Membership Meeting 3/24/2021
2021-03-24 17:00 - 19:30 (America/New_York) | Virtual via Zoom, MD
Chapter Business Meeting Slides: 2021-03-24 Meeting Presentation

Speaker Slides: 2021-03-24 ISSA Talk Medical Device Security
Meeting Recording: Meeting Recording 2021-03-24

Topic: Medical Device Security: A Thing Smart People Do
As the global medical device market has expanded, so too has there been an increasing demand for the cyber professionals necessary to secure these systems and ensure their safe clinical operation. The cybersecurity of medical devices encompasses a unique and diverse set of security disciplines, combining traditional cyber and privacy principles with a knowledge of basic physiology and common clinical functions. This talk explores the rapidly growing field of medical device security and the evolving role of the security professional, with a focus on the relationship between device security, patient safety and regulatory science. Attacker roles and medical device threat models will be examined through real-world examples of medical systems that have undergone rigorous security analyses as part of the regulatory review process. These case studies will illustrate the unique skill set required of the medical device security professional and the important role they play in the medical device market.

Speaker: Avi Rubin, JHU Information Security Institute

Dr. Aviel (Avi) D. Rubin is Professor of Computer Science and Technical Director of the Information Security Institute at Johns Hopkins University. He is also the Director of the JHU Health and Medical Security Lab. Prior to joining Hopkins, Rubin was a research scientist at AT&T Labs. His is also the founder of Harbor Labs, a CyberSecurity company. Rubin testified about information security before the U.S. House and Senate on multiple occasions, and he is the author of several books about computer security. Rubin is a frequent keynote speaker at industry and academic conferences, and he delivered a widely viewed TED talk in 2011 and another TED talk in September 2015. He also testified in federal court as an expert witness on numerous occasions in matters relating to high tech litigation. Rubin served as Associate Editor of IEEE Transactions on Information Forensics and Security, Associate Editor of Communications of the ACM (CACM), and an Advisory Board member of Springer’s Information Security and Cryptography Book Series. In 2010-2011 Rubin was a Fulbright Scholar at Tel Aviv University. In January 2004 Baltimore Magazine named Rubin a Baltimorean of the Year for his work in safeguarding the integrity of our election process, and he is also the recipient of the 2004 Electronic Frontiers Foundation Pioneer Award. Rubin has a B.S, (’89), M.S.E (’91), and Ph.D. (’94) from the University of Michigan.

Membership Meeting 4/28/2021
2021-04-28 17:00 - 19:30 | MD
Chapter Business Meeting Slides: 2021-04-28 Meeting Presentation

Speaker Slides: 2021-04-28 3Step_Approach_SASupply Chain

Meeting Recording: Meeting Recording 2021-04-28
Topic: Cybersecurity Awareness: A 3-Step approach to Cybersecurity Preparedness and Operational Resiliency

The challenges created by accelerating technological innovation have reached new levels of complexity and scale. Governments, businesses, and academic organizations all face growing security threats against their infrastructures and accordingly it is imperative that organizations integrate Cybersecurity Awareness best practices into business processes and management strategies. Moreover, the cybersecurity posture of an organization is an integral factor in the overall health and viability the institution. Following this qualitative methodology and implementing a multifaceted approach to Cybersecurity Preparedness and Operational Resiliency can be achieved.

Speaker: Thomas Byrd, J.D., T. Rowe Price

Thomas Byrd, is the Head of the Cybersecurity Awareness program, Vice-President at T. Rowe Price. He spearheads associate education and risk mitigation efforts to confront current and emerging cyber threats.

Thomas Byrd has served as a Program Coordinator & Adjunct Professor of Cybersecurity at Stevenson University. In that role, he launched several technology modernization efforts to improve the online student learning experience. Thomas serves on the Board of Directors at the Center for Forensics Excellence, which is designed to serve as a model of excellence and support to the field of forensics and will assist in improving equal justice through training, research, publications, and resource sharing. He partnered with the Maryland State’s Attorneys’ Association (MSAA) and held a training for area prosecutors, police, and support staff. This Forensic Day event included information about forensic interviewing and digital and cyber forensics of IoT devices.
Thomas Byrd has served as a Senior Professional Staff member at Johns Hopkins University – Applied Physics Laboratory in the Critical Infrastructure Protection Group where his practical work, research, and educational pedagogy focus on planning, coordinating, and controlling information security locally, nationally and internationally. Thomas provided executive leadership and the development of technical solutions for core areas of Information Security that include operational, financial, and administrative performance. He provided executive counsel to senior leadership related to cyber security, fiscal administration, Risk Management Framework/DoD Acquisition, Supply Chain Risk Management, IT audit and compliance, cyber law, and legal policy at the Department of Defense (DoD), and the Department of Homeland Security (DHS). Ensuring a systematic approach to selecting, managing, and evaluating IT security investments in accordance with federal and DoD policies, standards, and regulations (e.g. FISMA, FIPS, CNSS, HIPAA/HITECH, NIST, DFARS) was also part of his portfolio.

Membership Meeting 5/26/2021
2021-05-26 17:00 - 19:30 | MD
Chapter Business Meeting Slides: 2021-05-26 Meeting Presentation

Speaker Slides: 2021-05-26 Jennifer Dickens Presentation
Meeting Recording: Meeting Recording 2021-05-26

Topic: Minorities in Cyber – A STEM Perspective on the Challenges and Successes Faced by Professionals in the Field
Ms. Dickens will discuss the various Cybersecurity and Technology programs she’s lead throughout her 20-year STEM career. Among her success, she has also faced challenges as a Cybersecurity leader and will share the strategies she used to overcome them.

