Cybersecurity and the Stock and Financial Markets
Alejandro Hernandez is a security consultant who works for IOActive, where he has had the chance to work in Fortune 500 companies around the world. As a researcher, he has presented his work in different conferences including Black Hat USA, DEF CON, AppSec USA, BruCON (Belgium) and CODE BLUE (Japan). Recently, he has been bridging cybersecurity with another subject he is interested in: money markets. Self-forged initially, later on he took some stock trading courses to gain the understanding on how the digitally-ruled financial markets work nowadays.
Privacidad, Retos e impactos en la privacidad, nuevas regulaciones
Imparto las clases de Delitos Informáticos e Informática Forense, para la Maestría de Derecho de las TIC, en INFOTEC. He impartido clases sobre temas de ciberseguridad y protección de datos personales en diplomados del CIDE y el ITAM. Soy instructor para la Certificación CISSP (Certified Information Systems Security Professional) del Consorcio Internacional de Certificación de Seguridad de Sistemas de Información (ISC)².
The likeness of the love court and your Cyber Resilience
Bismarck Animas Perez
Bismarck Animas has IT experience for 20 years, 15 of them in Infosec. At the beginning he was in a nightshift as a datacenter sysadmin for a national multimedia group; it was there where he started learning about infosec to facilitate his work. Since 10 years ago he works in a transnational group where he started the Forensics and digital investigations area, now he is the leader of the red team, security assessments and pentesting and has a role in the security strategy and architecture of the company and lately has the role as compliance and auditing internal consultor.
A ‘Radiography’ of the [In] Security of PACS & DICOM Systems
Chief Security Ambassador at Eleven Paths (Guayaquil). Consultor especialista en Seguridad de la Información con certificaciones internacionales. Licenciado en Sistemas de Información y Maestría en Seguridad informática. Miembro de asociaciones relacionadas con la industrai de la seguridad. Orador en varios eventos nacionales e internacionales. Instructor sobre temas relacionados con Ethical Hacking, Auditoria de Código, Hardening de Plataformas, Seguridad en Aplicaciones Web y Aplicaciones Móviles, Seguridad en Infraestructura de Redes.
Defensible Security Framework
Carlos was born and raised in Mexico City and is a Certified Information Systems Security Professional (CISSP) with over 20 years working on IM/IT, security, enterprise architecture, business intelligence, data forensics, network security, and data warehousing.
How to detect that is a victim of social engineering through NLP
Systems Engineer with a master's degree in computer security with a track record of eleven years in information security, with extensive knowledge in: ISO 27001, ISO 27002, ISO 31000, ISO 22301, ISO 27003, ISO 27019, ISO 27032, COBIT 5, TOGAF, Online Government, Colombian Personal Data Protection Law, Guide to the principle of demonstrated responsibility (Accountability), SOX, PCI, Circular 052, Circular 042, Circular 029, Circulars 007 and 008 of the Colombian Financial Superintendence, NIST Cybersecurity Framework , NERC, FTK (forensic), good information security practices.
Cynthus Sponsored Session
Esteban San Romen
El Sr. Esteban San Román ha colaborado en empresas globales y nacionales desempeñándose como Ingeniero de Sistemas, Especialista en Redes de Comunicaciones, Director de Servicios Profesionales y Arquitecto de Soluciones de Seguridad. Ha crecido y destacado en empresas como IBM, Anixter, Scitum, Palo Alto Networks y Delta Networks Systems. Una buena parte de su formación la ha proyectado como Instructor certificado para impartir tanto cursos de renombrados fabricantes como Checkpoint, Network Associates, Nortel Networks, así como talleres y bootcamps de preparación para certificaciones independientes de la tecnología de organizaciones como ISC2, ISACA, Ec-Council y Mile2 con amplio reconocimiento en la industria. Esteban ha desarrollado múltiples ofertas de entrenamiento para instituciones gubernamentales y de la iniciativa privada a lo largo de Latinoamérica; además de generar materiales en fuentes reconocidas como Netmedia. Actualmente, Esteban colabora como instructor en Grupo Cynthus y mantiene interacción con otros profesionales para atender sus requerimientos.
A3Sec Sponsored Session – La visibilidad, ¡un factor crítico!
