Southern New Hampshire University
Academic Center
2500 N. River Road
Manchester, NH 03106

OWASP Assessments: From Overview to Testing

A walk though of the OWASP (Open Web Application Security Project) Framework, the fundamental and progressive evaluation tool for web-facing servers referenced in PCI evaluations.

·         Overview - OWASP and Free Resources Available

·         Walkthrough – The OWASP Principles and Assessment Tool

·         Navigate - Assessment Choices and Tool Options: Light Scan or Heavy Pen Test?

(Break / Exit Opportunity)

·         Detailed Q&A Discussion of Tests or Mechanics of Assessment Tool

Why attend?

OWASP is helpful for every organization who wants customers to feel safe using their website.

Who should attend?

The “Onion Skin” approach to the class presents the information:

- first as a summary for executives planning for audits and staffing

- then to managers who will need to provide guidance to staff on how to use the tools

- and for those who wish to stay for the second half, practitioners will drill down together in a facilitated forum to cross-share experiences found valuable in tackling different tests.

Kimberley Laris, CIA, CISA, CISSP

Kimberley Laris is the founder of the Positive Assurance brand, providing Quality Governance Advisory Services for audit directors and audit committees, and concurring SAS 70 quality assurance reviews for CPA firms. She instructs CIA certification courses and leads Quality Assurance Reviews for the IIA, including SAP, Alcoa, The American Cancer Society, Emerson, and JC Penney. Her prior internal audit experience was gained at Fleet Bank, Eastman Kodak, and Ernst & Young - covering an extensive variety of financial, compliance, and IT topics. She is dedicated to sharing audit process effectiveness and efficiency practices, and streamlined the Timberland Company’s SOX IT efforts. She was the Audit Director for Rochester Institute of Technology for 5 years, where she developed momentum for IT security curriculum and capabilities, and taught a volunteer CISA review course. She is currently an Adjunct Professor, developing a distance learning program: “Internal Control and Auditing”.

Click HERE for Directions