Share

Roger Halbheer

Job title:
Chief security advisor, Microsoft

Areas of expertise:
Policy, architecture, law enforcement, cybersecurity, processes

Biography:
Roger Halbheer joined Microsoft as Chief Security Advisor of Microsoft Switzerland in 2001 and was promoted to the role of Chief Security Advisor for Microsoft Europe, the Middle East and Africa (EMEA) in February 2007. Roger leads a team of national Chief Security Advisors across EMEA who work with organizations in the commercial and public sectors - including national governments, law enforcement and intelligence agencies - on information technology issues and strategies. He is a trusted advisor to C-level executives, governments and law enforcement agencies and has established relationships with security communities and government agencies across the region. Roger is a regular speaker at industry events and has worked with national and international print and broadcast media both to represent Microsoft and to provide expert comment on broader security issues. A Swiss national, Roger holds a Master of Computer Science degree from the Federal Institute of Technology in Zurich and is a Certified Information System Security Professional (CISSP). Before joining Microsoft, he was responsible for e-Business Risk Management at PricewaterhouseCoopers in Switzerland. He lives in Zurich and is married with two sons.

Tag Cloud

Bloggers

Blog

Why it pays to be secure – Chapter 5 – I need tools!

Our EMEA Security Program Manager, Henk van Roest, started this series internally and with his consent I am publishing it here in my blog as I think it contains a lot of great information for you to use.


So far, in the first 4 chapters, we have addressed the usual excuses for not Managing Your IT Environment and Security Updates:

  1. Security is not worth it, nothing ever happens and if it does it will be “no big deal”
  2. I installed the Microsoft updates, but my network was still compromised
  3. OK now I understand why Security is important but no idea how I start
  4. I now know what I want to do, I just don’t know how, I need training

Here we address the need for automation, cost reduction and standardization, Microsoft has literally hundreds of tools to help management assess risk and administrators implement security updates and policies.

Security Update Management Tools: http://technet.microsoft.com/en-gb/security/cc297183.aspx#EPC

Security Update Detection Tools: http://technet.microsoft.com/en-gb/security/cc297183.aspx#EID

Security Risk Assessment Tool: http://technet.microsoft.com/en-gb/security/cc297183.aspx#EUD

Lockdown, Auditing, Intrusion Detection, Remediation Tools: http://technet.microsoft.com/en-gb/security/cc297183.aspx#E2D

Virus and Malware Protection and Removal Tools & Apps: http://technet.microsoft.com/en-gb/security/cc297183.aspx#E1E

Reduce Your Risk: 10 Security Rules To Live By

This is from 2006 but it demonstrates on a conceptual level how the technology can change but the rules remain the same.  Yet again we learn that Security is a Process, not a Product! 

http://technet.microsoft.com/en-us/magazine/2006.05.reducerisk.aspx

 


 

Henk and Roger

Posted 06/03/2010 by Roger Halbheer

Tagged under: not tagged.

RE: Why it pays to be secure – Chapter 5 – I need tools!
Posted 09/03/2010 by Alex Clayton
I was at a Microsoft briefing day yesterday in London. Henk was brilliant, funny and engaging. It was a fascinating insight into how MS manages security issues from the initial report to the final release of a patch. I think that this should be broadcast more as it gives the end user and corporations assurance that these issues are being managed very well.

Comment on this blog

You must be registered and logged in to leave a comment about this blog.