Central Maryland Chapter of ISSA

Membership Meeting 11/18/2021
2021-11-18 17:00 - 19:30 (America/New_York) | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Note: The November 18, 2021 will be held on the third Thursday of the month.
Chapter Business Meeting Slides: 2021-11-18 Meeting Slides
Speaker Slides: 2021-11-18 Space_Enterprise_Trends_Risks_and_Securing_the_Future

Meeting and Speaker Recording: Zoom Meeting Recording
Topic: Protecting and Securing Data
Billions of people around the world rely on operations conducted across the space enterprise. Space systems support critical functions including navigation, communications, agriculture, financial exchange, and emergency services. Current and emerging markets for space services range from GPS and broadband connectivity to environmental monitoring and on-orbit manufacturing.
The volume of data travelling across information systems in satellite, ground, and user segments continues to escalate due to a range of factors and trends, including the commercialization of space with the transportation of cargo, experiments, and payload; human space flight; resupply to the International Space Station; Space as a Service (SaaS) and Ground Station as a Service (GSaaS); and the push to the moon and Mars.
Adversaries seek to exploit vulnerabilities and threats across this increased threat plane through unauthorized access, malware, denial of service, supply chain, and other opportunities. Guidance, best practices, and a defense-in-depth approach to protecting and securing data and information is a key priority and continues to evolve in the government and commercial sector to outpace the threat.

Speaker: Lori Gordon, Aerospace Corporation
Lori Gordon is a senior project engineer and technology strategist in the Corporate Chief Engineer’s Office at The Aerospace Corporation, focusing on Space Enterprise Integration (SEI) and Space Enterprise Risk (SER) to cyber and physical infrastructure. During her career, she has led efforts to coordinate national strategies and initiatives to enhance the resilience of U.S. critical infrastructure, mitigate national security and civil space enterprise risk, and accelerate technology innovation in complex systems. She has advised U.S. and international standards development organizations and academic curriculum boards on autonomous systems, cybersecurity, and the next generation workforce. Gordon has a master’s in public administration from the University of Massachusetts and a bachelor’s in geography from the University of Maryland. She is a Partner with The Aerospace Corporation’s Center for Space Policy and Strategy and is a Visiting Fellow at the National Security Institute.

Membership Meeting 12/15/2021
2021-12-15 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2021-12-15 Meeting Slides
Meeting and Speaker Recording: Zoom Meeting Recording

Topic: Reducing Advanced Threat Dwell-Time with Behavior Analytics
Discussion on Security gap covered using Behavior analytics, both in the enterprise and cloud. We will discuss the traditional methods, quick overview of Behavior detection, value prop and operationalizing in a small team.

Speaker: Alex Attumalil, Global Cyber Security Leader at Under Armour
Mr. Attumalil is a technology leader with 21years of experience, developing and leading information security programs and global cyber operations teams. In this role, he has built great teams, empowered to deliver technical cyber risk mitigations, and aspires to increased accountability and ownership. His transformational vision drives risk-centric policies and innovative proactive mitigations, while his strong business acumen propels frictionless deployment of strategic global initiatives. Further, his cross-functional efforts to build consensus among leaders have allowed projects to be delivered on schedule and within budget. Mr. Attumalil builds strong, performance-focused partnerships with his technology providers, motivating them to improve their product offerings, thus driving business value to the partners and their customers. He is an active participant in customer advisory boards and technology conferences where he shares his vision and builds consensus to drive solutions for a secure enterprise.

Membership Meeting 1/26/2022
2022-01-26 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
January Membership Meeting is Proudly Sponsored by:

Chapter Business Meeting Slides: 2022-01-26 Meeting Slides
Speaker Slides: Internet Crimes Against Children – Joe Dugan – 2022-01-26

Meeting and Speaker Recording: Zoom Meeting Recording
Topic: Origin and Mission of the ICAC Task Force
The presentation will explain the origin and mission of the Internet Crimes Against Children (ICAC) Task Force. We will discuss the many ways our children can find themselves in trouble on the internet, such as, loss of privacy, exposure to graphic content both from imagery and online games. We will touch on the subject of our children creating and sharing CSAM (Child Sexual Abuse Material, also referred to as child pornography) and how this can create a lifelong problem for our children. We will also talk about the dangers of Online Predators and how a child’s need to feel they belong, put them at risk Human Trafficking.
Speaker: Joe Dugan, Child Abuse/ICAC Detective at the Harford County Sheriff’s Office

Joe Dugan has 37 years Law Enforcement Experience. He has worked as a Homicide Detective in Baltimore City and as a member of the HIDTA Task Force. The last seven years of his career was as a Child Abuse/ICAC Detective at the Harford County Sheriff’s Office, Harford County Child Advocacy Center. He now works as an Internet Safety Specialist with the Maryland State Police
Click Here to register for the January 26, 2022 ISSA Membership Meeting.

Membership Meeting 2/23/2022
2022-02-23 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-02-23 Meeting Slides
Business Meeting Recording: Zoom Meeting Recording

Topic: Emerging Technologies, Existing Policies and Architectures
This presentation we will discuss current architectures and policies and how it’s hard to match the speed of change. That the coalition of the willing can create change through sharing and leveraging the grassroots of organizations and drive-up consistencies in leveraging what you have to meet new constructs and open a discussion on what policies are required.
Speaker: Stephanie Neely, Defense Information Systems Agency

Stephanie Neely has 27 years of experience in cybersecurity and cyber operations. She has worked both sides of the fence as an ISSM to NOCs and SOCs. Currently she leads a team to ensure the Department of Defense Information Networks (DODIN) are postured through unified actions that deliver the successful evolution of modernized technology solutions. Currently we are working on defining zero trust minimum capability standards for the DODIN and will be performing risk assessments against each DAO’s architecture.

Membership Meeting 3/23/2022
2022-03-23 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-03-22 Meeting Slides
Speaker’s Recording: Zoom Meeting Recording – Speaker Recording

Meeting Sponsor Presentation: ASPG-Sponsor-Presentation-2022-03-22.pdf
Topic: Human Security Engineering: Stop Relying on the Failed Human Firewall
While the main perception is that the “user problem” is due to a malicious party trying to trick well intentioned users, users who are unaware, apathetic, careless, etc., are more likely to be the cause of loss. Either way, the cybersecurity industry realizes this and develops tactics such as awareness, MFA, DLP, etc. to mitigate the problem. Despite all of these tactics, 90%+ of all losses result from attacks targeting users. What this talk proposes is a comprehensive strategy to address the insider threat, whether it results from malicious or well meaning insiders.
Speaker: Ira Winkler, Chief Security Architect for Walmart

Ira Winkler, CISSP is Chief Security Architect for Walmart and author of You Can Stop Stupid. He is considered one of the world’s most influential security professionals, and has been named a “Modern Day James Bond” by the media. He did this by performing espionage simulations, where he physically and technically “broke into” some of the largest companies in the World and investigating crimes against them, and telling them how to cost effectively protect their information and computer infrastructure. He continues to perform these espionage simulations, as well as assisting organizations in developing cost effective security programs. Ira also won the Hall of Fame award from the Information Systems Security Association, as well as several other prestigious industry awards. CSO Magazine named Ira a CSO Compass Award winner as The Awareness Crusader. Most recently, Ira was named 2021 Top Cybersecurity Leader by Security Magazine.
Click Here to register for the March 23, 2022 ISSA Membership Meeting.

