Location:
Community

Randy Marchany (Virginia Tech)

Randy Marchany
Chief Information Security Officer
Blacksburg, Virginia
UNITED STATES

Randy Marchany

Biography

Randy Marchany is the University Information Security Officer for Virginia Tech. He is also the director of the VA Tech IT Security Testing Lab, a component of the university's Information Technology Security Office.

He is the author of VA Tech's Acceptable Use Statement and a co-author of the original FBI/SANS Institute's "Top 10/20 Internet Security Vulnerabilities" document that has become a standard for most computer security and auditing software. He is the co-author of the SANS Institute's "Responding to Distributed Denial of Service Attacks" document that was prepared at the request of the White House in response to the DDOS attacks of 2000. He was part of the SANS Institute's Secure Code project that developed a set of exams to test programmers' knowledge of secure coding techniques.He has been a member of the SANS Institute's faculty since 1992 and developed its original IT Audit course.

He is a co-author of the EDUCAUSE "Computer and Network Security in Higher Education" booklet. He is a member of the EDUCAUSE security task force focusing on risk assessment and security metrics. He was a coauthor of the original Center for Internet Security's series of Security Benchmark documents for Solaris, AIX and Windows2000.

He is one of the founders of the Virginia Alliance for Secure Computing and Networking (www.vascan.org), a consortium of security practitioners and researchers from VA Tech, U of Virginia, James Madison Univ., George Mason Univ.

He has been a frequent speaker at national and international conferences such as SANS, IIA, ISACA, ACUA, Network Security, IEEE Symposium on Systems Management, NIST, NY State OIT Security conference, FBI-Infraguard chapters, US Forest & Wildlife Service, Computer Security Conference, DECUS-Canada, Air Force Material Command, EDUCAUSE and ACUA. He's been the subject of articles in the Chronicle of Higher Education on security issues at university campuses.

He was a recipient of the SANS Institute's Security Technology Leadership Award for 2000. He was a recipient of the VA Governor's Technology Silver Award in 2003. He was part of the team that won the EDUCAUSE Excellence in Information Technology Solutions Award in 2005.

He is acknowledged as one of the North American masters of the hammer dulcimer. He is the author of the original theme song of National Public Radio's nationally syndicated radio program, "World Cafe". His band, "No Strings Attached" was nominated for or won "Indie" awards (independent record label's version of the Grammy) for Best Album (String Music) category in 1984, 1985, 1986, 1988, 1990.

Blog: http://randymarchany.blogspot.com
Twitter: @randymarchany

Presentations

Upcoming Presentations
EventSessionDate
Security Professionals Conference 2013IPv6 Security at Virginia Tech and WPI05/16/2012
Security Professionals Conference 2013Securing the Human on Your Campus: How to Successfully Deploy Your Security Awareness Program05/16/2012
Recent Presentations
EventSessionDate
Security Professionals Online Conference 2011Ask the ISO Experts: An Online Panel Discussion04/05/2011
Security Professionals Conference 2011"Securing the Human" on Your Campus: How To Successfully Deploy Your Security Awareness Program04/05/2011
Security Professionals Conference 2011Seminar 03F - SANS Leadership and Management Competencies
PLEASE NOTE: Separate registration and fee are required to attend this seminar.
04/04/2011
Security Professionals Conference 2010E-Discovery and Fraud/Abuse Details04/14/2010
Security Professionals Conference 2010Cloud Computing: Clear Skies or Rain?04/14/2010
Security Professionals Conference 2010Seminar 01F - SANS Security Essentials: Defense in Depth
PLEASE NOTE: Separate registration and fee is required to attend this seminar.
04/12/2010
Security Professionals Conference 2009Building a Cybersecurity Operations Center04/21/2009
Security Professionals Conference 2009Seminar 2P - Personal Identity Scanning: Tools and Practices
PLEASE NOTE: Separate registration and fee are required to attend this seminar.
04/20/2009
Security Professionals Conference 2008SANS Partnership Program: A Panel Discussion of Successes and Challenges05/05/2008
Security Professionals Conference 2007Seminar 4F - IT Security Incident Handling: Tools, Techniques, and Processes
PLEASE NOTE: Separate registration and fee are required to attend this seminar.
04/10/2007
Security Professionals Conference 2006Building a Campus DShield04/11/2006
Security Professionals Conference 2005Using CIS Configuration Benchmarks in Higher Ed Environments04/05/2005
Security Professionals WorkshopSEM02P - Information Security Risk Evaluation
PLEASE NOTE: Separate registration and fee is required to attend this seminar.
05/16/2004
Southeast Regional Conference 2003Seminar 1A - Creating a Secure University: Technology, Policies, Education, and Culture06/18/2003
CUMREC 2003Seminar 2P - Developing a Security Awareness Program
PLEASE NOTE: Separate registration and fee is required to attend this seminar.
05/11/2003
Mid-Atlantic Regional Conference 2003Seminar 01F - Creating a Secure University: Technology, Policies, Education, and Culture01/15/2003
Net@EDU Annual Member Meeting 2002Participation Opportunities in ICS Working Group Activities:
Wireless
Intercampus Demos
ICS Database Project
Financial Models
Policy
Security
02/06/2002
Seminars on Academic Computing 2000Varieties of Vulnerabilities: The Threats We Face Every Day08/07/2000
CUMREC 2000A Security Audit Methodology05/16/2000

Membership Information

General Info

Membership Information
OrganizationStatus
ECAR
ELI
EDUCAUSEParticipating Representative

This information is provided as a service for our members and subscribers. It gives members and subscribers the opportunity to share information about common problems and solutions and a chance to network with their peers. Neither members nor nonmembers are to use it for commercial gain or for research that is not explicitly sponsored by EDUCAUSE. EDUCAUSE maintains open access to this information with the expectation that it will not be abused. We appreciate your help in using this information properly so that we do not have to limit its availability.

If you have questions about the use of this information or you want your personal information or photo removed, you may either e-mail info@educause.edu or login to make changes.


 
© Copyright 1999-2012 EDUCAUSE