At the September CIPS Security Special Interest Group meeting Robert Hawk spoke on patch management. A lot of what Robert had to say was pure project management and governance principals applied to the security domain. The value of Robert
July's CIPS Vancouver Security SIG meeting was a panel discussion on encryption in the enterprise. Panels can be dodgy, so I really wasn't sure it would be worth the trip. It was.
The panel consisted of representatives from Bell Corporate Security, BC Ministry of Attorney General, Bell Alliance Lawyers & Notaries Public, Accenture Business Services and the Vancouver City Police. In spite of the diverse group there was a clear consensus on most of the issues.
Some take away points that won't run afoul of non-disclosure: