Real World Cyber Security Knowledge for Your Business and How to Apply it

Ben Finke is a managing partner and director of information security operations and management at OnDefend. OnDefend is a leading national provider of preventative cyber security testing services and solutions. OnDefend protects its clients from successful cyber-attacks by providing the testing and tools they need to decrease their vulnerable IT surface area thereby improving their overall security posture.

Ben has over 15 years of experience in running and managing enterprise scale security programs. Ben has spent his career in multiple leadership roles in information security, including running a security practice for a managed services provider. In this role, Ben provided security consulting and day-to-day network defensive operations for dozens of organizations, from Fortune 500 companies to Software-as-a-Service providers to US Government organizations.

Ben also founded the assessment practice for several national service providers, delivering PCI QSA and other compliance audit services, as well as vulnerability management, network penetration testing, and web application security testing. Ben has also implemented threat management and security testing programs at over a dozen large organizations, developing solutions to provide a safe and resilient enterprise.

Ben regularly consults on information security, from developing threat management practices to teaching courses on secure development practices. Ben speaks regularly at public and industry events throughout the southeast and is a co-organizer of the BSides JAX information security conference.

Ben has a Bachelor of Science degree in Computer Science from Florida State University and currently holds CISSP, PCI and other professional certifications. Ben is not only passionate about protecting his clients from a successful cyber-attack, but is also driven to share his knowledge with industry peers and other stakeholders so that we will all continue to move up the security maturity curve. Eric Canavan,  SVP, Information Security & Technology Risk.

Rodney Murray is based out of the Charlotte office and leads the firm's IT Advisory practice. Rodney has more than 25 years of experience in information technology and business applications, including providing internal audit and risk management services. His risk and advisory experience includes managing and performing technology risk and controls assessments, Sarbanes-Oxley compliance, HIPAA and GLBA privacy compliance, business process analysis, SOC reporting and assistance to internal audit functions. Rodney's client base includes financial institutions, hospitals and health care providers, state and local governments, manufacturers, hosting and application service providers and third party services providing financial transaction processing.
Prior to joining DHG, Rodney worked for a Big Four accounting firm for more than six years delivering IT risk and advisory services across all industry segments. His client base included community, regional and national banks, third-party service providers to financial institutions, manufacturers, retailers, and state and local governments. Prior to public accounting, Rodney worked for Bank of America (formerly NationsBank) in the areas of computer operations, telecommunications, system conversion and internal audit of corporate information systems.
 

Eric began employment at TIAABank 2015, and serves as a Senior Vice President and Head of Information Security & Technology Risk. Prior to TIAABank, Eric’s experience spans more than 20 years in the technology and security industries, where he has worked as a developer, database administrator and information security officer. He has held senior leadership positions at CitiCorp where he lead Technology Risk for Global Consumer Technology Chief Technology Officer and Bank of America/Merrill Lynch where he lead Information Security within Global Wealth & Investment Management.

Eric is currently on the leadership team of the National Bank Technology Risk Forum and is an active participant in the Midsized Bank Coalition Information Security group where is able to exchange information with multiple peers across the industry.

Eric has earned bachelor’s degrees in Banking & Finance, Computer Information Systems, and has a master’s degree in Information Security.  Eric also completed a M.B.A. from the Sloan School of Management at the Massachusetts Institute of Technology.

Chanley T. Howell is a partner and intellectual property lawyer with Foley & Lardner LLP, where his practice focuses on a broad range of technology law matters. He is a member of the firm's Technology Transactions & Outsourcing and Privacy, Security & Information Management Practices and the Sports, Health Care and Automotive Industry Teams.
Chanley represents companies in a variety of technology law areas, such as:
Data Privacy and Security Compliance – Counsel and advise clients with respect to compliance with data privacy and security laws requirements and obligations, including federal privacy laws (Gramm-Leach-Bliley, HIPAA, telemedicine); consumer protection / marketing laws (TCPA, CAN-SPAM, COPPA); FTC privacy requirements, investigations and enforcement actions; state data privacy, security and breach notification laws; EU Privacy Shield compliance and certification; regulatory risk assessment and compliance audits; privacy and information security policies; records retention, destruction and management policies. Software Agreements – Software licensing, software support and maintenance; joint development, IT professional and consulting services; software license audits and disputes Technology Agreements – IT outsourcing; EHR (electronic health record) system agreements; ERP licensing, acquisition and implementation agreements; telemedicine related agreements and policies; patent, copyright and trademark licenses; joint development and marketing agreements; telecommunications agreements; technology acquisition and distribution agreements; IT/IP due diligence for mergers and acquisitions Internet – Online and electronic contracts and agreements, ESIGN issues, telemedicine, domain names, website terms and conditions, privacy policies, social media policies
Recognition
In recognition of his experience, Chanley has been Peer Review Rated as AV® Preeminent™, the highest performance rating in Martindale-Hubbell's peer review rating system and in 2011-2014 and 2016, The Legal 500 recognized Chanley for his work in technology: data protection and privacy. In 2014, he was named one of Jacksonville's "Top Lawyers" by 904 Magazine.
Education
Born in Jacksonville, Chanley graduated with honors from the University of Florida College of Law (J.D., 1988), and received his undergraduate degree, cum laude, from Vanderbilt University (B.A., 1985). Chanley is immediate past chairman of the Alumni Board, and former member of the board of trustees for the Bolles School.
Certifications
Chanley is a certified information privacy professional/US (CIPP/US), certified by the International Association of Privacy Professionals.