Washington Speaker Series: Speakers

Privacy & Security: Examining Enhancing Technologies and Emerging Policies


Panel Moderator
Pradeep K. Khosla
Dean of the College of Engineering
Carnegie Mellon University

Guest Speaker
Earl Crane, CISSP, CISM
Chief Information Security Architect
Department of Homeland Security


Panel

E. Regan Adams, Esq., CIPP

Marc Rotenberg
Executive Director
Electronic Privacy Information Center

Lorrie Cranor
Associate Professor
Carnegie Mellon University

Reg Foulkes
Chief Privacy Officer
Global Security Solutions

Jody R. Westby
CEO
Global Cyber Risk, LLC


Speaker Biographies

E. Regan Adams, Esq., CIPP

Regan Adams is former Assistant Privacy Counsel and Counsel of Legal and Regulatory Retention for Goldman Sachs. Her specialization is Information Law and Risk Mitigation Strategies. Adams develops and shapes policy and strategic solutions for privacy/ data security, legal and regulatory retention, and other data risk-related challenges that face global organizations. She advises on reasonable, defensible and innovative practices that fully leverage technology and business process to produce a fundamental risk managed approach. A former prosecutor and trial attorney, her experience includes SEC investigations, complex securities litigation, and global regulatory and discovery matters. Adams was also lead e-Discovery Counsel for JP Morgan Chase, Director of Data Governance for Navigant Consulting, and Director and In-House Counsel for Credit Suisse. She is a Certified Information Privacy Professional (CIPP).

She has been an active member of the Securities Industry Financial Markets Association (“SIFMA”) Privacy Working Group, the SIFMA E-Records Sub-Committee, The Sedona International Working Group, The International Association of Privacy Professionals (“IAPP”) and is a Senior Advisor to the Financial Services Technology Consortium (“FSTC”). Adams has also worked with the ANSI/ISA publication review team on “The Financial Impact of Cyber Security" and is an advisory board member to the INCITS Study Group on Security Best Practices. She has published articles in the area of information law and data risk, and speaks on related topics at industry events.


Marc Rotenberg
Executive Director
Electronic Privacy Information Center

Marc Rotenberg is Executive Director of the Electronic Privacy Information Center (EPIC) in Washington, DC. He teaches information privacy law at Georgetown University Law Center and has testified before Congress on many issues, including access to information, encryption policy, consumer protection, computer security, and communications privacy. He testified before the 9-11 Commission on "Security and Liberty: Protecting Privacy, Preventing Terrorism." He has served on several national and international advisory panels, including the expert panels on Cryptography Policy and Computer Security for the OECD, the Legal Experts on Cyberspace Law for UNESCO, and the Countering Spam program of the ITU. He chairs the ABA Committee on Privacy and Information Protection. He is a founding board member and former Chair of the Public Interest Registry, which manages the .ORG domain. He is editor of The Privacy Law Sourcebook and co-editor (with Daniel J. Solove and Paul Schwartz) of Information Privacy Law (Aspen Publishing, 2006). He is a graduate of Harvard College and Stanford Law School. He served as Counsel to Senator Patrick J. Leahy on the Senate Judiciary Committee after graduation from law school. He is the recipient of several awards, including the World Technology Award in Law.


Earl Crane, CISSP, CISM
Chief Information Security Architect
Department of Homeland Security

Earl Crane is the Chief Information Security Architect for the Department of Homeland Security, located in Washington, DC. He is responsible for developing and implementing the DHS Department-wide Information Security Architecture in support of the DHS Security Operations Center, DHS Enterprise Architecture, and DHS Information Security Program. He is the DHS Information Security Program principal for all issues and questions relating to information security architecture, interoperability and configuration of security features and services within DHS.

Previously Crane was a Senior Information Security Consultant with Foundstone, Inc.  There he created and led the Information Security Management program for multiple Fortune 500 clients. Crane was also a trainer for Foundstone’s Ultimate Hacking course, where he taught students in both federal agencies and private industry, both in the United States and abroad.

He is a contributing author of multiple books, including “SPECIAL OPS: Host and Network Security for Microsoft, UNIX and Oracle.” He is also an adjunct professor in the Carnegie Mellon University H. John Heinz III School of Public Policy & Management.

Crane earned a Bachelor of Science in Mechanical Engineering with a minor in Robotics from Carnegie Mellon University. He also earned his Masters of Information System Management at Carnegie Mellon, specializing in Information Security and graduating with honors of “Highest Distinction.” Currently he is pursuing a PhD in information security management from George Washington University.


