David J. Ernst, CIO/Assistant Vice Chancellor, California State University, Office of the Chancellor

David J. Ernst is the Chief Information Officer (Assistant Vice Chancellor for Information Technology Services) for the California State University (CSU.)  He provides information technology leadership for the 23-campus, 420,000 student CSU system.  Major activities currently underway in his portfolio include eight key academic technology initiatives, the final phases of implementation for higher education’s largest ERP project, and a comprehensive systemwide network infrastructure installation.

David serves as Board Chair of the IMS Global Learning Consortium, Board Vice Chair of the Corporation for Educational Networking Initiatives in California (CENIC,) is a member of the MERLOT Board, and recently completed five years as a faculty member of the EDUCAUSE/CAUDIT Australian Management Institute.  He also serves as a member of the Oracle CIO Global Advisory Board and the BlackBoard Client Strategy Council.

He has contributed to CAUSE, EDUCOM, and EDUCAUSE in a variety of roles in the past two decades.  David was a founding member of the EDUCAUSE Institute, serving on the faculties of both the Leadership and Management programs from 1990 through 2000.  He also served as the Director of the SAC Executive Seminar from 1996-2003.

Prior to joining the CSU in 1995, David was a senior manager in Coopers & Lybrand’s Higher Education Consulting Group.  Over the past thirty years he has held senior management and information technology positions at UC San Diego, Stanford University and UC San Francisco.  He holds Bachelor’s Degrees in Political Science and Rhetoric and a Juris Doctor Degree from the University of California at Davis.

Keynote Address: "Information Security in the CSU--On the Scoreboard, but Still Playing Catch Up"

Charlie Moran, Sr. Partner, Moran Technology Consulting
Charlie Moran is a Sr. Partner with Moran Technology Consulting, leading its efforts in the Education and Public Sector industries.   His areas of expertise include strategic planning, security management, change management, organizational assessment, processing re-design, information technology planning, project management, data center management, ERP systems and custom development planning.  He has led engagements at a variety of U.S. and international clients in working through the issues associated with improving the alignment of strategic goals and outcomes with transformed organizations, business processes and information technology investments.

Keynote Address: " Security Wars 2008 - Observations from the Front Lines "

This presentation discusses an emerging set of IT Security challenges that are enabling a wide series of security exposures at institutions across the country. It also discusses potential strategies for addressing some of them. This presentations is based on a series of IT Security Assessments that have been done at all sizes of higher education institution, as well as at a few commercial organizations across the U.S.

  Jon Green, Sr. Product Manager, Aruba Networks

Jon Green, CISSP, is a senior product manager for Aruba Networks with primary responsibility for Aruba's flagship software uite, ArubaOS. With more than 15 years of experience in design, operation, consulting, and product development in the internetworking space, his current interests are focused on the next generation of mobile network technology that will more effectively connect people with information. Jon has published numerous papers and speaks often on topics including mobility, wireless, and network security. Prior to joining Aruba in 2003, his experience included a variety of technical consulting and engineering positions at companies including Bay Networks, Shasta/Nortel Networks, Atrica, and Foundry Networks. He holds a BS in Information Technology from Western Governor's University, is a licensed commercial pilot, and has produced a number of award-winning wines.

Keynote Address: "Wireless Security:  What Works and What Doesn't"

Wireless LANs have exploded in popularity over the past several years. Once confined to specialized applications and to onsumer equipment, 802.11 wireless LANs are now increasingly making their way into the enterprise space.  But with much more at stake, how can network managers ensure that wireless doesn't weaken security?  Many recommended security techniques for residential wireless LANs are inappropriate or ineffective for enterprise deployments.  This presentation explores what works and what doesn't, with an emphasis on explaining the newest wireless security standard, 802.11i.

  Colleen Pedroza, State Information Security Officer, California State Information Security Office

Unfortunately, Ms. Pedroza had to cancel her appearance.  Ms. McNabb will be the sole presenter of this topic.

Colleen Pedroza is California's State Chief Information Security Officer. She has been in State service for many years and has a strong background in information security, serving as an Information Security Officer for two different state agencies. She has 20+ years of service in the information technology field; and has served at the management level for the past nine years. Colleen has a bachelor's degree in information systems and her background also includes efforts in operational recovery planning, risk management, project management and training. She has held the State Chief Information Security Officer position since August 2006.

  Joanne McNabb, CIPP/G Chief, California Office of Privacy Protection

Joanne McNabb is Chief of the California Office of Privacy Protection (www.privacy.ca.gov). Created by legislation and opened in 2001, the first-in-the-nation Office is a resource and advocate on identity theft and other privacy issues.  In addition to providing information and education for consumers, the Office also publishes privacy practice recommendations for business and other organizations.

McNabb is a Certified Information Privacy Professional and is co-chair of the International Association of Privacy Professionals’ Government Working Group. She also serves on the Privacy Advisory Committee to the U.S. Department of Homeland Security. She is a frequent speaker at privacy conferences and seminars.

Before starting the Office of Privacy Protection, McNabb had over 20 years experience in public affairs and marketing, in both the public and private sectors, including five years with an international marketing company in France.  Her marketing background gives her an understanding of the commercial uses of personal information that have become a significant privacy concern.

McNabb attended OccidentalCollege and holds a master’s degree in Medieval Literature from the University of California, Davis.

Keynote Address: "The New Harmonic Convergence: A Holistic Approach to Information Management"

Leading organizations are beginning to take a new approach to managing their valuable information assets. By teaming up privacy officers, information security officers, compliance officials, intellectual property attorneys, records management experts, the CIO, and others with responsibilities for information and information systems, these organizations are finding that they can achieve efficiencies and increased effectiveness. Information security and privacy professionals often find themselves having to explain their roles and how they are distinguished from each other.

Some forward-looking private and public sector entities are taking a new approach to protecting privacy and protecting the organization’s information assets and its reputation. Realizing that they have several different components throughout the organization who are responsible for protecting and managing the information that is life blood of the  organization, they are bringing those players together onto one team. This allows them to develop a comprehensive program that addresses personal information, IT infrastructure, intellectual property, and other confidential information. Not only can this holistic approach to governance result in more strategic policy making, but it can also provide greater efficiencies.