
Insider Threat
The concept of "The Enemy Within" strikes fear into most. It violates the traditional rules of battle - threats being staved off by outward-facing defenses. However, the threat from within is real. Join industry experts as they discuss tactics to manage threats from inside the castle walls.
Insider Threat

Randy Trzeciak
Director, CERT Insider Threat Center, CMU
Trzeciak heads a team focusing on insider threat research, threat analysis and modeling, assessments and training. He has more than 20 years of experience in software engineering, focusing on database design, development and maintenance. In addition to his role with CERT, he is an adjunct professor at Carnegie Mellon's Heinz College, Graduate School of Information Systems and Management.

John Grim
Head | Research, Development, Innovation, Verizon Threat Research Advisory Center
John has over 17 years of experience investigating, and leading teams investigating, data breaches and cybersecurity incidents within the government and civilian security sectors. John is the creator and primary author of the Verizon Incident Preparedness and Response (VIPR) Report, the Insider Threat Report, and the Data Breach Digest.
Currently, John leads the Verizon Threat Research Advisory Center (VTRAC) Research, Development, and Innovation effort. In this role, he focuses on all aspects of cybersecurity incidents, performing digital forensic examinations, advising on data breach containment and eradication efforts, and creating data breach response preparedness training and breach simulation exercises for customers worldwide.
Prior to joining Verizon, John served 12 years with the U.S. Army investigating security-related incidents with eight years specifically focused on network intrusion investigations and forensic examinations. Using his knowledge and practical hands-on experience, John has provided cybersecurity advice, assistance, and formalized instruction to both technical and non-technical audiences. John has also authored or contributed to various policies, processes, procedures, and guides for incident response, evidence handling, and digital forensic examinations.

Randy Trzeciak
Director, CERT Insider Threat Center, CMU
Trzeciak heads a team focusing on insider threat research, threat analysis and modeling, assessments and training. He has more than 20 years of experience in software engineering, focusing on database design, development and maintenance. In addition to his role with CERT, he is an adjunct professor at Carnegie Mellon's Heinz College, Graduate School of Information Systems and Management.

Mark Bower
General Manager and CRO, Egress Technologies
Bower, who has two decades of experience at security companies in the U.S., Australia and the U.K., has expertise in data protection and information risk reduction. Before joining Egress, he headed product and business strategy for Voltage Security.

Randy Trzeciak
Director, CERT Insider Threat Center, CMU
Trzeciak heads a team focusing on insider threat research, threat analysis and modeling, assessments and training. He has more than 20 years of experience in software engineering, focusing on database design, development and maintenance. In addition to his role with CERT, he is an adjunct professor at Carnegie Mellon's Heinz College, Graduate School of Information Systems and Management.

Anne-Marie Scollay
CISO, Axiom Law
As CISO for Axiom Law, Anne-Marie Scollay leads the information security strategy for Axiom's products/services, corporation, and governance risk and compliance (GRC). She specializes in building teams for mission critical systems and seamlessly bridging the languages of technology and business. With over 20 years' experience in technology and logistics, Scollay has a passion for operational excellence and a knack for thinking strategically. Prior to joining Axiom, she built-out and oversaw the infrastructure and security for a Seattle-based SaaS startup and global multi-nationals. Scollay has overseen security for high-availability sites and applications, provided thought leadership around information security and is a respected leader with a proven ability to coach teams to excellence.

Randy Trzeciak
Director, CERT Insider Threat Center, CMU
Trzeciak heads a team focusing on insider threat research, threat analysis and modeling, assessments and training. He has more than 20 years of experience in software engineering, focusing on database design, development and maintenance. In addition to his role with CERT, he is an adjunct professor at Carnegie Mellon's Heinz College, Graduate School of Information Systems and Management.

Maggie Calle
Associate Vice President, Security Governance and Risk Management, Sun Life Financial
Maggie Calle currently serves as the Associate Vice President, Security Governance and Risk Management at Sun Life Financial. She has 20+ years of experience in the financial and insurance sector having worked at BMO, Amex, CIBC, Aviva and Scotiabank. Her specializations include: customer/employee identity and access management, application security, vulnerability management, endpoint protection, network security, data loss prevention, disaster recovery, business continuity planning, policy/standards, security advisory, training and awareness.

