Central Maryland Chapter of ISSA

Membership Meeting 7/22/2020
2020-07-22 17:00 - 19:30 (America/New_York) | Virtual via Zoom, MD
Chapter Business Meeting Slides: Membership Meeting 7/22/2020
Speaker Slides: MSSP Market Overview
Speaker Recording: MSSP Market Overview
Topic: Managed Security Services
An overview of the Managed Security Services market including:

Definition of MSS
Categorization of MSS market segments and the pros and cons of each
Explanation of why certain offerings dominate the MSS market and why other offerings are less common
Overview of vendors and their products aligned with the common MSS offerings
Description of the varying service models and how they align to different types of customers
Predictions of disruptions to the MSS market in the coming years

Speaker:
John Perkins, Founder, ThreatAngler
John Perkins is the Founder of Threat Angler and brings over twenty years of cybersecurity experience. During the first fifteen years of his career at the Federal Reserve, he contributed to nearly all cybersecurity disciplines. John spent the next five years designing, building, and leading managed security services with Optiv, GuidePoint, Insight Enterprises, and other service providers. John’s passion is to build a sustainable managed security service focused on delivering cybersecurity value outcomes while developing cybersecurity talents in team members.

Membership Meeting 8/26/2020
2020-08-26 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2020-08-26 Membership Meeting
Speaker Slides: Dell Security Operations 2.0 Transformation
Speaker Recording: Dell Security Operations 2.0 Transformation
Topic: Security Operations 2.0
With Dell Technologies being looked at as a key innovator is response to the rapidly changing workforce, Bob will layout a vision of what the next-gen security operations will begin to look like. Based on his past experience as a cybersecurity director and his current outlook within Dell Technologies, Bob will explore how technology will drive how we assess risk, manage and mitigate risk, and provide situational awareness. Enablers for remote workforce, multi-cloud operations, and enhanced intelligence all play a role in every agency’s modernization strategy. But should how you secure these new environments change how you think about securing the rest?
Speaker: Bob Nicholson, Business Development Executive, Dell Technologies Federal
Bob Nicholson is currently a Business Development Executive for the Dell Technologies’ Federal team with a concentration on Federal Civilian agencies. Bob has been serving in this position for 5 years but brings more than 25+ years of solutioning experience in support of the public sector.
For 15 years he served as a cybersecurity leader and solution architect within the federal government which included designing and implementing many enterprise solutions and establishing many best practices. Many of these as a result of Federal mandates, Bob has a great deal of experience working within government, in coordination with its many bodies of governance, and throughout industry. He has transferred this knowledge and relationships into not only being a strong advocate for innovation within government, but also a facilitator for ensuring its success.

Membership Meeting 9/23/2020
2020-09-23 17:00 - 19:30 | Virtual via Zoom, MD
Chapter Business Meeting Slides: 2020-09-23-Meeting-Presentation.pdf
Speaker Slides: UAS-Forensics-Framework-2020-09-23.pdf
Topic: A Study on Drone Forensics Framework
As consumer unmanned aircraft systems (UAS) or drones are used more commonly in public areas, an approach for a drone forensics framework is needed to guide forensics investigators in analyzing recovered drones that entered the unauthorized national airspace system (NAS). The presentation is based on a doctoral research study focused on whether a single framework and multiple frameworks for drone forensics. The data collected through an online survey provided detailed descriptions of the participants’ most commonly used forensics frameworks or guidelines. The data collected from participants in the United States measured the occurrences of the type of guidelines forensics examiners used. The results of the study identified a need for a standard drone forensic framework across digital forensic disciplines and aircraft accident investigation for use by investigators to produce admissible evidence for litigation in the U.S. courts. The research led to a proposed basic drone forensics framework, which can be improved upon in future research.
Speaker: Nagi Mei, D.Sc.

Dr. Nagi Mei has over 14 years in management and technology consulting service offerings to the commercial and health industries, and federal, state, and local governments. She has extensive experience in strategic initiatives and operational responsibilities grounded in information security management. Dr. Mei is a project manager where she leads teams in implementing information security projects. Dr. Mei received a Doctor of Science in Cybersecurity from the Capitol Technology University. She holds a Master in Business Administration, a Master of Science in Information and Telecommunications Systems from the Johns Hopkins Carey Business School, and a Bachelor of Science in Information Systems concentrating in Digital Forensics from the Johns Hopkins University. She holds certifications in Sec+, PMP, PMI-ACP, SSM, CSM, and ITILv3.

Membership Meeting 10/28/2020
2020-10-28 17:00 - 19:30 | Virtual via Zoom, MD
Chapter Business Meeting Slides: 2020-10-28- Meeting Presentastion.pdf
Speaker Slides: 30 Years 20-10-28.pdf
Topic: Lessons Learned from 30 Years of Security Awareness Efforts
Organisations acknowledge that employees are often the weakest link, yet efforts to improve ‘user awareness’ tend to rely upon available tools and not true experience. Drawing on three decades of awareness efforts and experience improving true security behaviours, Ira Winkler will dispel many commonly held beliefs about security awareness, detailing what consistently works and what does not.
Learning Objectives:
1: Learn and apply what works consistently across hundreds of organisational awareness efforts.
2: Learn from research in other disciplines that improves awareness efforts.
3: Learn how to create a security culture that drives individual security behaviours.
Speaker: Ira Winkler, President, Secure Mentem

Ira Winkler, CISSP, is the President of Secure Mentem and Author of Advanced Persistent Security, and the forthcoming books, You Can Stop Stupid and Security Awareness for Dummies. He is considered one of the world’s most influential security professionals and was named “The Awareness Crusader” by CSO magazine in receiving their CSO COMPASS Award. He also received the ISSA Hall of Fame award. He has designed and implemented and supported security awareness programs at organizations of all sizes, in all industries, around the world. Ira began his career at the National Security Agency, where he served in various roles as an Intelligence and Computer Systems Analyst. He has since served in other positions supporting the cybersecurity programs in organizations of all sizes. Ira’s new book can be preordered here: https://tiny.cc/stupidbook

Membership Meeting 11/18/2020
2020-11-18 17:00 - 19:30 | Virtual via Zoom, MD
Chapter Business Meeting Slides: 2020-11-18 – Meeting Presentastion.pdf

