Careers Information Security Podcast

Hathaway, an interview with GovInfoSecurity.com, cited the innovative coupling of cell phone and global positioning technologies to authenticate a user withdrawing money from an ATM or making a credit card purchase. With the cell phone turned on, a GPS can verify that the consumer is where the transaction takes place.

"That's not what cell phones were originally designed for, but I thought it was a creative solution on how to defeat the fraud or at least make it much more complicated for the criminal or thieves to take our information or take our personal data," Hathaway said in a conversation with Eric Chabrow, GovInfoSecurity.com managing editor.

In the first of the two-part interview, Hathaway also discussed:

(Click here to listen to part 2 of the interview.)

President Obama in February assigned Hathaway to lead a wide-ranging, interagency review the government's cybersecurity plans and activities. Her review resulted in the administration's cybersecurity policy agenda the president unveiled in May.

Hathaway is a protégé of retired Adm. Mike McConnell, who served until earlier this year as the National Intelligence director. Under McConnell, Hathaway served as a senior advisor and cyber coordination executive. She chaired the National Cyber Study Group, contributing to the development of the Comprehensive National Cybersecurity Initiative. That led to her appointment as director of the Joint Interagency Cyber Task Force in January 2008. At the business consultancy Booz Allen, where she first worked with McConnell, Hathaway served as a cybersecurity strategist, leading the information operations and long-range strategy and policy support business units.

She resigned her White House job in August, and shortly thereafter started the consultancy, Hathaway Global Strategies, and this fall joined the Belfer Center for Science and International Affair at Harvard University's Kennedy School of Government as a senior adviser.

Hathaway holds a BA from American University and a special certificate in information operations at the U.S. Armed Force Staff College.

This is the perspective of careers coach Heidi Kraft, who says that today's senior leaders need to focus more on emotional intelligence and other "soft" qualities to be able to better recruit and retain quality employees.

In an exclusive interview, Kraft discusses:

Kraft is a Leadership and Career coach and founder of Kraft Your Success Coaching and Consulting.

Prior to launching her business, she spent 17 years on the agency side of the advertising industry, including a stint as SVP Media Director at Boston-based Hill Holliday, developing and implementing media strategies for high-profile clients such as Microsoft, Intel, Intuit, Siebel Systems, 24 Hour Fitness and Harley-Davidson.

She holds a CPCC (Certified Professional Coactive Coach) and is a graduate of the Coaches Training Institute's Leadership Program. She is also a member of the International Coaches Federation. Kraft serves on the BAARC board (Bay Area Advertising Relief Committee), a non-profit organization that helps individuals who face severe difficulty after job loss.

What does it take for an information security professional to make it into the United States Secret Service?

We asked Kevin Sanchez-Cherry, IT Security Specialist within the agency's Information Security Operations. In this exclusive interview, Sanchez-Cherry discusses:

Sanchez-Cherry is an IT Security Specialist for the United States Secret Service's Information Security Operations sub-division and is responsible for leading the Secret Service's Certification and Accreditation (C&A) Program and Information Systems Security Officer (ISSO) Program. He also assists in the management of the enterprise Information Assurance (IA) Program for the Secret Service.

Prior to joining the Secret Service in 2006, Mr. Sanchez-Cherry served two years as Principal Security Specialist with the Department of Commerce's Office of IT Security, Infrastructure and Technology (ITSIT), and was responsible for monitoring the agency's operating units' compliance with Federal and Department IT security requirements, laws and guidance.

Know what scares security expert John Pescatore the most? The image of a remote employee sitting at a home office or public setting, plugging into an unsecured network, accessing critical business data via a personal laptop or PDA.

Organizations have never had so many security risks in so many remote locations, says Pescatore, VP and Distinguished Analyst with Gartner, Inc. Mitigating these risks will be among the primary challenges for information security leaders in 2010. In a discussion of security trends, Pescatore offers insight on:

Pescatore has 31 years of experience in computer, network and information security.

