Central Maryland Chapter of ISSA

Membership Meeting 6/28/17
2017-06-28 17:00 - 19:00 (America/New_York)
Business Meeting Slides: Click Here

Topic: Cyber Innovation
While invention can be defined as creating something new, “innovation” is applying an invention or creative idea in a different way that adds value to the customer or user. Innovative ideas are not limited to new technology, but can occur in policy, concept of operations, process and other areas. For example, there is potential synergy between corporate IT/SOCs, cyber R&D, and the cyber security applied to critical mission systems. However, exploiting this synergy is not free, and many organizations struggle in applying the tools they develop to the real-life problems their SOC operators encounter on a daily basis. This talk will cover innovative ideas stemming from this cyber-related synergy, and where it has led to new approaches in malware analysis, network architecture, multi-organization collaboration, visualization of the battle space, and automated cyber response.
Speaker: Michael Misumi, CIO, Johns Hopkins University Applied Physics Lab (APL)

Michael Misumi serves as the Chief Information Officer and Head of the Information Technology Service Department at the Applied Physics Laboratory (APL) at Johns Hopkins University. Prior to his current position he was at the RAND Corp. in Santa Monica, Calif., where he was deputy CIO. He led the operational Cyber Strategy development at both organizations, he is the APL Cyber Response Incident Lead, and he led a Cyber Security review of all of Johns Hopkins (including the university, medical center, and hospitals). Misumi, who has an MBA from the UCLA Anderson School of Management and a bachelor’s degree in English from UCLA, has over 20 years experience developing information technology strategy, security operations, project portfolio management, network operations, data center operations, desktop administration and personnel management. The 300-person Information Technology Service Department develops and maintains software for APL business applications; its experts also serve on the front lines of cyber-protection, securing APL networks from hackers and other outside threats. Misumi leads the Navy UARC Cyber Security Task Force, serves on the USSTRATCOM Strategic Advisory Group (SAG) IT Task Force and the Computer Advisory Committee for Oakridge National Laboratory, and is a Board member for the Howard County School System Cyber Security program (ARL).

Job Fair, Prince George's Community College
2017-06-28
On June 28th, a student job fair will be held at Prince George’s Community College, Largo, MD, in conjunction with the Community College Cyber Summit (3CS). In its fourth year, 3CS expects to attract upwards to 400 2- and 4-yr college faculty and workforce development professionals from across the nation. The job fair is being marketed to 50+ colleges and universities within a 150 mile radius of the venue – all with programs of study in information technology and cybersecurity. Faculty attending 3CS will also attend the job fair in order to gain first-hand information on what companies are really looking for, in terms of IT and cybersecurity skill sets. Information on participating in the job fair can be obtained by emailing Dr. Barbara Belon at bjbelon@gmail.com or by calling 610.377.6103. Information on 3CS can be found at http://www.my3cs.org/

Memorial Day 2017
2017-05-29

Membership Meeting 5/24/17
2017-05-24 17:00 - 19:00
ISSA Business Meeting Presentation slides: 2017-05-24-Meeting-Presentation.pdf
Speaker slides: Advanced-Persistent-Threat.pdf

Topic: Advanced Persistent Security: Learning from failure
This discussion will focus on how failure should not only be expected, but welcomed. Failures tell you how to improve protection and detection, and can lead to the discovery of other breaches – all supported by case studies. Such failures can also be considered part of how to respond to a data breach. There is clearly the patching, but the more important long-term issues are, what are the actual lessons learned to take away and improve security? Ira will share his Syrian Electronic Army experiences which proactively stopped attacks after learning from past attacks. Additional lessons learned from the Snowden case and others will also be examined.
Speaker: Ira Winkler, Secure Mentem

Ira Winkler, CISSP is President of Secure Mentem, author of Advanced Persistent Security, and co-host of The Irari Report (www.irarireport.com). He is considered one of the world’s most influential security professionals, and has been named a “Modern Day James Bond” by the media. He did this by performing espionage simulations, where he physically and technically “broke into” some of the largest companies in the World and investigating crimes against them, and telling them how to cost effectively protect their information and computer infrastructure. He continues to perform these espionage simulations, as well as assisting organizations in developing cost effective security programs. Ira also won the Hall of Fame award from the Information Systems Security Association, as well as several other prestigious industry awards. Most recently, CSO Magazine named Ira a CSO Compass Award winner as The Awareness Crusader.
Mr. Winkler began his career at the National Security Agency, where he served as an Intelligence and Computer Systems Analyst. He moved onto support other US and overseas government military and intelligence agencies. After leaving government service, he went on to serve as President of the Internet Security Advisors Group, Chief Security Strategist at HP Consulting, and Director of Technology of the National Computer Security Association. He was also on the Graduate and Undergraduate faculties of the Johns Hopkins University and the University of Maryland. Mr. Winkler is a Past President of the Information Systems Security Association, which is a 10,000+ member professional association.