Speaker: Jennifer Dickens, Internal Risk Mitigation Manager, National Oceanic & Atmospheric Administration (NOAA)

Jennifer Dickens has several years of success in providing strategic solutions and formulating innovative IT initiatives in the Federal Government. Jennifer is a 2020 Women of Color Magazine, Technology Rising Star award winner for her STEM leadership in the Federal Government. Currently, Jennifer serves as the Cyber Security Internal Risk Mitigation (IRM) Project Manager and Foreign National Foreign National – Internal Risk Mitigation (FN-IRM) Baseline Review Project Manager for the National Oceanic & Atmospheric Administration (NOAA). She leads the project efforts of NOAA’s Enterprise-wide Cyber Security Internal Risk Mitigation Program.
A resident of Silver Spring, Maryland, Jennifer received her Bachelor of Arts, Master of Business Administration, and Master of Science degrees from the University of Maryland. She earned a Federal Government Contracting Certification from George Mason University. Jennifer is a graduate of Leadership Montgomery’s Emerging Leaders, NOAA’s Leadership Seminar, Partnership for Public Service’s Federal IT Leaders cohort, and the Inaugural Class of the National Coalition of 100 Black Women LEAD Academy. Jennifer is a servant leader and advocate, actively serving on community and national organizations that focus on the betterment of Communities of Color. A daughter of two educators and granddaughter of pastors, Jennifer has always had a heart of service.
Jennifer is an active member of the Montgomery County, MD Alumnae Chapter of Delta Sigma Theta, Inc., the National Coalition of 100 Black Women, Prince George’s County, MD Chapter, Leadership Montgomery, and the Montgomery County, MD Pan-Hellanic Council, Inc. She is a board member of Adventure Theatre MTC, Community Bridges, Inc., and the Montgomery County Delta Alumnae Foundation.

Click Here to register for the May 26, 2021 Membership Meeting.

ISSA Mid-Atlantic Quarterly Meeting 6/23/2021
2021-06-23 17:00 - 19:30 | Virtual via Zoom, MD
Chapter Business Meeting Slides: 2021-06-23 Meeting Slides
Meeting and Speaker Recording: Click Here

Topic: Cyber Crime
Speaker: Amber Schroader, CEO & Founder, Paraben Corporation

Over the past three decades, Ms. Schroader has been a driving force for innovation in digital forensics. Ms. Schroader has developed numerous software programs, courses, and guides in the areas of recovering data from smartphones, computer hard drives, cloud, email, and gaming systems. Ms. Schroader’s established protocols for the seizure and processing of digital evidence that has been used by numerous organizations throughout the world. Ms. Schroader has coined the concept of the “360-degree approach to digital forensics” and “Forensics of Everything-FoE” with her focus on unique problems in digital evidence and solutions. Ms. Schroader has been a huge industry influence in pushing for a big-picture consideration of digital evidence. An accomplished design architect, curriculum developer, and instructor; Ms. Schroader has written and taught numerous classes for this specialized field as well as founded multiple certifications. Ms. Schroader continues to support her through book contributions and other industry speaking engagements.
Speaker: Sgt John Bedell, MD State Police
Sgt, John Bedell was just promoted to the position of Executive Officer for Criminal Investigation Bureau of the Maryland State Department of Police. He began his sixteen-year career as a patrol officer. As EO, he serves under the Lieutenant Colonel assisting in the operations and management of the Licensing Division, Criminal Enforcement Division, and Forensic Sciences Division. He works with the Executive Officers of the other bureaus to help coordinate inter-bureau activities. Prior to his current position he was a Digital Forensic Examiner for six years. He conducted scene triage as well as full forensic examination in a laboratory setting. He examined servers, computers and mobile devices with a variety of tools including EnCase, BlackLight, Axiom, Cellebrite, Oxygen, and other commercial software. Supervise all of the other examiners and assist in large projects as requested. He also served three years a Network Security Office and four years as Collision Reconstruction Specialist. He has a degree in Cybersecurity from the University of Maryland Global Campus. He is a GIAC Certified Incident Handler and Certified Forensic Examiner.

Membership Meeting 7/28/2021
2021-07-28 17:00 - 19:30 | MD
Chapter Business Meeting Slides: TBD

Speaker Slides: TBD

Topic: Cloud Infrastructure Cyber Kill Chain – Threats & Countermeasures
Attackers are maturing their TTPs to now exploit over-permissioned identities within AWS, Azure, and GCP; resulting in very prominent breaches. In this session we’ll define a new Cloud Infrastructure Cyber Kill Chain and explore these TTPs to expose unique methods of lateral movement, privilege escalation, role-chaining, and more. Real world examples and best practices countermeasures will also be covered.
Speaker: Mike Raggo, Cloud Security Engineer, CloudKnox Security

Michael T. Raggo has over 20 years of security research experience. Over the years he has uncovered numerous vulnerabilities in products including Samsung, Checkpoint, and Netgear. His current research focuses on hybrid cloud security risks and threats. Michael is the author of “Mobile Data Loss: Threats & Countermeasures” and “Data Hiding” for Syngress Books, and contributing author for “Information Security the Complete Reference 2nd Edition”. His Data Hiding book is also included at the NSA’s National Cryptologic Museum at Ft. Meade. A former security trainer, Michael has briefed international defense agencies including the FBI, Pentagon, and Queensland Police; and is a former participating member of FSISAC/BITS and the PCI Council. He is also a frequent presenter at security conferences, including Black Hat, DEF CON, Gartner, RSA, DoD Cyber Crime, OWASP, HackCon Norway, and SANS. He was also awarded the Pentagon’s Certificate of Appreciation.

Membership Meeting 8/25/2021
2021-08-25 17:00 - 19:30 | MD
Chapter Business Meeting Slides: 2021-08-25 Meeting Slides
Speaker Slides: Getting to Know your Pi-Hole

Additional resources from Ellipsis: https://www.ellipsisinfosec.com/post/resources-and-publications
Meeting and Speaker Recording: Zoom Meeting Recording

Topic: Getting to Know your Pi-Hole: Implementing advanced DNS security at home and small office

The powerful DNS Sinkhole technology has been used by corporations to help defend networks for years. Recently, this technology has been made available for home networks and small offices thanks to Pi-Hole. In this presentation, I’ll share my sometimes comical journey implementing a DNS sinkhole and provide resources in case you would like to try for yourself.
Speaker: Jeremy Druin, Principal Security Architect, Owner of Ellipsis Information Security
OSCP, GISF, GSEC, GCIH-GOLD, GWAPT-GOLD, GPEN-GOLD, GMOB, GXPN-GOLD, Sec+
Jeremy works as the Principal Security Architect for UPS where he created the application security, bug bounty and penetration testing programs. Jeremy is also the owner of Ellipsis Information Security where he provides security testing services and teaches secure application development and penetration testing courses.
As a Director of Education for the Kentucky ISSA chapter, Jeremy presents on various information security topics along with operating the “webpwnized” YouTube video channel. Additionally, Jeremy develops the open-source OWASP Mutillidae II training environment.
Jeremy has a Bachelors in Computer Science from Indiana University, a Graduate Certificate in Cybersecurity and Masters in Computer Science from the University of Louisville and is a GIAC-certified Web Application, Mobile and Network Security Penetration Tester.

