.

William M. Mercer changes its name to Mercer Human Resource Consulting.

2003
Mercer acquires Oliver, Wyman & Company and forms Mercer Oliver Wyman, a leader in financial services strategy and risk management consulting.

AXIS, the global insurance company MMC had helped establish two years earlier, completes a successful initial public offering.

Mercer Human Resource Consulting more than doubles the size of its operations in Germany and Switzerland through KPMG and PwC acquisitions. Acquisition of Benefit Network adds strength to Nordic region operations.

Marsh acquires Alaska's largest insurance broker Brady & Company.

At Putnam, inappropriate market timing by a few investment professionals is discovered. MMC installs new leadership at Putnam and institutes new policies and procedures to strengthen compliance. Restitution is pledged to affected shareholders of Putnam funds.

2004:
Mercer acquires Synhrgy HR Technologies to offer a broader array of outsourcing services in the United States.

Marsh acquires the Australia and New Zealand operations of Heath Lambert.

Putnam reaches settlement of market timing issues with the SEC and Massachusetts regulators, agreeing to pay fines and make restitution to investors.

MMC acquires Kroll, the world's leading risk consulting firm.

MMC confronts significant issues raised by New York regulators about improper conduct at Marsh. MMC cooperates fully with the investigation and conducts its own comprehensive internal review. MMC names new leadership, introduces significant business reforms to ensure complete transparency in dealing with clients, and institutes new compliance procedures. Michael G. Cherkasky is named president and CEO of MMC upon the resignation of MMC chairman and CEO Jeffrey W. Greenberg.

In keeping with MMC's commitment to adhering to best practices in corporate governance, the five MMC management members of the MMC Board of Directors step down from the board.

2005:
Robert F. Erburu, an independent director since 1996, becomes non-executive chairman of MMC's Board of Directors.

MMC reaches settlement agreement with New York regulators; establishes $850 million fund for eligible U.S. policyholders.

Mercer's consulting businesses are reorganized to be managed as two business areas: human resource consulting and specialty consulting, the latter including management, organizational change, economic consulting, and brand strategy businesses.

Putnam wins DALBAR awards for service excellence to shareholders, financial advisors, and annuity contract holders. This marks the 13th year since 1990 that Putnam has been recognized for top quality service, an accomplishment unparalleled in the fund industry.

MMC completes the sale of the business of MMC Capital to the management team of MMC Capital.

John T. Sinnott is named a vice chairman of MMC, joining Mathis Cabiallavetta, a vice chairman of MMC since 1999.

Marsh's Crump Group wholesale broking operations are sold.

2006:
Sedgwick Claims Management is sold.

Stephen R. Hardis is named non-executive chairman of MMC's Board of Directors upon the retirement of Robert F. Erburu.


2007:  
Mercer Oliver Wyman, Mercer Management Consulting and Mercer Delta Organizational Consulting join together under a single brand: Oliver Wyman. The firm combines deep industry knowledge with specialized expertise in strategy, operations, risk management, organizational transformation, and leadership development. The Oliver Wyman Group also includes NERA Economic Consulting and Lippincott (formerly Lippincott Mercer).

MMC completes the sale of Putnam Investments to Great-West LifeCo.

Mercer Human Resource Consulting changes its name to Mercer. The global brand initiative reflects Mercer’s full range of consulting, outsourcing and investment services, many of which extend beyond the category of human resource consulting.

2008: On January 30, Brian Duperreault is named president and CEO of MMC, replacing Michael G. Cherkasky.


=================
Early History of note...
=================

1871: Marsh & McLennan Companies’ progenitor, Dan H. Bomar Company, is founded in Chicago after the Great Chicago Fire.

1885: Henry W. Marsh leaves Harvard University and joins the Robert A. Waller agency.

1897: Henry Marsh introduces concept of a broker acting as a buyer of insurance representing the client, rather than as a seller of insurance.

1901: Henry Marsh helps pioneer the concept of risk management, setting forth his ideas on a comprehensive risk management plan for U.S. Steel.

