The Security Leaders Summit

Greg Acton

Head of Global Security, Twitter

Greg Acton

Greg Acton is the head of Global Safety & Security at Twitter, Inc., a social media company that instantly connects us to what's most important. In this role he is responsible for protecting Twitter's people, assets and related information on a worldwide basis.

Greg received his B.S. Degree in Criminal Justice and Business from San Jose University. Wanting to give back to his local community, he joined the Mountain View Police Department and, during a ten-year career, worked in a diverse range of challenging positions, including police detective.

In 1995, Greg decided to take his expertise into the corporate world and joined the security team at Applied Materials. As the Global Investigations Manager, he developed and directed investigative resources for global risk assessments, confidential investigations and intellectual property protection. In 2000, he joined Lam Research Corporation where he managed worldwide security operations, investigations and security systems. In 2005, he joined Palm, Inc. as the Director of Global Safety and Security, he was responsible for protecting Palm's future generation products and related information. In 2010, he entered the bio-pharmaceutical industry as the head of Security for Gilead Sciences, protecting and preventing product counterfeiting and supply chain security. Greg's took up his current role in 2011.

Greg has more than 25 years of experience in a wide variety of industries, manufacturing, consumer electronics, bio-pharmaceutical and now the exciting space of social media. He's built enterprise-wide security strategies focusing on the protection of people, information and physical assets and has developed significant expertise in identifying, classifying and mitigating threats and vulnerabilities. In addition to being Board Certified in Physical Security (CPP), Greg gained the coveted CISSP certification in 2008 and has championed the cause of security convergence.

He is a long standing member of the American Society for Industrial Security (ASIS) as well as a member of the Information Asset Protection (IAP) Council, Information Systems Security Association (ISSA) and the Chief Security Officer (CSO) Roundtable. In addition he is a member of the International Security Management Association (ISMA), the High Tech Crime Investigators Association (HTCIA) and the Association for Threat Assessment Professionals (ATAP).

In his spare time, he coaches youth ice hockey and also plays in adult hockey leagues.

Steve Attias

First Vice President and Chief Information Security Officer, New York Life Insurance Company

Steve Attias

Steve Attias is First Vice President and Chief Information Security Officer in the Corporate Information Department. With over 30 years of experience at New York Life, Mr. Attias is responsible for developing, maintaining and monitoring enterprise-wide information protection programs, policies, standards, and procedures. As CISO, he is also responsible for adequately designing and coordinating security administration procedures that enable access to New York Life information resources in accordance with New York Life Security Policies, Standards and Procedures.

In this position, Mr. Attias has enhanced the Enterprise Security Program to meet the requirements of a new regulatory environment that stresses the importance of maintaining the privacy of customer information. He has also led the effort to enhance New York Life's ability to conduct business safely on the Internet. This includes building a common set of components to be reused by web-based applications. Recent accomplishments include the implementation of an outbound electronic content filtering system.

The Information Security Program at New York Life has been enhanced to include frequent security awareness activities, an application risk assessment built into the software development lifecycle, and continuous testing of the computing infrastructure as part of the vulnerability management process.

Mr. Attias's previous positions at New York Life included increased levels of management responsibility covering Computer Operations, Systems Software, Telecommunications and IT Architecture. His achievements in these areas include:

Initiating the development of a "Plan/Build/Run" operating framework
Establishing the initial data center environment for Unix Systems
Installation of the Tivoli Management System
Co-authored architecture for a new technology system to support New York Life agents and managed initial implementation of infrastructure development for that project.

Mr. Attias earned his BS from the State University of New York at Stony Brook in 1974 and his MS from the Polytechnic Institute of New York in 1980. He is Fellow of the Life Office Management Association and earned his CISSP (Certified Information Systems Security Professional) designation through the International Information Systems Security Certification Consortium (ISC2) in 2001. Mr. Attias was recognized by IDG's Computerworld as one of the "Premier 100" IT Leaders of 2003. In 2004, the Information Systems Audit and Control Association named him a Certified Information Security Manager (CISM).

Tom Borton

Director, IT Security & Compliance, Cost Plus, Inc.