Membership Meeting 4/27/2022
2022-04-27 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-04-27 Meeting Slides
Speaker Presentation: PowerShell Remote Access and Demonstration Link
Meeting Recording (Business and Speaker): Zoom Meeting Recording – Meeting Recording
Topic: PowerShell Remoting
One of the powers of PowerShell is its ability to send commands to multiple machines at once. In this brief overview, I will cover all the various ways to use PowerShell remoting to accomplish your tasks. We will be connecting 1 on1, 1 to many, connecting to remote applications and even a Linux machine via SSH. That’s right PowerShell remoting via SSH instead of WinRM.

Speaker: James Honeycutt
Mr. Honeycutt has served in the military for 24 years. He has spent most of that time working in IT Operations in various positions, from helpdesk to a Microsoft Windows systems administrator. He currently works for the Maryland National Guard Cyber Protection Team (CPT) as a Cyber Operations Technician with a focus on incident response, forensics, and being the resident “Windows Expert”. In his off time, he likes to give back to the community by presenting at local community events. He spent time peer reviewing SANS SEC586: Blue Team Operations: Defensive PowerShell. He has presented at like BsidesCharm, AvengerCon, ISC2 Baltimore Chapter, ISSA Central Maryland Chapter, and University of Central Arkansas Community Outreach. He also enjoys teaching. He has been a SAN Mentor/Community instructor for SEC505: Securing Windows and PowerShell Automation, SEC511: Continuous Monitoring and SOC Operations. He was a teaching assistant for a Cyber Security Bootcamp offered by Trilogy. He also teaches at Howard Community College as an adjunct instructor. He currently holds a Bachelor of Science in Management in Information Systems, GIACx10, CISSP, C|EH, SEC+, VCP5-DCV.

Mid-Atlantic Quarterly Meeting
2022-05-17 18:30 - 20:00 | Virtual via Go To Meeting, MD

Membership Meeting 5/25/2022
2022-05-25 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-05-25 Meeting Slides
Speaker Slides: Speaker slides can be obtained from the VP of Operations (V_P_Operations@centralmarylandc-y5eorcwrmb.live-website.com)

Topic: Security, Identity and Compliance with AWS, Infrastructure and Services to Elevate Your Security in the Cloud

AWS has various security services, including identity management, detective controls, infra and data protection, and incident response services you can use in Amazon’s cloud. This presentation will discuss these services available via the Amazon AWS cloud.

Speaker: Conrad Fernandes, Principal Engineer at Amazon

Conrad Fernandes is an information security leader in Public Sector for the past 20 years. At Booz Allen, Conrad led the Computer Network Defense (CND) Reference Architecture initiative for the US Department of Defense (DoD) and the National Security Agency (NSA). He also conducted threat and forensics analysis at DoD Cyber Crime Center (DC3) to dissect nation-state activities targeted against the DoD and Defense Industrial Base (DIB). At the Johns Hopkins Applied Physics Laboratory, Conrad managed the Security Operations Center and extended defensive capabilities into commercial clouds such as Amazon Web Services (AWS) and Microsoft Azure. In his current role, Conrad is a Principal Engineer at Amazon and works closely with National Security customers to ensure secure workload deployments in AWS and on-premises. When he’s not busy innovating security in hybrid cloud architectures, Conrad enjoys most outdoor activities and exploring National Parks across the country with his wife and adult son.

Membership Meeting 6/22/2022
2022-06-22 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-06-22 Membership Meeting Slides
Speaker Slides: OpenText – NDR Empowering Cyber – June-2022

Business Meeting and Speaker Recording: Zoom Meeting Recording
Topic: Achieving Vital Network Visibility and Proactive Threat Hunting with Network Detection and Response
Enterprise networks are experiencing a deluge of highly sophisticated threats from motivated attackers. Cloud computing, remote working, and traffic encryption expand the attack surface while making threats harder to detect. Addressing security gaps requires total visibility and a proactive approach to finding threats. This presentation will explore how Network Detection and Response (NDR) empowers security operations professionals in fast-evolving infrastructures.
Speaker: Carl Bolterstein is Director of Product Management for Bricata NDR
Carl Bolterstein is Director of Product Management for Bricata NDR for OpenText Enterprise Security. Carl has over a decade of cyber security engineering and analyst experience with an extensive background in the network detection and response platform space. He has focused on the full analyst experience of NDR which includes training on how to effectively leverage network data for both incident response and hunting for unknowns. Previously, he has held roles leading customer experience as well as technical roles in and around NDR platforms from sales to professional services.

Membership Meeting 7/27/2022
2022-07-27 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Click Here to register for the July 27, 2022 ISSA Membership Meeting.
Chapter Business Meeting Slides: 2022-07-27 Membership Meeting Slides
Speaker Slides: Chernovite’s Pipedream

Business Meeting and Speaker Recording: Zoom Meeting Recording
Topic: Chernovite’s Pipedream
Gain an in-depth look at old case studies and new research across 2021 highlighting new ICS threat groups, vulnerabilities, and insights from the field including incident response case studies of previously unreported incidents. This session will give a ground-truth reality and primer on what is really happening in our industrial environments.

Speaker: Ben Miller, Dragos

An information security veteran with over two decades experience, Ben has focused on the unique challenges of securing and defending industrial control systems. He began his critical infrastructure journey as an electric asset owner where he was responsible for detecting and responding to threats across a Fortune 150 enterprise where he became acquainted with security challenges for transmission, generation, and nuclear environments. Ben then joined the North American Electric Reliability Corporation (NERC). In what was to become the Electricity Information Sharing and Analysis Center (E-ISAC), Ben worked closely with federal agencies and industry across a variety threats, vulnerabilities, and other matters as it relates to the North American bulk electric system. He is an accomplished speaker at conferences around the world and occasionally writes for various publications. In his spare time he enjoys the simple pleasures of outdoor cooking with his family in Maryland.
Click Here to register for the July 27, 2022 ISSA Membership Meeting.

