Professional Services Proposal - Criminal Justice Information Security Compliance Gap Assessment

Home Browse Search

Proposal to Provide CJIS Gap Assessment City of South Bend Crowe has been involved a number of other presentations, some examples include: • "Anatomy of a Breach" at the University of Texas at Dallas Fraud Conference in 2016 • "The Three Lines of Defense" at North American CACS in 2016 • "Forensics Investigations" at the University of Texas at Dallas Fraud Conference in 2015 • "Network Security Trends" at the AICPA National Conference in 2014 • "Anatomy of a Breach" at the San Francisco ISACA Fall Conference in 2014 • "Penetration Testing: Lessons Learned" for the Texas Bankers Association in 2014 • "CyberSecurity Trends" at the 2013 American Bankers Association National Convention • Presentations on Penetration Testing and Business Continuity at ISACA's Geek Week Collegiate Cyber Defense Competition The Collegiate Cyber Defense Competition is an event held annually to assess an institutions student's depth of understanding and operational°�r rti. competency in managing the challenges inherent in protecting a 01011 E adr, ITT corporate network infrastructure and business information systems. The C,YHEPit SE competition is structured to score University's "Blue Team" Defense ('011 �'yll p Y (Defense) � ��,��rr�-� a ui IHm+S ability to defend their environment against a simulated hack coordinated by the "Red Team" Professional Penetration Testers. Crowe Cybersecurity Consultants have been invited to participate on the Red Team for the following contests: • Nationals (2018, 2017) • Mid -West Region (2013 - 2017) • Northeast Region (2017, 2013, 2011, 2010) • Southwest Region (2017) Crowe has invested a significant amount of research and development time into becoming a forefront industry leader in Information Security. Our technology risk professionals have in-depth knowledge not only of the industry standards for Information Security, but also the practical implementation of these standards in accordance with business processes and drivers. Tool Development A continuous development and review process is facilitated to ensure that clients are receiving the best of breed tool suites; whether commercial, in-house developed, or publicly available. A sample of the tools that Crowe has contributed to the Information Security community include: • cm-directory-enum (2018) • echidna (2017) — Presented at DerbyCon • SmuggleBus (2017) — Presented at Blackhat & DerbyCon • ad-Idap-enum (2016) • Go-SSHscan (2016) • Cracklord (2015) — Presented at Blackhat • RavenHID (2014) - Presented at DerbyCon • Share-Enum (2013) — Presented at DEFCON Crowe recognizes that highly technical engagements such as Penetration Testing and IT Forensic Assessments require significant investments of both key personnel and resources. In identifying this requirement, Crowe has not only created a dedicated Cybersecurity team, but also focused that team to establish the Crowe Center for Cyber Security. This Center serves as a foundation in technology assessment services, ensuring that our team stays on the cutting edge of the security field. &> I019 Crowe LLP ewww.rrow¢:,com