ISE® Central 2014

Information Security Executive of the Year Awards

The ISE® Central Executive Forum and Awards 2014 were held on June 11, 2014 at the Sheraton Downtown Hotel in Dallas, TX. The Forum includes keynote speakers, interactive roundtables moderated by the CISOs and VPs of participating companies, and hot topic panel discussions. The one day program offers the opportunity to meet with peers and leading IT executives from across the region to discuss and share insights into today's issues and solutions.

The ISE® Central Awards are held in conjunction with a one day Executive Forum which includes keynote speakers, interactive roundtables moderated by the CISOs and VPs of participating companies, and hot topic panel discussions. The one day program offers the opportunity to meet with peers and leading IT executives from across the region to discuss and share insights into today's issues and solutions.

ISE® Central Executive of the Year Award Winner 2014

Brian Engle

Brian Engle
Chief Information Security Officer
State of Texas

ISE® Central Project Award Winner 2014

USAA
Next Generation Identity & Access Management
Executive Sponsor: Jack Key, Chief Information Security Officer & Privacy Officer, USAA
Project Team: BJ Hicks, Patrick Landry, Bradley Machicek, Paul Manz, Brandon Esplin, Randy Jenschke, Carla Rosas, Rudy Castro, Charles Smith, Ruth Shropshire, Christina Marin, Sherry Rakowitz, David Allen, Tammy O’Neal, Diana Teneyuca, Tim Crawford, Elizabeth Williams, Estevan Perez, Gary Pullen, Jediah Logiodice, Jeff Lewis, Jeff Speer, Laura Moran, Letty Sifuentes, Lionel Franklin, Marcie Swonson, Maria Flack, Martin Palmer, Michael Morris, Michael Wood, Pamela Strzelczyk
Location: San Antonio, TX

The Next Generation Identity & Access Management (NexGen IAM) Program is comprised of more than 30 complex interdependent projects aimed at efficiently enabling USAA’s business while creating a world class secure access management capability that meets the needs of USAA’s dynamic and growing business. The projects are developed and deployed by a dedicated highly skilled IAM Information Security team (with integrated IT and Consultant support) in an agile infrastructure development lab. The program has delivered on-time and on-budget since 2011. NexGen IAM projects are delivering exceptional security and business results aligned with the goals of the effort and the mission of the company.

ISE® Central People's Choice Award Winner 2014

Jason Witty

Jason Witty
Senior Vice President,
Chief Information Security Officer
U.S. Bancorp
Naperville, IL

ISE® Central Executive Award Winner Finalists 2014

Shawn Irving

Shawn Irving
Senior Manager of Information Security Services
Southwest Airlines



Scott Pettigrew

Scott Pettigrew
Chief Security Officer
HMS
Irving, TX


ISE® Central Project Award Finalists 2014

Principal
IT Risk Management Framework
Executive Sponsor: Meg Anderson, AVP & CISO, Principal Financial Group
Project Team: Anita Hartman, Tim Peterson, Kim Herren, Loren Long, Mark Vernon, Abby Martin, Deidre Lane, Terri Poortinga and Eric Ware.
Location: Des Moines, IA

A variety of disparate tools and manual processes had been used to accomplish critical Information Security functions including: managing security policy/related variances, security assessments, supplier security profiles, compliance reporting. This resulted in uncorrelated data and an inability to cohesively report risk. The manual processing wasted time, and it was difficult for businesses to know where to initiate and monitor progress of our services. We implemented an IT Risk Management Framework to ensure data is stored in a single location and to provide cohesive reporting. The solution incorporates a workflow process, which streamlines submissions, eliminates manual work and enables better tracking.



C.N.A.
CNA’s Enterprise Risk Register – Enterprise Adoption
Executive Sponsor: Robert Allen, VP, Service Management & CISO, CNA
Project Team: Mark Verheven, Larry Lidz, Greg Allen, John Sternberg
Location: Chicago, IL

The adoption rate of CNA’s Enterprise Risk Register has reached a tipping point, and is full embraced by the Enterprise Risk Management group as the de-facto risk repository and reporting tool for the company. The multi-tier risk register comprises a holistic risk management solution, directly tied to the new enterprise risk hierarchy, providing end-to-end risk information management from the detailed operational aspect to the balanced aggregate executive view. Each tier of the risk register offers the ability to fully evaluate risk components, substantiating the risk statements. The register is continuously active through ongoing evaluation of risk control effectiveness.