CISSP Study Group Spring 2017
2017-05-16 17:00 - 20:00, 2017-05-09 17:00 - 20:00, 2017-05-02 17:00 - 20:00, 2017-04-25 17:00 - 20:00, 2017-04-18 17:00 - 20:00, 2017-04-11 17:00 - 20:00, 2017-04-04 17:00 - 20:00, 2017-03-28 17:00 - 20:00 and 6 more dates
CISSP Study Group
Spring 2017
ISSA Central Maryland is pleased to announce our Spring 2017 session of the CISSP Study Group. We conduct these study groups twice a year (Spring and Fall) in order to provide access to high-quality, low-priced resources to further the Information Security profession, and help our community members meet the compliance requirements outlined in DoD 8570.01. Our study group sessions are highly affordable even for those who are not reimbursed for educational expenses. Refer to the Training page of the ISSA Central Maryland website for additional details.
Dates: Tuesday nights beginning February 7, 2017 through May 16 (14 nights)
Time: 5:00 – 8:00 P.M.
Where: 10420 Little Patuxent Pkwy., Columbia MD 21044, Suite 500 (Offices of Phoenix TS)
Reasons you should join our study group:

Great instructors. Many of our instructors were pioneers in the information security field and personally worked with some of the people we read about in our textbook
Low cost. Much more economical than most Boot Camps or even other comparable study groups.
Group dynamics of a live, instructor-led study group
Time for things to sink in. This is not a one-week boot camp. We want you to learn, not cram.
It’s a night you don’t have to cook! We typically bring in pizza, Subway, Uno’s, Jimmy John’s, and such, so you don’t have to eat before or after you get here.
Hang out with other smart people. J Meet and make friends with other people who are serious about advancing their careers. Enjoy intelligent conversation on topics of interest to you.
Meet new people working in your industry. Network for recruiting or collaborative purposes.
Earn CPEs. Already have another certification? This will likely count toward CPEs for existing certs.
Structure. A physical class imposes a little external discipline to your study schedule. A little peer pressure to keep up with the group can be a good thing. Some people want to go at a slower pace, but most of us need a little push.

To join the ISSA Central Maryland chapter, visit:
ISSA International Home Page: www.ISSA.org
Additional information, contact:
Vice President of Education
Chuck Dickert, CISSP, CISA, CISM, CAPM\nV_P_Education@ISSA-CentralMD.org

Inclement Weather: If Howard Community College evening classes are canceled due to inclement weather, the CISSPstudy group for that evening will be cancelled.

Membership Meeting 4/26/17
2017-04-26 05:00 - 19:00
General Membership Meeting Slides: click Here

Topic: Data Engine Security Management
Please Join Charles Sirois, Chief Security and Strategy Officer and creator of DataLeakTest.com for a discussion on “Data Engine Security Management” In this presentation Charles will discuss the inner workings of the inside-out Data Engine model for data protection. We will discuss handling data protection in 3 major phases; Inbound Data handling controls, Internal Data handling controls, and Output Data handling controls. Time permitting Charles will discuss Data controls deployment methodology including; Data Security Deployment phases, Data protection, ROI matrix, and 4 golden rules of deploying Data Security

Speaker: Chuck (Charles) Sirois, Chief Security and Strategy Officer, Assurance Data
Chuck has been a thought leader for Enterprise Security for nearly 20 years, Chuck’s expertise stems from independent security software development and consulting for the largest Federal DoD/ civilian and fortune 500 firms. Chuck has demonstrable experience in how threat actors operate and how to defend the Enterprise against them. Further, Chuck has proven his skills effective by successfully finding and preventing weaponized threats in hostile environments.Previously Chuck was founder of Contegrity Partners LLC and DataLeakTest.com, as well as Security Engineer for Websense, Novell, NetIQ, Tufts HC, and Citigroup.

Membership Meeting 3/28/17
2017-03-28 17:00 - 21:00
Speaker: Ron Gula, President Gula Tech Adventures Tenable Network Security
Ron Gula started his cyber security career as a network penetration tester for the NSA. At BBN, he developed network honeypots to lure hackers and he ran US Internetworking’s team of penetration testers and incident responders.
As CTO of Network Security Wizards, Ron pioneered the art of network security monitoring and produced the Dragon Intrusion Detection System which was recognized as a market leader by Gartner in 2001.
As CEO and co-founder of Tenable Network Security, Ron led the company’s rapid growth and product vision from 2002 through 2016. He helped them scale to more than 20,000 customers worldwide, raise $300m in venture capital and achieve revenues in excess of $100m annually.
Presentation – Building a Successful Tech Company
Ron Gula will share his perspectives on the cyber security market and give advice for growing and building tech companies including how to “pitch” and what sort of ideas are trendy and new.

