Rob Barnes is the Director, Security, Risk and Compliance Operations with Application Security, Inc. He plays an integral role in driving partnerships with accounting, auditing and consulting organizations to help them meet their database security and audit testing requirements while facing mounting regulatory pressure and global compliance initiatives. He is responsible for the strategic training, sales and support for all partners and professional services providers.
Prior to joining Application Security, Inc., Rob served as an IT Auditor at Ernst & Young, LLP in the Technology and Security Risk Services practice in New York and Boston. Rob’s experience in IT Audit and information management advisory services has given him insight into the compliance and security-related issues that impact global organizations.
Rob is a graduate of West Point and spent eight years as a US Army Finance Officer. He served as a Company Commander and led a deployment to manage financial operations in Baghdad, Iraq during Operation Iraqi Freedom.
He has spoken at numerous military, civilian and professional services industry conferences and events, including ISACA’s North America CACS, International Conference and the ‘eSymposium’ series. Rob is also a featured content provider and speaker for Application Security, Inc.’s acclaimed webinar series.
Topic:
Grounding Security & Compliance Where The Data Lives
Many companies today lump their database applications into a security bucket filled with other priorities, which means the level of protection is likely not sufficient. Additionally, as more vendors emerge out of more security categories, organizations have become confused by what they need, and what they feel will protect their infrastructure most effectively.Not knowing the value of your data, and consequently, not knowing where your data resides is a kiss of death for labeling an organization as 'vulnerable.' However, if the organization (DBA, CISO, management, IT) can connect the dots and radically change their approach to securing their data, good things can happen with a comprehensive, well-designed data security model.