Membership Meeting 8/24/2022
2022-08-24 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
The August ISSA membership meeting is sponsored by:

Click Here to register for the August 24, 2022 ISSA Membership Meeting.
Chapter Business Meeting Slides: 2022-08-24 Membership Meeting Slides
Speaker Slides: 2202-08-24 Supply Chain Security

Topic: Supply Chain Security: Preventing Second Hand or Counterfeit Computing Device Components
Increasingly, large enterprise customers are requiring Original Design Manufacturers (ODMs) and/or Original Equipment Manufacturers (OEM) to show demonstrable proof that they have a secure supply chain. These manufacturers must prove, through controlled, documented, and audited means, that their supply chain ecosystem is secure throughout the product development lifecycle (pre-manufacturing through product end-of-life.) This legitimate concern is based on the growing threat posed by second hand or counterfeit computing device components. Disruptions in supply chains and the possible introduction of counterfeit components can increase risks to the proper functioning and overall reliability of electronic devices. Even worse, such contaminated platforms may include malware that could potentially lead to data theft or other types of system compromise. To prevent this, organizations should only partner with technology vendors that provide verifiable proof that their products are free of second hand or counterfeit components. To do so, a manufacturer should be able to trace serial numbers or similar identifiers that are stamped or embedded on hardware during downstream manufacturing. For software components, these manufacturers should work with their software vendors to ensure that only accurate, non-counterfeit software is ever installed on their products.
Speaker: Kevin McPeak, Deputy Director within the Lenovo Chief Security Office

Kevin McPeak, CISSP, ITILv3 is a Deputy Director within the Lenovo Chief Security Office. Kevin is a technical SME for endpoint management, endpoint security, data loss prevention, encryption, mobile device app management, secure mobile content delivery, and new defensive technologies. Kevin has two Masters of Science degrees, with one being earned at Johns Hopkins University and the other being earned at Virginia Tech. He is a part-time PhD candidate at Virginia Tech’s northern Virginia extension campus and is completing his dissertation. Kevin previously worked for Symantec Corporation where he was their Public Sector Principal Cybersecurity Architect. Prior to Symantec, Kevin worked as an on-site contractor (CACI, Lockheed Martin, and AlphaInsight) where he conducted cybersecurity work across numerous Federal Government agencies. Additionally, Kevin is a US Army veteran of both Operation Enduring Freedom (2003) and Operation Iraqi Freedom (2010 – 2011).
Click Here to register for the August 24, 2022 ISSA Membership Meeting.

Membership Meeting 9/28/2022
2022-09-28 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
The September ISSA Membership Meeting is sponsored by:

https://bigid.com
Chapter Business Meeting Slides: 2022-09-28 Meeting Presentation
Speaker Slides: 2022-09-28 DIVERSITY, PIPELINES, BARRIERS

Topic: DIVERSITY, PIPELINES, BARRIERS

Speaker: Martha Laughman

First Cybersecurity Mil Skillbridge Program
First DOL Cyber Apprenticeship in MD
First All-Female Cyber Apprenticeship
Founding Board Member of WiCys Mil Affiliate
NICE Working Group Member
Executive Director of GA Cyber Bootcamp
Served on 4 boards of Tech Start Ups
Co-Founded Esport Non-profit for Mil Kids
BS + MS Industrial Organizational Psyc
PhD (ABD) Organizational Psychology
Selected for Maryland DOL Gov Board

Membership Meeting 10/26/2022
2022-10-26 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: October 26, 2022 ISSA Central MD Membership Meeting
ISSA International Welcome: ISSA Chapter Welcome 2022 Dr. Murray
Speaker Slides: S3_GSG_ACTIVE SHOOTER PREPAREDNESS_2022
Meeting Recording: October 26, 2022 Membership Meeting and Speaker Recording

Topic: Active Shooter/Assailant Preparedness for Business and Schools
The world seems to have gotten more intense and scarier since the pandemic started in early 2020. Although we have seemed to have come back to some sense of normalcy in 2022, there is also a cloud of uncertainty and fear that has even the best of us feeling vaguely unsettled. Unfortunately, this type of social environment can breed the worst type of criminal mind; a psychopathic one, that has rationalized people unlike them, or because of “them” have to die. This means that these cowardly and mentally disturbed individuals may attack areas of our society that National Security experts deem as “soft targets”, that being grocery stores, malls, retail businesses, and community organizations such as schools and parks. What can we do to defend against the unthinkable? What this conversation will propose are well-thought-out tactical and strategic methodologies borne from anti-terrorism, force protection, and the intelligence community; to help everyday business people and citizens prepare for an Active Shooter/Assailant when necessary.
Speaker: Bobby Sheppard, S3 Global Security Group LLC (S3 GSG)
Mr. Bobby L. Sheppard delivers over 26 years of combined experience in law enforcement, intelligence, and cybersecurity. For the last 17 years, Mr. Sheppard has worked within the intelligence community, serving as a Team Leader, Senior Intelligence Analyst, and Program Coordinator, providing Counterterrorism/Counterintelligence and Cyber Threat Intelligence analysis, and operations in support of highly classified missions abroad and at home. Prior to Mr. Sheppard’s serving within the Intelligence Community, he served as a federal law enforcement officer and Executive Protection agent for 9 years with the U.S. CAPITOL POLICE AND CIA respectively. Mr. Sheppard has received extensive training and experience in Anti-terrorism/Force Protection, surveillance, counter-surveillance, surveillance detection, Incident Management Response; CBRN detection and response; as well as COOP AND COG operations for federal government entities to include the Department of Homeland Security.

Membership Meeting 11/16/2022
2022-11-16 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: Membership Meeting, November 16, 2022
Speaker Slides: 2022-11-16-Cyber-CSI-Ford
Meeting Recording: November 16, 2022 Membership Meeting and Speaker Recording

Topic: CSI:Cyber – What did they get wrong and right?
In 2015, CBS launched the 4th spin-off of the original CSI TV show called CSI:Cyber. The show focused on an FBI unit that worked to solve various cyber-crimes such as theft, hacking, extortion and even murder. The series lasted only two seasons and quickly became a running joke among the cyber security community due to outlandish, impossible, and unrealistic scenarios. However, the show got some things right which we will talk about and explore things that just didn’t quite hit the mark in an episode from season 2.

Speaker: Rebecca Ford
Rebecca Ford is a senior cyber threat intelligence analyst at a Fortune 50 Media & Entertainment company where she built and runs their cyber threat intelligence program. Rebecca has over 15 years of experience in cyber security and intel working for the US government as a North Korea cyber subject matter expert and is now in the private sector focusing on cyber threats targeting the media & entertainment business, retail and hospitality, cruise lines and theme parks.
When Rebecca isn’t studying cyber criminal activity, she and her husband like walking their French Bulldog FiFi, volunteering at veteran transition organizations, and working on puzzles.