1903: onald McLennan establishes a standard for thorough research in assessing risk. He spends 30 consecutive nights on a sleeper, traveling coast to coast across the U.S., to inspect the operations of two railroad lines.

1905: Burrows, Marsh & McLennan is formed in Chicago, becoming the world's largest insurance agency with annual premiums of $3 million. The firm is renamed Marsh & McLennan in 1906.

1923: Guy Carpenter & Company is acquired a year after its founding by Guy Carpenter. The firm revolutionizes reinsurance coverage.  Henry Marsh becomes chairman upon Marsh & McLennan's incorporation.

1935: Donald McLennan succeeds Henry Marsh as chairman.

1937: Putnam is founded by George Putnam Sr. with the establishment of The George Putnam Fund of Boston, a balanced mutual fund offering a flexible portfolio of stocks and bonds.

The Social Security Act of 1937 prompts employers to seek advice on retirement programs.
Marsh & McLennan expands consulting services in the pension field; hires first two actuaries in 1938.


 

[gautnl27]

Oh wow,

Sorry Sane, and anyone else who had questions.
I haven't been back to this topic in a long time but I will be happy to answer your questions....


why would you ever be a member of Infraguard?

It was suggested to me, and all my classmates by our teachers/insructors/ professors at my Community College where I am working on getting an Associates degree in Computer systems Technology. At the time I had not yet started listening to Alex jones Show and did not know what I now know.

Is the money good?

I make no money at all from Infragard. I work at a hotel as a Night Manager making about $12,000 a year before taxes and going to college classes during the day 4 days a week.

I mean, c'mon, really, please post all of the material.  what do they tell you guys, how do you meet, what information do you have to send, how often...

That actually is Classified Information, LOL   Basically, its the same info that a member of the press has access to, Headlines of situations the FBI is Monitoring in various places around the world.  If there was anything to "blow the whistle on" Believe me I Would!! (if they let me know about it) I have only been to one meeting which consisted of an FBI Agent from "cyber security" division and it was regarding making sure anti virus programs were up to date and that we have a firewall in place because they were worried about a specific computer virus. Very basic stuff. I am actually disappointed, that its not what I thought it was gonna be, and not what you all probably think it is.

what websites/databases do you use to track people?

I do not use any and I do not track anybody. But I hear that the FBI can use anyones cellphone as a bug to Monitor anyone, Why would they need people to do it for them?

how do you know where to find people that fit into various demographics?
I dont know what your asking in this question? Only thing Im looking for is a date Saturday night! LOL

is it on the internet or is the database private that you use?

There is a Private VPN website (Virtual Private Network) I have access to But I would suggest never using your own computer because It has the same Disclaimer as the  "Cash for Clunkers" C.A.R.S. program website saying that when you click accept your computer and EVERYTHING ON IT (or hooked up to it) from that point on become property of the US Gov!! So I only use the Computers at my college to log in and check updates.

are their special phone numbers, radios, short wave?

Not that I am aware of

what is the method of communication?

Mainly the VPN site and email updates, It is a major hassle to log in to the site, I have to call their phone number enter a bunch of codes to confirm its me if I am on an "Unregistered" Computer or if I forget my password.  From the infragard site "The InfraGard secure website provides members with information about recent intrusions, research related to critical infrastructure protection, and the capability to communicate securely with other members" That really is what its about (as far as I can tell) Maybe they know I am a member of Prisonplanet.tv and this forum and keep certain people in the dark? But I have fellow Classmates who joined that will tell you the same thing.


how often do you meet?

There are maybe 10 Seminar style (physical) meeting a year but they all cost money and are always too far for me to go to...usually in Lansing, MI

what type of community people are targeted for recruitment?

Anyone whos Employment is part of Critical Infrastructure. (Anybody I guess) Even people flipping burgers.

is there any association with other community groups like rotary, masons, etc.?

Not that I am aware of...allthough I do know people who are Masons, and are not involved in Infragard.