Membership Meeting 9/22/2021
2021-09-22 17:00 - 19:30 | Hybrid – In Person at the Hub Spot and Virtual, 6724 Alexander Bell Dr., Columbia, MD, 21046, United States
Chapter Business Meeting Slides: 2021-09-22 Meeting Slides
Speaker Slides: 2021-09-22 Zero Trust

Meeting and Speaker Recording: Zoom Meeting Recording
Topic: Zero Trust Is Not a Destination, But A Continual Journey

As you are aware, there is a lot of confusion on what “Zero Trust” is. Most of this comes from different technology manufacturers marketing their products as the solution to Zero Trust. While all of them play some part in an overall Zero Trust journey, there is no platform which provides a full Zero Trust solution.
Optiv’s opinion is that Zero Trust is a not a destination, but instead a continual journey that provides a broader systematic approach to help clients demystify the complexities of Zero Trust.
Speaker: John Humenick, Cybersecurity and Business Risk, Optiv
John is based in the Philadelphia region and has been working the IT industry for over 20 years. During that time, he has covered system integration, coding and development, virtualization, and more recently cybersecurity and business risk. He has worked as a Solutions Architect at Optiv for the last five years and is a graduate of Penn State.

Membership Meeting 10/27/2021
2021-10-27 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2021-10-27 Meeting Slides

Meeting and Speaker Recording: Zoom Meeting Recording
Topic: Intellectual Property Espionage
Cliff will talk about an intellectual property espionage case study and discuss how focused curiosity can help you develop solutions.

Speaker: Cliff Stoll, Founder of Acme Klein Bottles
Dr. Cliff Stoll has had a variety of careers over his lifetime. Presently he is the CBO (Chief Bottle Officer) and founder of Acme Klein Bottles. He is also an author of 3 books: The Cuckoo’s Egg, Silicon Snake Oil, and High Tech Heretic. He was a System Administrator at Berkeley. He is also an astronomer. And as a self-proclaimed mad scientist, he has one major accomplishment that few people in the world can claim; he successfully tracked a nation state spy through the Internet. In his search for a 75 cent glitch, he highlighted problems with the network and created some unique solutions that helped the advancement of intrusion detection and digital forensics.

ISSA Mid-Atlantic Qtrly Summit
2021-11-11 18:30 - 20:00 | MD
The Solarwinds Attack has caused government and private sector organizations to renew their focus on strengthening Cybersecurity Supply Chain Risk Management. By statute, federal agencies must use NIST’s C-SCRM and other cybersecurity standards and guidelines to protect non-national security federal information and communications infrastructure. The SECURE Technology Act and FASC Interim Final Rule gave NIST specific authority to develop C-SCRM guidelines. Matthew Butkovic, Technical Manager of the Cybersecurity Assurance, Software Engineering Institute will moderate a discussion with Dr. George Duchak, Chief Information Officer, DLA Information Operations and Robert S. Metzger, Shareholder at the Rogers, Joseph, O’Donnell Washington, D.C. law firm’s Cybersecurity and Privacy Practice Group to share their thoughts about designing stronger cybersecurity risk management strategies and approaches.

Membership Meeting 11/18/2021
2021-11-18 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Note: The November 18, 2021 will be held on the third Thursday of the month.
Chapter Business Meeting Slides: 2021-11-18 Meeting Slides
Speaker Slides: 2021-11-18 Space_Enterprise_Trends_Risks_and_Securing_the_Future

Meeting and Speaker Recording: Zoom Meeting Recording
Topic: Protecting and Securing Data
Billions of people around the world rely on operations conducted across the space enterprise. Space systems support critical functions including navigation, communications, agriculture, financial exchange, and emergency services. Current and emerging markets for space services range from GPS and broadband connectivity to environmental monitoring and on-orbit manufacturing.
The volume of data travelling across information systems in satellite, ground, and user segments continues to escalate due to a range of factors and trends, including the commercialization of space with the transportation of cargo, experiments, and payload; human space flight; resupply to the International Space Station; Space as a Service (SaaS) and Ground Station as a Service (GSaaS); and the push to the moon and Mars.
Adversaries seek to exploit vulnerabilities and threats across this increased threat plane through unauthorized access, malware, denial of service, supply chain, and other opportunities. Guidance, best practices, and a defense-in-depth approach to protecting and securing data and information is a key priority and continues to evolve in the government and commercial sector to outpace the threat.

Speaker: Lori Gordon, Aerospace Corporation
Lori Gordon is a senior project engineer and technology strategist in the Corporate Chief Engineer’s Office at The Aerospace Corporation, focusing on Space Enterprise Integration (SEI) and Space Enterprise Risk (SER) to cyber and physical infrastructure. During her career, she has led efforts to coordinate national strategies and initiatives to enhance the resilience of U.S. critical infrastructure, mitigate national security and civil space enterprise risk, and accelerate technology innovation in complex systems. She has advised U.S. and international standards development organizations and academic curriculum boards on autonomous systems, cybersecurity, and the next generation workforce. Gordon has a master’s in public administration from the University of Massachusetts and a bachelor’s in geography from the University of Maryland. She is a Partner with The Aerospace Corporation’s Center for Space Policy and Strategy and is a Visiting Fellow at the National Security Institute.

Membership Meeting 12/15/2021
2021-12-15 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2021-12-15 Meeting Slides
Meeting and Speaker Recording: Zoom Meeting Recording

Topic: Reducing Advanced Threat Dwell-Time with Behavior Analytics
Discussion on Security gap covered using Behavior analytics, both in the enterprise and cloud. We will discuss the traditional methods, quick overview of Behavior detection, value prop and operationalizing in a small team.

Speaker: Alex Attumalil, Global Cyber Security Leader at Under Armour
Mr. Attumalil is a technology leader with 21years of experience, developing and leading information security programs and global cyber operations teams. In this role, he has built great teams, empowered to deliver technical cyber risk mitigations, and aspires to increased accountability and ownership. His transformational vision drives risk-centric policies and innovative proactive mitigations, while his strong business acumen propels frictionless deployment of strategic global initiatives. Further, his cross-functional efforts to build consensus among leaders have allowed projects to be delivered on schedule and within budget. Mr. Attumalil builds strong, performance-focused partnerships with his technology providers, motivating them to improve their product offerings, thus driving business value to the partners and their customers. He is an active participant in customer advisory boards and technology conferences where he shares his vision and builds consensus to drive solutions for a secure enterprise.

