Meeting Notes

Attendees:

• Keith Watson, CERIAS
• Mike Hill, CERIS
• Preston Wiley, CERIS
• Utsav Mittal, CERIAS
• Ben Lewis, ITNS
• Greg Hedrick, ITNS
• Jeff Smith, ITNS
• Addam Schroll, ITNS
• Joanna Grama, ITNS
• Steve Santy, ITNS
• Cherry Delaney, ITaP
• Gene Spafford, CERIAS
• Scott Ksander, ITNS

Discussion Points:

1. Based on the attendance at this meeting, there is sufficient interest in creating an organization for security professionals.

2. After some discussion, it was decided that opening the organization to professionals outside of Purdue is key. Membership should not be limited to Purdue. The Purdue Research Park and the greater Lafayette area have many companies and government agencies with security professionals. An organization with a large membership may also function more efficiently with more people to volunteer.

3. The purpose of the organization must be explored and carefully considered. Initial thoughts lean toward certification and continuing education training, information sharing, and networking. Other key activities may include serving as a resource for security awareness and education for the community at large. See Action Item #1.

4. The type of group to be formed was discussed, and no decision was made. Further information will be gathered and presented at a future meeting. See Action Item #2.

5. The qualifications for membership were discussed. It was decided that membership should not be limited to those with existing security certifications. Membership should be open anyone interested in information security as a profession.

6. The timing and frequency for meetings was discussed. With membership open to a wider audience, it may be necessary to hold meetings outside of the normal business hours (8am-5pm). Breakfast and lunch meetings were discussed as well as after hours meetings. No specific decision was made. The frequency of general meetings should be limited to monthly.

7. The location of the meetings was discussed. There are many possibilities both on campus and off. No specific decision was made.

8. A discussion on the organizational structure of the organization was tabled for a later discussion.

9. A future meeting will be held in one month's time to review deliverables from action items and to have further discussions. This meeting will occur on or around February 26, 2009.

10. Spaf volunteered some resources at CERIAS to help move the organization forward. These include the CERIAS conference room, as well as web site, training, email, and wiki hosting. See Action Items #4 and #5.

Action Items Assigned:

NOTE: All deliverables should be sent to the group for review by February 16.

1. Joanna Gramma and Greg Hedrick will prepare written vision and mission statements.

2. Keith Watson, Greg Hedrick, Addam Schroll, Preston Wiley, Utsav Mittal, and Mike Hill will request chapter start-up kits from and examine potential affiliations with other national international organizations. They will look at the requirements for affiliation and issues related to the national organizations. The initial list of security organizations include: ISACA, ISSA, ASIS, (ISC)^2, and Infraguard. Other privacy and security organizations will also be considered. They will prepare a summary of each group, the requirements, and issues associated with each.

3. Steve Santy will create a list of activities from which CPE credit can be acquired.

4. Keith Watson will create an email list with the members of the group.

5. Keith Watson will work with the CERIAS webmaster to create a wiki page for use by members of the group.

6. Everyone will reach out to other members of the security community in the greater Lafayette area and invite them to participate in the creation of the organization. With their permission, please send their email addresses to kaw@cerias.purdue.edu for inclusion on the email list.