Hi, this is Dawn Cappelli, Director of the CERT Insider Threat Center. The RSA Conference is rapidly approaching, and since many of you will likely be there, I thought I'd let you know how to find us there. Also, if you would like to get together to discuss insider threat while you're there please email us at insider-threat-feedback@cert.org this week and we'll make arrangements to meet.

Please stop by CERT booth #2059 and check out everything offered by the Software Engineering Institute and the CERT Program. We also will have two book signings for our insider threat book, The CERT Guide to Insider Threats. Randy Trzeciak will be there on Tuesday from 11:10 to 11:40 AM and I will be there on Thursday from 11:00 to 11:30 AM.

Here is a summary of CERT Insider Threat events at RSA:

Insider Threat Study: Illicit Cyber Activity Involving Fraud in the U.S. Financial Services Sector
Monday, Feb 25, 2013
Presented by Randy Trzeciak of the CERT Insider Threat Center and Ed Cabera of the USSS
This work, sponsored by DHS Science & Technology, will be part of the RSA Conference eFraud Global Forum. Because of the expected high interest in the topic, the presentation will be held twice during the forum: 11:30 AM and 3:15 PM.

HT-R32: Intriguing Insider Threat Cases - Make Sure This Doesn't Happen to You!
Thursday, Feb 28, 2013 @ 9:20 AM in Room 135
Presented by Dawn Cappelli, Technical Manager of the CERT Insider Threat Center
Abstract: Chances are your employees, contractors or business partners could misuse your systems with criminal intent. We collected over 800 insider threat cases for the past 12 years. This session details the most intriguing cases--some present unique mitigation challenges; others had serious results and can provide lessons learned. There will also be recommendations for mitigating these threats.

STU-R37A: Studio: Intriguing Insider Threat Cases - Make Sure This Doesn't Happen to You!
Thursday, Feb 28, 2013 @ 3:40 PM in Room 300
Presented by Dawn Cappelli, Technical Manager of the CERT Insider Threat Center
Abstract: Chances are your employees, contractors, or business partners could misuse your systems with criminal intent. We collected over 800 insider threat cases for the past 12 years. This session details the most intriguing cases--some present unique mitigation challenges; others had serious results and can provide lessons learned. There will also be recommendations for mitigating these threats.

Other CERT presentations include the following:

SEM-004: Advancing Information Risk Practices Seminar (Half Day - Delegates only)
Monday, Feb 25, 2013 @ 1:00 PM in Room 302

GRC-F42: Cybersecurity SLAs: Managing Requirements at Arm's Length
Friday, Mar 1, 2013 @ 10:20 AM in Room 133

Don't forget to email us at insider-threat-feedback@cert.org this week arrange to meet with us.