Membership Meeting 1/26/2022
2022-01-26 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
January Membership Meeting is Proudly Sponsored by:

Chapter Business Meeting Slides: 2022-01-26 Meeting Slides
Speaker Slides: Internet Crimes Against Children – Joe Dugan – 2022-01-26

Meeting and Speaker Recording: Zoom Meeting Recording
Topic: Origin and Mission of the ICAC Task Force
The presentation will explain the origin and mission of the Internet Crimes Against Children (ICAC) Task Force. We will discuss the many ways our children can find themselves in trouble on the internet, such as, loss of privacy, exposure to graphic content both from imagery and online games. We will touch on the subject of our children creating and sharing CSAM (Child Sexual Abuse Material, also referred to as child pornography) and how this can create a lifelong problem for our children. We will also talk about the dangers of Online Predators and how a child’s need to feel they belong, put them at risk Human Trafficking.
Speaker: Joe Dugan, Child Abuse/ICAC Detective at the Harford County Sheriff’s Office

Joe Dugan has 37 years Law Enforcement Experience. He has worked as a Homicide Detective in Baltimore City and as a member of the HIDTA Task Force. The last seven years of his career was as a Child Abuse/ICAC Detective at the Harford County Sheriff’s Office, Harford County Child Advocacy Center. He now works as an Internet Safety Specialist with the Maryland State Police
Click Here to register for the January 26, 2022 ISSA Membership Meeting.

Membership Meeting 2/23/2022
2022-02-23 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-02-23 Meeting Slides
Business Meeting Recording: Zoom Meeting Recording

Topic: Emerging Technologies, Existing Policies and Architectures
This presentation we will discuss current architectures and policies and how it’s hard to match the speed of change. That the coalition of the willing can create change through sharing and leveraging the grassroots of organizations and drive-up consistencies in leveraging what you have to meet new constructs and open a discussion on what policies are required.
Speaker: Stephanie Neely, Defense Information Systems Agency

Stephanie Neely has 27 years of experience in cybersecurity and cyber operations. She has worked both sides of the fence as an ISSM to NOCs and SOCs. Currently she leads a team to ensure the Department of Defense Information Networks (DODIN) are postured through unified actions that deliver the successful evolution of modernized technology solutions. Currently we are working on defining zero trust minimum capability standards for the DODIN and will be performing risk assessments against each DAO’s architecture.

Membership Meeting 3/23/2022
2022-03-23 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-03-22 Meeting Slides
Speaker’s Recording: Zoom Meeting Recording – Speaker Recording

Meeting Sponsor Presentation: ASPG-Sponsor-Presentation-2022-03-22.pdf
Topic: Human Security Engineering: Stop Relying on the Failed Human Firewall
While the main perception is that the “user problem” is due to a malicious party trying to trick well intentioned users, users who are unaware, apathetic, careless, etc., are more likely to be the cause of loss. Either way, the cybersecurity industry realizes this and develops tactics such as awareness, MFA, DLP, etc. to mitigate the problem. Despite all of these tactics, 90%+ of all losses result from attacks targeting users. What this talk proposes is a comprehensive strategy to address the insider threat, whether it results from malicious or well meaning insiders.
Speaker: Ira Winkler, Chief Security Architect for Walmart

Ira Winkler, CISSP is Chief Security Architect for Walmart and author of You Can Stop Stupid. He is considered one of the world’s most influential security professionals, and has been named a “Modern Day James Bond” by the media. He did this by performing espionage simulations, where he physically and technically “broke into” some of the largest companies in the World and investigating crimes against them, and telling them how to cost effectively protect their information and computer infrastructure. He continues to perform these espionage simulations, as well as assisting organizations in developing cost effective security programs. Ira also won the Hall of Fame award from the Information Systems Security Association, as well as several other prestigious industry awards. CSO Magazine named Ira a CSO Compass Award winner as The Awareness Crusader. Most recently, Ira was named 2021 Top Cybersecurity Leader by Security Magazine.
Click Here to register for the March 23, 2022 ISSA Membership Meeting.

Membership Meeting 4/27/2022
2022-04-27 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-04-27 Meeting Slides
Speaker Presentation: PowerShell Remote Access and Demonstration Link
Meeting Recording (Business and Speaker): Zoom Meeting Recording – Meeting Recording
Topic: PowerShell Remoting
One of the powers of PowerShell is its ability to send commands to multiple machines at once. In this brief overview, I will cover all the various ways to use PowerShell remoting to accomplish your tasks. We will be connecting 1 on1, 1 to many, connecting to remote applications and even a Linux machine via SSH. That’s right PowerShell remoting via SSH instead of WinRM.

Speaker: James Honeycutt
Mr. Honeycutt has served in the military for 24 years. He has spent most of that time working in IT Operations in various positions, from helpdesk to a Microsoft Windows systems administrator. He currently works for the Maryland National Guard Cyber Protection Team (CPT) as a Cyber Operations Technician with a focus on incident response, forensics, and being the resident “Windows Expert”. In his off time, he likes to give back to the community by presenting at local community events. He spent time peer reviewing SANS SEC586: Blue Team Operations: Defensive PowerShell. He has presented at like BsidesCharm, AvengerCon, ISC2 Baltimore Chapter, ISSA Central Maryland Chapter, and University of Central Arkansas Community Outreach. He also enjoys teaching. He has been a SAN Mentor/Community instructor for SEC505: Securing Windows and PowerShell Automation, SEC511: Continuous Monitoring and SOC Operations. He was a teaching assistant for a Cyber Security Bootcamp offered by Trilogy. He also teaches at Howard Community College as an adjunct instructor. He currently holds a Bachelor of Science in Management in Information Systems, GIACx10, CISSP, C|EH, SEC+, VCP5-DCV.

Mid-Atlantic Quarterly Meeting
2022-05-17 18:30 - 20:00 | Virtual via Go To Meeting, MD

Membership Meeting 5/25/2022
2022-05-25 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-05-25 Meeting Slides
Speaker Slides: Speaker slides can be obtained from the VP of Operations (V_P_Operations@centralmarylandc-y5eorcwrmb.live-website.com)

Topic: Security, Identity and Compliance with AWS, Infrastructure and Services to Elevate Your Security in the Cloud

AWS has various security services, including identity management, detective controls, infra and data protection, and incident response services you can use in Amazon’s cloud. This presentation will discuss these services available via the Amazon AWS cloud.