Membership Meeting 12/14/2022
2022-12-14 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: Membership Meeting, December 14, 2022
Speaker Slides: Supply-Chain-Security_Supplier-Contractor-Relationships-in-Negotiated-Contracts-12-14-2022

Topic: Supply Chain Security: Supplier/Contractor Relationships In Negotiated Contracts
Over the past 5 years, the world has seen unprecedented interest-in and allocation-of resources toward Cyber Security in both the public and private sectors. The Supply-Chain has been stressed to its very limits and Third-Party relationships have been similarly stressed with the “trust but verify-verify-verify” protocol meaning more today than ever before. Pre- and Post- Covid, our relationships with our Business partners have taken on never before seen uncertainty in supply categories for security, reliability, and visibility, as to who is providing what and how secure it will be upon arrival. At the heart of these Business partner relationships are Contracts … and provisions within Contracts which stipulate 1) information and product security requirements; 2) adherence to Cyber Security Frameworks (CSFs), and 3) the providing of evidence (proof) which demonstrates the “Cyber Maturity” of a counterparty. During the December 14th 2022 presentation to ISSA-Md, the Information Systems Security discussion will center on Standard Cyber Security Contract Provisions which have been dictated by Risk Analysis Tenets and overlapping Cyber Security Frameworks (such as NIST, ISO, Cobit, etc.) as well as legal requirements in the FAR, the DFARS, and CMMC 2.0, which will affect U.S. Government contractors and private sector stakeholders.

Speaker: Todd Hinson – Constellation Energy
Mr. Todd Hinson is a Cybersecurity Contracts Principal with Constellation Energy in Baltimore, Maryland.
Todd began his career in the U.S. Army Intelligence Corp as part of Electronic Warfare Operations in Europe before becoming a U.S. Government Contractor with Contel and GTE serving at the Pentagon-JCS, NSA-HQ, DIA-HQ, and in South Korea with the Korean Intelligence Support System (KISS). After having taken a sabbatical to raise five children (two sets of twins), Todd returned to U.S. federal service with the DOJ/U.S. Attorneys Office-Baltimore, followed by stints with “Top-10” international Banking and Finance law firms Weil, Gotshal & Manges and Allen & Overy in Washington, D.C. during the fall-out from the 2007-2008 Global Financial Crisis. Todd has also served the Office of General Counsel of the American Bankers Association, T. Rowe Price, Exelon Corporation, and currently Constellation Energy.
Todd’s Cybersecurity professional development began with NOC and Data Center operations, then diverted into Law and Banking from a systems resiliency perspective, and has returned to the assurance of Information Confidentiality, Integrity, and Availability (CIA) within Supply-Chain and Third-Party contracts, after having completed his M.S. in Engineering (Cybersecurity Policy & Compliance) from The George Washington University in 2021.
LinkedIn Bio: https://www.linkedin.com/in/todd-hinson-05607534

Click Here to register for the December 14, 2022 ISSA Membership Meeting.

Membership Meeting 1/25/2023
2023-01-25 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: Membership Meeting, January 25, 2023

Speaker Slides: Ransomware A Risk Management Strategy Jan 2023

Topic: Ransomware: A Risk Management Strategy
Organizations’ globally are dealing with a scourge in ransomware. Just note the following statistics:

Experts estimate that a ransomware attack will occur every 11 seconds in 2021. (Cybercrime Magazine, 2019) and
The average ransom fee requested has increased from $5,000 in 2018 to around $200,000 in 2020. (National Security Institute, 2021)

It is clear the ransomware is here to stay. So the strategy must move beyond just prevention, to How do you manage the inevitable ransomware event? Our discussion will look at some key pillars of cybersecurity risk management and a few practical things to have in place preferably before you are a victim. Attendees will obtain tools, steps and processes necessary to ensure a ransomware event does not leave them without a way to continue operations.

Speaker: Danyetta Fleming Magana, Covenant Security
Danyetta Fleming Magana is a Certified Information Systems Security Professional (CISSP), F. ISRM whom founded Covenant Security Solutions in 2003. Her goal is to push the envelope regarding how we think about our information and find new and innovative ways to secure our digital way of life. Mrs. Magana is a Certified Information Systems Security Professional (CISSP) a globally recognized certification in the information security arena. She has been published in the and interviewed as an expert on Federal News Radio’s “Mark Amtower Show.” In 2001, Mrs. Magana received the Black Engineer of the Year Award for the “Most Promising Engineer in Government.” Mrs. Magana presently serves on several advisory boards and also previously served as a Fellow with the Institute for Critical Infrastructure Technology (ICIT), a Washington DC based think tank that briefs Congress, Senate and the Senior Executives of the U.S. Federal government on matters related to Cybersecurity and Critical Infrastructure. In addition, Mrs. Magana was a recipient of the Army’s Achievement Medal for Civilian Service. Her company was recognized by Diversity Business for 2014, 2012 and 2011 as one of the “Top 500 African American Owned Business’ in the US”. In addition her company was honored in the Inc. 5000, as one of America’s Fastest Growing Companies for 2014. Lastly, her company was recognized by CIO Review Magazine as one of the “20 Most Promising Enterprise Security Companies in 2015″. Mrs. Magana is a graduate of the University of Illinois Urbana-Champaign with a B.S. in Engineering.

Membership Meeting 2/22/2023
2023-02-22 17:00 - 19:30 | Convergint | Federal, 6650 Eli Whitney Dr, Suite 400, Columbia, MD, 21046, United States
Click Here to register for the February 22, 2023 ISSA Membership Meeting
Chapter Business Meeting Slides: Membership Meeting, February 22, 2023
Speaker Slides: 2023-02-22 Making the Shift to Risk-Based – Brown

Topic: Risk-Based Security
With so many cybersecurity technologies and services available, how do organizations get started with evaluating the managed detection and response (MDR) option that is right for them? Lyndon Brown, Pondurance Chief Strategy Officer weighs in on how to select the MDR provider that fits your needs best. In this session, Brown will discuss:

How to shift to risk-based security.
The ongoing evolution of the MDR space .
Questions to ask MDR providers during the selection process.

Speaker: Lyndon Brown
Mr. Lyndon Brown brings a career focus in building high-growth technology companies to Pondurance where he is responsible for Product Management, Corporate Development, Marketing and driving cross-functional performance. Prior to joining Pondurance, Lyndon served as Vice President of Business Development at FireEye Mandiant, where he focused on strategic growth initiatives. As an executive, Lyndon has successfully led product management, M&A, and global partnerships at firms such as Verodin (acquired by FireEye) and Endgame (acquired by Elastic).

Click Here to register for the February 22, 2023 ISSA Membership Meeting

Membership Meeting 3/22/2023
2023-03-22 17:00 - 19:30 | Convergint | Federal, 6650 Eli Whitney Dr, Suite 400, Columbia, MD, 21046, United States
Chapter Business Meeting Slides: 2023-03-22 Meeting Slides
Speaker Slides: 2023-03-22 Security Architecture Post Covid

Topic: Security Architecture in the Age of Covid
Security Architecture was hard enough, but then Covid sent all of your employees home. A Remote Access infrastructure meant for a fraction of your employees now had to support everyone. Three years later no one wants to go back into the office. Your security architecture needs to adapt to secure your employees now wherever they may be, how are you going to do it?

