Women in SIG Webinar
2017-08-14 16:00 - 17:00 (America/New_York)
Women in Security Special Interest Group Monthly Webinar Series
Driving Innovation within STEM & Cyber Across the
Generations – Part III
Ms. Monique Morrow, Chief Technology Strategist
Privacy as a Component of the Cybersecurity World or is it?
Monday, August 14, 2017, 4:00 – 5:00 PM (Eastern)
Click HERE for more info.

Membership Meeting 8/23/2017
2017-08-23 17:00 - 19:00
ISSA Business Meeting Presentation slides: 2017-08-23-Meeting-Presentation.pdf
ISSA Chapter Outreach: ISSA Chapter Outreach 08_2017.pdf
Speaker slides: Threat Lifecycle Management

Topic:Threat Lifecycle Management

Why having a response strategy to cyber incidents is just as important as a prevention strategy and leveraging co-managed services as a force-multiplier to make the most of your security program.
Speaker: Michelle C. Lapuente, LogRhythm, Regional Sales Manager
Michelle C Lapuente has been with LogRhythm for over five years with previous experience at Dell and other tech start-ups. She comes most recently from the banking and finance industry. A graduate of the University of Texas at Austin in Economics and Spanish, Michelle is focused to helping security professionals solve security challenges within their organizations. Additionally, she is a six time Ironman finisher, a fan of wine, and dogs.

Labor Day 2017
2017-09-04

Membership Meeting 9/27/17
2017-09-27 17:00 - 19:00
ISSA Business Meeting Slide Presentation: 2017-09-27-Meeting-Presentation.pdf
Speaker slides: SDLC: How to Get Adoption
Topic:Secure SDLC: How to Get Adoption

Most companies have some form of a security initiative for custom applications. Whether this is driven by regulations, a past incident, executive awareness or other factors, development managers understand the need to promote and/or enforce secure development practices. While striving for consistently secure code and continually improving code security is a goal development teams share, actually achieving that relies on the enthusiasm of individual developers. Based on hundreds of customers across many industries over the course of 10 years, we will discuss common practices for building application security into the SDLC, and note which ones have been the most successful. We will also offer ideas on emerging practices that may further promote application security in process.
Speaker: Curtis Bragdon, Director of Sales, Code Dx
Curtis Bragdon has over 20 years’ experience designing and deploying software systems, helping teams design more secure software, and selling technical tools throughout the enterprise. Over the past 10 years, he has focused on cybersecurity at the network and application level, helping hundreds of companies secure their systems. At Code Dx, he helps companies build security into the Software Development Lifecycle

NIST Risk Management Framework Workshop
2017-10-03 08:30 - 13:00 | The National Cybersecurity Center of Excellence (NCCoE), 9700 Great Seneca Highway, Rockville, MD, 20850, United States
On October 3, 2017, NIST will convene users of the NIST Risk Management Framework to discuss how the RMF is currently being used in the federal government and the private sector, including successes and challenges with its use, and opportunities for enhancement.
This half day workshop will include:

A policy update from the Office of Management and Budget;
An update on the NIST Risk Management Framework and the Cybersecurity Framework;
Panels on risk management, automation, and industry approaches to risk management in the SDLC;
A risk management tool demonstration; and
An opportunity for participants to have an open discussion.

Workshop Date and Time: Tuesday, October 3, 2017, 8:30 AM – 1:00 PM
Location: The National Cybersecurity Center of Excellence (NCCoE), 9700 Great Seneca Highway, Rockville, MD 20850
For more information: https://beta.csrc.nist.gov/Events/2017/NIST-Risk-Management-Framework-Workshop
This workshop is free and open to all interested participants. Please note that parking is limited and we will limit attendance to the first 250 participants who register.
Please RSVP to sec-cert@nist.gov no later than September 26, 2017 with the following information