Speaker: Conrad Fernandes, Principal Engineer at Amazon

Conrad Fernandes is an information security leader in Public Sector for the past 20 years. At Booz Allen, Conrad led the Computer Network Defense (CND) Reference Architecture initiative for the US Department of Defense (DoD) and the National Security Agency (NSA). He also conducted threat and forensics analysis at DoD Cyber Crime Center (DC3) to dissect nation-state activities targeted against the DoD and Defense Industrial Base (DIB). At the Johns Hopkins Applied Physics Laboratory, Conrad managed the Security Operations Center and extended defensive capabilities into commercial clouds such as Amazon Web Services (AWS) and Microsoft Azure. In his current role, Conrad is a Principal Engineer at Amazon and works closely with National Security customers to ensure secure workload deployments in AWS and on-premises. When he’s not busy innovating security in hybrid cloud architectures, Conrad enjoys most outdoor activities and exploring National Parks across the country with his wife and adult son.

Membership Meeting 6/22/2022
2022-06-22 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2022-06-22 Membership Meeting Slides
Speaker Slides: OpenText – NDR Empowering Cyber – June-2022

Business Meeting and Speaker Recording: Zoom Meeting Recording
Topic: Achieving Vital Network Visibility and Proactive Threat Hunting with Network Detection and Response
Enterprise networks are experiencing a deluge of highly sophisticated threats from motivated attackers. Cloud computing, remote working, and traffic encryption expand the attack surface while making threats harder to detect. Addressing security gaps requires total visibility and a proactive approach to finding threats. This presentation will explore how Network Detection and Response (NDR) empowers security operations professionals in fast-evolving infrastructures.
Speaker: Carl Bolterstein is Director of Product Management for Bricata NDR
Carl Bolterstein is Director of Product Management for Bricata NDR for OpenText Enterprise Security. Carl has over a decade of cyber security engineering and analyst experience with an extensive background in the network detection and response platform space. He has focused on the full analyst experience of NDR which includes training on how to effectively leverage network data for both incident response and hunting for unknowns. Previously, he has held roles leading customer experience as well as technical roles in and around NDR platforms from sales to professional services.

Membership Meeting 7/27/2022
2022-07-27 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Click Here to register for the July 27, 2022 ISSA Membership Meeting.
Chapter Business Meeting Slides: 2022-07-27 Membership Meeting Slides
Speaker Slides: Chernovite’s Pipedream

Business Meeting and Speaker Recording: Zoom Meeting Recording
Topic: Chernovite’s Pipedream
Gain an in-depth look at old case studies and new research across 2021 highlighting new ICS threat groups, vulnerabilities, and insights from the field including incident response case studies of previously unreported incidents. This session will give a ground-truth reality and primer on what is really happening in our industrial environments.

Speaker: Ben Miller, Dragos

An information security veteran with over two decades experience, Ben has focused on the unique challenges of securing and defending industrial control systems. He began his critical infrastructure journey as an electric asset owner where he was responsible for detecting and responding to threats across a Fortune 150 enterprise where he became acquainted with security challenges for transmission, generation, and nuclear environments. Ben then joined the North American Electric Reliability Corporation (NERC). In what was to become the Electricity Information Sharing and Analysis Center (E-ISAC), Ben worked closely with federal agencies and industry across a variety threats, vulnerabilities, and other matters as it relates to the North American bulk electric system. He is an accomplished speaker at conferences around the world and occasionally writes for various publications. In his spare time he enjoys the simple pleasures of outdoor cooking with his family in Maryland.
Click Here to register for the July 27, 2022 ISSA Membership Meeting.

Membership Meeting 8/24/2022
2022-08-24 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
The August ISSA membership meeting is sponsored by:

Click Here to register for the August 24, 2022 ISSA Membership Meeting.
Chapter Business Meeting Slides: 2022-08-24 Membership Meeting Slides
Speaker Slides: 2202-08-24 Supply Chain Security

Topic: Supply Chain Security: Preventing Second Hand or Counterfeit Computing Device Components
Increasingly, large enterprise customers are requiring Original Design Manufacturers (ODMs) and/or Original Equipment Manufacturers (OEM) to show demonstrable proof that they have a secure supply chain. These manufacturers must prove, through controlled, documented, and audited means, that their supply chain ecosystem is secure throughout the product development lifecycle (pre-manufacturing through product end-of-life.) This legitimate concern is based on the growing threat posed by second hand or counterfeit computing device components. Disruptions in supply chains and the possible introduction of counterfeit components can increase risks to the proper functioning and overall reliability of electronic devices. Even worse, such contaminated platforms may include malware that could potentially lead to data theft or other types of system compromise. To prevent this, organizations should only partner with technology vendors that provide verifiable proof that their products are free of second hand or counterfeit components. To do so, a manufacturer should be able to trace serial numbers or similar identifiers that are stamped or embedded on hardware during downstream manufacturing. For software components, these manufacturers should work with their software vendors to ensure that only accurate, non-counterfeit software is ever installed on their products.
Speaker: Kevin McPeak, Deputy Director within the Lenovo Chief Security Office

Kevin McPeak, CISSP, ITILv3 is a Deputy Director within the Lenovo Chief Security Office. Kevin is a technical SME for endpoint management, endpoint security, data loss prevention, encryption, mobile device app management, secure mobile content delivery, and new defensive technologies. Kevin has two Masters of Science degrees, with one being earned at Johns Hopkins University and the other being earned at Virginia Tech. He is a part-time PhD candidate at Virginia Tech’s northern Virginia extension campus and is completing his dissertation. Kevin previously worked for Symantec Corporation where he was their Public Sector Principal Cybersecurity Architect. Prior to Symantec, Kevin worked as an on-site contractor (CACI, Lockheed Martin, and AlphaInsight) where he conducted cybersecurity work across numerous Federal Government agencies. Additionally, Kevin is a US Army veteran of both Operation Enduring Freedom (2003) and Operation Iraqi Freedom (2010 – 2011).
Click Here to register for the August 24, 2022 ISSA Membership Meeting.

