| Wednesday November 9th Tentative, Subject to Change |
| 7:30AM - 8:30PM |
Breakfast and Registration |
| 8:30AM - 9:00AM |
Keynote- Identity, Networks & Security
Digital ID World - Phil Becker (Editor)
As applications leverage networking at scale, traditional approaches create a rich environment for those looking to exploit the systems. And at the same time networking leads to ever more distributed applications, companies are being asked to more fully assure who did what with what data. Successful solutions to these problems will be rooted in identity. In his keynote, Phil explores how identity-centric architectures are helping financial service enterprises reorient themselves in the face of growing security threats, allowing them to embrace the nature of networking rather than fight it. |
| 9:00AM - 9:40AM |
Enabling Business with Agile Identity Management
Sun Trust Bank - Tim Callahan (VP & Manager of Access Control and Support Services)
Today's climate of constant change requires a provisioning infrastructure that is not only flexible enough to accommodate change, but agile enough to enable it. Sun Trust Bank became the nation's seventh largest bank through a series of mergers of 28 separate banks. Hear how SunTrust evolved its provisioning infrastructure from an overwhelmingly cumbersome process aimed primarily at ensuring security and efficiency to a more elegant model that ensures security and efficiency while simultaneously enabling change management and increasing business velocity. Tim Callahan will also share lessons learned and best practices developed by SunTrust Bank in their deployment of identity management over the course of the last two years. |
| 9:40AM - 10:15AM |
Managing Roles at Scale
Digital ID World - Phil Becker (Moderator)
Bridgestream - Ed Zou
Thor Technologies - John Aisien
Bearing Point - Gordon Hannah
Prodigen - John Sekevitch
Role-based systems have traditionally failed, broken or become unmanageable at scale, but new methods are emerging as companies struggle with what role-based management means. This panel will explore new paradigms and methodologies in the context of deployment experience, from end user, vendor, and integrator perspectives illuminating new ways that this bottleneck may be broken. |
| 10:15AM - 10:45AM |
Break
|
| 10:45AM - 11:15AM |
Deploying & Managing Strong Authentication
Fifth Third Bank - Bob West (former CSO)
United Banker's Bank - Daren Mehl
Captial IQ - Ken Pfeil
Strong authentication has become a crucial requirement for establishing both internal and customer-facing security. This panel brings together leading technology experts with those involved in successful strong authentication deployments. Learn what's worked and what hasn't along with the techniques and technologies which are shaping the future of stronger security through authentication. |
| 11:15AM - 11:45AM |
Implications of Microsoft's InfoCard and the Identity Metasystem for Strong Authentication
Microsoft - Mike Jones (InfoCards)
Arising from unusually open conversations, and based on the laws of identity developed by Kim Cameron through these conversations, Microsoft will be releasing the InfoCard user interface for a cross-platform WS-Trust based identity metasystem with Windows Vista. This system takes a quite different approach to identity and authentication, allowing many new approaches to solving this problem at scale. Mike Jones will detail the identity metasystem, and highlight its implications for the problems faced by financial services. |
| 11:45PM - 1:15PM |
Lunch
|
| 1:15PM - 2:00PM |
Leveraging Virtualization for Better ID Management
Federal Reserve Bank - Don Anderson (Manager of Directory Services)
As the number of identity silos continue to grow and managing distributed user data becomes ever more challenging, companies need methods for effectively dealing with distributed user data. After several attempts at an enterprise directory, the Federal Reserve Bank turned to virtualization. By leveraging a common Virtual Identity Hub they were able to deploy the system with minimal outside assistance while addressing a complex set of business drivers with multiple data owners across many business units. |
| 2:00PM - 2:30PM |
Effective Compliance and Privacy Management through Federation
Many financial services organizations today are focused on compliance and privacy requirements due to regulatory pressures and security concerns. While trying to deliver the critical required business and technology infrastructure, however, the question arises as to how can your organization help your customers and mitigate liability while facilitating compliance and privacy? This presentation will outline a real world case with a focus on usage scenarios where federation was used to simultaneously enhance security, improve accountability, and protect privacy. |