Speaker Slides: Roles of Artificial Intelligence and Deep Learning in Detecting Data Exfiltration
Topic: Roles of Artificial Intelligence and Deep Learning in Detecting Data Exfiltration
Essential Internet services are vital for many aspects of modern living, yet those services remain valuable to threat actors who use them for network intrusions and data exfiltration. Dr. Pena completed a quantitative research study analyzing the ability of a Convolutional Neural Network (CNN) to detect Domain Name System (DNS) covert communications generated by the DNSExfiltrator open source tool. The results showed the CNN model had100% accuracy when exfiltrated file sizes exceeded 2 Kilobytes (KB) using the default (maximum) transmission packet size, but its performance fell dramatically for files below 1 KB in size.
As AI/ML solutions become more prevalent in cybersecurity tools, professionals must understand where a model’s strengths and weaknesses lay in order to apply appropriate risk mitigations, such as tuning complimentary detection systems.
Speaker: Dr. Tomas Pena, L3 Harris Technologies

Dr. Tomas Pena is the Chief Technologist for Cyber Operations at L3Harris Technologies’ Space and Airborne Systems Segment. In that role, he’s responsible for cyber innovation and improving the resiliency of company products spanning land, sea, air, space, and cyber domains. He’s been in cyber-related systems engineering and defense contracting positions since 2013. Prior to that time, he completed 20 years of service in the United States Air Force as a Cyberspace Operations Officer where he organized, planned, executed full-spectrum cyberspace operations, stood up the United States Cyber Command’s 24/7 Joint Operations Center, and led Air Force Business Transformation Initiatives at the Pentagon. Dr. Pena has also filled roles such as managing the Global Positioning System satellite control systems, managing theater communications during Operations IRAQI FREEDOM and ENDURING FREEDOM. He is also the Founder and President of Parallax Cyber LLC, a small business focused on training and educating the workforce in Cybersecurity and Cyber Conflict, and the current Editor-in-Chief of the Military Cyber Professional Associations’ Military Cyber Affairs Journal.

Click Here to register for the November 18, 2020 General Membership Meeting

Membership Meeting 12/16/2020
2020-12-16 17:00 - 19:30 | Virtual via Zoom, MD
December meeting is sponsored:

https://redcanary.com/
Click Here for more information about on meeeting sponsor.

Chapter Business Meeting Slides: 2020-12-16 Membership Meeting

Speaker Slides: Least Privilege with PowerShell JEA

Speaker Recording: Least Privilege with PowerShell JEA
Topic: PowerShell JEA
PowerShell JEA allows us Systems Administrators to empower our fellow admins, developers, and security personal to accomplish what they need to on our systems. Give them just enough administrative permissions to accomplish their duties without interrupting your day or night. This talk shows how to assign roles and give the appropriate permissions to those roles.
Speaker: James Honeycutt

James is a dedicated cybersecurity professional who enjoys scripting and participating in capture the flags. He has served over 20 years in the military in various technical and leadership positions. He is part of a Cyber Protection Team and serve as the Microsoft Windows Expert. In past assignments, he served as the OIC (Officer in Charge) of both the battalion IT shop and brigade logistics IT shop, he was the “technology adviser to the Commander”. He has also served as a systems administrator, helpdesk manager, and classroom support tech. Some of his additional duties included being an Information Assurance Manager Alternate and Network Admin backup.
​James is working as a SANs Mentor and TrilogyEd TA. For SANs, he is mentoring SEC505 (Securing Windows and PowerShell Automation) and SEC511 (Continuous Monitoring and Security Operations) and for TrilogyEd, He is TA’ing a Cyber Security Bootcamp
During his career, James has been known as the “go-to guy” for IT questions and problems by his directors, commanders, and peers. He has received numerous awards for his work and knowledge, to include several Meritorious Service Medals and Company Grade Officer of the Year for the state of Arkansas. He has a Bachelors of Science in Management in Information Systems. James holds the following certifications: CISSP, VCP5-DCV, GWAPT, GPYC, GMON, GCWN, GPEN, GCIA, GCIH, GCFA, GSEC, GSNA, SEC +, C|EH

Morning Membership Meeting 01/13/2021
2021-01-13 08:00 - 09:30 | Virtual via Zoom, MD
Chapter Business Meeting Slides: 2021-01-13 Breakfast Meeting Presentation

Speaker Slides: 2021-01-13 Sepio HAC Solution for ISSA
Sepio Whitre Paper: 2021-01-13 Sepio CMMC White Paper

Topic: Reducing The Risk of Unapproved and Rogue Devices
Meeting Recording: Reducing The Risk of Unapproved and Rogue Devices
Sepio delivers a Hardware Access Control (HAC) platform that reduces the risk of unapproved and rogue devices by providing complete visibility, control, and mitigation of all hardware assets. Sepio’s hardware fingerprinting, augmented by machine learning, discovers all managed, unmanaged, and hidden devices that are invisible to all other security tools. Sepio’s solution supports CMMC hardware controls, NNDA section 889 and also enhances zero trust, insider threat, BYOD, IT, OT, and IoT security programs.
Speaker: Jay Smilyk, Chief Revenue Officer, Sepio

Jay Smilyk is the Chief Revenue Officer for Sepio. He oversees the firm’s strategic operations including its growth, recruitment and channel development efforts. Previously, Smilyk served as vice president of North American sales at Safend/Supercom and held similar sales leadership positions at Cynet, RSA and Check Point Software Technologies.