Michael Theis
Chief Counterintelligence Expert, Carnegie Mellon University CERT Insider Threat Center
Theis is chief counterintelligence expert at Carnegie Mellon's CERT Insider Threat Center. Theis has more than 25 years of experience as a counterintelligence supervisory special agent supporting the U.S. intelligence community, and more than 30 years of concurrent computer systems engineering experience. At Carnegie Mellon's CERT Insider Threat Center, Theis focuses on research and development of socio-technical controls in computational endoparacology. Previously, he was the first cyber counterintelligence program manager for the National Reconnaissance Office, where he served as chief of cyber-CI investigations and operations for more than six years.

Randy Trzeciak
Director, CERT Insider Threat Center, CMU
Trzeciak heads a team focusing on insider threat research, threat analysis and modeling, assessments and training. He has more than 20 years of experience in software engineering, focusing on database design, development and maintenance. In addition to his role with CERT, he is an adjunct professor at Carnegie Mellon's Heinz College, Graduate School of Information Systems and Management.
Best Practices for Mitigating the Insider Threat
Session In Development •
Sergio Gramaca - Novo Banco • •
Preview this Session
Sergio Gramaca
Chief Inspector, Fraud Risk Inspection and Monitoring, Novo Banco

Randy Trzeciak
Director, CERT Insider Threat Center, CMU
Trzeciak heads a team focusing on insider threat research, threat analysis and modeling, assessments and training. He has more than 20 years of experience in software engineering, focusing on database design, development and maintenance. In addition to his role with CERT, he is an adjunct professor at Carnegie Mellon's Heinz College, Graduate School of Information Systems and Management.

Randy Trzeciak
Director, CERT Insider Threat Center, CMU
Trzeciak heads a team focusing on insider threat research, threat analysis and modeling, assessments and training. He has more than 20 years of experience in software engineering, focusing on database design, development and maintenance. In addition to his role with CERT, he is an adjunct professor at Carnegie Mellon's Heinz College, Graduate School of Information Systems and Management.

Randy Trzeciak
Director, CERT Insider Threat Center, CMU
Trzeciak heads a team focusing on insider threat research, threat analysis and modeling, assessments and training. He has more than 20 years of experience in software engineering, focusing on database design, development and maintenance. In addition to his role with CERT, he is an adjunct professor at Carnegie Mellon's Heinz College, Graduate School of Information Systems and Management.

Jeannette Jarvis
Director, Product Marketing, FortiGuard Labs
Jarvis has been a thought leader and respected advisor in cybersecurity for more than 20 years. With experience in business & technical strategy, product management and marketing, and global executive management, she has held numerous positions at well known companies in the IT and cybersecurity space. Jeannette is a distinguished speaker on a wide range of security security protection topics. She spoke at many prominent security conferences including RSA and Gartner Security Summit. Her published papers showcase her knowledge and expertise on various security issues encountered in the global corporate environment.

Christopher Greany
Managing Director, Head of Group Investigations and Insider Threat Program, Barclays
Managing Director Christopher Greany is the head of Group Investigations at Barclays. Working as part of the Chief Security Office (CSO) he leads the strategic implementation and delivery of investigations across Barclays international footprint. He is also responsible for the Barclays Global Insider Threat Programme and cyber forensics capability. The CSO team is tasked with providing a holistic security footprint across all of Barclays international operations. Before joining Barclays Christopher had a policing career spanning over 30 years. His last role was leading the UK and international policing response to Economic Crime and Cyber Protection as Commander in the City of London Police. Previously he led the National Police Coordination Centre, coordinating the UK policing response to national and international crisis and disaster. He has extensive international experience and has led the response to a number of significant events and investigations impacting UK interests abroad.
Session Contributors
Managing Director, Head of Group Investigations and Insider Threat Program, Barclays
Read BioFormer Head of Airborne Platform Systems Cyber Security, Lockheed Martin Aeronautics
Read BioChief Engineer, The MITRE Corporation, and Senior Cybersecurity Engineer, National Cybersecurity Center of Excellence at NIST
Read BioInsider Threat Researcher, Carnegie Mellon University CERT Insider Threat Center
Read BioCo-Lead, Cybersecurity Preparedness and Response practice, Alston and Bird, and Former DOJ Cybercrime Prosecutor
Read BioAssociate Vice President, Security Governance and Risk Management, Sun Life Financial
Read BioChief of the Policy and Accreditation Branch for the Space and Missile Defense Command (SMDC)
Read BioChief Counterintelligence Expert, Carnegie Mellon University CERT Insider Threat Center
Read Bio