Red Flag Rule: Post Implementation Issues

Naomi Lefkovitz
Attorney, Division of Privacy and Identity Protection,
Bureau of Consumer Protection
Federal Trade Commission
Naomi Lefkovitz is an attorney with the Division of Privacy and Identity Protection at the Federal Trade Commission. Her responsibilities focus primarily on business and consumer education, legislative activity, and rulemakings. She specializes in identity theft issues, in particular, the areas of identity management, authentication, and fraud prevention. She has drafted a number of rulemakings related to identity theft including representing the FTC in the inter-agency group that drafted the Red Flags Rule.
Ms. Lefkovitz joined the FTC in 2001. For the five years prior to working at the FTC, she was Assistant General Counsel at CDnow, Inc., an online music retailer. At CDnow, Inc., she was responsible for negotiating and drafting contracts, managing intellectual property matters, lobbying and trade association participation as well as other corporate matters.
Ms. Lefkovitz holds a B.A. with honors in French Literature from Bryn Mawr College and a J.D. with honors from Temple University School of Law.
William H. Henley, Jr.
Director, IT Examinations
Office of Thrift Supervision
Mr. Henley has spent his entire professional career as a financial institution regulator. Mr. Henley is the Director of IT Examinations for the Office of Thrift Supervision. In his role as the Director, Mr. Henley serves as the principle advisor regarding the development, implementation and maintenance of policies, procedures and guidelines pertaining to the examination and supervision of saving associations in the area of Information Technology (IT) and Technology Risk Management, including electronic banking activities; and is the OTS representative to the FFIEC IT Subcommittee. Prior to joining the OTS, Mr. Henley spent 17 years with the FDIC, including 9 years as a Bank Examiner in the Dallas Region; and 8 years in the FDIC’s headquarters in Washington, DC in various positions including Examination Specialist in both the Planning and Program Development Section and in the Technology Supervision Branch, and the acting Section Chief of the Capital Markets Policy Branch.
Mr. Henley is a 1989 graduate of the Sam Houston State University, Huntsville, Texas with a Bachelors of Business Administration degree in International Business, and minors in Economics and French. In 2002, Mr. Henley successfully completed the Graduate School of Bank Operations and Technology, at the Owen Graduate School of Management, Vanderbilt University, Nashville, Tennessee.
Dorian Cougias
Fellow
NEMEA - Solutions for Compliance, Remediation, Risk & Governance
Dorian Cougias is currently a "CIO-to-go" for multiple Fortune 1000 organizations within the
United States and abroad. He focuses solely on bringing these organizations up to speed on
national and international regulatory issues and then puts into place the teams and
processes to support their compliance needs. Dorian provides his clients with the speed and
momentum to raise the bar for operational reliability, awareness, planning and
implementation of compliance strategies and initiatives. Dorian helps NEMEA and its clients
by bridging the gap between regulations and reality.
Dorian was the former CIO of InterPublic Group, the world’s largest advertising agency with
offices in 97 countries. Further, he served as CIO of the multiaward-winning Fallon
McElligott, as well as for the Medical College of Ohio – a leading research facility specializing
in long-distance medicine. He holds the position of lead analyst for the Unified Compliance
Framework, which is used by nearly half of the Fortune 500 companies as well as the U.S.
Departments of Justice, Treasury and the National Institute of Standards and Technology.
Dorian writes and speaks extensively on various matters of compliance – and information
technology. Additionally, he is a leading expert witness and has won numerous writing and
speaking awards. For more information about Dorian Cougias, please visit
http://www.unifiedcompliance.com/
Brian Lapidus
Chief Operating Officer
Kroll’s Fraud Solutions
Brian Lapidus has unique frontline experience helping a wide variety of corporations and organizations safeguard against and respond to data breaches. With an extensive background in organizational development, today he sets direction for the company's continued success in identity theft discovery, investigation and restoration. Lapidus is particularly knowledgeable about the many security gaps - physical, procedural and electronic - common to many U.S. companies and organizations, as well as the criminal landscape where stolen identities are bought, sold and used. He oversees a highly-skilled team that includes veteran licensed investigators who specialize in supporting breach victims and restoring individuals' identities to pre-theft status. He also is working with consumer organizations to help ensure responsible practices among businesses that provide identity theft-related services.