Mid Atlantic Information Security Conference 2017
2017-03-10 08:00 - 17:00
ISSA Mid-Atlantic Information Security Conference
Friday, March 10, 2017. Universities at Shady Grove Conference Center, Rockville, MD
Join us for a full day of training by industry leaders discussing some of the latest topics in tactics and techniques for preparing for cyber-attacks. This conference will feature a variety of presentations and cutting edge training opportunities, including hands-on demonstrations and workshops.
Click here for additional information and to register.

Membership Meeting 2/22/17
2017-02-22 17:00 - 19:00
General Membership Meeting Slides: click Here
Logical Operations Presentation: click Here
Red Owl Presentation: Click Here

Sponsor Appreciation Night:
The February ISSA Central Maryland Chapter meeting will be a Sponsor Appreciation Night to show our thanks for their continued support throughout the year. Each sponsor will be given 10-15 minutes to give an introduction to their company and discuss some of their security technologies. Vendors that have confirmed include:

Parsons
PhoenixTS
LogRhythm
Clearswift
RedOwl Analytics
Logical Operations

Presidents Day 2017
2017-02-20 00:00

CISSP Study Group - Spring 2017
2017-02-07 17:00 - 20:00

Membership Meeting 1/25/17
2017-01-25 17:00 - 19:00
Business Meeting Slides: Click Here
Speaker Presentation Slides: Click Here

Topic: The DNA of Data Theft

Charles will discuss; what, where, how, when, and why data is stolen and the fundamentals of Data Loss Prevention.
We will discuss the threat market and how to defend data.

What Data is stolen
Who produces and consumes Data
Why Data is stolen
How Data is stolen
When Data is stolen
How to prevent Data theft

Time permitting Charles will discuss deployment methodology including

Data Security Deployment phases
Data protection ROI matrix
4 golden rules of deploying Data Security

Speaker: Chuck (Charles) Sirois, Chief Security and Strategy Officer, Assurance Data

Chuck has been a thought leader for Enterprise Security for nearly 20 years, Chuck’s expertise stems from independent security software development and consulting for the largest Federal DoD/ civilian and fortune 500 firms. Chuck has demonstrable experience in how threat actors operate and how to defend the Enterprise against them. Further, Chuck has proven his skills effective by successfully finding and preventing weaponized threats in hostile environments.Previously Chuck was founder of Contegrity Partners LLC and DataLeakTest.com, as well as Security Engineer for Websense, Novell, NetIQ, Tufts HC, and Citigroup.

Martin Luther King Jr. Day 2017
2017-01-16

New Year Day 2017
2017-01-01

Christmas Day
2016-12-25

Membership Meeting
2016-12-21 17:00 - 19:30 | Parsons, 110 Samuel Morse Drive, Suite 200, Columbia, MD, 21046, United States
December 21, 2016 General Meeting
Meeting Slides: Click Here
Presentation: Successfully Empowering Employees in Security Awareness
It’s a well-known statistic that the majority of cyber security incidents originate from end users within an organization. The emails they click through, their treatment of mobile devices with access to corporate data, and the general lack of awareness or empowerment they feel relative to understanding IT security risks leave most organizations operating as though the front door to the building has been left open – it’s become increasingly common for outsiders to gain easy access to corporate data, practically in broad daylight.
To better combat IT security challenges, Logical Operations has authored an expert-facilitated training course and accompanying credential that helps an organization not only implement a successful security awareness program, but build a process for ensuring their employees feel continuously empowered relative to IT security and their role in ensuring corporate data is left uncompromised. In this presentation, Logical Operations will talk through their recommendations for successfully implementing such a program, as well as the actions they’ve seen corporate clients take to better avoid data compromises
Speaker: Joe Mignano, VP, Channels, Logical Operations
Jeanie Saunders, Director, Trainer Enablement
Joe Mignano leads the Channels group at Logical Operations. In this role, Joe is responsible for setting Logical Operations’ certification development strategy (which includes certifications in IT Security, secure mobile application development, vendor-neutral cloud computing, and virtualization), initiating public relations and other awareness efforts relative to Logical Operations’ certification products, and building partnerships aimed at developing a broader channel for Logical Operations’ certification products worldwide.
Jeanie Saunders is a Logical Operations Instructor with over 15 years of classroom experience. She is certified by Microsoft, CompTIA, and Epic, and has taught classes on Microsoft Office, Network Operating Systems, Healthcare software and Trainer Development. In her current role, she meets with trainers to share ideas and tackle the tough questions relating to the management of today’s computer training classroom using resources that help create the best possible learning environment for students.

2016 IEEE 3rd World Forum on Internet of Things (WF-IoT)
2016-12-12 - 2016-12-14
Dove-tailing with this year’s World Forum Internet of Things conference theme, IoT: Smart
Innovation for Vibrant Ecosystems, this entertaining, enlightening, and enjoyable set of
discussions focuses on how IoT technologies enable creativity, collaboration, and culture
shifts.Click here for more info: World Forum on IoT
