Speakers at the Enterprise Risk / Security Management -
Leakage / Loss / Metrics Conference

Adam Hansen

Adam Hansen currently holds the title of Director of Information Security at Sonnenschein Nath & Rosenthal LLP.  In this role, he leads the team responsible managing risk of varying nature and scope across Firms’ 13 locations towards the protection of its 21 practice groups and nearly 2000 employees across the globe.  His responsibilities currently include functions such as Information & System Security, Forensic & Investigative Services, Crisis Management including Disaster Recovery and Business Continuity, Regulatory Compliance and Physical Security.  Adam’s expertise is deep and broad as a result of the 15+ years he has spent working as an employee and consultant.  This experience was earned through efforts in organizations ranging in size from 5-35,000 employees with scope ranging from regional healthcare providers to national professional service companies as well as international fortune 50 financial entities.  In addition to his current and past work efforts, Adam spends much time giving back to society through volunteer efforts and not-for-profit activities and currently serves as President of the Chicago FBI/InfraGard Program and as the Chair of the Risk Management Peer Group in the International Legal Technology Association.  Adam speaks frequently across the nation of a variety of risk related topics, enjoys researching emergent trends in risk management practices resulting in his numerous publications, has many certifications including the CISSP from ISC2 as well as from DRI, SANS, Microsoft and Cisco only to name a few.  Finally, he holds a BS of Engineering and MBA from Purdue University.

Bob Janacek

Bob Janacek is the Chief Technology Officer and Founder of DataMotion.  Bob has over 20 years of security and software design experience, and is the architect, designer and original developer of DataMotion's managed information delivery platform.  In his role as CTO at DataMotion he is responsible for keeping DataMotion technology on the cutting edge, while his ongoing communications with customers ensure that the products are easy to use and manage. In 1999 he co-founded DataMotion, and in 2004 he received a fundamental patent for ‘dynamic creation of recipient accounts upon receiving a message.’ Previously, Bob was co-founder of Safetynet, and served as architect and developer of their award-winning suite of data security products. He has worked closely evolving security standards including the NSA Rainbow Series, FIPS and Common Criteria. Bob holds a BS in Computer Science from the New Jersey Institute of Technology, and an MBA in Marketing from Rutgers University.

Jeff Johnson

A business enabling IT Security and Risk Management professional with over 12 years of experience including: IT Operations, Ethical Hacking, Mergers & Acquisition, IT Security, Audit and Controls, Information and Operational Risk Management, Enterprise Architecture and Strategy.  Jeff has a degree in Computer Science and a Masters in Business Administration from the University of St. Thomas in  St. Paul, MN. Currently, Jeff is an Enterprise Security Architect for the Americas Region at ING, the world's largest financial services corporation.

Fred Kwong

Dr. Fred Kwong has been in the information technology field for the past 15 years in working in education, financial, and telecommunication sectors. Fred currently works at a Farmers Insurance where he currently is the Global Head of Privileged Access Control. Fred is currently building a new program seeking to govern, control, and profile privileged identities throughout the enterprise.
Fred’s work includes the creation of security and privacy policies, standards, and procedures. He is a subject matter expert in PCI, leading organizations to pass their report on compliance. With an extensive background in IT technologies, Fred continues to challenge the status quo by providing guidance in security and network architecture creating holistic designs that align to todays’ threat vector for organizations.
Fred has a passion of combining IT skills with organization development values. His broad range of IT skills has allowed him to view IT from many different paradigms and present them to the business partners in an easy to understand language. Fred servers as an adjunct professor at Benedictine and Roosevelt University teaching courses in international business, organization behavior, project management, and information systems. He holds a Ph.D. from Benedictine University and earned his master’s degree in business administration from Roosevelt University. Fred is a Certified Project Management Professional (PMP), a Certified Information Systems Manager (CISM), and a PCI Professional (PCIP).

Leilani Lauger

Leilani Lauger is the Information Security Officer for Loyola University Chicago, where she is responsible for all aspects of information security.  Her 16 year career in IT includes positions managing information security for companies such as Laidlaw Transit, Inc. and the Chicago Stock Exchange. Leilani holds a B.A. in Economics from Claremont McKenna College and a CISSP certification.

John Nootens

Mr. Nootens has worked on the systems and support end of IT his whole career.  From mainframes and their SNA network of controllers and terminals, through the first PCs and island LANs, on thru bridged/brouted/routed local area networks and WANs.  With significant concentration in Networking, Security, Operations, Network and Application Performance and Capacity Planning, John has become and expert in High Availability, Business Continuity and Disaster Recovery. With a unique ability to understand and explain highly technical concepts in order to achieve efficient, effective decisions on the use of that technology. John has been able to help major corporations see the big picture in the use of technology to solve their business needs.

Yinal Ozkan

An expert in the field of corporate computer and network security, Mr. Ozkan (CISM, CISA, CISSP) specializes in the design of strategic security systems for mid-sized to large corporations and government institutions. During his tenure with Integralis he has managed pre-sales, consulting and engineering teams, restructured pre-sales operations, and developed compliance programs. His extensive experience has helped him build a strong foundation of specialized knowledge in risk management, information security management systems, financial systems, managed security services and network security solutions. He has managed a number of large-scale security infrastructure projects, compliance initiatives, sophisticated firewall and intrusion prevention system (IPS) integration projects, and the implementation of authentication solutions, particularly in the financial services sector. Prior to joining Integralis in 2002, Mr. Ozkan consulted for several Fortune 100 companies. He is the co-author of the book "Advanced Check Point Configuration," published by Sybex Publications.

