[TriLUG] NC*SA Monthly Meeting and Election (12/10) Title=If Kubler-Ross Were Handling Vulnerabilities

[Liyun Yu]

The next meeting of the North Carolina System Administrators 
organization (NC*SA)
is next Monday, December 10th, 2007. Details about the meeting are
provided in this note. It is also the time for the NC*SA Steer Committee 
(SC)
Election. NC*SA SC has vacancies waiting for you :-)
We hope to see you there!

                 NC*SA General Meeting
           7:00 pm Monday, December 10th, 2007
                   MCNC, Building #3
               Research Triangle Park, NC
    *** Note that meetings are no longer held at RTI ***

Topic: If Kubler-Ross Were Handling Vulnerabilities
Speaker: James N. Duncan, CISSP, BB&T
Affiliation: BB&T Corporation (Branch Banking and Trust Company)
Free Pizza Dinner around 8pm.

Gold Sponsors:    
Eqallogic - http://www.equalogic.com
NetApp - http://www.netapp.com
Crossover Lending Group - http://www.crossoverlending.com
IBM - http://www.ibm.com

Silver Sponsors:    
MCNC - http://www.mcnc.org
TriLUG - http://www.trilug.org

==

Title: If Kubler-Ross Were Handling Vulnerabilities

Abstract: In her groundbreaking work, _On Death and Dying_, and
her Ph.D. research preceding the book's publication, Dr. Elisabeth
Kubler-Ross developed "The Five Stages of Grief" to describe the
five unique stages experienced by a person facing a terminal
diagnosis.  For dealing with imminent death alone, this seminal
work transformed grief counseling in health care and allied
disciplines.  It has broader applicability to many other similar
situations, basically any event in which traumatic outcomes are
presented.  The speaker will apply the Five Stages to product
security incidents with explanations and examples based on real
events.  The suggestions can be easily expanded to any other type
of cyber security event or response to a disaster, indeed, to any
interaction in the workplace.  Attendees will leave the session with
one more tool in the sysadmin toolbox for handling incidents and upset
users more quickly and effectively.

Estimated time: 30-50 minutes (flexible)

==

Bio: James N. Duncan, CISSP, is the Cyber Security Incident Response Team
Coordinator for BB&T Corporation, currently the 11th largest domestic 
financial
holding company in the United States.  His constituency extends over 34 
subsidiaries
and nearly 30,000 employees in eleven states providing nearly every 
imaginable
financial service from traditional banking, wealth management, and 
investments,
 to insurance, payroll management, software development, and ASPs for other
financial services companies.  The bank's web presence, bbt.com, has 
received
numerous awards for excellence in on-line banking.

Previously, Jim Duncan worked at Cisco Systems where he provided 
incident response
team support within the Critical Infrastructure Assurance Group, acting 
as technical liaison
for various ISACs and government agencies (US and others), and was the 
team lead
for the Cisco Product Security Incident Response Team, handling 
vulnerabilities in
Cisco products from initial report to final composition and publication 
of a security
advisory.  Prior to that, he was employed as network engineer and 
principal systems
administrator in various departments at the Pennsylvania State University.

In between, Mr. Duncan developed one of the first tutorials
focusing on developing incident response teams way back in 1996 (with Rik
Farrow for the USENIX Association), has been a candidate for SAGE and
USENIX Boards, participated on multiple USENIX Program Committees
(including as Program Chair), served a two-year term on the Steering
Committee/Board of Directors of the Forum of Incident Response and Security
Teams, and became an approved TRANSITS instructor, teaching several
TRANSITS classes around the globe.

Jim is also a soccer referee, certified by the United States
Soccer Federation, US Indoor Soccer, and the North Carolina
High School Athletic Association, and has officiated many
hundreds of matches in the last four years.

He is in wide demand on multiple continents as a speaker and
instructor (and referee).

=======================================================================

Our meetings are free and open to anyone with an interest in the topic
of the evening and/or system administration.  We will be providing food
and drink for the evening. If you have any questions please contact the
Steering Committee at:

ncsa-steer at ncsysadmin.org

=======================================================================

Directions to the meeting are available on the web at
http://www.ncsysadmin.org/directions.