Membership Meeting 1/27/2021
2021-01-27 17:00 - 19:30 | MD
Chapter Business Meeting Slides: 2021-01-27 Membership Meeting

Speaker Slides: 2021-01-27 Red Canary Threat Detection ReportTBD

MITRE ATT&CK home page: https://attack.mitre.org/
Github repo of Atomic Red Team: https://github.com/redcanaryco/atomic-red-team
Github Repo for Atomic Red Team execution fraemwork, Invoke-Atomic: https://github.com/redcanaryco/invoke-atomicredteam
Github repo for variation testing tool, AtomicTestHarnesses: https://github.com/redcanaryco/AtomicTestHarnesses
Installation wiki for Invoke-Atomic: https://github.com/redcanaryco/invoke-atomicredteam/wiki
Invoke-Atomic video tutorials: https://www.youtube.com/watch?v=-HEx-qfd54M&list=PL92eUXSF717W9TCfZzLca6DmlFXFIu8p6
About Atomic Red Team: https://github.com/redcanaryco/atomic-red-team/wiki/About-Atomic-Red-Team
Atomic Red Team microsite: https://atomicredteam.io/
Atomic Red Team Slack: https://slack.atomicredteam.io/
Atomic Test Harnesses Blog series:
Pt. 1: https://redcanary.com/blog/introducing-atomictestharnesses/
Pt. 2: ‌https://redcanary.com/blog/threat-research-questions/
2020 Threat Detection Report: https://redcanary.com/threat-detection-report/introduction/
Previewing the 2021 Threat Detection Report: https://redcanary.com/blog/2021-threat-detection-report-preview/
Someone asked about the difference between Caldera and Atomic Red Team: https://redcanary.com/blog/comparing-red-team-platforms/
Here’s some information on mapping to ATT&CK (both on the context of Atomic Red Team and in the context of behavioral analytics): https://redcanary.com/blog/mitre-sub-techniques/
Topic: Simulating Adversary Tradecraft with Atomic Red Team and the Red Canary Threat Detection Report
We plan to discuss two important resources that leading teams are using to improve their security:

2020 Threat Detection Report: Red Canary’s annual in-depth analysis of of the top techniques for tens of thousands of threats seen in the wild. For each technique, we include detection, prevention, and testing strategies.

Atomic Red Team: An open-source tool mapped to ATT&CK techniques valuable for benignly simulating specific adversary behaviors

Speaker: Brian Donohue, Red Canary
Brian has been writing about and researching information security for the last decade. He started his career as a journalist covering security and privacy. He later consulted as a threat intelligence analyst, researching adversaries and techniques for a variety of major banks, retailers, and manufacturers. At Red Canary, Brian helps guide research publication and technical messaging efforts.

Membership Meeting 2/24/2021
2021-02-24 17:00 - 19:30 | MD
Chapter Business Meeting Slides: 2021-02-24 Meeting Presentation

Topic: Lockpicking 101
Meeting Recording: Lockpicking 101
The session will begin with a 15 presentation on primer on the pin picking (SPP) of pin and tumbler locks following by a 30-minute demonstration/interactive session. Participants are welcomed to purchase equipment to work along with the instructor. The simplest options to get are Number 3 Masterlocks:
https://usa.banggood.com/DANIU-12Pcs-High-Quality-Lock-Picks-Tools-Set-Lock-Opener-Locksmith-Tools-p-1139437.html
https://lockpicktools.com/tension-tool-2500-series-set/

Speaker: Michael, Unallocated Space

Flay is a past President of Unallocated Spaces. Unallocated Space is a technology-based community center, based out of a 1600+ SF space located in Severn, MD. He has been lockpicking for years and was the 2 time winner of the GrrCon ‘Cage of shame’ lockpicking challenge. He thinks its great fun and is excited to be able to encourage others in the hobby.
Click Here to register for the February 24th Membership Meeting.

First Mid-Atlantic Quarterly Meeting March 18, 2021
2021-03-18 18:00 - 19:30 | Virtual
Join our sister chapters of Central Maryland, Northern Virginia, DC and Blue Ridge for a special presentation by two national security experts.
Pre-registration required. Click here.
We will hear Mark Weatherford, Chief Strategy Officer at the National Cybersecurity Center and California’s first CISO, and Riley Repko, Founder of CAFE Search Engine who just left a 3-year-plus stint as Special Advisor to the Secretary of the Air Force on Technology Innovation. They will speak on cybersecurity priorities and goals for the incoming administration. Mark recently wrote a Forbes article advocating for a National Cyber Security Advisor to the President, restoring the State Department Cyber Ambassador position made famous by Chris Painter, as well as establishing secure election voting systems across the US. Meanwhile, Riley is intimately familiar with the Department of Defense’s efforts to establish a truly resilient and cross-branch communications system to support battlefield operations as well as the struggle to establish meaningful public-private cyber partnerships. This should be an interesting dialog by two experts with insight into where the Biden Administration needs to place emphasis in the first 100 days.
About the Speakers
Mark Weatherford is the Chief Strategy Officer at the National Cybersecurity Center and a Partner at Aspen Chartered where he provides cybersecurity consulting and advisory services to public and private sector organizations around the world. He is also a member of the DHS Homeland Security Advisory Council (HSAC). In 2008 he was appointed by Governor Arnold Schwarzenegger to serve as California’s first Chief Information Security Officer and in 2011 he was appointed in the Obama Administration as the Department of Homeland Security’s first Deputy Under Secretary for Cybersecurity. Mark is a former U.S. Navy Cryptology Officer, where he led the United States Navy’s Computer Network Defense operations and the Naval Computer Incident Response Team (NAVCIRT).
Riley Repko left his position as Strategic Adviser to the Air Force Secretary and Chief of Staff on innovation and modernization issues leaders in January. He founded CAFE Search Engine, which combines a Google-like search functionality with Yelp-like user reviews to help military users find useful AI-solutions. Before returning to the Pentagon, Riley worked as a Director for Government Affairs at Oracle in DC and Tokyo. He served in the Air Force as an officer, taking assignments in space operations, modeling and simulation wargame/exercise support. He held senior Reserve positions as a mobilization assistant both at Air Force Space Command, on the U.S. Strategic Command staff and at Headquarters Air Force. In March 2004, he deployed to Balad, Iraq as the 332nd Air Expeditionary Wing Vice Commander and Director of Staff.

Membership Meeting 3/24/2021
2021-03-24 17:00 - 19:30 | Virtual via Zoom, MD
Chapter Business Meeting Slides: 2021-03-24 Meeting Presentation

Speaker Slides: 2021-03-24 ISSA Talk Medical Device Security
Meeting Recording: Meeting Recording 2021-03-24

Topic: Medical Device Security: A Thing Smart People Do
As the global medical device market has expanded, so too has there been an increasing demand for the cyber professionals necessary to secure these systems and ensure their safe clinical operation. The cybersecurity of medical devices encompasses a unique and diverse set of security disciplines, combining traditional cyber and privacy principles with a knowledge of basic physiology and common clinical functions. This talk explores the rapidly growing field of medical device security and the evolving role of the security professional, with a focus on the relationship between device security, patient safety and regulatory science. Attacker roles and medical device threat models will be examined through real-world examples of medical systems that have undergone rigorous security analyses as part of the regulatory review process. These case studies will illustrate the unique skill set required of the medical device security professional and the important role they play in the medical device market.