Gary Palgon

In his role as Vice President of Product Management at nuBridges, Gary oversees product direction and development, as well as complementary implementation and eBusiness services. A seasoned enterprise software professional with broad experience in customer support, product marketing and product development, Gary brings more than 15 years of management experience to his role at nuBridges. Prior to joining nuBridges, Gary served as Director of Product Management for ZapMedia, a technology company bringing customized entertainment to consumers, and Director of Product Marketing for Idapta, a builder of e-marketplaces. He spent over 10 years at Geac Computer Systems, Inc. (formerly Dun and Bradstreet Software and MSA) where he managed the development and marketing of leading edge technologies used by large and medium enterprises including customer, employee and supplier self-service applications for Fortune 1000 customers. He holds a Bachelor of Science degree in Computer and Information Sciences from the University of Florida and is a Certified Information Systems Security Professional (CISSP).

Michael Rodriguez

20 years experience as an information technology practitioner in the telecommunications, higher education, IT, publishing, transportation and banking industries. Has held leadership roles at IBM, Western Illinois University, Capital One, Wells Fargo, Compass bank, Donnelley, the Department of Defense and has taught technology classes at Bell Laboratories & the Illinois Institute of Technology. Michael Rodriguez’s Specialties: Executive experience building information technology organizations/programs and developing/reengineering business processes. An accomplished presenter and information technology strategist has a track record of enabling business initiatives based on his philosophy of providing solutions that protect the brand and are aligned to business objectives.

Greg Ross

As Principal Consultant, Technical Sales in the North Area for CA, Greg is part of the specialized Technical Sales Center of Excellence focused on Data Loss Prevention and advises prospective and current customers on an effective application of CA technology and best practices to prevent the loss of sensitive information. Greg joined CA through their strategic acquisition of Orchestria in January of 2009 where he played a leadership role in pre-sales and consulting services. Greg was actively involved in many of Orchestria’s largest implementations and facilitated the incorporation of customer requirements into new product capabilities.  Prior to joining Orchestria, he spent more than 15 years in the IT consulting industry with firms such as CSC Consulting and Diamond Management & Technology Consultants advising corporate clients on IT strategy and execution initiatives. Greg lives outside of Cleveland, Ohio with his wife and 3 kids.  In his spare time, Greg attempts to play golf and enjoys mountain biking.

Steve Sullivan

Steve Sullivan is the Director of Information Technology and Chief Security Officer for Central DuPage Hospital located in Winfield, IL, with convenient care centers and physician offices throughout DuPage County. Central DuPage Hospital is the third largest employer in DuPage County and has been named as a Top 100 Most Wired and Wireless Hospital by Hospital & Health Networks. Steve's role and responsibilities encompass information security, business continuity and disaster recovery. His broad background includes over 20 years in the IT industry from computer/software sales, technical support, programming, product development, change management, project management, IT team management and regulatory compliance issues regarding JCAHO, HIPAA and PCI.


Scott Tompkins

Scott Tompkins is a Security, Compliance and Continuity Planning professional with over 25 years experience.  He has been involved with security policy development, penetration testing, fraud analysis, disaster recovery planning and emergency response planning in many environments. Mr. Tompkins is a CISA (Certified Information Systems Auditor), CISSP (Certified Information Systems Security Professional), CIPP (Certified Information Privacy Professional), CISM (Certified Information Security Manager), and has passed the examination for the CBCP (Certified Business Continuity Professional). He is a member of ISACA and the Computer Security Institute and has presented papers at CSI, ISACA, Interop, HFMA, NetWorld, and many other national and international conferences. Mr. Tompkins has developed security policies and procedures for many organizations, conducted security audits and assessments, implemented security architecture, and designed and implemented Business Continuity Plans (and Disaster Recovery Plans) for a number of organizations.  He is currently the Director of Information Security for Williams Lea.

Marc Varner

With almost 15 years of security experience Marc has an excellent ability to balance the necessity to secure data, with the practical demands placed upon a business in today’s highly competitive marketplace. To this end he has teamed with peer groups and business side partners in building numerous programs that placed appropriate controls on assets according to their value and risk to a given organization. Drawing from experience in highly regulated organizations, Marc is familiar with the standards of regulatory bodies such as the SEC, FDIC, HIPPA, PCI and others and is adept at creating solutions which produce clear and demonstrative results. Marc has expertise in technical security architecture, program and budget management, technology and process risk management, audit and compliance, incident management and staff development. He is able to establish and leverage solid working relationships with key stakeholders to produce effective working relationships that encourage clear, open, and productive communications. Marc is an active member of the IAPP, ISACA and currently holds CISA, CISM, and CIPP certification

Steven Young
Steven Young is the Information Systems Security Officer for Rush University Medical Center.  His education includes a BA from
Loyola University and an MBA from the University of Notre Dame.  His technical security training includes the US National Security Agency (NSA) and the Defense Information Systems Agency (DISA).  Beyond his educational background, he has over 15 years experience in information security, disaster recovery, and crisis management.  Prior to working with Rush, he served as a managing security consultant for IBM helping clients in government and the financial industries.  He is an author of several industry trade journal articles on information security.  He is also a speaker at homeland security conferences on critical infrastructure protection (CIP).