Speaker: Christopher McGranahan, Director of Security Architecture at BackBlaze
Chris McGranahan currently works as the Director of Security Architecture and Engineering at Backblaze. He has more than twenty years of experience in cybersecurity in a wide variety of roles in multiple industries.

Membership Meeting 4/26/2023
2023-04-26 17:00 - 19:30 | Convergint | Federal, 6650 Eli Whitney Dr, Suite 400, Columbia, MD, 21046, United States
Chapter Business Meeting Slides: 2023-04-26 Meeting Presentation
Speaker Slides: Cyber 911 Presentation
Click Here to view promotional Video

Topic: Who ya gonna call?
If there was something strange in your neighborhood, who ya gonna call? The answer is obviously, the Ghostbusters! Now if you looked outside your window, and noticed that your neighbor’s house had caught on fire, who ya gonna call? 911, and ask help from your local fire department! Let’s say you saw a bad car crash, and emergency services are needed urgently, who ya gonna call? 911 again, and ask for an ambulance or local EMT to be dispatched as quickly as possible! Now lets say that an elderly member of your community receives an email from someone that claims to be Microsoft, and demands that they send thousands of dollars in “licensing fees” to avoid criminal prosecution, who ya gonna call? That last one is where people suddenly don’t have a good answer. During a cyber emergency, most people don’t have the luxury of figuring out how to call for help on their own. We will discuss a number of strategies that cybersecurity professionals can use to help answer this last question, and hopefully stimulate good discussions on how we can better protect our communities from the growing cyber threat!

Speaker: Colin Hamill – Founder & IT Solutions Designer, Sentinel Forge Technologies
Colin has always had a deep fascination and passion for working with computers and using them to solve problems. This passion led Colin to study Computer Science at the University of Maryland, College Park, where he first met his now-wife, Melanie. It led him to a more than 15-year career as an Enterprise Presales Solutions Designer, where he would build solutions for his clients using different pieces of technology as “building blocks” to solve their technical problems. Regardless of the specific technologies included, Colin strove to communicate his solutions & designs in a clear & comprehensible way, free of the jargon and alphabet-soup acronyms that can make the IT industry inaccessible for most of the population. His passion drove him to continue his education, and he attended night classes at Loyola University after work and he earned his Master of Business Administration (MBA), with a focus on Information Systems. Colin’s MBA showed him how he could use his “technology building blocks” to solve his clients business problems & their technical problems at the same time.
Colin recently started his own business, Sentinel Forge Technologies, after seeing the impact on fuel supplies after the Colonial Pipeline Cyberattack of May 2021. Colin has focused his efforts on combating the ever-increasing threat of Ransomware and Cyberattacks on critical US infrastructure and to help train the next generation of Cyber 911s. He believes that protecting America’s food supply is of utmost importance and that securing it will mean protecting every link in the agriculture supply chain, both large & small.

Membership Meeting 5/24/2023
2023-05-24 17:00 - 19:00 | MIC – Maryland Innovation Center, 6751 Columbia Gateway Dr, Columbia, 21046
Chapter Business Meeting Slides: 2023-05-24 Meeting Presentation
Speaker Slides: None

Topic: The Value Of Engaging Cybersecurity Communications
Keeper Security Director of Global Communications Anne Cutler will share her unique career path from anchoring the evening news in a small town in Wyoming to leading international communications for a global cybersecurity provider. Through her unusual background, Anne has developed a deep appreciation for the value of conveying complicated messages in plain language quickly, clearly, and accurately across all platforms, to include traditional and emerging media. She will discuss how she’s applied lessons from her national television experience to handling crisis communications; securing positive, proactive press; and building enduring relationships with journalists, partners, and stakeholders. Anne will explain the critical importance of communication in the ever-expanding field of cybersecurity with real-world examples, including the Shields Up campaign at the onset of the war in Ukraine and the unprecedented response to the Apache Log4J vulnerability.
Speaker: Anne Cutler, Keeper Security

Anne Cutler is a communications professional specializing in cybersecurity, with more than 15 years of industry experience and proven track record of growing brand awareness for organizations. Anne is the Director of Global Communications for Keeper Security, the leading provider of best-in-class password management, secrets management, privileged access, secure remote access and encrypted messaging. Anne leads public relations, cybersecurity research, analyst relations, social media, as well as all other internal and external communications for Keeper.
Prior to Keeper, Anne worked in government as the media strategist for the Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Homeland Security Science and Technology Directorate (DHS S&T). At CISA, Anne brought cybersecurity to the forefront of American consciousness through messaging and media engagement for the nation’s lead cyber defense agency. Anne was the communications lead for CISA’s Shields Up campaign- the agency’s cybersecurity response to the war in Ukraine. She conducted crisis communications response for major cyber incidents including Colonial Pipeline, JBS, and Kaseya ransomware attacks, and Apache Log4j vulnerability.
Anne began her career as a television news anchor and reporter at KCWY News in Casper, Wyoming. Her award-winning broadcasting career would take her to KOLO 8 in Reno, Nevada; WGNO News in New Orleans, Louisiana; and FOX 5 DC in Washington, DC, where she worked as an anchor, reporter, contributor and host, from hard-hitting breaking news to politics, exclusive reports, long-format, features, entertainment and talk shows.
She’s covered the COVID-19 pandemic, President Donald Trump’s impeachment, Brett Kavanaugh’s Supreme Court nomination, Robert Mueller’s Special Counsel investigation, high-profile trials including the first criminal trial for Paul Manafort and major breaking news stories including the mass shooting at the Capital Gazette newspaper, as well as uncovering a major crime ring in Virginia through tips received from her reporting. Anne’s been to the Super Bowl sidelines and World Series, done corkscrews in a fighter jet, been hit by flying fish in the Louisiana bayou, in the eye of a damaging hurricane along the Gulf Coast, and along fire lines in Wyoming, California and Nevada.
Anne is originally from Northern California and studied at University of California, Los Angeles, where she double majored in Mass Communications and Political Science. Her husband Joe is a Lt. Colonel in the US Marines and they have two sons, Brooks and Beau.