Membership Meeting 9/28/2022
2022-09-28 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
The September ISSA Membership Meeting is sponsored by:

https://bigid.com
Chapter Business Meeting Slides: 2022-09-28 Meeting Presentation
Speaker Slides: 2022-09-28 DIVERSITY, PIPELINES, BARRIERS

Topic: DIVERSITY, PIPELINES, BARRIERS

Speaker: Martha Laughman

First Cybersecurity Mil Skillbridge Program
First DOL Cyber Apprenticeship in MD
First All-Female Cyber Apprenticeship
Founding Board Member of WiCys Mil Affiliate
NICE Working Group Member
Executive Director of GA Cyber Bootcamp
Served on 4 boards of Tech Start Ups
Co-Founded Esport Non-profit for Mil Kids
BS + MS Industrial Organizational Psyc
PhD (ABD) Organizational Psychology
Selected for Maryland DOL Gov Board

Membership Meeting 10/26/2022
2022-10-26 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: October 26, 2022 ISSA Central MD Membership Meeting
ISSA International Welcome: ISSA Chapter Welcome 2022 Dr. Murray
Speaker Slides: S3_GSG_ACTIVE SHOOTER PREPAREDNESS_2022
Meeting Recording: October 26, 2022 Membership Meeting and Speaker Recording

Topic: Active Shooter/Assailant Preparedness for Business and Schools
The world seems to have gotten more intense and scarier since the pandemic started in early 2020. Although we have seemed to have come back to some sense of normalcy in 2022, there is also a cloud of uncertainty and fear that has even the best of us feeling vaguely unsettled. Unfortunately, this type of social environment can breed the worst type of criminal mind; a psychopathic one, that has rationalized people unlike them, or because of “them” have to die. This means that these cowardly and mentally disturbed individuals may attack areas of our society that National Security experts deem as “soft targets”, that being grocery stores, malls, retail businesses, and community organizations such as schools and parks. What can we do to defend against the unthinkable? What this conversation will propose are well-thought-out tactical and strategic methodologies borne from anti-terrorism, force protection, and the intelligence community; to help everyday business people and citizens prepare for an Active Shooter/Assailant when necessary.
Speaker: Bobby Sheppard, S3 Global Security Group LLC (S3 GSG)
Mr. Bobby L. Sheppard delivers over 26 years of combined experience in law enforcement, intelligence, and cybersecurity. For the last 17 years, Mr. Sheppard has worked within the intelligence community, serving as a Team Leader, Senior Intelligence Analyst, and Program Coordinator, providing Counterterrorism/Counterintelligence and Cyber Threat Intelligence analysis, and operations in support of highly classified missions abroad and at home. Prior to Mr. Sheppard’s serving within the Intelligence Community, he served as a federal law enforcement officer and Executive Protection agent for 9 years with the U.S. CAPITOL POLICE AND CIA respectively. Mr. Sheppard has received extensive training and experience in Anti-terrorism/Force Protection, surveillance, counter-surveillance, surveillance detection, Incident Management Response; CBRN detection and response; as well as COOP AND COG operations for federal government entities to include the Department of Homeland Security.

Membership Meeting 11/16/2022
2022-11-16 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: Membership Meeting, November 16, 2022
Speaker Slides: 2022-11-16-Cyber-CSI-Ford
Meeting Recording: November 16, 2022 Membership Meeting and Speaker Recording

Topic: CSI:Cyber – What did they get wrong and right?
In 2015, CBS launched the 4th spin-off of the original CSI TV show called CSI:Cyber. The show focused on an FBI unit that worked to solve various cyber-crimes such as theft, hacking, extortion and even murder. The series lasted only two seasons and quickly became a running joke among the cyber security community due to outlandish, impossible, and unrealistic scenarios. However, the show got some things right which we will talk about and explore things that just didn’t quite hit the mark in an episode from season 2.

Speaker: Rebecca Ford
Rebecca Ford is a senior cyber threat intelligence analyst at a Fortune 50 Media & Entertainment company where she built and runs their cyber threat intelligence program. Rebecca has over 15 years of experience in cyber security and intel working for the US government as a North Korea cyber subject matter expert and is now in the private sector focusing on cyber threats targeting the media & entertainment business, retail and hospitality, cruise lines and theme parks.
When Rebecca isn’t studying cyber criminal activity, she and her husband like walking their French Bulldog FiFi, volunteering at veteran transition organizations, and working on puzzles.

Membership Meeting 12/14/2022
2022-12-14 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: Membership Meeting, December 14, 2022
Speaker Slides: Supply-Chain-Security_Supplier-Contractor-Relationships-in-Negotiated-Contracts-12-14-2022

Topic: Supply Chain Security: Supplier/Contractor Relationships In Negotiated Contracts
Over the past 5 years, the world has seen unprecedented interest-in and allocation-of resources toward Cyber Security in both the public and private sectors. The Supply-Chain has been stressed to its very limits and Third-Party relationships have been similarly stressed with the “trust but verify-verify-verify” protocol meaning more today than ever before. Pre- and Post- Covid, our relationships with our Business partners have taken on never before seen uncertainty in supply categories for security, reliability, and visibility, as to who is providing what and how secure it will be upon arrival. At the heart of these Business partner relationships are Contracts … and provisions within Contracts which stipulate 1) information and product security requirements; 2) adherence to Cyber Security Frameworks (CSFs), and 3) the providing of evidence (proof) which demonstrates the “Cyber Maturity” of a counterparty. During the December 14th 2022 presentation to ISSA-Md, the Information Systems Security discussion will center on Standard Cyber Security Contract Provisions which have been dictated by Risk Analysis Tenets and overlapping Cyber Security Frameworks (such as NIST, ISO, Cobit, etc.) as well as legal requirements in the FAR, the DFARS, and CMMC 2.0, which will affect U.S. Government contractors and private sector stakeholders.

Speaker: Todd Hinson – Constellation Energy
Mr. Todd Hinson is a Cybersecurity Contracts Principal with Constellation Energy in Baltimore, Maryland.
Todd began his career in the U.S. Army Intelligence Corp as part of Electronic Warfare Operations in Europe before becoming a U.S. Government Contractor with Contel and GTE serving at the Pentagon-JCS, NSA-HQ, DIA-HQ, and in South Korea with the Korean Intelligence Support System (KISS). After having taken a sabbatical to raise five children (two sets of twins), Todd returned to U.S. federal service with the DOJ/U.S. Attorneys Office-Baltimore, followed by stints with “Top-10” international Banking and Finance law firms Weil, Gotshal & Manges and Allen & Overy in Washington, D.C. during the fall-out from the 2007-2008 Global Financial Crisis. Todd has also served the Office of General Counsel of the American Bankers Association, T. Rowe Price, Exelon Corporation, and currently Constellation Energy.
Todd’s Cybersecurity professional development began with NOC and Data Center operations, then diverted into Law and Banking from a systems resiliency perspective, and has returned to the assurance of Information Confidentiality, Integrity, and Availability (CIA) within Supply-Chain and Third-Party contracts, after having completed his M.S. in Engineering (Cybersecurity Policy & Compliance) from The George Washington University in 2021.
LinkedIn Bio: https://www.linkedin.com/in/todd-hinson-05607534

Click Here to register for the December 14, 2022 ISSA Membership Meeting.