Israel Gutiérrez – México
Profesional apasionado por la tecnología, experto en el desarrollo de soluciones de seguridad TIC, enfocadas al incremento de la eficiencia y productividad, con fuerte especialización en soluciones de seguridad, experto en SIEM. Ha desarrollado proyectos de soluciones de seguridad en instituciones financieras multinacionales, empresas de telecomunicaciones en más de 6 países, gestionando e implementado proyectos multidisciplinarios enfocados en la Inteligencia y Seguridad Informática.
Embracing Zero Trust (When You Aren’t the World’s Largest Internet Company)
James Plouffe has over 20 years experience in IT in security. He has spent the last six years on the frontier of the disappearing security perimeter working for the mobile and cloud security company MobileIron. There, he is responsible for setting technology integration strategy, identifying strategic technology partners, and implementing joint technology solutions to help customers be successful in making modern endpoints a seamless and secure part of their environments. Previously, he spent a decade as the Network and Security Architect for a large manufacturer with responsibility for designing and building the LAN, WAN, and perimeter security infrastructure for North American facilities. He also served as a Technical Consultant for seasons 1 – 3 of the award-winning “hacker” drama Mr. Robot.
TOP 3 Challenges against Cyber Crime in LATAM
Co-Founder and Director of Consulting Services on CSI Consultores en Seguridad de la Información. Consultant and Auditor in the area of Information Security with more than 16 years of experience in the field. Specialized in the detection of computer fraud, compliance audits based on national and international standards and security testing (ethical hacking). He has the certifications of CISSP (Certified Information Systems Security Professional) by ISC2, ITIL Foundations and Certified Ethical Hacker by Ec-Council and has participated in specialized information security projects in large corporations and government institutions. He has helped large corporations and government entities to identify and prevent security incidents and has also advised multiple organizations to reduce the risks associated with information security.
Jorge Mario Ochoa
Global Security Operations Center Manager at Millicom International Cellular. Professor of the Master In Cybersecurity at Panamerican Business School. (ISC)² ISLA Awards, Senior Information Security Professional 2,017 Winner. EC Council Global CISO Awards, Innovative Security Project of the Year 2017 Winner. More than 18 years of experience, leading several regional and global projects, global speaker, moderator and panelist in different events of EC Council, (ISC)², ISACA, Internet Society, Infosecurity, 5G<E. LATAM, Global IT Security Summit (London), MVNOs Latam, Revenue Assurance, Fraud & Big Data Analytics LATAM, Banking Association of Guatemala, among others, writher, author of several articles published by Hacking9, Pentestmag, etc. C|CISO, CISSP, CISA, CISM, C)PTE, C)SWAE, Cobit 5, ITIL v2011, C|BP (Certified, Blockchain Professional), Lead Auditor ISO 27001:2013 , Lead Auditor ISO 22301:2012, Diplomas from MIT in Cybersecurity and BigData, Lean Six Sigma, Business Intelligence, Design Thinking, The 4 Disciplines of Execution (FranklinCovey), High Impact Presentations (Dale Carnegie). Phd in Human Dynamics and Mental Health, Masters in Cybersecurity, Talent Management, Project Management, Business Administration & Leadership.
Data Loss Prevention, the myth.
Jose Ramirez is an experienced engineer with more than 20 years in technology and 15 in Information Security. He has worked in many DLP and SecOps projects for more than 20 of the 100 most important companies in Mexico as well as national security projects. He has more than 10 certifications including CISSP, Cobit 5 and ISO27001.
Privacidad, Retos e impactos en la privacidad, nuevas regulaciones
Juan Carlos Carrillo holds a degree in Computer Systems Management, graduated from the Universidad del Valle de México and a Master in Finance from the Instituto Technological Superior Studies of Monterrey. He is certified as an Information Privacy Professional (CIPT), Certified as an Identity and Access Administrator (CIAM) and Certified in Cloud Security (CCSK), and was the co-chair of the Knowledge Net IAPP chapter Mexico. Juan Carlos began his professional career at the Boston Consulting Group in 1999 in the Technology area, in charge of the IT area, being responsible for the support and infrastructure of the subsidiary in Mexico. In 2002, he joined General Electric in charge of supporting all the Business to Business transactions. In 2003, he became part of Merrill Lynch, as infrastructure manager, in 2004 becoming the Technology Manager of the subsidiary in Mexico. In 2008 he joined GBM (Grupo Bursátil Mexicano), where he was responsible for the ITIL and Security areas, in 2009 he led security sales in the financial sector at IBM. In 2010 he joined Sm4rt Security Services. From 2014 to 2016, he was in charge of sales of security products at Oracle and during 2016 and 2017 he worked as director of cybersecurity consultancy at PwC. In the last 7 years, Juan Carlos has devoted himself to the topic of privacy, both as a lecturer and as an advisor and consultant on data protection issues.
