Overview Methodology R. Lance Fogarty Steven E. Kurtz

PROTEGGA LLC R. Lance Fogarty
Robert Lance Fogarty CISSP, CCE (Lance) has over 18 years experience in the design, development, and deployment of networked computer systems, security strategies, and related technologies. Lance’s diverse background includes extensive knowledge of computing systems, networking, the Internet, security, computer forensics, litigation support and more within a variety of industries.

Areas of Strength

Licensed by the Texas Commission on Private Security #A13971

Professional Experience

Lance has spent the last 4 years serving clients throughout the Dallas/Fort Worth Metroplex in the areas of computer forensics, litigation support, security assessment, policy development, disaster recovery planning, and incident response. Since 2005, Lance has focused solely on the computer forensics and litigation support aspect of computer security. His experiences include:

• Retrieving and analyzing computer evidence, providing litigation support, and presenting testimony in cases involving Breach of Fiduciary Duty, Theft of Intellectual Property, Theft of Trade Secrets, Texas Theft Liability Act, Fraud, Forgery, Breach of Contract, and Child Custody.
• Performing security assessments and penetration tests breaching several environments and uncovering both documented and undocumented security vulnerabilities.
• Analyzing client security practices and comparing to Industry Best Practices to achieve desired security levels, comply with government regulations (Sarbanes-Oxley (SOX), Gramm-Leach-Bliley (GLBA), and California SB1386, and meet contractual obligations.
• Creating security policies/procedures in line with established security practices to achieve desired security posture and maximize investments in existing security technologies.

In 1988, Lance started his technology career discovering, diagnosing, and documenting methods to circumvent flaws designed into a proprietary network computing system for Pearle Health Services. Lance then moved to NEC America’s Mobile Radio Division where he provided the sole support for their existing network infrastructure. Lance held simultaneous titles at NEC including Network Administrator, Systems Programmer, Database Administrator, and Unix Administrator. Lance immediately set about the task of diagnosing and repairing the problems within the infrastructure bringing the system uptime to 99%, up from 60%. During his term at NEC, Lance successfully migrated the Mobile Radio Division from a slow, inflexible mainframe environment to a state-of-the-art integrated, networked Unix platform. Lance’s career started during a time of “If you don’t have it, write it.” Lance wrote numerous programs and utilities to keep his environments functioning including DHCP – Automatic Address Distribution, Automated Nightly Batch Processing – Unix, Unix Network/Desktop Printing, Barcode Data Retrieval/Processing, Source Code Management System, and an International Data Synchronization System.

Lance continued his career at Brierley & Partners of Dallas as Director of Network Services. The challenges here were numerous including: bringing an outdated infrastructure into the 20th century, preparing for any “Year 2000” disaster, developing an infrastructure to support the dramatic growth in e-business for both Brierley and its clients, providing a secure and reliable environment for 24x7 operations, and many more. At Brierley, Lance:

• Designed and implemented multiple data centers and a 24x7 Internet operation facility to increase uptime, provide improved security, and handle explosive organizational growth.
• Designed and implemented bulk e-mail operations increasing outbound e-mail capacity from a few hundred thousand to over 6,000,000 per day enabling support of increased client demand.
• Designed and implemented a company-wide infrastructure upgrade including an International Frame Relay, desktop, application, and server upgrades, enhanced e-mail system, and more in order to increase functionality, system performance, and organizational security.
• Integrated infrastructure and support resources for four organizations (Brierley, eRewards, RMPI, On-Call Vacations), reduced system downtime, and increased end-user productivity through focused efforts on efficiencies, process improvements, and security.

Prior to his tenure at PROTEGGA, Lance worked for Veloz Global Solutions, a Process & Infrastructure Monitoring startup, as Manager of Network Architecture. Here Lance designed and implemented a secure and fully redundant 24x7x365 Network Operations Center and linked this with clients and Competency Centers across the globe enabling Veloz to provide process-level monitoring to its clients.

During Lance’s career, the has utilized the sampling of technologies listed below to provide desktop support, network administration, web administration, system administration, systems programming, database administration, security management, and computer forensics to his employers and clients.

Security: Access Data Forensic Toolkit, Digital Detective NetAnalysis, Paraben Device Seizure, Cisco IOS Firewall, PIX, & IDS, Checkpoint Firewall-1, AAA, SSL, Nessus, nmap, Sam Spade, Cain & Able, Brutus, Nikto, Ethereal, NetStumbler, SNMPwalk, Phlak, GFI LANguard, Veritas NetBackup & Backup Exec
Operating Systems: Windows 2003, XP, 2000, NT 3.5-4.0, UNIX (Linux, Solaris, HP-UX), Cisco IOS, Microsoft Clustering, Veritas Cluster Server, DOS V3 – V5, Novell 286 – 4.1, CPM, Alloy NTNX
Network Software: IIS, Apache, Exchange, DNS, WINS, DHCP, SMTP, NTP, HSRP, FTP, IPSEC, ISAKMP, cc:Mail
Applications: WordPerfect, Lotus 1-2-3, Microsoft Word, Excel, Powerpoint, Outlook, Internet Explorer, Netscape, Firefox, Macromedia Dreamweaver, Flash, Fireworks, Adobe Photoshop, Illustrator, Acrobat, VMWare, Microsoft Virtual PC
Databases:  Microsoft SQL Server, ORACLE, Progress, Microsoft Access
Programming:  C, Pascal, SQL, Foxbase, Foxpro, Cobol, JCL, shell script (csh & ksh), html, Java

Lance is a Certified Information Systems Security Professional (CISSP) #51679. This certification includes extensive testing in the following 10 domains of knowledge in addition to verified experience.

Lance is also a Certified Computer Examiner (CCE) #678. The CCE certification is provided in association with the International Society of Forensic Computer Examiners. The CCE certification process includes minimum experience or training requirements, passing a written examination, and successfully performing actual forensic examinations on three test media.

Other certifications, training and self-study:

• Cisco Certified Network Professional (CCNP)
• Microsoft Certified Systems Engineer (MCSE)
• Master Certified Netware Engineer (MCNE)
• Progress and Oracle Database Administration
• Unix Administration
• Ethical Hacking
• Rules of Evidence
• Rules of Civil Procedure
• Computer Forensics