15 May 2015

Event offers practical & theory sessions by teams working inside leading European organizations

SANS has announced the speakers and agenda for the upcoming European Security Awareness Summit in London this July offering a blend of practical and theoretical sessions delivered by teams working inside leading European organizations.

“We have taken a different approach this year to increase the level of peer discussion by theming our groups around different subject matter areas and less on vertical markets,” explains Lance Spitzner, training director at SANS Securing The Human Program, “This is based on feedback from our last event and reflects the notion that security and awareness challenges transcend industries and the experience and insights gained by a manufacturer, industry regulator or financial services organizations are valuable across the board.”

The line-up for speakers includes representatives from the Bank of England, Lockheed Martin, University College London, Diageo and ENISA amongst 7 sessions and an extended networking luncheon and additional peer-networking breaks.

Summit Will Allow Attendees To Gain Insights

“The audience has also grown significantly,” says Spitzner, “Alongside InfoSec professionals, our early registrations are showing delegates from compliance and audit, human resources and communications backgrounds who are increasingly tasked with information security awareness and policy management roles – the summit will allow these attendees to gain real insights from both academic experts and peers with similar roles.”

The hands-on- nature of many of the sessions is typified by John Haren, Head of Information Security Governance, Risk & Compliance for Diageo. With 16 years within the company across a variety of roles and the last 4 spent with the information security area, John will discuss the ongoing work to create a network of “security champions” across one of the world’s largest drinks companies.

"It is vital that we use extended teams to help get our critical messages out there – and we can do this because there is a pull from those teams both to help their own parts of the business and their colleagues"

“I feel this is an important topic because budgets are continually being squeezed and central Information Security teams, particularly in global organizations, have fewer resources (both people and financial) as a result,” says Haren, “It is vital that we use extended teams to help get our critical messages out there – and we can do this because there is a pull from those teams both to help their own parts of the business and their colleagues but also from interested individuals who find Information Security fascinating.”

Summit Includes SANS MGT433 Program Taught By Spitzner

The one-day summit follows the two-day training course, SANS MGT433 Program taught by Spitzner, “To reduce human risk you need to change peoples’ behaviors, and to change peoples’ behavior you need a well-planned, high-impact security awareness program. Far too often organizations have a security awareness program, but the program is immature, designed only for compliance purposes to meet a certain standard. To truly change human behavior, you need a mature security awareness program that has the support of your management and answers the key questions of who, what and how,” Spitzner adds.