John is responsible for strategic direction, implementation and management of all aspects of CBN ID/Payment Systems’ security program, where he leads the development of security technologies, security services, threat intelligence and compliance. His security and development work protect 100M+ secure documents and millions of software installations that support hundreds of thousands of users across 80 countries in high-security environments that are critical infrastructure to public safety. A frequent speaker and contributor, John has been recognized by OCIPEP for outstanding research in security. If you have made an Interac purchase, bought a lottery ticket, been to a hospital or used a passport to cross a border – you have probably used products John is directly responsible for.
John Duffy
All Sessions by John Duffy
-
Day 2
-
15:30
You Are Here: Leading your Security Program with Wardley Maps
15:30 - 16:15If you're responsible for a security program or are expected to lead the last line of defense against the onslaught of relentless risks - we need to talk. When a new attack class appears do you know what it means for your security? When you're asked for 2020's security priorities how do you answer the inevitable question: "So what?" When a new product is buzzing around halls of R&D how do you know where it fits in *your* security priorities? This talk looks at the journey of being handed the keys to an information security program. We'll discuss our journey from controls-based SP800-53, to Maturity Models like BSIMM and ultimately deciding on Wardley Mapping for providing long-range guidance and short-term priorities to hundreds of technical staff across multiple continents developing national-security level software. Wardley Mapping is a new technique for communicating situational awareness. Get good at this and you'll find yourself in the middle of everything from business to technical strategy.WhereSpeakers Hall