That pretty much Sums it up as far as my Involvement thus far.

[gautnl27]

wow, join our club and we will let you know before we attack you, so at least you can get your family out alive..........thanks Infragaurd!!!

that statement sums it up pretty well.

[gautnl27]

To see an example of an Infragard email update look at my OLD posts in / International News / Global News section titled "Global Information Snapshot"


and about those photos....

I did not say anything about missles going into the Towers I was talking the possibility of a Missile like the one in the photos disguised as planes going into the Pentagon.

See my blog at http://uncleardegree.wordpress.com/2009/03/20/9-11-flight-77-is-this-what-really-hit-the-pentagon-2/

"The source of these photos was a mass email, claiming this is what went into the Pentagon on 9-11…. I don’t know if they actually are missiles but it certainly makes you think about the possibility. This would explain any witnesses who say they saw a plane going towards the pentagon. It also had several photos of Osama Bin Ladin sitting with Bush and his cronies at a meeting."

[Dig]

Oh wow,

Sorry Sane, and anyone else who had questions.
I haven't been back to this topic in a long time but I will be happy to answer your questions....


why would you ever be a member of Infraguard?

It was suggested to me, and all my classmates by our teachers/insructors/ professors at my Community College where I am working on getting an Associates degree in Computer systems Technology. At the time I had not yet started listening to Alex jones Show and did not know what I now know.

Is the money good?

I make no money at all from Infragard. I work at a hotel as a Night Manager making about $12,000 a year before taxes and going to college classes during the day 4 days a week.

I mean, c'mon, really, please post all of the material.  what do they tell you guys, how do you meet, what information do you have to send, how often...

That actually is Classified Information, LOL   Basically, its the same info that a member of the press has access to, Headlines of situations the FBI is Monitoring in various places around the world.  If there was anything to "blow the whistle on" Believe me I Would!! (if they let me know about it) I have only been to one meeting which consisted of an FBI Agent from "cyber security" division and it was regarding making sure anti virus programs were up to date and that we have a firewall in place because they were worried about a specific computer virus. Very basic stuff. I am actually disappointed, that its not what I thought it was gonna be, and not what you all probably think it is.

what websites/databases do you use to track people?

I do not use any and I do not track anybody. But I hear that the FBI can use anyones cellphone as a bug to Monitor anyone, Why would they need people to do it for them?

how do you know where to find people that fit into various demographics?
I dont know what your asking in this question? Only thing Im looking for is a date Saturday night! LOL

is it on the internet or is the database private that you use?

There is a Private VPN website (Virtual Private Network) I have access to But I would suggest never using your own computer because It has the same Disclaimer as the  "Cash for Clunkers" C.A.R.S. program website saying that when you click accept your computer and EVERYTHING ON IT (or hooked up to it) from that point on become property of the US Gov!! So I only use the Computers at my college to log in and check updates.

are their special phone numbers, radios, short wave?

Not that I am aware of

what is the method of communication?

Mainly the VPN site and email updates, It is a major hassle to log in to the site, I have to call their phone number enter a bunch of codes to confirm its me if I am on an "Unregistered" Computer or if I forget my password.  From the infragard site "The InfraGard secure website provides members with information about recent intrusions, research related to critical infrastructure protection, and the capability to communicate securely with other members" That really is what its about (as far as I can tell) Maybe they know I am a member of Prisonplanet.tv and this forum and keep certain people in the dark? But I have fellow Classmates who joined that will tell you the same thing.


how often do you meet?

There are maybe 10 Seminar style (physical) meeting a year but they all cost money and are always too far for me to go to...usually in Lansing, MI

what type of community people are targeted for recruitment?

Anyone whos Employment is part of Critical Infrastructure. (Anybody I guess) Even people flipping burgers.

is there any association with other community groups like rotary, masons, etc.?

Not that I am aware of...allthough I do know people who are Masons, and are not involved in Infragard.

That pretty much Sums it up as far as my Involvement thus far.

Shit man, thanks for the answers!