Tom Borton

Tom has 30+ years of physical, material, personnel and information security experience including U.S Military, Property and Casualty Insurance and Retail environments. Tom graduated from Dominican University of California with a Masters in Business Administration, emphasis on Strategic Leadership and holds the following professional certifications: CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), CISSP (Certified Information Systems Security Professional) and CRISC (Certified in Risk and Information Systems Control).

Tom currently serves as Director, IT Security and Compliance for Cost Plus World Market (Cost Plus, Inc.), a $1 billion dollar retail chain headquartered in Oakland, CA and operating in 34 states. He is responsible for the overall information security, regulatory compliance, business continuity, IT disaster recovery, and privacy strategy for this mid-size retail chain.

Prior to Cost Plus, Tom held the position of Sr. Director for Information Security at Fireman's Fund Insurance Company, a unit of the international holding company, Allianz AG, based in Munich, Germany. His responsibilities included: developing information security strategy, policies, security administration and disaster recovery for fireman's fund and serving as Regional Information Security Officer for Canada, the United States and Mexico.

Tom served on active duty in the U.S. Coast Guard and retired with the rank of Chief Warrant Officer, Grade 3 (CWO3), Telecommunications. During his career, Tom managed U.S. Federal information security compliance and disaster recovery planning for U.S. Coast Guard units throughout the Western, Gulf and Southeastern United States.

Tom is active as a volunteer in professional organizations including ISACA (Information Systems Audit and Control Association) and IANS (Institute for Applied Network Security). He has served on conference committees as a planner as well as a speaker and is currently the Co-Chair for ISACA's Fall 2012 North American Information system Resources Management and Governance and Risk Control conference. Tom also serves on a ISACA committee focused on professional knowledge and channels of learning.

Mark Clancy

Managing Director and Chief Information Security Officer, Depository Trust & Clearing Corporation (DTCC)

Mark Clancy

Mark Clancy is managing director of Technology Risk Management at The Depository Trust & Clearing Corporation (DTCC), a position established in January 2012. The department comprises Information Security, Business Continuity and Information Technology (IT) Risk Management.

Clancy joined DTCC in 2009 as Corporate Information Security Officer. In his broadened position, he has enterprise-wide responsibility for developing and implementing global security and business continuity policies, standards, guidelines, procedures and threat assessments pertaining to DTCC. He also chairs the DTCC Security Steering Committee, which is composed of senior IT management as well as business-line and other corporate managers.

Active in the financial services and critical infrastructure communities, Clancy participates in the Financial Services Information and Analysis Center (FS-ISAC) and Financial Services Sector Coordinating Council (FSSCC). He is a frequent speaker at FS-ISAC conferences and an active member of FS-ISAC's Threat Intelligence Committee. In addition, he serves in a leadership capacity as a member of FS-ISAC's board of directors; as a member of FSSCC's executive committee; and as FSSCC's private-sector lead for financial sector-wide cyber security exercises to help improve its resiliency against cyber attacks.

Clancy has spoken on cyber security to attendees at the Air War College National Security Forum, as well as at events sponsored by U.S. Government agencies, such as the Committee on National Security Systems and the US Army Enterprise Solutions Competency Center.

Before joining DTCC, Clancy was executive vice president of Information Technology Risk at Citigroup. His responsibilities included developing IT Risk strategy and managing the company's information security polices and standards. He also directed company-wide efforts around third-party access, data protection, infrastructure protection, and vulnerability and threat assessment. He was with Citigroup from 2000 until 2009.

Earlier in his career, Clancy consulted for several Fortune 500 companies on information systems and information security projects spanning the banking, insurance, pharmaceutical and manufacturing industry sectors.

He has a B.S. degree in Electrical Engineering from Drexel University and is a member of the Institute of Electrical and Electronics Engineers.

Michael K. Daly

Technical Director, Raytheon Company

Michael K. Daly

Michael Daly is the Technical Director of Information Security Solutions for Raytheon Intelligence & Information Systems. He was appointed to this position in 2011. Raytheon Company (NYSE: RTN), with 2010 sales of $25 billion, is a technology and innovation leader specializing in defense, homeland security and other government markets throughout the world. With a history of innovation spanning 89 years, Raytheon provides stateof- the-art electronics, mission systems integration and other capabilities in the areas of sensing; effects; and command, control, communications and intelligence systems, as well as a broad range of mission support services. With headquarters in Waltham, Mass., Raytheon employs 72,000 people worldwide.