Speaker: Avi Rubin, JHU Information Security Institute

Dr. Aviel (Avi) D. Rubin is Professor of Computer Science and Technical Director of the Information Security Institute at Johns Hopkins University. He is also the Director of the JHU Health and Medical Security Lab. Prior to joining Hopkins, Rubin was a research scientist at AT&T Labs. His is also the founder of Harbor Labs, a CyberSecurity company. Rubin testified about information security before the U.S. House and Senate on multiple occasions, and he is the author of several books about computer security. Rubin is a frequent keynote speaker at industry and academic conferences, and he delivered a widely viewed TED talk in 2011 and another TED talk in September 2015. He also testified in federal court as an expert witness on numerous occasions in matters relating to high tech litigation. Rubin served as Associate Editor of IEEE Transactions on Information Forensics and Security, Associate Editor of Communications of the ACM (CACM), and an Advisory Board member of Springer’s Information Security and Cryptography Book Series. In 2010-2011 Rubin was a Fulbright Scholar at Tel Aviv University. In January 2004 Baltimore Magazine named Rubin a Baltimorean of the Year for his work in safeguarding the integrity of our election process, and he is also the recipient of the 2004 Electronic Frontiers Foundation Pioneer Award. Rubin has a B.S, (’89), M.S.E (’91), and Ph.D. (’94) from the University of Michigan.

Membership Meeting 4/28/2021
2021-04-28 17:00 - 19:30 | MD
Chapter Business Meeting Slides: 2021-04-28 Meeting Presentation

Speaker Slides: 2021-04-28 3Step_Approach_SASupply Chain

Meeting Recording: Meeting Recording 2021-04-28
Topic: Cybersecurity Awareness: A 3-Step approach to Cybersecurity Preparedness and Operational Resiliency

The challenges created by accelerating technological innovation have reached new levels of complexity and scale. Governments, businesses, and academic organizations all face growing security threats against their infrastructures and accordingly it is imperative that organizations integrate Cybersecurity Awareness best practices into business processes and management strategies. Moreover, the cybersecurity posture of an organization is an integral factor in the overall health and viability the institution. Following this qualitative methodology and implementing a multifaceted approach to Cybersecurity Preparedness and Operational Resiliency can be achieved.

Speaker: Thomas Byrd, J.D., T. Rowe Price

Thomas Byrd, is the Head of the Cybersecurity Awareness program, Vice-President at T. Rowe Price. He spearheads associate education and risk mitigation efforts to confront current and emerging cyber threats.

Thomas Byrd has served as a Program Coordinator & Adjunct Professor of Cybersecurity at Stevenson University. In that role, he launched several technology modernization efforts to improve the online student learning experience. Thomas serves on the Board of Directors at the Center for Forensics Excellence, which is designed to serve as a model of excellence and support to the field of forensics and will assist in improving equal justice through training, research, publications, and resource sharing. He partnered with the Maryland State’s Attorneys’ Association (MSAA) and held a training for area prosecutors, police, and support staff. This Forensic Day event included information about forensic interviewing and digital and cyber forensics of IoT devices.
Thomas Byrd has served as a Senior Professional Staff member at Johns Hopkins University – Applied Physics Laboratory in the Critical Infrastructure Protection Group where his practical work, research, and educational pedagogy focus on planning, coordinating, and controlling information security locally, nationally and internationally. Thomas provided executive leadership and the development of technical solutions for core areas of Information Security that include operational, financial, and administrative performance. He provided executive counsel to senior leadership related to cyber security, fiscal administration, Risk Management Framework/DoD Acquisition, Supply Chain Risk Management, IT audit and compliance, cyber law, and legal policy at the Department of Defense (DoD), and the Department of Homeland Security (DHS). Ensuring a systematic approach to selecting, managing, and evaluating IT security investments in accordance with federal and DoD policies, standards, and regulations (e.g. FISMA, FIPS, CNSS, HIPAA/HITECH, NIST, DFARS) was also part of his portfolio.

Membership Meeting 5/26/2021
2021-05-26 17:00 - 19:30 | MD
Chapter Business Meeting Slides: 2021-05-26 Meeting Presentation

Speaker Slides: 2021-05-26 Jennifer Dickens Presentation
Meeting Recording: Meeting Recording 2021-05-26

Topic: Minorities in Cyber – A STEM Perspective on the Challenges and Successes Faced by Professionals in the Field
Ms. Dickens will discuss the various Cybersecurity and Technology programs she’s lead throughout her 20-year STEM career. Among her success, she has also faced challenges as a Cybersecurity leader and will share the strategies she used to overcome them.

Speaker: Jennifer Dickens, Internal Risk Mitigation Manager, National Oceanic & Atmospheric Administration (NOAA)

Jennifer Dickens has several years of success in providing strategic solutions and formulating innovative IT initiatives in the Federal Government. Jennifer is a 2020 Women of Color Magazine, Technology Rising Star award winner for her STEM leadership in the Federal Government. Currently, Jennifer serves as the Cyber Security Internal Risk Mitigation (IRM) Project Manager and Foreign National Foreign National – Internal Risk Mitigation (FN-IRM) Baseline Review Project Manager for the National Oceanic & Atmospheric Administration (NOAA). She leads the project efforts of NOAA’s Enterprise-wide Cyber Security Internal Risk Mitigation Program.
A resident of Silver Spring, Maryland, Jennifer received her Bachelor of Arts, Master of Business Administration, and Master of Science degrees from the University of Maryland. She earned a Federal Government Contracting Certification from George Mason University. Jennifer is a graduate of Leadership Montgomery’s Emerging Leaders, NOAA’s Leadership Seminar, Partnership for Public Service’s Federal IT Leaders cohort, and the Inaugural Class of the National Coalition of 100 Black Women LEAD Academy. Jennifer is a servant leader and advocate, actively serving on community and national organizations that focus on the betterment of Communities of Color. A daughter of two educators and granddaughter of pastors, Jennifer has always had a heart of service.
Jennifer is an active member of the Montgomery County, MD Alumnae Chapter of Delta Sigma Theta, Inc., the National Coalition of 100 Black Women, Prince George’s County, MD Chapter, Leadership Montgomery, and the Montgomery County, MD Pan-Hellanic Council, Inc. She is a board member of Adventure Theatre MTC, Community Bridges, Inc., and the Montgomery County Delta Alumnae Foundation.

