NEWS & PRESS RELEASES

In The News


ARM User Conference
Sept. 24-27, 2007

William Tang, Founder and CEO of Digital Security Consulting, Inc., will be a presenter at the ARM User Conference 2007.


http://www.logicacmg.com/ARM_User_Conference/350236152

 

 

9-05-2007 IT Compliance Magazine

Control of systems falls under engineering

From an organizational management perspective, SCADA & EMS systems have been managed by engineering groups as opposed to IT. States William Tang, CEO of Digital Security Consulting, an information security consulting company in Los Angeles, “We often see industry best practices implemented at our clients, but the SCADA & EMS are not included in the IT management area and therefore the security policies, processes and technical controls are excluded from those systems. While the CIP will address this issue directly, many of our clients have discovered that they need to implement security from the ground up from these business units that have been excluded from IT in the past.”

Vendors do not support security on their systems

As William Tang notes, “several vulnerabilities have been publicly disclosed and yet nothing has been done to mitigate them. Our clients have been forced to implement controls around the vulnerabilities along the perimeter, rather than addressing the actual vulnerability.”

 

 

Homeland Security for Networked Industries (HSNI)
2006 Conference & Expo

William Tang, Founder and CEO of Digital Security Consulting, Inc., will be a featured speaker at the HSNI 2006 Conference.


http://www.hsni2006.com/index.htm

 


5-16-2002 Eweek

"Preventive medicine is so much better than reactive," said Will Tang..."If you
can see something before it hits your network, you're in a much better
position."

An interview with ABCNews.com

"It would still be fairly difficult [to] break in and jump through different switches," says William Tang, chief executive officer of Digital Security Consulting, an Arcadia California company that advises the electric power-generation industry. "There are some process controls, if you decide to throw all 500 switches that control the power in Southern California, it could alert a human before it does that."

 

 

Past Events


ISACA Orange County Presentation
Octber 2004

MEETING TOPIC: Securing Wireless Technologies for the Enterprise
William Tang, CEO, Digital Security Consulting

As demand and deployment of wireless networking continues to increase, enterprises are coming to the realization of the lack of security maturity in vendor products and internal processes. IT audit and security teams must be ready with a comprehensive and layered approach to securing wireless technology. This session will focus on demonstrating how wireless security controls can be bypassed and provide vendor agnostic security and IT audit solutions to protect the enterprise. The topics will include:

1. Demo of wireless 'war driving' and exploit of security controls
2. Best practices for security wireless technology
a. People – Security Awareness, Training and Standards
b. Process – Compliance Verification and Internal Controls
c. Technology – Authentication, Encryption and Other Controls
3. Sample audit of wireless network (including sample documentation)

 

ISACA Los Angeles Presentation
July 2004

MEETING TOPIC: Securing Wireless Technologies for the Enterprise
William Tang, CEO, Digital Security Consulting


As demand and deployment of wireless networking continues to increase, enterprises are coming to the realization of the lack of security maturity in vendor products and internal processes. IT audit and security teams must be ready with a comprehensive and layered approach to securing wireless technology. This session will focus on demonstrating how wireless security controls can be bypassed and provide vendor agnostic security and IT audit solutions to protect the enterprise.

 

ISACA Los Angeles Presentation

William Tang, Founder and CEO of Digital Security Consulting, Inc., provided an introduction to Intrusion Detection Systems (IDS). IDSs are critical tools for protecting the enterprise. However, like any other security tool we must understand its abilities and limitations to fully leverage the benefits of IDS. Covered in his session:
--The definition of an IDS
--Types of IDS solutions (e.g., network vs. host, protocol vs. signature-based)
--What you need to do before buying or implementing IDS solutions
--Examples of IDS architecture

 



E-security for the Electric Power Industry
October 28 - 29, 2002 Chicago, IL

CBI’s timely “Electronic Security for the Electric Power Industry” conference to presented insights on the key challenges facing utilities when implementing electronic security practices, namely; making the business case for security investments, strengthening SCADA systems, securing web applications and protecting networks, applications, data and physical locations.

Speakers from AEP, IDACORP/Idaho Power, EnCana Corporation, BC Hydro, Ontario Power Generation, SRP, CAISO, NERC, the National Infrastructure Protection Center, FBI InfraGard and the DOE’s Office of Energy Assurance, among others, discussed the challenges of electronically protecting one of the nation’s most critical infrastructures.