10:35-11:45

Section 1 INFORMATION SECURITY - STATE CONTROL AND ENFORCEABILITY ISSUES

Moderators: A.M. Ivashko, Head of the Administration Center of the Federal Security Service of Russia; representative of the Federal Agency of Technical and Export Control of Russia; G.V. Emelianov, Chairman of the Council of Information Security Association (ISA)

Speakers:
Legal aspects of confidential information cryptographic protection means - workout, manufacture, realisation and application
V.D. Negutor, Adviser of the Federal Security Service Center of Russia

Case Studies – state schemes for control of information security
Representative of Federal Agency of Technical and Export Control

Section 2 PANEL SESSION: How do we choose VPN. Customer’s criteria

Moderator: Alexander Gudko, Editor-in-Chief, Information Security magazine

Panel discussion participants:
Vladislav V. Myasnyankin, Head of Information Security Department, Severnaya Kazna Bank
Representatives of large-scale customer-companies, Directors and leading technical specialists from: Informzaschita, R- Style, Check Point Software Technologies, Crypto-Pro, Center of Security Technologies of IBS, Agnitum, MTT, ZyXEL, S-Terra CSP

13:45-14:15

14:30-15:30

Section 3 PANEL SESSION: INFORMATION SECURITY MARKET IN RUSSIA – STATE-OF-MARKET, TRENDS, WORLD-WIDE MARKET POSITION

Moderator: Igor Liapunov, Director of Information Security Systems Department, LANIT

Speakers and panel discussion participants:
Alexey Shindin, CISA, CISM, Senior Manager, Ernst&Young
Rustem Khairetdinov, Executive Director, InfoWatch
Andrey Stepanenko, Deputy General Director, Informzaschita
Ilia Trifalenkov, Director of Information Security Center, Jet Infosystems
Alexei Gratchev, Business Continuity & Recovery Services offering manager IBM East Europe/Asia (Russia)

Addresses:
- Threat analysis for today’s organizations. What kind of risks are most critical today?
- Enterprise level requirements for information security services and solutions
- Russian information security market structure. Financial indexes. Vendors, system integrators, consultants, box-shifters
- Russian information security market primary trends, technology development trends, development of the service market, outsourcing, etc
- Russian and Western information security markets

Questions for discussion:
- What is the number 1 threat for companies in different industries?
- Demand and supply disbalance at the Russian information security market. What do the customers miss?
- Competence / incompetence of the information security suppliers?
- Quality of Russian information security products?
- Are we behind the West or do we have our own way?
- What are the selection criteria for an information security supplier?

15:45-17:00

Section 4 PANEL SESSION: PROBLEMS AND SOLUTIONS FOR MALICIOUS CONTENT CONTROL (SPAM, PORNO, WORMS, MALWARE, SPYWARE, ADWARE, ETC.)

Opening address: Modern technologies, the state of the global market for malicious content protection
Shimon Gruper, CISSP, VP eSafe Technologies

Moderator: Representative of Yandex

Panel discussion participants:
Sergey G. Antimonov, President, Dialogue Science
David Perry, Global Director of Education, Trend Micro
Maros Mozola, VP, Eset Software
Victor Dronov, Antispam Products Marketing Manager, Kaspersky Lab
Jonathan Wegener, Senior Security Engineer, McAfee
Anton Shubnyakov, Direcor, Associates
Michael Kondrashin, Head of Center of Competency, Applied Logistic

10:30-12:30

Section 5 PANEL SESSION: REGULATION OF INFORMATION SECURITY PRODUCT USAGE AND THE ISSUE OF PROVING ITS QUALITY

Moderators:
Andrey N. Kovalev, Center of licensing, certification and State secret protection, Federal Security Service, Russia
Igor V. Egorkin, Federal Agency of Technical and Export Control

Information protection product certification
I.G. Shaposhnikov, Director of Certificate Research Center Ltd
Draft Technical regulations for the requirements for an information technology security facility
I.A. Kalaida, Federal Agency of Technical and Export Control
New architecture for the information security industry: technical regulations, suitability voluntary confirmation, self-control
S.V. Ivanischak, EVRAAS Association
Information security and technical regulation
Boris I. Scorodumov, Deputy Director, Banking Institute, candidate of technical science

13:00-15:00

Section 6 PANEL SESSION: BUSINESS CONTINUITY. DISASTER RECOVERY

Moderator: Nickolay A. Samodaev, Ernst&Young

Addresses:
Importance of recovery and business-process continuity administration planning
Andrey Golov, Tops BI
Business-process continuity support for data processing centers
M ikhail Y. Kader, Cisco Systems
Actual solutions for building fault-tolerant information security systems
Mikhail Y. Romanov, TechnoServ A/S
Business continuity – IBM’s approach
Alexei Gratchev, Business Continuity & Recovery Services offering manager IBM East Europe/Asia (Russia)
Typical mistakes and modern trends in business continuity management
Nikolai Samodaev, CISA, MBCI Manager Technology & Security Risk Services Ernst & Young

15:15-16:45

Section 7 PANEL SESSION: INFORMATION LEAKAGE CONTROL IN A MODERN OFFICE – SMART PHONES, BLACKBERRIES, IPOD, MULTI- PURPOSE USB DRIVE USAGE PROBLEMS

Moderator: Alexey V. Lukatski, Cisco Systems

Addresses:
The Underestimated danger of digital gadgets
Alexey V. Lukatski, Cisco Systems
Threat Evolution: New strategies for critical resource protection
Johan Beckers, Internet Security Systems

16:15-16:30 Discussion

10:30-12:30

Section 8 CASE STUDY: THE SECURITY PERIMETER. DOES IT EXIST?
Demonstrations of WEB-application attacks, wireless networks cracks, attacks via VPN, taking advantage of client applications vulnerability. Comments from the law-enforcement authorities’ representatives.

Moderator: Vladimir Lepikhin, (Informzaschita Training Center)

PANEL SESSION: ORGANISING AND INCIDENT RESPONSE SERVICE
12:30-13:00

Moderator: I.V. Sobetski, Leading Specialist, Informzaschita Training Center

14:00-15:45

Section 9 PANEL SESSION: HOW BIG IS THE INTERNAL INFORMATION SECURITY THREAT?
Internal threat prevention as a part of corporate information security policy. Users’ compliance with such policies. Legal and technical issues for internal threat prevention. Staff training. Monitoring of staff communications.

Moderator: Mikhail U. Emeliannikov, Head of Security Department, Svyazinvest OJSC

Addresses:
Internal threat issues for Russian companies – results of the survey
Denis Zenkin, Marketing Director, InfoWatch
Raising staff awareness of information security issues as a method of reducing losses due to internal security breaches
Dmitry V. Ershov, Deputy Director of Informzaschita Training Center
Protection from internal threats: how to prevent confidential information leakage
Anton N. Zubritsli, Head of Sales Department, LETA IT-company
Communication systems control as a method of reducing internal threats
Mikhail U. Emeliannikov, Head of Security Department, Svyazinvest OJSC