More...

have you read about the partnerships with groups like CACI and Kroll?

Do you realize that these companies have contributed to the rape, torture, and murder of hundreds of thousands of people over the past 40 years?

How do you square that with your conscience?

And if conscience is not a factor, do you know the history of Hitler's SA, Dresden, etc. You do know that these anti-constitutional networks to assist tyrannical regimes are totally batshit insane right?

[Satyagraha]

INFRAGARD
Ten Years and Going Strong
http://www.fbi.gov/page2/oct2006/infragard100406.htm

10/04/06
FBI's top cyber executive James Finch addresses the InfraGard conference in Washington, D.C.

FBI's top cyber executive James Finch addresses the InfraGard conference in Washington, D.C.

The president of Shell Oil was there. So were high-ranking execs from across government—the Secretary of Agriculture, a top Department of Homeland Security official, and the FBI’s cyber chief, to name a few.

Not to mention hundreds of public and private sector professionals—business leaders, entrepreneurs, military and government officials, computer security experts, academics, and state and local law enforcement.

And TV cameras were rolling, capturing key segments for national cable broadcast.

Not bad for the annual gathering of an alliance that began 10 years ago as a small startup in our Cleveland field office.

Like the program itself, the InfraGard conference— held in the nation’s capitol in late August—facilitated the free flow of ideas and information. All with the aim of preventing and responding to potentially disabling attacks on the nation’s physical and electronic infrastructure (think banks, water and food supplies, transportation and telecommunications networks, energy systems, emergency services, etc.)—by terrorists, spies, hackers, or whoever.

“We live in a highly interconnected world where, say, an attack on a power grid—whether trigged by a bomb or a bot—can impact millions of people,’’ says Don Good, head of the national InfraGard program for the FBI. “No one owns all of America’s infrastructure, so we have to keep the lines of communication wide open so attacks either never get off the ground or get addressed as quickly as possible.”

The conference was a perfect venue. Private sector attendees shared their expertise, strategies, and information on how to better protect U.S. critical infrastructures from computer intrusions, terrorist threats, physical security breaches, and other attacks. And government and law enforcement officials spread the word about intelligence sharing initiatives involving current critical infrastructure threats and vulnerabilities.

Among the issues on the table: rail and transit security, first response plans, cyber threats, gang violence, pandemic flu, financial crime trends, water and border security, food and agriculture safety, health care fraud, computer forensics, and post-disaster business continuity.

“We talked through just about every scenario and major threat you can think of,” explains Good. “We all learned a great deal from each other.”

Bottom line, InfraGard works. In fiscal year 2005, InfraGard members initiated approximately 95 investigations and helped support a similar number of cases. A clientless virtual private network has also enabled InfraGard members to read more than 200 restricted intelligence products, helping to educate members and provide a continuing dialogue with the FBI.

“With more than 16,000 members, 84 chapters nationwide, and an almost daily flow of vital information, we think InfraGard is one of the most quietly successful public/private partnerships around,” says Good.

[Satyagraha]

INFRAGARD 2005 NATIONAL CONFERENCE
http://www.novatx.com/infragard.html

Drinking Water Security Session,“Taking Aim at Our Nation’s Drinking Water”

Water Track Session 1: Paul J. Pearce, Nova Biologicals, Inc.
Overview. Mission, liability, and legal rationale for implementation of drinking water security measures


Water Track Session 2: Lance Brooks, Biological and Chemical Countermeasures, U.S. Department of Homeland Security
Nuclear, chemical, biological, and system disruption threats to drinking water

Water Track Session 3: Michael Penders, Environmental Security International
Management considerations for enhancing drinking water security. Part I: Overview, vulnerability and risk assessment results, governing board, and stakeholders. Part II: Financial planning, human resources, records management, communications, policies and procedures

Water Track Session 5: Paul J. Pearce, Nova Biologicals, Inc.
A realistic and systematic approach to a fully integrated plan and design for drinking water security.

