Dear ISACA member,

Please join us for our July monthly meeting, which will be a joint meeting with iSSA held on July 1st from 11:30 AM to 1:00 PM.  Our guest speaker will be Mitchell Greenfield, Information Security Architect for Humana Enterprise Information Security.  The title of Mitchell's presentation is "How Humana re-engineered the SDLC to include security."

This talk was focus on how Humana, a Fortune 100 company, re-engineered their Software Development LifeCycle to begin the march down the path to software security assurance.  Mitch Greenfield of Humana Enterprise Information Security will discuss the challenges of incorporating software security assurance best-practice into a large, diverse technology-driven organization which builds, buys and acquires applications at a rapid pace to meet business demand.  This talk will focus on how a business-driven approach to software security assurance can succeed, and discuss the challenges of redesigning existing project release processes, building the business case for software security assurance, incorporating additional training for developers, code scanning technology, and how the creation of a new role - the FSA (Functional Security Analyst) fit into the technology organization.

Mitch will provide practical lessons learned from Humana's ongoing maturation process into a culture recognizing security as a fundamental building block of software quality.  Mitch will discuss how, through the partnership with HP's Application Security Center, Humana was able to modify processes, create a new functional security role, and build business value based on delivering software security.

BIO:  Mitchell Greenfield is currently an Information Security Architect for Humana Enterprise Information Security.  He conducts ethical hacking and penetration testing for Humana, including business partners and acquisitions.  Mitch is a Certified Ethical Hacker (CEH), Certified Security Analyst (ECSA), Licensed Penetration Tester (LPT) and Certified Information Security Auditor (CISA).  Mitch is currently the VP of Programming for the Kentuckiana chapter of ISACA and holds an MS in Information Systems and a BS in Informatics from Indiana University - Bloomington.