| 2:30PM - 3:00PM |
Break
|
| 3:00PM - 3:45PM |
One Company Without Borders
XL Capital - Tom Dunbar (SVP, CSO XL Global Services)
XL Capital - Fred Danback (VP, XL Global Services)
Six significant acquisitions in three years in addition to smaller portfolio acquisitions and several start-ups yielded 17 IT organizations within XL Capital. The IT challenge involved aligning business segments, establishing a single governance model and creating one IT infrastructure and security framework. Building a foundation for identities based on a common core infrastructure involved a phased approach within the XL environment. Phases included: developing a common directory, building a directory exchange broker, enabling web and windows applications with simplified sign-on and ultimately developing enterprise simplified sign-on. The final phases included RBAC and developing a strategy for federation with partners and clients. The result was a cohesive, auditable, manageable and convenient security framework, agility to adopt client/partner needs through use of Federated Identity Infrastructure, improved user satisfaction and reduced Help Desk calls! |
| 3:45PM - 4:30PM |
Foundations for Evolving Identity Management
Aetna - Mark Coderre (Manager of Directory Engineering)
In this session, Mark Coderre will discuss how loosely coupling and properly segmenting identity stores has allowed Aetna to evolve from tightly coupled partner architectures to loosely coupled federated architectures without having to revisit underlying identity store decisions. He will relate the lessons learned while deploying and evolving identity management to create federation oriented portals within Aetna. Mark will present several use cases, and discuss how Aetna consolidated identity silos and centralized policy and access control across multiple administrative domains while allowing various technology deployment stages to each evolve at their own pace. |
| 4:30PM - 8:00PM |
Networking Reception
Sponsor Showcase |
| |
| Thursday November 10th Tentative, Subject to Change |
| 7:30AM - 8:30AM |
Breakfast |
| 8:30AM - 9:15AM |
Identity Strategy: An Interview
Wachovia - Bob Sheehe (Corp. Information Security Architecture & Strategy)
In this interview, you will hear how Wachoiva approaches its identity strategy, and how it is transitioning from looking through a security lens to looking through an identity lens. |
| 9:15AM - 10:00AM |
Combating Phishing & ID Fraud
American Express - Michael Barrett
PassMark - Justin Bonar
ID Analytics - Michelle Wheeler
APWG - Dave Jevans
Phishing, Pharming and ID Fraud are hot topics for any company which services consumers and interacts with their customers through the Internet. While consumer trust has been eroded by constant attacks, learn what you can do today to address these issues. Learn why ID fraud can only be addressed through a systemic solution that touches multiple parts of your organization. |
| 10:00AM - 10:30AM |
Break
|
| 10:30AM - 11:15AM |
Identity Federation - Why JP Morgan Chose Federation as an IdM Strategy
Ping Identity - Patrick Harding
JP Morgan - John Nanas
Federated Identity has quickly emerged as an enterprise imperative. The reason; the need to manage identities as they cross security domains has become ever more pervasive. After an extensive review and analysis of a number of alternatives, JP Morgan selected federation as the means to solve their identity integration challenges. This one-on-one interview explores the identity management issues JP Morgan faces and how they have chosen to overcome them. In addition discover what business issues arose as part of their evaluation of potential solutions, learn why federation was chosen over consolidation and hear their plans and aspirations for federation.
|
| 11:15AM - 12:00PM |
Implications of the New FFIEC Authentication Guidelines
Forrester Research - Jonathan Penn
American Express - Michael Barrett
PriceWaterhouseCoopers - Steven Goldberg
On October 12, 2005 the FFIEC issued new guidance on Authentication in an Internet Banking Environment. The guidance describes "enhanced authentication methods that regulators expect banks to use when authenticating the identity of customers using the on-line products and services." The guidance says that relying on single-factor password authentication as the sole control is
insufficient, but what is really being required? This panel will explore what the new guidance means for financial institutions. |
| |