Click Here to register for the May 26, 2021 Membership Meeting.

ISSA Mid-Atlantic Quarterly Meeting 6/23/2021
2021-06-23 17:00 - 19:30 | Virtual via Zoom, MD
Chapter Business Meeting Slides: 2021-06-23 Meeting Slides
Meeting and Speaker Recording: Click Here

Topic: Cyber Crime
Speaker: Amber Schroader, CEO & Founder, Paraben Corporation

Over the past three decades, Ms. Schroader has been a driving force for innovation in digital forensics. Ms. Schroader has developed numerous software programs, courses, and guides in the areas of recovering data from smartphones, computer hard drives, cloud, email, and gaming systems. Ms. Schroader’s established protocols for the seizure and processing of digital evidence that has been used by numerous organizations throughout the world. Ms. Schroader has coined the concept of the “360-degree approach to digital forensics” and “Forensics of Everything-FoE” with her focus on unique problems in digital evidence and solutions. Ms. Schroader has been a huge industry influence in pushing for a big-picture consideration of digital evidence. An accomplished design architect, curriculum developer, and instructor; Ms. Schroader has written and taught numerous classes for this specialized field as well as founded multiple certifications. Ms. Schroader continues to support her through book contributions and other industry speaking engagements.
Speaker: Sgt John Bedell, MD State Police
Sgt, John Bedell was just promoted to the position of Executive Officer for Criminal Investigation Bureau of the Maryland State Department of Police. He began his sixteen-year career as a patrol officer. As EO, he serves under the Lieutenant Colonel assisting in the operations and management of the Licensing Division, Criminal Enforcement Division, and Forensic Sciences Division. He works with the Executive Officers of the other bureaus to help coordinate inter-bureau activities. Prior to his current position he was a Digital Forensic Examiner for six years. He conducted scene triage as well as full forensic examination in a laboratory setting. He examined servers, computers and mobile devices with a variety of tools including EnCase, BlackLight, Axiom, Cellebrite, Oxygen, and other commercial software. Supervise all of the other examiners and assist in large projects as requested. He also served three years a Network Security Office and four years as Collision Reconstruction Specialist. He has a degree in Cybersecurity from the University of Maryland Global Campus. He is a GIAC Certified Incident Handler and Certified Forensic Examiner.

Membership Meeting 7/28/2021
2021-07-28 17:00 - 19:30 | MD
Chapter Business Meeting Slides: TBD

Speaker Slides: TBD

Topic: Cloud Infrastructure Cyber Kill Chain – Threats & Countermeasures
Attackers are maturing their TTPs to now exploit over-permissioned identities within AWS, Azure, and GCP; resulting in very prominent breaches. In this session we’ll define a new Cloud Infrastructure Cyber Kill Chain and explore these TTPs to expose unique methods of lateral movement, privilege escalation, role-chaining, and more. Real world examples and best practices countermeasures will also be covered.
Speaker: Mike Raggo, Cloud Security Engineer, CloudKnox Security

Michael T. Raggo has over 20 years of security research experience. Over the years he has uncovered numerous vulnerabilities in products including Samsung, Checkpoint, and Netgear. His current research focuses on hybrid cloud security risks and threats. Michael is the author of “Mobile Data Loss: Threats & Countermeasures” and “Data Hiding” for Syngress Books, and contributing author for “Information Security the Complete Reference 2nd Edition”. His Data Hiding book is also included at the NSA’s National Cryptologic Museum at Ft. Meade. A former security trainer, Michael has briefed international defense agencies including the FBI, Pentagon, and Queensland Police; and is a former participating member of FSISAC/BITS and the PCI Council. He is also a frequent presenter at security conferences, including Black Hat, DEF CON, Gartner, RSA, DoD Cyber Crime, OWASP, HackCon Norway, and SANS. He was also awarded the Pentagon’s Certificate of Appreciation.

Membership Meeting 8/25/2021
2021-08-25 17:00 - 19:30 | MD
Chapter Business Meeting Slides: 2021-08-25 Meeting Slides
Speaker Slides: Getting to Know your Pi-Hole

Additional resources from Ellipsis: https://www.ellipsisinfosec.com/post/resources-and-publications
Meeting and Speaker Recording: Zoom Meeting Recording

Topic: Getting to Know your Pi-Hole: Implementing advanced DNS security at home and small office

The powerful DNS Sinkhole technology has been used by corporations to help defend networks for years. Recently, this technology has been made available for home networks and small offices thanks to Pi-Hole. In this presentation, I’ll share my sometimes comical journey implementing a DNS sinkhole and provide resources in case you would like to try for yourself.
Speaker: Jeremy Druin, Principal Security Architect, Owner of Ellipsis Information Security
OSCP, GISF, GSEC, GCIH-GOLD, GWAPT-GOLD, GPEN-GOLD, GMOB, GXPN-GOLD, Sec+
Jeremy works as the Principal Security Architect for UPS where he created the application security, bug bounty and penetration testing programs. Jeremy is also the owner of Ellipsis Information Security where he provides security testing services and teaches secure application development and penetration testing courses.
As a Director of Education for the Kentucky ISSA chapter, Jeremy presents on various information security topics along with operating the “webpwnized” YouTube video channel. Additionally, Jeremy develops the open-source OWASP Mutillidae II training environment.
Jeremy has a Bachelors in Computer Science from Indiana University, a Graduate Certificate in Cybersecurity and Masters in Computer Science from the University of Louisville and is a GIAC-certified Web Application, Mobile and Network Security Penetration Tester.