2017 Baltimore Cyber Summit
2017-10-07

Columbus Day 2017
2017-10-09

ISSA International Conference 2017
2017-10-10 - 2017-10-11
San Diego, California

CyberMaryland 2017
2017-10-11 - 2017-10-12 | Baltimore Convention Center

LO-CON17
2017-10-18 - 2017-10-19 | Westin Baltimore Washington Airport – BWI, 1110 Old lkridge Landing Road, Linthicum Heights, 21090, United States
LO-CON17, to be held in Baltimore October 18th and October 19th, provides the opportunity for those in the commercial training channel to hear industry insights from experts in emerging and specialized technology trends requiring certification and training. The conference will also feature sessions engaging for end users and practitioners the technology space, including “Normalization of Cybersecurity: From the Boardroom to the Loading Dock”, “Value of Certification for Security Decision Makers”, “What is a Cyber Responder, and Are They Still Needed”, and “How and Why Corporations Need to Invest in Cloud Certification and Training.” For more information and registration, go to www.lo-con.com.

Membership Meeting 10/25/2017
2017-10-25 17:00 - 19:00 | Parsons, 110 Samuel Morse Drive, Suite 200, Columbia, MD, 21046, United States
Business Meeting Slide Presentation: 2017-10-25-Meeting-Presentation.pdf
ISSA Chapter Outreach: SIG-LIaisons-Decks-4Q_2017.pdf
Speaker slides: TBD
Topic:Secure SDLC: The Missing Link in the Supply Chain
In recent years, the global supply chain has become the new “playground for hackers”. With supply chain inherently having numerous links (from suppliers to manufacturers to distributors), the number of potentially exploitable relationships makes it an attractive target. This presentation includes the ‘how’ and the ‘why’ of supply chain attacks and describes several notable malware campaigns affecting supply chain in multiple industries

Speaker: Chris Hall, Wapack Labs
Chris has been in the intelligence community for over 16 years in various capacities including SIGINT, network defense, reverse-engineering, and fusion. In 2012, Chris moved from the government to the private sector to help form the Red Sky alliance and then co-found Wapack Labs in 2013. As a partner at Wapack Labs, Chris’s main responsibility is to oversee the production, sourcing, and collection of intelligence.

NIST 800-171 Training
2017-10-28 10:00 - 18:00
Laetare Cybersecurity, LLC is sponsoring a training seminar on NIST 800-171: Protecting Controlled Unclassified Information in Non-Federal Systems and Organizations. Click here for more information.

Cyber/ IT Social
2017-10-30 18:30 - 20:30
An event to connect you with valuable resources and answer all your questions regarding your career in IT! Come network with Cyber Professionals, Hiring Managers and Industry Experts. Click here for more information.

International Information Sharing Conference (IISC)
2017-10-31 - 2017-11-01 | Walter E. Washington Convention Center in Washington D.C.
International Information Sharing Conference (IISC), being hosted by the ISAO Standards Organization with participation from the Department of Homeland Security and U.S. Chamber of Commerce. The event will be on October 31 – November 1, 2017 and is recognized as an NCSAM event. The IISC will be at the Walter E. Washington Convention Center in Washington D.C. There are still opportunities to speak, attend, exhibit, or sponsor at this event. To learn more please visit www.fbcinc.com/e/iisc.

Covering Cyber: How to Improve Reporting and Policy on Cyber Issues
2017-10-31 09:00 - 10:30
A panel conversation about what the press and policymakers are saying and doing about cyber issues, what’s getting ignored and what needs to be prioritized. Click here for more information.

Cyber Safe: Your Essential Guide to Cybersecurity
2017-11-01 08:30 - 10:30
Learn the extent of the risk, how to protect yourself and your business, and how to respond to a cyber attack. The seminar will be held in the upper lobby of the Robert and Eleanor Romadka College Center on the Essex Campus of CCBC. This FREE presentation includes breakfast, courtesy of our sponsors, Essex Bank, the Community College of Baltimore, the Chesapeake Gateway Chamber of Commerce as well as a grant from Baltimore County. Click here for more information.