As the Technical Director, Michael provides leadership in Raytheon's cyber technologies, managing Research & Development investments and operating an array of Cyber Technology Innovation Centers across Raytheon. For the thirteen years prior to this, Michael served as the Corporate Director of Information Technology Enterprise Security Services. With more than twenty-four years in security and information systems, Michael has worked with both the private sector and the federal government with responsibilities including software engineering for law enforcement, university teacher of database management, and manager of enterprise applications and distributed computing.

Michael has also served as Vice President of Advanced Networking for a consulting company and launched a notfor- profit organization that was commended by the Massachusetts House of Representatives.

Michael is on the Governance Board of the Transglobal Secure Collaboration Program, and the Board of Advisors for Exostar. He was the 2006 recipient of the People's Choice Award for the ISE New England Information Security Executive of the Year and the 2007 recipient of the Security 7 Award for the Manufacturing sector. Michael holds a World Record for Highest Altitude Luge and is credited with a first ascent of a mountain in the Wrangell-St. Elias Range.

He earned his bachelor's degree in Mechanical Engineering from Boston University, is a Certified Information Systems Security Professional and a Qualified Raytheon Six Sigma Specialist.

Gary Long

Chief Security Officer, ITWorks Operations, A Business Unit of Cerner Corporation

Gary Long

Gary Long, Chief Security Officer, Cerner ITWorks Operations, oversees information security, risk assessment, compliance, policy, reporting and auditing for managed information technology offerings (ITWorks) at Cerner.

Mr. Long joined Cerner in February 2006. His prior roles include technology architect and practice manager.

He designed and implemented a security framework within the Cerner managed data centers; assembled an operational security team; and created a comprehensive information security program for CernerWorks℠.

He currently assists clients with managing risks, ensuring best practice security infrastructures, and maintaining HIPAA and PCI compliance in a fast-moving and ever-changing environment.

Mr. Long has more than 15 years of experience in the information security field. He has deep knowledge and understanding of network security, compliance, vulnerability management, risk management and auditing.

Prior to joining Cerner, Long was a strategic sales consultant with both Cisco Systems and Check Point Software Technologies. He also owned and operated a security consulting and reselling practice for eight years in the Kansas City area.

Mr. Long held engineering roles with the Federal Aviation Administration, Martin Marietta Aerospace and General Dynamics, where he designed software for navigational systems; designed, prototyped and deployed an automated weather observatory system interface; developed software simulation modeling programs; authored a compiler for spacecraft ground testing; and assisted with ground testing of the Manned Maneuvering Unit.

Mr. Long is a member of the Information Systems Security Association and the Information Systems Audit and Control Association.

He serves on several customer advisory boards for major information security solution vendors across the nation, and speaks frequently at information security conferences.

Mr. Long received a bachelor's degree in electrical engineering from the University of Oklahoma. He is a Certified Information Systems Security Professional and Certified Information Systems Auditor.

Tom Madden

Chief Information Security Officer, Consolidated Graphics, Inc.

Tom Madden

As the Chief Information Security Officer of Consolidated Graphics, Tom has more than 18 years of experience in information technology. An (ISC)2 Certified Information Systems Security (CISSP), Certified Information System Auditor (CISA) and Certified Information Security Manager (CISM) Professional, Tom's expertise includes all aspects of research, design, implementation and operational support for enterprise services.

Tom's job duties include overseeing Consolidated Graphics' information security, privacy, compliance and eDiscovery responsibilities. With more than seventy companies under CGX ownership, Tom actively consults with executive and local management on that same range of issues.

Prior to joining Consolidated Graphics, Tom was Chief Information Security Officer for the University of Texas Health Science Center at Houston (UTHealth - Houston) based at the Texas Medical Center in Houston, Texas. As the UT Health's CISO, Tom was responsible for guiding the development of information security strategy and implementation for an organization consisting of six healthcare related schools with more than ten-thousand faculty, staff, students and residents.

In addition to re-constructing UTHealth's information risk and security policy foundations, Tom spearheaded the revamping of critical security infrastructure, including campus-wide data identity and access management system. Tom oversaw UTHealth's HIPAA compliance and a three year Payment Card Industry (PCI) compliance project. Earlier information technology positions that Tom has held include senior system analyst for IBM Global Services, as well as for several divisions of the A.P. Moller group including Maersk Inc. and Maersk Data USA. His work with world-class, industry-leading organizations ranges from governance, risk and compliance (GRC) to network and server infrastructure design and support.