Membership Meeting 9/22/2021
2021-09-22 17:00 - 19:30 | Hybrid – In Person at the Hub Spot and Virtual, 6724 Alexander Bell Dr., Columbia, MD, 21046, United States
Chapter Business Meeting Slides: 2021-09-22 Meeting Slides
Speaker Slides: 2021-09-22 Zero Trust

Meeting and Speaker Recording: Zoom Meeting Recording
Topic: Zero Trust Is Not a Destination, But A Continual Journey

As you are aware, there is a lot of confusion on what “Zero Trust” is. Most of this comes from different technology manufacturers marketing their products as the solution to Zero Trust. While all of them play some part in an overall Zero Trust journey, there is no platform which provides a full Zero Trust solution.
Optiv’s opinion is that Zero Trust is a not a destination, but instead a continual journey that provides a broader systematic approach to help clients demystify the complexities of Zero Trust.
Speaker: John Humenick, Cybersecurity and Business Risk, Optiv
John is based in the Philadelphia region and has been working the IT industry for over 20 years. During that time, he has covered system integration, coding and development, virtualization, and more recently cybersecurity and business risk. He has worked as a Solutions Architect at Optiv for the last five years and is a graduate of Penn State.

Membership Meeting 10/27/2021
2021-10-27 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2021-10-27 Meeting Slides

Meeting and Speaker Recording: Zoom Meeting Recording
Topic: Intellectual Property Espionage
Cliff will talk about an intellectual property espionage case study and discuss how focused curiosity can help you develop solutions.

Speaker: Cliff Stoll, Founder of Acme Klein Bottles
Dr. Cliff Stoll has had a variety of careers over his lifetime. Presently he is the CBO (Chief Bottle Officer) and founder of Acme Klein Bottles. He is also an author of 3 books: The Cuckoo’s Egg, Silicon Snake Oil, and High Tech Heretic. He was a System Administrator at Berkeley. He is also an astronomer. And as a self-proclaimed mad scientist, he has one major accomplishment that few people in the world can claim; he successfully tracked a nation state spy through the Internet. In his search for a 75 cent glitch, he highlighted problems with the network and created some unique solutions that helped the advancement of intrusion detection and digital forensics.

ISSA Mid-Atlantic Qtrly Summit
2021-11-11 18:30 - 20:00 | MD
The Solarwinds Attack has caused government and private sector organizations to renew their focus on strengthening Cybersecurity Supply Chain Risk Management. By statute, federal agencies must use NIST’s C-SCRM and other cybersecurity standards and guidelines to protect non-national security federal information and communications infrastructure. The SECURE Technology Act and FASC Interim Final Rule gave NIST specific authority to develop C-SCRM guidelines. Matthew Butkovic, Technical Manager of the Cybersecurity Assurance, Software Engineering Institute will moderate a discussion with Dr. George Duchak, Chief Information Officer, DLA Information Operations and Robert S. Metzger, Shareholder at the Rogers, Joseph, O’Donnell Washington, D.C. law firm’s Cybersecurity and Privacy Practice Group to share their thoughts about designing stronger cybersecurity risk management strategies and approaches.

Membership Meeting 11/18/2021
2021-11-18 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Note: The November 18, 2021 will be held on the third Thursday of the month.
Chapter Business Meeting Slides: 2021-11-18 Meeting Slides
Speaker Slides: 2021-11-18 Space_Enterprise_Trends_Risks_and_Securing_the_Future

Meeting and Speaker Recording: Zoom Meeting Recording
Topic: Protecting and Securing Data
Billions of people around the world rely on operations conducted across the space enterprise. Space systems support critical functions including navigation, communications, agriculture, financial exchange, and emergency services. Current and emerging markets for space services range from GPS and broadband connectivity to environmental monitoring and on-orbit manufacturing.
The volume of data travelling across information systems in satellite, ground, and user segments continues to escalate due to a range of factors and trends, including the commercialization of space with the transportation of cargo, experiments, and payload; human space flight; resupply to the International Space Station; Space as a Service (SaaS) and Ground Station as a Service (GSaaS); and the push to the moon and Mars.
Adversaries seek to exploit vulnerabilities and threats across this increased threat plane through unauthorized access, malware, denial of service, supply chain, and other opportunities. Guidance, best practices, and a defense-in-depth approach to protecting and securing data and information is a key priority and continues to evolve in the government and commercial sector to outpace the threat.

Speaker: Lori Gordon, Aerospace Corporation
Lori Gordon is a senior project engineer and technology strategist in the Corporate Chief Engineer’s Office at The Aerospace Corporation, focusing on Space Enterprise Integration (SEI) and Space Enterprise Risk (SER) to cyber and physical infrastructure. During her career, she has led efforts to coordinate national strategies and initiatives to enhance the resilience of U.S. critical infrastructure, mitigate national security and civil space enterprise risk, and accelerate technology innovation in complex systems. She has advised U.S. and international standards development organizations and academic curriculum boards on autonomous systems, cybersecurity, and the next generation workforce. Gordon has a master’s in public administration from the University of Massachusetts and a bachelor’s in geography from the University of Maryland. She is a Partner with The Aerospace Corporation’s Center for Space Policy and Strategy and is a Visiting Fellow at the National Security Institute.

Membership Meeting 12/15/2021
2021-12-15 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2021-12-15 Meeting Slides
Meeting and Speaker Recording: Zoom Meeting Recording

Topic: Reducing Advanced Threat Dwell-Time with Behavior Analytics
Discussion on Security gap covered using Behavior analytics, both in the enterprise and cloud. We will discuss the traditional methods, quick overview of Behavior detection, value prop and operationalizing in a small team.

Speaker: Alex Attumalil, Global Cyber Security Leader at Under Armour
Mr. Attumalil is a technology leader with 21years of experience, developing and leading information security programs and global cyber operations teams. In this role, he has built great teams, empowered to deliver technical cyber risk mitigations, and aspires to increased accountability and ownership. His transformational vision drives risk-centric policies and innovative proactive mitigations, while his strong business acumen propels frictionless deployment of strategic global initiatives. Further, his cross-functional efforts to build consensus among leaders have allowed projects to be delivered on schedule and within budget. Mr. Attumalil builds strong, performance-focused partnerships with his technology providers, motivating them to improve their product offerings, thus driving business value to the partners and their customers. He is an active participant in customer advisory boards and technology conferences where he shares his vision and builds consensus to drive solutions for a secure enterprise.