Water Track Session 6: C. David Binning, Director Planning and Engineering Division of Fairfax Water.
How Much Security is Enough? Features that Constitute an Active and Effective Security Program for Public Water Systems and their Measurement - Part I.


Water Track Session 8: Michael Clawson, P.E., U.S. Air Force
Design considerations for developing drinking water security. Security system design and equipment selection, crime prevention, threat level recommendations, water quality monitoring


Water Track Session 9: Julio Rodriguez, Manager, Critical Infrastructure Assurance, Idaho National Laboratory
Cyber security management, operations, and design considerations.

Water Track Session 10: Brian Frazer, Emergency Response US EPA Headquarters, Office of Water, Office of Ground Water and Drinking Water, Water Security Division
Effective emergency response planning for drinking water systems.


About InfraGard National Members Alliance
Founded in 1996 in the Cleveland, Ohio field office of the Federal Bureau of Investigation, the InfraGard National Members Alliance (INMA or “InfraGard”) is a national network of vetted private sector experts. With more than 16,000 members across the organization’s 84 local chapters, InfraGard provides a vital link in protecting the nation’s infrastructure by serving as subject matter resources to local, state and Federal law enforcement agencies. InfraGard National Members Alliance is a volunteer non-profit 501(c)3 corporation. For more information about InfraGard, please visit www.infragard.net.

Note: Each item in the list above has a link to the presentation given: but all links are 404.

[Satyagraha]

InfraGard – News and Notes
http://www.digitalbond.com/index.php/2005/08/14/infragard-news-and-notes/

Just a few items left to mention:

- Mike Lombard, Director of CIP/Cyber Security Strategic Issues in the National Cyber Security Division of DHS retired. Mike was an active proponent and participant in PCSF and other industry efforts. A loss to DHS, but best wishes to Mike in his retirement.

- A couple of pilot projects were discussed. Peoples Energy will be piloting Thales AGA-12 encryptor soon, and PGE is piloting the Natis field security device.

- Eric Byres gave information on BCIT’s latest research named Project Achilles. It is a platform designed to test PLC’s and other field devices for vulnerabilities in a QA lab. It is much too effective to test systems in production environments, and there is concern about this code getting out into the wild.

Two interesting points in the presentation. First, many PLC’s run on OS-9, but the PLC vendors do not inform their customers that an OS-9 vulnerability will affect the PLC. Second, early testing has found 9 critical vulnerabilities and 28 warnings. Will a testing program like this eventually be required by industry or by individual asset owners in RFP’s?

- An impressive job by the InfraGard national team to pull together this inaugural conference in three months with all volunteers. Equally impressive was getting both the FBI Director and Secretary of DHS to speak.

- I have posted my InfraGard presentation on the Digital Bond presentation page. (Now link returns 404) A lot of the same information from previous presentations. You may want to look at the last couple of slides to see two examples where getting data from IDS, firewall logs, SCADA logs and other sources can help tell the difference between a normal action and a cyber attack.

If you are hungry for interesting statistics, come back in two weeks to look at my KEMA presentation. I have fresh statistics from Counterpane, Lurhq and Symantec including the first statistics coming from the Modbus IDS signatures.

Author: Dale Peterson
Posted: August 14th, 2005 under InfraGard.


InfraGard Day One
http://www.digitalbond.com/index.php/2006/08/22/infragard-day-one/

August 22, 2006

InfraGard is a nice event because it offers the opportunity to go outside the SCADA security silo. Sometimes hearing problems and solutions in other areas can break limiting and rigid thought patterns.

There are security tracks on GIS, Gangs, Critical Communication, Homeland Security, Cyber Security, Computer Forensics, Financial Industry, Regulatory Compliance, Water Security, Food and Agriculture, Buisness Continuity Planning, and SCADA.

Tommy Thompson Keynote – Pandemic Response Planning

Tommy Thompson, ex-HHS Secretary, was the lead keynote and spoke on Pandemic Response Planning. SARS, which was hard to transmit compared to the flu spread to 3000 people in 17 countries in 45 days. The Secretary focused on the H5N1 as an example and discussed mutation and lack of immunity. Analogies can be made to the effectiveness of a computer virus.