DevSecOps: Applying continuous security in the cloud
Omar Saenz Herrera
Omar Saenz is a Lead Cloud Security Architect for HSBC Group Technology currently based in the United Kingdom. He has worked as an IT and cyber security consultant for over 15 years specialising in multiple domains including application security, identity and access management, penetration testing and security operations. He currently specialises in public cloud security (AWS, Google Cloud and Azure) and he is an advocate of DevSecOps practices. He has worked for international organisations such as Deloitte, KPMG and Accenture and participated in regional and global projects for BP, Shell, UBS, Diageo, Coca Cola and Grupo Modelo. He is currently the Membership Chair for the ISC(2) London Chapter and has participated as speaker in several technology and computer security events including the ISF Annual World Congress in 2017. He has a degree in Cybernetics Engineering and Computer Systems from La Salle University Mexico and he was part of the first generation of the Computer Security scholarship programme at DGTIC UNAM. He has a Master's degree in Business Innovation with Innovation Management and Entrepreneurship from Birkbeck University of London.
Using the principles of Behavioral Economic to improve IS policy compliance
IT Professional with other 20 years experience. In 2009, while doing my masters I started to get more interested in Information Security. My area of research was the human aspect of Information Security and how to develop an information security culture in organizations. Since then I have been conducting research on human behavior, security culture, policy compliance and more recently on how to apply the principles of Behavioral Economics to Information Security
Privacidad, Retos e impactos en la privacidad, nuevas regulaciones
Desarrollo de los esquemas nacionales de certificación y evaluación de la conformidad para Sistemas de Gestión de TI, Seguridad de la información, Gestión de Servicios, Protección de Datos Personales, Continuidad de negocio, Desarrollo de Software, entre otras. Titular de la cátedra de Buenas prácticas de Seguridad de la Información en la Maestría de Seguridad de la Información de la Universidad Iberoamericana.
eHealth, IoT and me: the three of us are still alive
CEO & Founder Inmigrandi. Consultant in Technology, eLearning and Quality Management. Internal Auditor ISO 9001 by the Georgia Institute of Technology. IoT analyst. Innovative educational solutions designer and instructional design expert. Internet Society active member. Specialized in the processing of large volumes of data in the official statistics agencies of Paris, Tokyo, and Washington.
Other Industry Certification/Credential/Title
IoT Certificate (Cisco Networking Academy). ISO 9001 Internal Auditor (Georgia Institute of Technology).
Knowing the Known Unknowns
A graduate of the US Air Force Academy, Paul Suárez served his entire 27-year Air Force career in the fields of cybersecurity and IT. Since his retirement from USAF he worked for Netwitness, RSA Security and Avaya before coming to Walmart where he is responsible for their international InfoSec posture.
Latam under attack, how to protect and detect them
Roberto Alvarado Olivares, Senior TAM & Cybersecurity Champ Lead for América Latina, Electronic Eng., MBA , more than years working in technology, 15 years working with enterprise customers and corporations in Microsoft Services. In the last 5 years in Microsoft leading LATAM cybersecurity initiatives and working as advisor on regional customers stablishing cybersecurity strategies. Participated on several summits in the LATAM region, and actively participated on several cybersecurity incidents in the last years.
A journey to a malware analysis: Malicious files distributed over the Cloud
A passionate of Information Security with more than 15 years of experience. Currently a Sr. Security Consultant at Infolock LLC, Virginia, US. Professor in the Cyber Security Master and also Official CISSP Instructor at UCenfotec, Costa Rica. Currently certified as CISSP® ,PCIP,CEHv8. Many product certifications from Microsoft and Symantec. Master in Information Resources Management from the Latina University, Costa Rica. More than 20 publications for media and specialized entities like the InfoSecurity Professional Magazine and InfoSecurity Professional INSIGHTS