Computer Security Day 2002, Brisbane

The ISRC, ISIG, and AusCERT, are organising an event to recognise Computer Security Day. The ACM initiated Computer Security Day in 1988 in order to raise awareness amongst the general public of issues related to IT security. The event will feature presentations by representatives from academia, industry and government.

Details of the event planned for Brisbane are as follows:

Presentations will last from approximately 2:00PM to 4:00PM. Refreshments will be served following the presentations, allowing attendees to mingle and visit vendor displays.

Anyone wishing to attend this event should RSVP by sending an email to csd2002@isrc.qut.edu.au by Wednesday 27 November, 2002.

We gratefully acknowledge the support of our two sponsors:

• VeriSign Australia; and
• Computer Associates.

Speaker Details:

• Ms Kathryn Kerr

  Title: 2002 Australian Computer Crime and Security Survey

  Abstract: AusCERT, NSW Police Commercial Crime Agency and Deloitte collaborated to produce the 2002 Australian Computer Crime and Security Survey, which was launched in May 2002. The survey, which follows the format of the well-known annual CSI/FBI Computer Crime and Security Survey, provides the most up to date and authoritative analysis of computer network attack and computer misuse trends in Australia over the last 12 months. The survey provides insight into the number and type of organisations which have experienced network attacks, the type of attacks and more.

  Above all, the survey aims to raise awareness of the complex nature of computer security issues and explores the reasons why, despite a high uptake of computer security technologies, we continue to experience computer network attacks and abuse.

  Bio: Kathryn Kerr is Threat Assessments Manager for AusCERT. She took up the position in July 2001 after 12 years with the Commonwealth government in various security positions, including in the area of critical information infrastructure protection. She holds a SANS Global Information Assurance Certification and is currently undertaking a Master of Information Technology.

   

• Dr Adrian McCullagh

  Abstract: There has been of late numerous press statements concerning corporate responsibility for IT security. The topic is in itself conflicting as there is no one law that establishes any obligations. This is not to say that there are no corporate responsiblity for IT security. The law in this area comprises a combination of common law obligations and legislative obligations. This talk will briefly discuss what these rules are and how they affect corporate responsibility.

  Bio: Adrian was admitted into practice law in 1988. He primarily practices in Intellectual Property, Electronic Commerce, Data Security, Information Technology and Privacy. He has degrees in Computer Science, an Honours degree in Law including a PhD. His Thesis was entitled: The Incorporation of Trust Strategies in Digital Signature Regimes for Electronic Commerce.

  Adrian is currently:

  1. a Board Member of ILAB Pty Ltd which is a Qld Government funded technology incubator;
  2. a member of the Communications Information Advisory Board for the Qld State Government;
  3. a member of the legal sub-committee for the National Electronic Authentication Council;
  4. a board member of the Australian Information Technology Security Forum;
  5. a member of the Management Committee for the Information Security Research Centre at the Queensland University of Technology.

  He acts for Government agencies both Federal, State and Local Government as well as large corporate organisations in the area of Information Security and Privacy compliance as well as general IT contracting issues including large scale IT Infrastructure Contracts.

  He has delivered papers both locally and internationally and has published numerous academic articles both in Australia as well as in the USA and in the UK.

   

• Mr Mark Silver

  Title:An implementation strategy for information security within the Queensland public sector

  Abstract: An overview of the work in progress of an implementation strategy for information security using a standards-based approach, information asset risk management methodologies and a controls-to-Information Asset classification, risk and attribute mapping methodology.

  Bio: Mark Silver is currently the Manager, Information Security Strategy, with the Department of Innovation and Information Economy, Sport and Recreation Queensland, Queensland Government. During the past three years, he has managed the Queensland Government's intranet and the e-security needs of systems. He has also recently joined Standards Australia's security working group. His current role is focussed on developing a framework for the practical implementation of the Queensland Government's Information Standard 18 - Information Security, based on ISO 17799 and AS/NZ 7799.