AITP 50th Anniversary 1951-2001

Scott Laliberte is a Director in the Philadelphia office of Protiviti providing clients with Information Systems Security Services. He is Protiviti’s Global product leader for security assessment services.

Scott has lead Numerous Security Assessments and Penetration Testing engagements. These projects included assessment of threats and vulnerabilities leading to a prioritization of risks and the development of a Security "roadmap". He has lead many Security policy projects using ISO 17799 as a set of guiding principles. These projects included assessing policies, recommending policy changes, implementing the policies, and designing the monitoring programs to ensure policies are followed. Scott has implemented a number of security solutions including intrusion detection systems, firewalls, VPN’s, vulnerability scanning tools, and systems hardening programs. Additionally, Scott has led and managed several incident response engagements. During these engagements, Scott’s teams rapidly responded to incidents from both internal and external attackers. They identified systems affected, determined how the incidents occurred, helped determine the damage caused, collected forensics data, and developed solutions to help prevent similar incidents from occurring in the future.

Scott has delivered high quality security services to a variety of clients in financial services, telecommunications, healthcare, life sciences, manufacturing, and other industries. He has led and managed many security assessment, implementation, and management projects.

Scott is a published author, accomplished speaker, and quoted subject matter expert in the area information systems security. Scott co-authored a book about penetration testing and information security called HACK I.T. published in February 2002 by Addison-Wesley Publishing. Scott's second book Defend I.T. hit the shelves in May of 2004.  He also served as an instructor for a five-day course on penetration testing techniques and methodologies. He has spoken on information security topics for a variety of audiences and industries including NAFSA, IIA, ISACA, ISSA, MISTI, and HCCA. He has been quoted as a security expert in the Financial Times, Securities Industries News, and other publications. Prior to becoming a consultant, Scott was an Information Systems Security Officer for the United States Coast Guard.