Tom is a member of the Greater Houston-area Information Systems Security Association (ISSA), National Information Security Group (NAISG), and Information Systems Audit and Control Association security groups (ISACA), ISACA CISM Test Enhancement Subcommittee (TES), and governing body for SecureWorld Houston. Tom has a B.S. in Management Information Systems from Barry University.

Bill VanCuren

Vice President and Chief Information Officer, IT Services Division, NCR Corporation

Bill VanCuren

Bill VanCuren is vice president and CIO for NCR Corporation. Bill is a leadership team member of NCR's Industry Solutions Group and Chief Financial Office organizations, and sits on both the Leadership Council and Leadership Team of the corporation.

His current assignment as the CIO has oversight over the full application realization process, portfolio management, global networks and processing services for both internal and external customer services, security and compliancy, and all workgroup computing. Bill has 27 years of experience in the information technology (IT) field and has held progressively responsible positions in systems realization and IT general management.

Bill established the first NCR captive IT development center in India, championed the engineering processes to achieve the Capability Maturity Model (CMM) Level 3, and has driven world-class levels of both efficiency and improved effectiveness via a combined IT and business governance. As a result of implementing self-service strategies, his organization was named to the Information Week500.

He earned his Bachelor of Science degree, Cum Laude, from The Ohio State University and his Master of Business Administration degree from the University of Dayton. He has also received executive training at Stanford University in Palo Alto, California, along with a variety of extended leadership training from NCR University.

Bill is an active speaker on IT governance topics, and was a featured speaker at the Hackett Best Practices Conference in 2010, the USA India Business Summit (UIBS) and the CIO Value Forum. He is a board member of the Technology Association of Georgia (TAG) and a member of HCL's Customer Advisory Council and Oracle's Leadership Council.

Bill lives in Cumming, Georgia with his wife, Jeannie, and his sons, Brian, Brad and Justin. His hobbies include skiing and landscaping. Bill is a member of both The Ohio State University Buckeye Club and the President's Club.

Lisa McVey

Chief Information Officer, McKesson Provider Technologies

Lisa McVey

Lisa McVey is chief information officer for McKesson Provider Technologies, Resource Management Solutions, and Physician Practice Solutions. She has overall responsibility for information technology leadership for MPT, the largest division of McKesson Technology Solutions (MTS), and the Ambulatory Businesses. McVey directs and manages computing and information technology strategic plans, policies, programs and schedules for business and finance data processing, computer services, network communications, and management information services in partnership with the business to accomplish corporate goals and objectives. She serves as the MTS-IT liaison for with McKesson Corporate IT and McKesson Business Technology Solutions (BTS).

McVey joined McKesson in 1994, and has served in a number of succeeding leadership roles in Research and Development, Services, Sales, Process Office and IT. She has led the operational development of a single, SFA-driven sales process that integrated 22 sales leaders and 15 diverse processes; streamlined sales and service operations by initiating the sales services center facilitator role tasked with supporting and coordinating all quoting and contracting activities; improved business processes by developing IT governance and funnel management methodologies; introduced a service product philosophy, implementation strategies, and a client education approach still in use by the company today. Within one of the MPT business units, McVey aligned products with sales objectives, resulting in $18.6 million in new revenue generated. She also serves on the IT Buyers Council, which comprises McKesson technology, financial and operational leaders who prioritize IT investments based on business needs.

Improving the customer experience, directing core and strategic business initiatives, implementing business process changes, establishing collaborative alliances and developing high-performing customer focused teams in order to implement infrastructure and applications to support the business in achieving its growth and revenue goals are among her core strengths.

McVey is the recent recipient of the Association of Telecom Professionals' 2010 Enterprise Leadership Award and was recognized by Women in Technology (WIT) 2010 Women of the Year in Technology. The latter award recognizes female technology executives for accomplishments as leaders in business, visionaries in technology and women who have positively impacted Georgia's technology community.

