Presentation: You've read the articles about the latest data breaches and you've seen the presentations about the latest application attacks. You've been barraged with compliance requirements and you've heard the preaching about building security into the System Development Lifecycle (SDLC). As a method to thwart the bad guys, attain compliance and prevent data breaches, few would argue with the notion of integrating security into the SDLC. Of course, if we all had the benefit of "starting fresh" the task might be relatively easy. Unfortunately, reality is usually quite different and, most often, security professionals are called in to help well after the application is on the path to production. As a result, we are left wondering how we can get from "here" to "there."

Speaker: Kevin D. Spease. ISSA-Sacramento Valley Chapter President

Topic: Application Security in the SDLC - Practical Strategies

BIO:Kevin is a Senior Application Security Analyst at Health Net in Sacramento, California. He is responsible for the evolution and management of web application security in Health Net's Web Center of Excellence. In addition to securing web-based military environmental and logistics applications, he has significant experience securing Air Force strategic and Army tactical weapons systems. Kevin instructs at ITT-Technical Institute in the Information System Security program. He formerly served in the California Army National Guard as a Military Policeman and the US Air Force as a Munitions Systems Craftsman. Kevin earned an MBA from University of Phoenix and holds the CISSP-ISSEP certification.

Lunch Menu:
Appetizer: Hale Koa Salad with Tarragon Dressing
Main Course: Poached Atlantic Salmon
with Green Peppercorn Ginger Sauce
Seasonal Vegetables and Sliced Baked Potatoe with Parsley Butter
Dessert:  Vanilla Ice Cream Taco with Fruit Salsa