Prior to joining Gartner, he was senior consultant for Entrust Technologies and Trusted Information Systems, where he started and managed security consulting groups. His previous experience includes 11 years with GTE, as well as employment with NSA and the U.S. Secret Service.

Enterprise Risk Management (ERM) is a topic of interest throughout an organization - and increasingly at the board of director level.

But how does a security leader engage the board on ERM - and keep it engaged?

Pete Fahrenthold of Continental Airlines and RIMS discusses:

Fahrenthold is the Managing Director of Risk Management and the ERM Team Leader for Continental Airlines. He has over 20 years of risk management experience. Prior to entering the risk management field, he worked in public accounting and in various corporate functions including financial reporting, treasury operations, and employee benefits management.

He is currently the Vice Chair of the RIMS ERM Development Committee, and he is the Chair of the AFP Risk Newsletter Editorial Advisory Board.

To help separate fact from fiction, noted pandemic expert Regina Phelps discusses:

Phelps is an internationally recognized expert in the field of emergency management and continuity planning. With over 26 years of experience, she has provided consultation and educational speaking services to clients in four continents. She is founder of Emergency Management & Safety Solutions, a consulting company specializing in emergency management, continuity planning and safety.

In an exclusive interview on GRC trends, Chris McClean, analyst with Forrester Research, discusses:

McClean contributes to Forrester's offerings for the Security & Risk professional, leading the company's coverage of governance, risk, and compliance (GRC). He is also a thought leader on the related issues of corporate social responsibility (CSR) and sustainability. He is a frequent speaker on these subjects at vendor events as well as conferences run by industry organizations such as the Risk Management Association.

There are myriad threats to children as they explore their online universe. And to counter these threats is Safe and Secure Online, a new interactive presentation that brings information security professionals into classrooms to give sound advice to 11-14-year-old children.

Delivered by (ISC)2, Safe and Secure Online relies on material developed by former school teachers, but delivered by certified information security professionals.

David Melnick of Deloitte and (ISC)2 discusses:

Melnick is a principal in security and privacy services within the audit and enterprise risk services practice in the Los Angeles office of Deloitte and brings more than 17 years of experience designing, developing, managing and auditing large scale secure technology infrastructure. Melnick has authored several technology books and is a frequent speaker on the topics of security and electronic commerce.

Erich Spengler, professor at Moraine Valley Community College near Chicago, discusses:

Spengler has over 20 years experience in Information Systems and holds an MBA from Loyola University of Chicago and an MS in Computer Science from the University of Illinois - Springfield. In addition to serving as a tenured professor of Computer Integrated Technologies at Moraine Valley Community College, Erich also serves as a Guest Lecturer at Northwestern University and as the Director and Principle Investigator for the National Science Foundation (NSF) Regional Center for Systems Security and Information Assurance (CSSIA @ www.cssia.org). Erich holds several industry certifications including CISSP.

Insider fraud has always been a risk for banking institutions, but this risk has only grown in the past year. And so has the size of the crimes.

Shirley Inscoe and BC Krishna of Memento have written a new book, "Insidious: How Trusted Employees Steal Millions and Why It's so Hard for Banks to Stop Them." In an exclusive interview, the authors discuss:

Inscoe, Memento's Director of Financial Services Solutions, had a distinguished 24-year career at Wachovia, the fourth largest bank in the U.S. Throughout her tenure at

Krishna, founder and CEO of Memento, is a technologist and entrepreneur skilled at turning innovative software solutions into industry-leading companies. He founded Memento in 2003 after identifying the high-value business opportunity to help enterprises systematically address the long-known issue of internal fraud and inappropriate activities by insiders. In 1995, BC founded FutureTense the company that helped define the Content Management software category and was part of the management team that led it to nearly $100 million in revenue. Following the acquisition of FutureTense by publicly traded Open Market, he served as Open Market's Chief Technology Officer, as well as a Board Member. From 1987 to 1995, BC was a Principal Software Engineer at Digital Equipment Corporation.