Perhaps most applicable was the discussion of continuity planning and the economic impact of the very limited SARS and a potential pandemic. SCADA and DCS vendors have many contingency plans for chemical spills, hurricanes, fires, etc., but should you have a plan to deal with keeping the control system running in a pandemic? How will you keep the power and water running if no one can or will come to work? Many hospitals closed down during SARS because workers refused to come to work. “Reduced reliability in communications, power, water, fuel availability, transportation service” is an expected effect of a pandemic.

A lot of effort and money is spent on a backup control center, but should some of that effort be spent on a distributed backup control capability. What about stores of food and other supplies, sleeping arrangements, and other logistics for those individuals willing to live at the control center for weeks at a time.

Is this FUD? Well there have been 5 pandemics in the last 300 years and Tommy Thompson said it may not be H5N1, but there will be another pandemic.

Robert Hoffman and Robert Polk, INL

Idaho National Labs (INL) is teaching their half day SCADA Security Course this morning and Thursday morning. About 50 people are registered for the first class.

Franciso Ramirez, DHS/NCSD

Cisco went over the vulnerability disclosure process at US CERT, a frequent topic on this blog. The issue always raises my blood pressure a bit, but some good discussions.

Joanne Ashland, Dyonyx

Joanne is talking about reconnaissance information on SCADA systems that is generally available. Listing lots of places where information is available in public records, permits, press releases and awards, patents, job postings, …

Comment – clearly you want to limit information, but I’m not sure how many of these examples can be avoided. Security should not rely on obscurity, but we do want to limit any help we give attackers. Also, it is helpful to know what the attackers may have at their disposal.

End of day one.


InfraGard Days Two and Three
http://www.digitalbond.com/index.php/2006/08/24/infragard-days-two-and-three/

The SCADA Security track had four presentations on day two:

1. PCSF: Mike Torppey, Mitretek

Mike focused on the projects going on in the Working Groups and Interest Groups. See www.pcsforum.org for info on this work.

2. My SCADA Honeynet presentation

3. NERC CIP: Scott Mix, KEMA

Scott knows more about NERC CIP than anyone I know. NERC is now officially the ERO (and the only company to apply) and moving forward with trying to get the NERC CIP standards approved by FERC with a target of the fall. The presentation focused on how to identify critical cyber assets and design electronic and physical security perimeters. These are key early steps towards compliance.

I found the discussion on enforcement to be interesting. The general NERC approach is to be positive towards helping entities comply and a reluctance to fine or even threaten to fine. The money for NERC comes from the companies that comprise the bulk electric systems, the same people the ERO (NERC) is suppose to insure are compliant with the standard. Furthermore, audits are typically performed by representives from peer entities in the region, rather than a group at NERC.

It will be years before we find out if this effective because audit is years away, but it will be interesting to watch if this unique approach can be effective. Will the ERO get tough when necessary? Will a consistent level of audit be applied?

 

4. Passive Monitoring: Ron Gula, Tenable Network Security

It is often dangerous to do widespread active scanning on control systems, so the concept of passive technologies, that don’t block or alter data, is very applicable to this industry. We recognized this early on and was one of the reasons we focused on adding SCADA intelligence to network IDS. Identifying systems and potential vulnerabilities by looking at the traffic and logs is an interesting approach. Probably a topic we will blog on in more detail later. (Full disclosure: Tenable is a Digital Bond client).

Day Three

I eagerly got up to attend a 7:45 information sharing keynote panel. It was all Government and law enforcement (disappointing) and focused on how they shared information amongst themselves. Clearly an important topic, but InfraGard was created for public / private information sharing as well as sharing between communities of interest. This type of information sharing has been almost a universal failure, not only at InfraGard but in numerous other efforts. There are research $$$ trying to solve this problem, but to date it is hard to point to a real success story, at least in the control systems space.