Committed to investing in the local community, promoting better health and assisting in the advancement of women in technology; she is one of the champions for McKesson's community efforts, the Georgia chapter of Women in Technology (WIT), and is active in Technology Association of Georgia, Women in Technology (WIT), CIO Executive Council sponsored by CIO Magazine, among others.

McKesson Corporation, currently ranked 14th on the FORTUNE 500, is a healthcare services and information technology company dedicated to helping its customers deliver high-quality healthcare by reducing costs, streamlining processes, and improving the quality and safety of patient care. McKesson has been in continuous operation for more than 175 years, making it the longest-operating company in healthcare today. Over the course of its history, McKesson has grown by providing pharmaceutical and medical-surgical supply management across the spectrum of care; healthcare information technology for hospitals, physicians, homecare and payors; hospital and retail pharmacy automation; and services for manufacturers and payors designed to improve outcomes for patients. For more information, visit http://www.mckesson.com.

Earl Moss

Regional Information Security Officer, Sutter Health - East Bay Region

Earl Moss

Earl is an accomplished Information Technology, Audit and Security leader with 23+ years experience in industry and government. Earl has an extensive background in large scale project management, "IT Operations, IT Audit and Security/Compliance" Program Implementation, LAN/WAN Configuration and Enterprise Administration complemented by extensive experience in supervising and directing geographically dispersed international programs. In addition to his security background Earl has a broad background in IT risk management, controls and SOX regulatory compliance. His multi-lingual skills have earned him a place as a member of the International Quality Assurance Review team for the Institute of Internal Audit in Latin America. Earl holds Master's Degree in Media & Technology from Boston University with additional post graduate level course work in Business Administration.

Key Professional Accomplishments

As Sutter Health (SH) Director, IS Auditing, Internal Audit, he assisted in leading the establishment of effective auditing frameworks, efficient evaluation processes and Cosource Partner solutions in support of the department's administrative and Sutter Health's audit initiatives.
As a Senior Audit, Security and Technology Risk Management Consultant he has developed and assisted in the implementation of Enterprise Operations and Technology support solutions in various industries and integrated business settings.
As the Cedars Sinai Health Systems' (CSHS) Information Security Manager he validated the organization's security initiatives, developed solutions and actively enhanced the CSHS Enterprise "IT Security Program".
Established, enhanced, and managed the Kaiser Permanente IT (KP-IT) Protection Security Design & Engineering and IT Infrastructure Internal Audit Service Departments for the KP-IT Enterprise.
Established, implemented, and managed IT Support and Production Engineering Department for an innovated Customer Relationship Management (CRM) Enterprise startup hosting solution
As United States Department of Defense in Europe (USAREUR) Director of Information Technology (Netherlands), developed enhanced IT service and operations for multi-national geographically dispersed customer base.
As Training Director and Lead Technical Trainer established Europe-wide Systems Administration & Network Managers Certification Training Program for the United States Army EUROPE (USAREUR).

Robert Pace

Head of Global Information Security, Williamson-Dickie Manufacturing

Robert Pace

Robert began working for the Williamson-Dickie Mfg. Co., in 2010. He is responsible for the IT Security & Support Services for Wiliamson-Dickie's IT Global Operations. Responsibilities include design and implementation of IT security & IT risk management strategies, addressing control issues for the manufacturing and retail consumer operations, developing user access & identity management strategies, developing scalable solutions to address PCI compliance, designing secure architectures, business continuity planning, delivering tier 1 and tier 2 IT support for all network users and the development of policies and procedures. Execution requires leading/working with cross-functional teams consisting representatives from Legal, Marketing, Compliance, HR, Finance and others as required.

Prior to joining Williamson-Dickie, Robert worked for 6 years for Textron in their corporate offices and at their Bell Helicopter business unit, leading the information risk management operations. Global responsibilities included strategic direction in access & identity Management, network architecture design enhancements, development of policies/standards and overall IT compliance.

Additionally, Robert spent 8 years at PricewaterhouseCoopers, Chicago, IL, in their Global Risk Management Solutions practice, focusing on information security and privacy. As a Senior Manager, responsibilities centered upon consulting for Fortune 500 clients in various industries, which included international travel. Led large and diverse teams in providing client executive management with key strategies to address information security issues in their respective industries. Robert's career also includes 10 years at Ameritech (now SBC), during which he held various management positions and led large teams in network administration/provisioning, network operations and information security.