Membership Meeting 6/28/2023
2023-06-28 17:00 - 19:00 | MIC – Maryland Innovation Center, 6751 Columbia Gateway Dr, Columbia, 21046
Chapter Business Meeting Slides: 06-28-2023 Meeting Slides
Topic: Cybersecurity Maturity Model Certification (CMMC)

DoD’s Cybersecurity Maturity Model Certification (CMMC) Program was designed to provide increased assurance to the DoD that a DIB contractor can adequately protect sensitive unclassified information (i.e., FCI and CUI) at a level commensurate with the risk, and accounting for information flow down to its subcontractors in a multi-tier supply chain. CMMC was initially implemented as an interim DFARS rule in September 2020 (DFARS Case 2019-D041). In March 2021, in response to over 850 public comments, the program was modified and streamlined to CMMC 2.0. The revised CMMC Program aligns with existing cybersecurity models. Once implemented through the rulemaking process, when applicable through acquisitions vehicles, CMMC requirements will be required for prime contractors and their subcontractors. While the rule is being finalized, it is important to continue to prepare now! Come learn more about CMMC 2.0 and recommended next steps.
Speaker: Dawn M Greenman, Program Manager Cybersecurity Compliance for Johns Hopkins Applied Physics Laboratory (JHU/APL)

Dawn M Greenman is Program Manager Cybersecurity Compliance for Johns Hopkins Applied Physics Laboratory (JHU/APL). In this position, she oversees the cybersecurity compliance and supply chain risk management strategy across the organization. Since 2013, she has ensured JHU/APL’s compliance with DFARS 7012 and NIST SP 800-171. During this time, she developed relationships with the small business community and learned of the unique challenges small businesses had meeting the cybersecurity requirements. Ms. Greenman became an advocate for small businesses. She helps lead working groups with DoD and industry to develop strategies to help small businesses improve the protection of controlled unclassified information.
Through JHU/APL, Ms. Greenman also worked for 3 ½ years with DoD CIO and DoD Office of Sustainment and Acquisition to develop and support the Cybersecurity Maturity Model Certification (CMMC) Program.
Ms. Greenman holds an undergraduate degree in Information Systems with a concentration in Homeland Security and an Executive Masters of Business Administration from The University of Maryland Robert H. Smith School Of Business. She is a Certified Information Security Professional (CISSP) and holds the GIAC Security Essentials (GSEC) certification.

Membership Meeting 7/26/2023
2023-07-26 17:00 - 19:00 | MIC – Maryland Innovation Center, 6751 Columbia Gateway Dr, Columbia, 21046
Chapter Business Meeting Slides: 2023-07-26 Meeting Slides
Speaker Slides: Universal Cyber Intelligence Briefing
New Cybersecurity Policy Considerations — Distribution Copy

Topic: Wide World of Cyber
The need to validate that cybersecurity policies and procedures remain sufficient (or if not are updated/revised/expanded as needed) to appropriately protect the organization relative to new and emerging risks that emanate from new technologies, operational paradigm shifts, and a continually evolving threat landscape. This list includes:

Operations Technology (OT) & Internet of Things
Artificial Intelligence /Machine Learning
Cloud Computing/Shared Public Infrastructure (including Global Communications)
Quantum Computing
Blockchain
5G Networks / Smart City Infrastructure
Return to Office (RTO)
Augmented Reality / Virtual Reality
Biometric Authentication
Autonomous Vehicles
Wearable Technology
Drones
Smart Homes

Speaker: Jason Taule, Cyber Advisory Council Chair and CISO-In-Residence, of the Maryland Innovation Center (MIC)

Jason Taule is a 30+ year information assurance and cybersecurity veteran who has worked in both the intelligence community and commercial sectors first consulting to Federal agencies and then serving as inside CISO and CPO both within Government and at large systems integrators like General Dynamics and CSC.
Mr. Taule helped build the original DARPA CERT, helped develop the first computer security programs at the VA and NASA, and revised the Risk Assessment Methodology still used throughout the Federal Government. Mr. Taule helped author the Maryland Data Privacy Law, led a multi-million-dollar global cyber security practice for a large international consulting firm, ran the team responsible for HIPAA complaint investigations for OCR for 3 years, and for the last 20 years has been a luminary in the US Health IT sector helping hundreds of systems earn their accreditations and avoid compromise. Mr. Taule previously served as the inside CISO and VP of Standards for HITRUST, where he was responsible for developing and maintaining the Common Security Framework (CSF).
Mr. Taule currently serves as the Cyber Advisory Council Chair and CISO-In-Residence, of the Maryland Innovation Center (MIC), an advanced business incubator helping companies in the greater Washington-Baltimore metroplex start and grow. In this capacity, Mr. Taule oversees and directs the cyber activities in which the MIC engages. This includes developing and providing assessment, training, and enhancement programs designed to help residents and affiliates understand, build, and maintain programs of cyber hygiene, developing content and cultivating partnerships and support services to recognize trends and respond to emerging threats, and serving in an CISO advisory capacity with respect to fulfilling customer assurance and regulatory mandates, meeting cyber requirements necessary to raise investment capital, and managing risk to achieve maximum exit valuation.

Membership Meeting 8/23/2023
2023-08-23 17:00 - 19:00 | Convergint | Federal, 6650 Eli Whitney Dr, Suite 400, Columbia, MD, 21046, United States
Chapter Business Meeting Slides: August 23, 2023 Membership Meeting
Speaker Slides: Jeffrey Wheatman Teaching AI
Topic: Can We Teach an AI to Speak Fluent Cybersecurity
How do you know if your AI really understands cybersecurity? Too many compliance tools claim that they use AI for text processing but fail to deliver on their promises. Can we really give an AI a CISSP? Can we trust AI with our cybersecurity? Yes, AI is useful and valuable, but it won’t fix everything. We need to be clear about what AI can and cannot do. One thing we can say for sure (well, pretty sure) – AI will never replace the human element of cybersecurity. Is the future of cybersecurity people being replaced by AI?This presentation will delve into the three elements to AI that need to be explored:

Business systems are using AI; What are the implications to your cybersecurity defenses?
AI is being used by attackers too!
The market is filled with companies, platforms and tools that all have AI, ML, and other terms sprinkled throughout their marketing literature – but what does it all mean?

We will explore how smart (or dumb) are AIs in cybersecurity in today’s AI-centric world.
Speaker: Jeffrey Wheatman, SVP, Cyber Risk Evangelist, Black Kite
A strategic thought leader with extensive expertise in security and cyber risk management,Jeffrey Wheatman is regarded as a foremost expert in guiding public sector clients and Fortune 500 companies in connection with their cybersecurity and risk management programs. Jeffrey’s history of working with clients to plan, grow, and transform their cyber risk management programs has been instrumental in ensuring organizations continued viability and health as they define short- and long-term expansion plans. Under Jeffrey’s guidance, board and C-level leaders are fortified with the best practice solutions to realize exceptional performance outcomes.In his current capacity as SVP, Cyber Risk Evangelist at Black Kite, Jeffrey has been tasked with raising awareness of the enterprise-wide risk impacts of third party risk, both in the digital and traditional supply chain and supporting the strategic vision of the executive leadership team and investors.Most recently, Jeffrey acted as a VP, Advisor with Gartner, the global strategic advisory firm, where he worked with clients to build and improve their security programs, assess risk, focus on reporting on program status, metrics, performance management, stakeholder engagement, executive communication, and bridging the connection between technology and security risk.Jeffrey guided leaders in selecting frameworks to run cyber programs in compliance with regulatory requirements and expectations of auditors and partners. Jeffrey has extensive experience engaging with executive leaders and board members. Jeffrey has prepared security and risk leaders to present before a board; he has reviewed and advised on upwards of 500 board presentations and briefed 60+ boards of directors to understand their role in managing cyber risk.For four years, Jeffrey served as the Chair of the North America Security and Risk Management Summit, Gartner’s 2nd largest conference with 4000+ annual attendees. As part of this high- profile effort, he guided the creation of the conference agenda comprising more than 150 presentations, 20 case studies, external keynote speakers, and 50 vendor sessions.