Lorrie Faith Cranor
Associate Professor
Carnegie Mellon University

Lorrie Faith Cranor is an Associate Professor of Computer Science and Engineering and Public Policy at Carnegie Mellon University where she is director of the CyLab Usable Privacy and Security Laboratory (CUPS).

She is also Chief Scientist of Wombat Security Technologies, Inc. She has authored over 80 research papers on online privacy, phishing and semantic attacks, spam, electronic voting, anonymous publishing, usable access control, and other topics. She has played a key role in building the usable privacy and security research community, having co-edited the seminal book Security and Usability (O'Reilly 2005) and founded the Symposium On Usable Privacy and Security (SOUPS). She also chaired the Platform for Privacy Preferences Project (P3P) Specification Working Group at the W3C and authored the book Web Privacy with P3P (O'Reilly 2002). She has served on a number of boards, including the Electronic Frontier Foundation Board of Directors, and on the editorial boards of several journals. In 2003 she was named one of the top 100 innovators 35 or younger by Technology Review magazine. She was previously a researcher at AT&T-Labs Research and taught in the Stern School of Business at New York University.


Reg Foulkes
Chief Privacy Officer
Global Security Solutions

Reg Foulkes is the Chief Privacy Officer, Global Security Solutions (GSS), a horizontal business unit which provides IT Security and Risk Management services to Computer Sciences Corporation (CSC) and its global client base. He follows and advises on evolving privacy regulations and best practices as well as current and emerging technologies in all areas of privacy management.

Prior to that, he was Chief Technology Officer of GSS. Foulkes previously held positions as Director Security Nortel Network where he managed the security infrastructure for Nortel Networks, worldwide across 6 continents, 325-plus locations with 150-plus people.  Foulkes joined CSC in 2003, and holds holds a BA from Ottawa University and Dipl T. from Loyalist College.


Pradeep K. Khosla
Dean of the College of Engineering
Carnegie Mellon University

Pradeep K. Khosla is Dean of the College of Engineering, Philip and Marsha Dowd University Professor in the College of Engineering and School of Computer Science, and Founding Director of CyLab at Carnegie Mellon. His previous positions include: Head of Electrical and Computer Engineering; Director, Information Networking
Institute; Founding Director of  the Institute for Complex Engineered Systems; and Program Manager at Defense Advanced Research Projects Agency (DARPA),
where he managed a $50M portfolio of programs in real-time systems, internet enabled software infrastructure, intelligent systems, and distributed systems.

Khosla is a consultant to companies and venture capitalists and has served on the technology advisory boards of many start-ups and currently serves on several
advisory boards including Iron Leaf Capital Corporation, iNetworks LLC, ITU Ventures, and Alcoa CIO’s Advisory Board. He is a member of the Board of Directors
of Quantapoint Inc., BitAromor Inc., the Children’s Institute, the IIT Foundation, Mellon-Pitt (MPC) Corporation, the Pittsburgh Tissue Engineering Initiative (PTEI),
Doyle Center, and Pittsburgh Technology Council. He is a member of the IT advisory committee, CSIRO, Australia, and a member of ITU High Level Experts Group for the Global Cybersecurity Agenda (GCA). He has served as a member of the Strategy Review Board for Ministry of Science and Technology, Taiwan; Council of Deans of the Aeronautics Advisory Committee, NASA; National Research Council Board on Manufacturing and Engineering Design; and Senior Advisory Group for the DARPA Program on Joint Unmanned Combat Air Systems.


Jody R. Westby
CEO
Global Cyber Risk, LLC

Drawing on more than twenty years of technical, legal, policy, and business experience, Jody Westby brings a seasoned, multidisciplinary perspective to the many issues facing businesses and governments in the areas of privacy, information security, outsourcing/offshoring risks, cybercrime, and e-discovery.  She consults with governments, private sector executives, and operational personnel on the development of enterprise security programs that dovetail the technical, legal, operational, and managerial considerations. She has helped multinational corporations develop enterprise security approaches to e-discovery that enables them to respond to discovery requests, develop litigation strategies, and deflect attempts by opposing parties to obtain access to their systems.  She has helped companies weave e-discovery considerations into security programs to enable them to rapidly locate data, ensure its integrity, and resolve technical issues. Her teams of forensic experts work with some of the world’s largest corporations in managing breaches, investigating cyber security incidents, and providing forensic support to litigation teams. Prior to forming Global Cyber Risk, Westby served as senior managing director for PricewaterhouseCoopers, specializing in outsourcing and cyber security/privacy issues. Before that, she launched an IT solutions company for the CIA, managed the domestic policy department for the world's largest business organization, was senior fellow and director of IT studies for one of the nation's leading think tanks, practiced law with two top-tier New York firms, and spent ten years in the computer industry specializing in database management systems.