Membership Meeting 1/26/2022
2022-01-26 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
January Membership Meeting is Proudly Sponsored by:

Chapter Business Meeting Slides: 2022-01-26 Meeting Slides
Speaker Slides: Internet Crimes Against Children – Joe Dugan – 2022-01-26

Meeting and Speaker Recording: Zoom Meeting Recording
Topic: Origin and Mission of the ICAC Task Force
The presentation will explain the origin and mission of the Internet Crimes Against Children (ICAC) Task Force. We will discuss the many ways our children can find themselves in trouble on the internet, such as, loss of privacy, exposure to graphic content both from imagery and online games. We will touch on the subject of our children creating and sharing CSAM (Child Sexual Abuse Material, also referred to as child pornography) and how this can create a lifelong problem for our children. We will also talk about the dangers of Online Predators and how a child’s need to feel they belong, put them at risk Human Trafficking.
Speaker: Joe Dugan, Child Abuse/ICAC Detective at the Harford County Sheriff’s Office

Joe Dugan has 37 years Law Enforcement Experience. He has worked as a Homicide Detective in Baltimore City and as a member of the HIDTA Task Force. The last seven years of his career was as a Child Abuse/ICAC Detective at the Harford County Sheriff’s Office, Harford County Child Advocacy Center. He now works as an Internet Safety Specialist with the Maryland State Police
Click Here to register for the January 26, 2022 ISSA Membership Meeting.

Membership Meeting 2/23/2022
2022-02-23 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-02-23 Meeting Slides
Business Meeting Recording: Zoom Meeting Recording

Topic: Emerging Technologies, Existing Policies and Architectures
This presentation we will discuss current architectures and policies and how it’s hard to match the speed of change. That the coalition of the willing can create change through sharing and leveraging the grassroots of organizations and drive-up consistencies in leveraging what you have to meet new constructs and open a discussion on what policies are required.
Speaker: Stephanie Neely, Defense Information Systems Agency

Stephanie Neely has 27 years of experience in cybersecurity and cyber operations. She has worked both sides of the fence as an ISSM to NOCs and SOCs. Currently she leads a team to ensure the Department of Defense Information Networks (DODIN) are postured through unified actions that deliver the successful evolution of modernized technology solutions. Currently we are working on defining zero trust minimum capability standards for the DODIN and will be performing risk assessments against each DAO’s architecture.

Membership Meeting 3/23/2022
2022-03-23 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-03-22 Meeting Slides
Speaker’s Recording: Zoom Meeting Recording – Speaker Recording

Meeting Sponsor Presentation: ASPG-Sponsor-Presentation-2022-03-22.pdf
Topic: Human Security Engineering: Stop Relying on the Failed Human Firewall
While the main perception is that the “user problem” is due to a malicious party trying to trick well intentioned users, users who are unaware, apathetic, careless, etc., are more likely to be the cause of loss. Either way, the cybersecurity industry realizes this and develops tactics such as awareness, MFA, DLP, etc. to mitigate the problem. Despite all of these tactics, 90%+ of all losses result from attacks targeting users. What this talk proposes is a comprehensive strategy to address the insider threat, whether it results from malicious or well meaning insiders.
Speaker: Ira Winkler, Chief Security Architect for Walmart

Ira Winkler, CISSP is Chief Security Architect for Walmart and author of You Can Stop Stupid. He is considered one of the world’s most influential security professionals, and has been named a “Modern Day James Bond” by the media. He did this by performing espionage simulations, where he physically and technically “broke into” some of the largest companies in the World and investigating crimes against them, and telling them how to cost effectively protect their information and computer infrastructure. He continues to perform these espionage simulations, as well as assisting organizations in developing cost effective security programs. Ira also won the Hall of Fame award from the Information Systems Security Association, as well as several other prestigious industry awards. CSO Magazine named Ira a CSO Compass Award winner as The Awareness Crusader. Most recently, Ira was named 2021 Top Cybersecurity Leader by Security Magazine.
Click Here to register for the March 23, 2022 ISSA Membership Meeting.

Membership Meeting 4/27/2022
2022-04-27 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-04-27 Meeting Slides
Speaker Presentation: PowerShell Remote Access and Demonstration Link
Meeting Recording (Business and Speaker): Zoom Meeting Recording – Meeting Recording
Topic: PowerShell Remoting
One of the powers of PowerShell is its ability to send commands to multiple machines at once. In this brief overview, I will cover all the various ways to use PowerShell remoting to accomplish your tasks. We will be connecting 1 on1, 1 to many, connecting to remote applications and even a Linux machine via SSH. That’s right PowerShell remoting via SSH instead of WinRM.

Speaker: James Honeycutt
Mr. Honeycutt has served in the military for 24 years. He has spent most of that time working in IT Operations in various positions, from helpdesk to a Microsoft Windows systems administrator. He currently works for the Maryland National Guard Cyber Protection Team (CPT) as a Cyber Operations Technician with a focus on incident response, forensics, and being the resident “Windows Expert”. In his off time, he likes to give back to the community by presenting at local community events. He spent time peer reviewing SANS SEC586: Blue Team Operations: Defensive PowerShell. He has presented at like BsidesCharm, AvengerCon, ISC2 Baltimore Chapter, ISSA Central Maryland Chapter, and University of Central Arkansas Community Outreach. He also enjoys teaching. He has been a SAN Mentor/Community instructor for SEC505: Securing Windows and PowerShell Automation, SEC511: Continuous Monitoring and SOC Operations. He was a teaching assistant for a Cyber Security Bootcamp offered by Trilogy. He also teaches at Howard Community College as an adjunct instructor. He currently holds a Bachelor of Science in Management in Information Systems, GIACx10, CISSP, C|EH, SEC+, VCP5-DCV.

Mid-Atlantic Quarterly Meeting
2022-05-17 18:30 - 20:00 | Virtual via Go To Meeting, MD

Membership Meeting 5/25/2022
2022-05-25 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-05-25 Meeting Slides
Speaker Slides: Speaker slides can be obtained from the VP of Operations (V_P_Operations@centralmarylandc-y5eorcwrmb.live-website.com)

Topic: Security, Identity and Compliance with AWS, Infrastructure and Services to Elevate Your Security in the Cloud

AWS has various security services, including identity management, detective controls, infra and data protection, and incident response services you can use in Amazon’s cloud. This presentation will discuss these services available via the Amazon AWS cloud.