Membership Meeting 9/27/2023
2023-09-27 17:00 - 19:00 | MIC – Maryland Innovation Center, 6751 Columbia Gateway Dr, Columbia, 21046
Chapter Business Meeting Slides: September 27, 2023 Membership Meeting Presentation
Speaker Slides: Crime Lab Presentation ISSA Central MD

Topic: What’s it like to work in a Crime Lab?
We have all seen Crime Lab technicians on television shows such as NCIS and CSI analyzing evidence to try solve crimes. How accurate is television’s portrayal? Hear from experts who work for the Baltimore City Police Department about what they do to analyze and assess evidence. Learn about what tools and techniques are being used to fight crime. What training does it take to do this type of work? Be able to tell your friends if what they are watching on television is the way it really is!
Speaker: Nicole Belle & Kieu P. Danh, Crime Scene Sciences Section, Baltimore Police Department

This meeting features two representatives from the Baltimore Police Department Forensic Science and Evidence Management Division. Nicole Belle is a Crime Laboratory Technician Supervisor. She began her career in Forensics in 2017, starting in the Crime Scene Unit as a Crime Laboratory Technician working and processing hundreds of crime scenes. She received her Master of Science in Forensic Science from National University and her Bachelor of Science in Forensic Chemistry and Chemistry from Towson University. Kieu P. Danh became a Crime Laboratory Supervisor in June 2023 and started with the Division in 2018. She a brief tour in the Carroll County Sheriff’s Office Criminal Investigation Unit. She earned her Master of Science and his Bachelor of Science in Criminal Justice December from the University of Baltimore.

Membership Meeting 10/25/2023
2023-10-25 17:00 - 19:30 | MIC – Maryland Innovation Center, 6751 Columbia Gateway Dr, Columbia, 21046
Chapter Business Meeting Slides: October 25, 2023 Membership Meeting Presentation
Speaker Slides: When disaster strikes
Topic: When disaster strikes… what you can do to prepare until help arrives.

A police officer is many things in one. At times a police officer must be a peacekeeper, a counselor, an enforcer, and a life saver. All these jobs carry the responsibility of knowledge in all fields. A police officer must understand mental health issues, information security, local and state laws, criminal and civil laws, and emergency medicine. A police officer is the first person to arrive in an emergency and must act quick and efficiently. Many police officers obtain specialties that further advance them toward solving problems. Teresa specialties are aimed a lifesaving operations and preservation of life after disaster strikes.
Speaker: Teresa Murphy, Prince George’s County Police Department
Teresa Murphy is an eleven-year veteran of Prince George’s County Police. She received a bachelor’s degree in business and accounting from the University of New Mexico and has continued studies in disaster preparedness online from various universities and FEMA instructions. Her current field placement is a Sergeant of Shift 5 in Bowie, Maryland. She is interested in community relations and disaster recovery/ preparation. She is highly trained in special operation techniques to include Swift Water Advanced Rescue, Certified Bomb Technician, Radiation Detection, Civil Disturbance Level 1, Crash Reconstruction Levels 1,2, and 3, and is an FAA certified UAS Remote Pilot. She recently completed Incident Command Systems 400 that deals with large scale natural disaster recovery..

Membership Meeting 11/15/2023
2023-11-15 17:00 - 19:00 | MIC – Maryland Innovation Center, 6751 Columbia Gateway Dr, Columbia, 21046
Click Here to register for the November 15, 2023 ISSA Membership Meeting
Chapter Business Meeting Slides: November 15, 2023 Membership Meeting Presentation
Speaker Slides: Public Private Partnerships

Topic: Importance of Public Private Partnerships in Cybersecurity
Private public partnerships for cybersecurity issues have become more important than ever over the last few years.

As cyber threat actors increase their efforts against private and public industry alike, correlating all information to help secure corporate and government networks and help posture defensively is the key.

Speaker: Lorri Janssen-Anessi, BlueVoyent
Hi, I am Lorri Janssen-Anessi, currently the Director of External Cyber Assessments. I am a STEM advocate, volunteer coding teacher, lifelong learner, and lover of all things cybersecurity! I grew up in the Bay Area in Cupertino California. Instead of working at a one of the prevalent tech companies in the areas like many of my peers, I joined the US Air Force.

After enlisting, I spent 20+ years working primarily in the public sector. My career in the US Air Force started as a technical language analyst working on one of the US government’s highest priority missions, counter-terrorism, after 9/11. As national priorities evolved and cyber attacks became more pervasive, my role shifted to work in the Cyber Security Mission at the National Security Agency, an organization that was truly a pioneer in the field of cybersecurity.
Finding this new field to be extremely rewarding it kick-started my passion for all things technology and cyber-related. While working in this mission, the need for more traditional education in this field became evident so I enrolled and successfully completed a master of Electrical and Computer Engineering at the Naval Postgraduate School. This was a challenging program that provided the necessary skills to help me have impactful contributions to the National Cybersecurity mission. It also highlighted the need to foster passion and interest in STEM for women, minorities, and the next generation, which were and continue to be grossly underrepresented in this field.
My path to cybersecurity was not traditional, so hopefully I am an example of how it is possible to get into a technical field with a little curiosity and interest, some effort, and bit of traditional and non-traditional training. I will continue to strive to share as much information and insight on STEM and cybersecurity to hopefully instill a bit of passion for these fields.
Click Here to register for the November 15, 2023 ISSA Membership Meeting

Membership Meeting 12/13/2023
2023-12-13 17:00 - 19:30 | MIC – Maryland Innovation Center, 6751 Columbia Gateway Dr, Columbia, 21046
Chapter Business Meeting Slides: 2023-12-13 Meeting Presentation
Speaker Slides: Maryland: Economics of Cyber Conferences
Topic: Attending Cybersecurity Events