Membership Meeting 1/25/2023
2023-01-25 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: Membership Meeting, January 25, 2023

Speaker Slides: Ransomware A Risk Management Strategy Jan 2023

Topic: Ransomware: A Risk Management Strategy
Organizations’ globally are dealing with a scourge in ransomware. Just note the following statistics:

Experts estimate that a ransomware attack will occur every 11 seconds in 2021. (Cybercrime Magazine, 2019) and
The average ransom fee requested has increased from $5,000 in 2018 to around $200,000 in 2020. (National Security Institute, 2021)

It is clear the ransomware is here to stay. So the strategy must move beyond just prevention, to How do you manage the inevitable ransomware event? Our discussion will look at some key pillars of cybersecurity risk management and a few practical things to have in place preferably before you are a victim. Attendees will obtain tools, steps and processes necessary to ensure a ransomware event does not leave them without a way to continue operations.

Speaker: Danyetta Fleming Magana, Covenant Security
Danyetta Fleming Magana is a Certified Information Systems Security Professional (CISSP), F. ISRM whom founded Covenant Security Solutions in 2003. Her goal is to push the envelope regarding how we think about our information and find new and innovative ways to secure our digital way of life. Mrs. Magana is a Certified Information Systems Security Professional (CISSP) a globally recognized certification in the information security arena. She has been published in the and interviewed as an expert on Federal News Radio’s “Mark Amtower Show.” In 2001, Mrs. Magana received the Black Engineer of the Year Award for the “Most Promising Engineer in Government.” Mrs. Magana presently serves on several advisory boards and also previously served as a Fellow with the Institute for Critical Infrastructure Technology (ICIT), a Washington DC based think tank that briefs Congress, Senate and the Senior Executives of the U.S. Federal government on matters related to Cybersecurity and Critical Infrastructure. In addition, Mrs. Magana was a recipient of the Army’s Achievement Medal for Civilian Service. Her company was recognized by Diversity Business for 2014, 2012 and 2011 as one of the “Top 500 African American Owned Business’ in the US”. In addition her company was honored in the Inc. 5000, as one of America’s Fastest Growing Companies for 2014. Lastly, her company was recognized by CIO Review Magazine as one of the “20 Most Promising Enterprise Security Companies in 2015″. Mrs. Magana is a graduate of the University of Illinois Urbana-Champaign with a B.S. in Engineering.

Membership Meeting 2/22/2023
2023-02-22 17:00 - 19:30 | Convergint | Federal, 6650 Eli Whitney Dr, Suite 400, Columbia, MD, 21046, United States
Click Here to register for the February 22, 2023 ISSA Membership Meeting
Chapter Business Meeting Slides: Membership Meeting, February 22, 2023
Speaker Slides: 2023-02-22 Making the Shift to Risk-Based – Brown

Topic: Risk-Based Security
With so many cybersecurity technologies and services available, how do organizations get started with evaluating the managed detection and response (MDR) option that is right for them? Lyndon Brown, Pondurance Chief Strategy Officer weighs in on how to select the MDR provider that fits your needs best. In this session, Brown will discuss:

How to shift to risk-based security.
The ongoing evolution of the MDR space .
Questions to ask MDR providers during the selection process.

Speaker: Lyndon Brown
Mr. Lyndon Brown brings a career focus in building high-growth technology companies to Pondurance where he is responsible for Product Management, Corporate Development, Marketing and driving cross-functional performance. Prior to joining Pondurance, Lyndon served as Vice President of Business Development at FireEye Mandiant, where he focused on strategic growth initiatives. As an executive, Lyndon has successfully led product management, M&A, and global partnerships at firms such as Verodin (acquired by FireEye) and Endgame (acquired by Elastic).

Click Here to register for the February 22, 2023 ISSA Membership Meeting

Membership Meeting 3/22/2023
2023-03-22 17:00 - 19:30 | Convergint | Federal, 6650 Eli Whitney Dr, Suite 400, Columbia, MD, 21046, United States
Chapter Business Meeting Slides: 2023-03-22 Meeting Slides
Speaker Slides: 2023-03-22 Security Architecture Post Covid

Topic: Security Architecture in the Age of Covid
Security Architecture was hard enough, but then Covid sent all of your employees home. A Remote Access infrastructure meant for a fraction of your employees now had to support everyone. Three years later no one wants to go back into the office. Your security architecture needs to adapt to secure your employees now wherever they may be, how are you going to do it?

Speaker: Christopher McGranahan, Director of Security Architecture at BackBlaze
Chris McGranahan currently works as the Director of Security Architecture and Engineering at Backblaze. He has more than twenty years of experience in cybersecurity in a wide variety of roles in multiple industries.

Membership Meeting 4/26/2023
2023-04-26 17:00 - 19:30 | Convergint | Federal, 6650 Eli Whitney Dr, Suite 400, Columbia, MD, 21046, United States
Chapter Business Meeting Slides: 2023-04-26 Meeting Presentation
Speaker Slides: Cyber 911 Presentation
Click Here to view promotional Video

Topic: Who ya gonna call?
If there was something strange in your neighborhood, who ya gonna call? The answer is obviously, the Ghostbusters! Now if you looked outside your window, and noticed that your neighbor’s house had caught on fire, who ya gonna call? 911, and ask help from your local fire department! Let’s say you saw a bad car crash, and emergency services are needed urgently, who ya gonna call? 911 again, and ask for an ambulance or local EMT to be dispatched as quickly as possible! Now lets say that an elderly member of your community receives an email from someone that claims to be Microsoft, and demands that they send thousands of dollars in “licensing fees” to avoid criminal prosecution, who ya gonna call? That last one is where people suddenly don’t have a good answer. During a cyber emergency, most people don’t have the luxury of figuring out how to call for help on their own. We will discuss a number of strategies that cybersecurity professionals can use to help answer this last question, and hopefully stimulate good discussions on how we can better protect our communities from the growing cyber threat!