Catherine D. Meyer
Counsel
Pillsbury Winthrop Shaw Pittman LLP
Catherine D. Meyer has been Counsel with Pillsbury Winthrop Shaw Pitman for the past three years after having been a partner with the firm for 20 years. Her practice is a blend of finance and privacy regulation and compliance.
Ms. Meyer spends a considerable portion of her practice advising financial institutions and other companies in the privacy area including rights to financial privacy and protection of customer's privacy rights under state, federal and international statutes and regulations, and assisting when personal information is compromised or threatened. She regularly counsels clients in compliance with regulations affecting the collection, use, sale, transfer and sharing of customer information and the restrictions on such activities in a commercial setting. She assists with marketing issues such as unsolicited commercial email, fax and telephone communications, marketing to children, and issues specific to credit card and check transactions for retailers. Clients call upon her for assistance in data security breach situations to respond appropriately, whether it involves a handful or millions of affected data subjects. Ms. Meyer has also assisted clients in complying with international privacy directives when dealing with customer or employee information on a global scale, including qualifying clients for inclusion under the U.S. Department of Commerce Safe Harbor.
She has been involved in financings, representing lenders in secured transactions and participations and has extensive experience in protecting the rights of creditors in restructuring transactions and in bankruptcy. In UCC matters, particularly Articles 2, 3, 4 and 9, she is able to assist clients in developing procedures to protect themselves against potential losses.
Ms. Meyer has represented clients in many sectors, including banks, factors, manufacturers, distributors, and contractors. She has protected her clients interests in a wide variety of industries including manufacturing, travel, retail (on and off line), import/export, restaurants, record labels, casinos, hotels, clothing, medical services, shopping centers, and technology. Her clients range from individuals, to local businesses, to international companies.
Ms. Meyer served for several years as co-chair of the Business Department of the Los Angeles Office and of the firmwide Privacy & Data Protection practice team. She has previously chaired the Commerce, Technology & Licensing practice section and the Insolvency & Restructuring practice section. Ms. Meyer received her J.D. in 1979 from Northwestern University School of Law and her A.B. from Bryn Mawr College in 1973. She is a member of the California Bar and the ABA. She sits on the Board of Editors of the Privacy & Data Security Law Journal (an A.S. Pratt & Sons Publication) and the Privacy & Data Security Review (Sheshunoff Information Services). She is a frequent speaker on data protection and privacy issues.
Red Flag Rule: Post Implementation Issues
Speaker Firms and Organization:
Federal Trade Commission
Office of Thrift Supervision
![]()
Event Sponsor:
NEMEA provides innovative and comprehensive Software as a Service (SaaS) tools that enable management to quickly take their compliance pulse, identify vulnerabilities, organize their remediation efforts, document internal controls and retrieve relevant and important compliance documents across the enterprise.
NEMEA knows that to make informed decisions, management’s data must be current, accurate, and available 24/7. Because interdepartmental and outside collaboration are vital to building a proactive and successful compliance team, NEMEA developed a patent-pending feature called Self-Enrollment. This allows surveys and compliance communications to be distributed companywide and to third-party vendors. More than 35 industry standards are included in the subscription price and there are no charges for updates or revisions.
If a company constantly faces audit demands and regulatory pressure it needs automated software that covers current industry regulations and mandates, determines the compliance posture, tracks the remediation process and fits its business needs – without impacting valuable IT resources. For more information, visit
www.nemea.us
Kroll Inc., is the world’s leading risk consulting company with over 30 years experience in security and risk mitigation. Since 1999, Kroll has worked with organizations to implement the best possible defense and the most resolute response to a data breach.
Kroll’s team of highly trained and experienced licensed investigators have counseled and provided identity theft resolutions for tens of thousands of individuals. This experience has enabled Kroll to enhance their support for the organization as well as restoration for individuals affected by a data breach.
Over 30 million consumers and a host of leading organizations trust Kroll for their identity theft and fraud solutions - recognizing that Kroll’s resources and experience set it apart from every other company in the world.
![]()
Media Partner:
SecurityStockWatch.com is the #1 portal to security solutions, stocks, and news. It also covers homeland security news, environment solutions, and alternative energy solutions.
It tracks and reports on the business developments at companies in these target industries whether they are private or public. It's goal is to bring the audience more information about these companies than is available anywhere else.
It is privately owned and independent.