The Maryland Department of Commerce is involved in shaping the cybersecurity industry within the state. As a leader in the cyber community at the Maryland Department of Commerce, I promote, attract, and support Maryland technology companies through participation in conferences at the local, national, and international levels. In my presentation, I will discuss the economic advantages and opportunities resulting from attending cybersecurity events such as BlackHat, DefCon, and InfoSec Europe.
Speaker: Kimberly Mentzell, Director for Cybersecurity and Aerospace at the Maryland Department of Commerce.
Kimberly has worked in the technology field for over twenty years as an educator and professional in cybersecurity, networking, Linux, and programming. She held positions as a cyber program manager, IT manager, network administrator, technology coordinator, programmer, and auditor. She maintains several industry certifications, as well as teaches at the collegiate level at Capitol Technology University and Frederick Community College. Kimberly serves as a member of the Maryland Cybersecurity Council, the Maryland Cyber Coordinating Council, and as the co-chair for the MD Cyber Education Committee in conjunction with the MD Center for Computing Education (MCCE) Steering Committee. In addition, she serves as a founding/executive board member of the Capitol Technology University Center for Women in Cyber. She is also a member of the Computer Science Teachers Association (CSTA), Women in Cybersecurity (WiCys), Cybersecurity Association of Maryland (CAMI), Maryland Tech Council, TechFrederick Advisory Board, and Ethical Hacking Council Advisory Board. Recently, she received the FISSEA Innovator of the Year Award from NIST for her contributions to cyber education and was inducted into the Order of Thor by the Military Cybersecurity Professionals Association. In addition, she is also an active attendee and/or speaker at many local, national, and international cybersecurity conferences and events such as DefCon, BlackHat, RSA, BSides, and InfoSec – Europe.

Membership Meeting 01/24/2024
2024-01-24 17:00 - 19:00 | MIC – Maryland Innovation Center, 6751 Columbia Gateway Dr, Columbia, 21046
Chapter Business Meeting Slides: 2024-01-24 Meeting Presentation

Speaker Slides: Privacy and Law

Topic: PRIVACY AND THE RULE OF LAW IN THE DIGITAL AGE
Have you ever had the microphone on your cell phone turn on, by itself, when you’re having conversations, or, review your tax transcripts and see that someone has electronically sent forms to your tax account, or, been told by a credit company that they were closing your accounts based on false
information provided by a credit reporting bureau – only for the credit reporting bureau to say they never sent that information, or learn that a government agency provided personal and private information about you to another entity? Well, I have. After becoming a Whistleblower, I experienced these and
many other acts that I believe were in response to me being a Whistleblower. For each of these events to occur, I believe that my right to Privacy and the Rule of Law had to be violated. How does Democracy survive when these types of Technology and Cybersecurity threats are allowed and there are no laws or rules in place to hold people accountable. Technology is advancing rapidly; the law and policy aren’t. Not only do Cybersecurity and Privacy field experts need to be aware of the various techniques available that can be used to violate our Constitutional Right to Privacy, and stress the Rule of Law, but so do everyday citizens. If we, US Citizens, do not make IT and government officials aware of these evolving threats, no one will be protected. My experience as a whistleblower has opened my eyes to these items.

Speaker: Danielle Spencer
Danielle Spencer, author, protector of freedom, a privacy rights Advocate, and U.S. Federal Government whistleblower. I am a senior leader with over 20 years of experience focused on business, finance, and acquisition management. I am a change agent, transforming and improving business operations and processes. I have two Masters degrees in Business Administration and Information Systems, and a Bachelor of Science degree in Medical and Research Technology and am certified in Information Assurance (cybersecurity) and Project Management.

Membership Meeting 03/27/2024
2024-03-27 17:00 - 19:00 | MIC – Maryland Innovation Center, 6751 Columbia Gateway Dr, Columbia, 21046
Chapter Business Meeting Slides: 2024-03-27 Meeting Presentation
Topic: Advanced Degrees in Cyber
Have you ever thought about advanced degrees in cyber but thought, there’s no way you have time, or that it will be way too difficult with a demanding full time job? Yeah, me too. Hear about the upside, downside, and my research experience so far as I make progress toward identifying my dissertation topic. Interested in the path that led me here? We can talk about that too. As a volunteer career coach in the community, I enjoy answering questions and helping others come up with ideas of what could be next for them in their cyber career path. I hope to not only share some about my experience but to help with questions you might have for your cyber career.

Speaker: Jennifer Havermann

Jennifer Havermann is a senior technical leader with over 35 years of experience in the Intelligence, Defense, and Federal sectors, in a variety of both civilian and industry roles. Her career spans technical and business roles in cyber and intelligence for multiple market leaders, small business, U.S. Department of Education, Department of Defense, and the National Security Agency. She currently serves with the National Security Agency, focused on technology and mission enablement. She holds a Bachelor of Science in Information Assurance, Network Engineering Certificate, MBA, and is currently in a Doctoral program focused on cyber. She maintains Certified Information System Security Professional (CISSP) and Certified Ethical Hacker (C|EH) certifications. She is one of the highlighted cyber professionals in the book, “Tribe of Hackers” and is often found volunteering in the cyber community. Jen has volunteered as a Career Coach over the last 10 years in a combination of DEFCON and BSides career tracks.

Membership Meeting 04/24/2024
2024-04-24 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Chapter Business Meeting Slides: Membership Meeting 04-24-2024
Topic: Federal Government Proposed Cybersecurity Regulations and False Claims Risks
Are you aware of the cybersecurity regulations proposed by the Federal Government? As more businesses shift towards digital operations, it’s crucial to stay informed about the evolving cybersecurity landscape. In addition to protecting your business from cyber threats, failing to comply with these regulations could also put you at risk of facing false claims allegations. Let’s learn more about this important topic together.
This session will include an overview of the CMMC rule, the proposed FAR rule for Software Bill of Materials (SBOMs), FedRAMP equivalency requirements for contractors, and the potential consequences of False Claims Act.

Speaker: Dawn Greenman, Program Manager for Cybersecurity Compliance and Supply Chain Risk Management (C-SCRM). Johns Hopkins Applied Physics Laboratory (APL)
Dawn Greenman is the Program Manager for Cybersecurity Compliance and Supply Chain Risk Management (C-SCRM) for Johns Hopkins Applied Physics Laboratory (“APL”). Ms. Greenman oversees the cybersecurity compliance strategy across the organization to ensure APL can meet its information technology mission needs. Ms. Greenman is a subject matter expert in the federal regulations to protect controlled unclassified information. She is a trusted partner to government and to industry. In her role as program manager, Ms. Greenman supports sponsor work related to the design and implementation of the new Department of Defense cybersecurity program, Cybersecurity Maturity Model Certification (CMMC). Further, she leads working groups with peer organizations to collaborate on cybersecurity threats, risks and compliance while identifying ways to improve cybersecurity of small-to-medium businesses in the defense industrial base.
Prior to her 18-year tenure at APL, Ms. Greenman held a variety of Information Technology positions with small to medium businesses where she drove organizational change through the use of information technology. She has designed and delivered data centers, implemented major ERP systems, assured information technology compliance with Sarbanes Oxley, and built world class Help Desk teams.
Dawn holds an undergraduate degree in Information Systems with a concentration in Homeland Security and an Executive Masters of Business Administration from The University of Maryland Robert H. Smith School of Business. She is a Certified Information Security Professional (CISSP) and holds the GIAC Security Essentials (GSEC) certification.
