Enterprise 2.0 technologies and capabilities have allowed organizations to vastly improve their efficiency and effectiveness as well as their ability to realize value from their investments but have also introduced a new level of threat and risk into its information infrastructure. The introduction of virtualization, voice over internet protocol (VOIP), social networking, encryption, identity and access management, advanced web capabilities, and other innovative technologies and capabilities have enhanced business effectiveness, but has also have expanded the threat and risk landscape that must be identified, understood, and managed. Enterprise 2.0 technologies include the traditional information security issues of confidentiality, integrity and authentication but it also add new and unique concerns including such as unauthorized and non-detected system access, data leakage, compliance challenges, and electronic social engineering. This workshop will provide you with a methodology for performing threat and vulnerability analyses against your Enterprise 2.0 information infrastructure as well as strategies for understanding and managing the threats and vulnerabilities which are enumerated through this analysis. This workshop will introduce the concepts of data asset enumeration, threat and vulnerability analysis, and vulnerability management as they relate to Enterprise 2.0 technologies and concepts and their associated information infrastructure. It will also provide insight into the information security concerns and risk mitigation solution concepts involved in effective risk management capabilities for these capabilities. Case studies of associated with information security in Enterprise 2.0 solutions will be utilized throughout the workshop and interactive threat and vulnerability analysis and vulnerability management activities will also be conducted.

Syllabus:

Threat and Vulnerability Management for Enterprise 2.0 Solutions
* Overview of Threat and Vulnerability Management
* Asset Enumeration
* Threat and Vulnerability Analysis Overview
* OSI+ Threat Analysis Methodology
* Vulnerability management
* Risk mitigation strategies and countermeasure development

Who Should Attend:


* Individuals who are deploying Enterprise 2.0 solutions within their organizations
* Information technology professionals who would like to expand their knowledge of security concerns and threats associated with Enterprise 2.0 solutions
* Individuals who have the responsibility to introduce and maintain threat and vulnerability management solutions within their organizations
* Business executives who would like to understand the business impact of threats and vulnerabilities associated with Enterprise 2.0 solutions within their enterprise
* Anyone would like to gain insight into the policies, processes, procedures, technologies, and concepts involved with threat and vulnerability management concepts and programs

Prerequisites:


* Familiarity with basic information security technologies, concepts, policies, procedures, and techniques. No security background or technical background required.

Unified communications applications are maturing in 2008, offering more integrated capabilities and customer choice than ever before. Today's unified communications applications include integrated voice, instant messaging, audio conferencing, PC-based video and Web collaboration, with telephony- and PC presence and click-to-communicate capabilities built in at the foundation level. Many are also SIP-based, so that they can integrate with other UC apps, and others have open APIs to allow for integration with other applications, such as Office and CRM or supply chain software.

But as IT and line-of-business managers grow increasingly interested in deploying unified communications, the competition among vendors is growing fiercer. And despite a rash of recent partnerships and acquisitions, not all vendors offer a single product that delivers multiple converged communications out of the box. In this three-hour tutorial, we'll dig deep into the nuts and bolts of UC apps from Alcatel-Lucent, Avaya, IBM Lotus, Nortel and Siemens. Find out exactly what features are available from each vendor today; what's available only through partnerships (and with whom); and what's coming down the pike. We'll also look at requirements for implementing the technologies and whether it's possible to integrate them with other applications?and if so, at what cost. And we'll delve into ROI strategies to ensure your UC deployment is a success.

This deep-dive session will give you time to delve into each application, with live demos and presentations that really drill down into exactly what each application delivers now, so that you can make the right buying choice to carry your company through tomorrow.

Melanie Turek, Principal Analyst at Frost & Sullivan, will kick off the session with a close look at the unified communications market, and discuss key issues for IT to consider when they deploy a UC application. Each vendor will then demo and detail their product, while answering questions about features and functions from the moderator. We'll finish up with an audience Q&A, to ensure participants' toughest questions get answered. Attendees can expect to leave with a solid understanding of what each vendor's product can deliver, making it easier for them to take the next step in the UC decision-making process.