Robert has a Bachelors of Science Degree in Engineering from Michigan State University and a Master of Science Degree in Management from Walsh College of Business and Accountancy. Robert has completed the Executive Leadership Program at Thunderbird - Gavin School of International Management. He is a Certified Information Systems Security Professional (CISSP), a Certified Information Security Manager (CISM), and a Certified Six-Sigma Green Belt.

James Robertson

Vice President of Technology Infrastructure and Broadcast Transmissions, Turner Broadcasting System, Inc

James Robertson

James Robertson is Vice President of Technology Infrastructure and Broadcast Transmissions for Turner Broadcasting System, Inc. In this capacity, Robertson leads the team responsible for providing agile technology solutions for the company across both back office operations and broadcast arenas.

Named to this position in 2003, Robertson holds global responsibility for data networks and voice systems, IT security posturing and enforcement, as well as technology and content risk and compliance services. He also oversees project management and broadcast transmissions which include all satellite and fiber-based video services used by Turner Broadcasting's entertainment and CNN news properties.

Robertson serves as chair of the Time Warner Security Committee, chartered with setting and enforcing the security stance across Time Warner's family of companies that includes HBO, Warner Brothers, Time Inc. and Time Warner corporate along with Turner Broadcasting. He also chairs the Network Architecture Committee across Time Warner, which provides network design validation and architecture planning for the company at large. In addition, Robertson sits on a number of industry advisory boards and has spoken and keynoted at numerous technology and media industry events including the 2010 Network World conference and 2010 Computer World conference.

Robertson joined Turner Broadcasting in 1998 to form the first IT security team and was promoted to Manager of Network and Security Groups in 1999. In 2001, he was named Director of Technology Operations. Prior to joining Turner Broadcasting, Robertson was Vice President of Technology and Chief Information Officer for Georgia Military College.

Robertson holds a bachelors degree with honors in Computer Science from DeMontfort University and a masters degree in Computer Science from American Institute for Computer Sciences.

Maria Zabetakis

Chief Information Officer of the Americas, Transitions Optical

Maria Zabetakis

Maria has had an extensive career in IT, Operations and HR spanning over 35 years. As the Director of IT/CIO of the Americas at Transitions Optical, Maria is a part of the organization's Leadership Team which governs both the Operations and the Commercial business functions for North and South America. In her four years at Transitions, Maria has led the efforts to enhance security at Transitions, a company with focus on protecting their data and guarding their intellectual property in support of the company's innovation in photochromics within the optical industry. In addition, the company during Maria's tenure has consolidated data centers, introduced virtualization, cloud computing, VOIP and business intelligence.

Maria's career began at Westinghouse Electric in Pittsburgh, PA as a programmer in mainframe technologies. As her career unfolded, she advanced to Senior Business Analyst for Mellon Bank, Project Manager for the Nuclear Division of Westinghouse, and Senior IT Auditor for Rockwell International. Maria then decided to start her own IT consulting firm which she grew from two to twenty five consultants. The company was absorbed by Dollar Bank in Pittsburgh where Maria took the position of Vice President of Software Development. After 9 years in that role, the Board of Directors asked Maria to start a new division offering IT and start up services to small businesses in the western Pennsylvania area. She was then asked to lead a joint venture with Knight-Ridder to market banking services as part of the first PC to mainframe link paving the way for banking over the Internet. During that time, Maria also provided technical and operational leadership to local organizations and non-profits.

Prior to her current role at Transitions, Maria held the position of Vice President responsible for IT functions for Citibank's Latin America division. During her eight years, Maria made significant contributions to the region's corporate banking business. In the early 2000's, Maria became an interim HR Manager for two years serving a group of over 400 IT professionals which led to her current adjunct role of coaching and mentoring IT leaders on how to build strong IT teams.

Other responsibilities Maria has had include the head of Operations for the MAC ATM switch for the state of PA, two corporate Board of Directors positions, IT advisor for the United Way, member of the Advisory Board of a local school for underprivileged children, and professor at Robert Morris college.

Maria is a graduate of the University of Pittsburgh and has completed the coursework for both an MBA and a Masters in Education from Duquesne University. She is currently a mentor at the University of Tampa for MBA students and is a coach for younger professionals who want to either find a job or further their careers within IT.