Speaker: Conrad Fernandes, Principal Engineer at Amazon

Conrad Fernandes is an information security leader in Public Sector for the past 20 years. At Booz Allen, Conrad led the Computer Network Defense (CND) Reference Architecture initiative for the US Department of Defense (DoD) and the National Security Agency (NSA). He also conducted threat and forensics analysis at DoD Cyber Crime Center (DC3) to dissect nation-state activities targeted against the DoD and Defense Industrial Base (DIB). At the Johns Hopkins Applied Physics Laboratory, Conrad managed the Security Operations Center and extended defensive capabilities into commercial clouds such as Amazon Web Services (AWS) and Microsoft Azure. In his current role, Conrad is a Principal Engineer at Amazon and works closely with National Security customers to ensure secure workload deployments in AWS and on-premises. When he’s not busy innovating security in hybrid cloud architectures, Conrad enjoys most outdoor activities and exploring National Parks across the country with his wife and adult son.

Membership Meeting 6/22/2022
2022-06-22 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-06-22 Membership Meeting Slides
Speaker Slides: OpenText – NDR Empowering Cyber – June-2022

Business Meeting and Speaker Recording: Zoom Meeting Recording
Topic: Achieving Vital Network Visibility and Proactive Threat Hunting with Network Detection and Response
Enterprise networks are experiencing a deluge of highly sophisticated threats from motivated attackers. Cloud computing, remote working, and traffic encryption expand the attack surface while making threats harder to detect. Addressing security gaps requires total visibility and a proactive approach to finding threats. This presentation will explore how Network Detection and Response (NDR) empowers security operations professionals in fast-evolving infrastructures.
Speaker: Carl Bolterstein is Director of Product Management for Bricata NDR
Carl Bolterstein is Director of Product Management for Bricata NDR for OpenText Enterprise Security. Carl has over a decade of cyber security engineering and analyst experience with an extensive background in the network detection and response platform space. He has focused on the full analyst experience of NDR which includes training on how to effectively leverage network data for both incident response and hunting for unknowns. Previously, he has held roles leading customer experience as well as technical roles in and around NDR platforms from sales to professional services.

Membership Meeting 7/27/2022
2022-07-27 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Click Here to register for the July 27, 2022 ISSA Membership Meeting.
Chapter Business Meeting Slides: 2022-07-27 Membership Meeting Slides
Speaker Slides: Chernovite’s Pipedream

Business Meeting and Speaker Recording: Zoom Meeting Recording
Topic: Chernovite’s Pipedream
Gain an in-depth look at old case studies and new research across 2021 highlighting new ICS threat groups, vulnerabilities, and insights from the field including incident response case studies of previously unreported incidents. This session will give a ground-truth reality and primer on what is really happening in our industrial environments.

Speaker: Ben Miller, Dragos

An information security veteran with over two decades experience, Ben has focused on the unique challenges of securing and defending industrial control systems. He began his critical infrastructure journey as an electric asset owner where he was responsible for detecting and responding to threats across a Fortune 150 enterprise where he became acquainted with security challenges for transmission, generation, and nuclear environments. Ben then joined the North American Electric Reliability Corporation (NERC). In what was to become the Electricity Information Sharing and Analysis Center (E-ISAC), Ben worked closely with federal agencies and industry across a variety threats, vulnerabilities, and other matters as it relates to the North American bulk electric system. He is an accomplished speaker at conferences around the world and occasionally writes for various publications. In his spare time he enjoys the simple pleasures of outdoor cooking with his family in Maryland.
Click Here to register for the July 27, 2022 ISSA Membership Meeting.

Membership Meeting 8/24/2022
2022-08-24 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
The August ISSA membership meeting is sponsored by:

Click Here to register for the August 24, 2022 ISSA Membership Meeting.
Chapter Business Meeting Slides: 2022-08-24 Membership Meeting Slides
Speaker Slides: 2202-08-24 Supply Chain Security

Topic: Supply Chain Security: Preventing Second Hand or Counterfeit Computing Device Components
Increasingly, large enterprise customers are requiring Original Design Manufacturers (ODMs) and/or Original Equipment Manufacturers (OEM) to show demonstrable proof that they have a secure supply chain. These manufacturers must prove, through controlled, documented, and audited means, that their supply chain ecosystem is secure throughout the product development lifecycle (pre-manufacturing through product end-of-life.) This legitimate concern is based on the growing threat posed by second hand or counterfeit computing device components. Disruptions in supply chains and the possible introduction of counterfeit components can increase risks to the proper functioning and overall reliability of electronic devices. Even worse, such contaminated platforms may include malware that could potentially lead to data theft or other types of system compromise. To prevent this, organizations should only partner with technology vendors that provide verifiable proof that their products are free of second hand or counterfeit components. To do so, a manufacturer should be able to trace serial numbers or similar identifiers that are stamped or embedded on hardware during downstream manufacturing. For software components, these manufacturers should work with their software vendors to ensure that only accurate, non-counterfeit software is ever installed on their products.
Speaker: Kevin McPeak, Deputy Director within the Lenovo Chief Security Office

Kevin McPeak, CISSP, ITILv3 is a Deputy Director within the Lenovo Chief Security Office. Kevin is a technical SME for endpoint management, endpoint security, data loss prevention, encryption, mobile device app management, secure mobile content delivery, and new defensive technologies. Kevin has two Masters of Science degrees, with one being earned at Johns Hopkins University and the other being earned at Virginia Tech. He is a part-time PhD candidate at Virginia Tech’s northern Virginia extension campus and is completing his dissertation. Kevin previously worked for Symantec Corporation where he was their Public Sector Principal Cybersecurity Architect. Prior to Symantec, Kevin worked as an on-site contractor (CACI, Lockheed Martin, and AlphaInsight) where he conducted cybersecurity work across numerous Federal Government agencies. Additionally, Kevin is a US Army veteran of both Operation Enduring Freedom (2003) and Operation Iraqi Freedom (2010 – 2011).
Click Here to register for the August 24, 2022 ISSA Membership Meeting.