Speaker: Colin Hamill – Founder & IT Solutions Designer, Sentinel Forge Technologies
Colin has always had a deep fascination and passion for working with computers and using them to solve problems. This passion led Colin to study Computer Science at the University of Maryland, College Park, where he first met his now-wife, Melanie. It led him to a more than 15-year career as an Enterprise Presales Solutions Designer, where he would build solutions for his clients using different pieces of technology as “building blocks” to solve their technical problems. Regardless of the specific technologies included, Colin strove to communicate his solutions & designs in a clear & comprehensible way, free of the jargon and alphabet-soup acronyms that can make the IT industry inaccessible for most of the population. His passion drove him to continue his education, and he attended night classes at Loyola University after work and he earned his Master of Business Administration (MBA), with a focus on Information Systems. Colin’s MBA showed him how he could use his “technology building blocks” to solve his clients business problems & their technical problems at the same time.
Colin recently started his own business, Sentinel Forge Technologies, after seeing the impact on fuel supplies after the Colonial Pipeline Cyberattack of May 2021. Colin has focused his efforts on combating the ever-increasing threat of Ransomware and Cyberattacks on critical US infrastructure and to help train the next generation of Cyber 911s. He believes that protecting America’s food supply is of utmost importance and that securing it will mean protecting every link in the agriculture supply chain, both large & small.

Membership Meeting 5/24/2023
2023-05-24 17:00 - 19:00 | MIC – Maryland Innovation Center, 6751 Columbia Gateway Dr, Columbia, 21046
Chapter Business Meeting Slides: 2023-05-24 Meeting Presentation
Speaker Slides: None

Topic: The Value Of Engaging Cybersecurity Communications
Keeper Security Director of Global Communications Anne Cutler will share her unique career path from anchoring the evening news in a small town in Wyoming to leading international communications for a global cybersecurity provider. Through her unusual background, Anne has developed a deep appreciation for the value of conveying complicated messages in plain language quickly, clearly, and accurately across all platforms, to include traditional and emerging media. She will discuss how she’s applied lessons from her national television experience to handling crisis communications; securing positive, proactive press; and building enduring relationships with journalists, partners, and stakeholders. Anne will explain the critical importance of communication in the ever-expanding field of cybersecurity with real-world examples, including the Shields Up campaign at the onset of the war in Ukraine and the unprecedented response to the Apache Log4J vulnerability.
Speaker: Anne Cutler, Keeper Security

Anne Cutler is a communications professional specializing in cybersecurity, with more than 15 years of industry experience and proven track record of growing brand awareness for organizations. Anne is the Director of Global Communications for Keeper Security, the leading provider of best-in-class password management, secrets management, privileged access, secure remote access and encrypted messaging. Anne leads public relations, cybersecurity research, analyst relations, social media, as well as all other internal and external communications for Keeper.
Prior to Keeper, Anne worked in government as the media strategist for the Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Homeland Security Science and Technology Directorate (DHS S&T). At CISA, Anne brought cybersecurity to the forefront of American consciousness through messaging and media engagement for the nation’s lead cyber defense agency. Anne was the communications lead for CISA’s Shields Up campaign- the agency’s cybersecurity response to the war in Ukraine. She conducted crisis communications response for major cyber incidents including Colonial Pipeline, JBS, and Kaseya ransomware attacks, and Apache Log4j vulnerability.
Anne began her career as a television news anchor and reporter at KCWY News in Casper, Wyoming. Her award-winning broadcasting career would take her to KOLO 8 in Reno, Nevada; WGNO News in New Orleans, Louisiana; and FOX 5 DC in Washington, DC, where she worked as an anchor, reporter, contributor and host, from hard-hitting breaking news to politics, exclusive reports, long-format, features, entertainment and talk shows.
She’s covered the COVID-19 pandemic, President Donald Trump’s impeachment, Brett Kavanaugh’s Supreme Court nomination, Robert Mueller’s Special Counsel investigation, high-profile trials including the first criminal trial for Paul Manafort and major breaking news stories including the mass shooting at the Capital Gazette newspaper, as well as uncovering a major crime ring in Virginia through tips received from her reporting. Anne’s been to the Super Bowl sidelines and World Series, done corkscrews in a fighter jet, been hit by flying fish in the Louisiana bayou, in the eye of a damaging hurricane along the Gulf Coast, and along fire lines in Wyoming, California and Nevada.
Anne is originally from Northern California and studied at University of California, Los Angeles, where she double majored in Mass Communications and Political Science. Her husband Joe is a Lt. Colonel in the US Marines and they have two sons, Brooks and Beau.

Membership Meeting 6/28/2023
2023-06-28 17:00 - 19:00 | MIC – Maryland Innovation Center, 6751 Columbia Gateway Dr, Columbia, 21046
Chapter Business Meeting Slides: 06-28-2023 Meeting Slides
Topic: Cybersecurity Maturity Model Certification (CMMC)

DoD’s Cybersecurity Maturity Model Certification (CMMC) Program was designed to provide increased assurance to the DoD that a DIB contractor can adequately protect sensitive unclassified information (i.e., FCI and CUI) at a level commensurate with the risk, and accounting for information flow down to its subcontractors in a multi-tier supply chain. CMMC was initially implemented as an interim DFARS rule in September 2020 (DFARS Case 2019-D041). In March 2021, in response to over 850 public comments, the program was modified and streamlined to CMMC 2.0. The revised CMMC Program aligns with existing cybersecurity models. Once implemented through the rulemaking process, when applicable through acquisitions vehicles, CMMC requirements will be required for prime contractors and their subcontractors. While the rule is being finalized, it is important to continue to prepare now! Come learn more about CMMC 2.0 and recommended next steps.
Speaker: Dawn M Greenman, Program Manager Cybersecurity Compliance for Johns Hopkins Applied Physics Laboratory (JHU/APL)

Dawn M Greenman is Program Manager Cybersecurity Compliance for Johns Hopkins Applied Physics Laboratory (JHU/APL). In this position, she oversees the cybersecurity compliance and supply chain risk management strategy across the organization. Since 2013, she has ensured JHU/APL’s compliance with DFARS 7012 and NIST SP 800-171. During this time, she developed relationships with the small business community and learned of the unique challenges small businesses had meeting the cybersecurity requirements. Ms. Greenman became an advocate for small businesses. She helps lead working groups with DoD and industry to develop strategies to help small businesses improve the protection of controlled unclassified information.
Through JHU/APL, Ms. Greenman also worked for 3 ½ years with DoD CIO and DoD Office of Sustainment and Acquisition to develop and support the Cybersecurity Maturity Model Certification (CMMC) Program.
Ms. Greenman holds an undergraduate degree in Information Systems with a concentration in Homeland Security and an Executive Masters of Business Administration from The University of Maryland Robert H. Smith School Of Business. She is a Certified Information Security Professional (CISSP) and holds the GIAC Security Essentials (GSEC) certification.