Blue Collar STEM Festival
2017-11-06 08:00 - 17:00
The Maryland STEM Festival will be hosting the 1st Annual Blue Collar STEM Conference at the B & O Railroad Museum on November 6th. The Conference will focus on jobs and careers that don’t require a four-year college degree, but do required extensive STEM expertise and skills. Cybersecurity is one area that fits in this area. There is a great need for workers, education/training and awareness for these positions. The Conference will be having speakers and representatives from Industry, Labor, Government, Education and the Military to discuss this topic. Attendance is limited to 500. The Conference Organizers have invited Governor Hogan, Senator Cardin and Congressman Cummings to speak. This is will be one of the first conferences truly focused on this topic and will show Maryland’s leadership in workforce development and the future economy. For additional information and to register, go to the Conference website. Questions should be directed to Phil Rogofsky, Director at mdstemfest@gmail.com

Federal Tech and Cyber Hiring Event
2017-11-06 10:00 - 17:00
Click here for more information.

Federal Tech and Cyber Hiring Event
2017-11-07 10:00 - 17:00
The Chief Information Officers Council (CIOC) is pleased to sponsor the first-ever, government-wide Federal Tech and Cyber Hiring and Recruitment Event at the Silver Spring Civic Building at Veterans Plaza in Silver Spring, Maryland. The Federal Government is seeking top information technology and cybersecurity talent to fill hundreds of positions needed to modernize legacy IT and strengthen the cybersecurity of federal networks and critical infrastructure across our nation. Over twenty federal agencies will be collectively recruiting, interviewing and hiring candidates on-the-spot in a streamlined hiring process. Additionally, participants will have access to free training seminars that will cover resume writing, interviewing, and applying to federal positions. Click here for more information.

3rd Night of Cyber
2017-11-07 17:00 - 19:00 | USRA, 7178 Columbia Gateway Dr, Columbia, MD, 21046, United States
The Maryland STEM Festival presents the “3rd Night of Cyber” at URSA, 7178 Columbia Gateway Drive, Columbia MD. Click here for event flyer.
Additional information about the 2017 Maryland STEM Festival can be found at marylandstemfestival.org/signature-events.

Veterans Day 2017
2017-11-10

2nd Annual Federal IT Security Conference at PhoenixTS
2017-11-14 08:00 - 17:00
PhoenixTS is hosting their 2nd Annual Federal IT Security Conference on November 14th. The conference is free for government employees and $49 for contractors. Attendees will earn 9 CPEs for the event and breakfast/lunch are included.
Additional information and to register can be found here.

Washington DC - IT, Engineering & Cyber Security Career Fair
2017-11-14 11:00 - 14:00
Start making connections at the Washington DC – IT, Engineering & Cyber Security Tech Fair. Meet face-to-face with companies that are hiring diverse motivated candidates just like you. Whether you’re unemployed or interested in new opportunities, come make valuable connections with top recruiters. So Polish Your Resume…Bring Plenty of Copies…and Get Ready to Start or Advance Your Career! Click here for more information.

Membership Meeting 11/15/2017
2017-11-15 17:00 - 19:00
ISSA Business Meeting Presentation slides: 2017-11-15-Meeting-Presentation
ISSA Chapter Outreach: ISSA Chapter Outreach 11_2017
Speaker slides: Lessons Learned from the Life of a Security Consultant
Topic:Secure InfoSec Observations from the Life of a Security Consultant
What’s the difference between companies that have solid, mature information security programs and ones that seem to be constantly struggling to keep up? After working with many companies across multiple verticals and varied sizes, there are plenty of lessons to be learned from observations made across the industry. We will be taking a closer look at a few key information security trends and how you and your organization can improve your information security posture.

Speaker: Seth Lucci, GuidePoint Security, LLC
Seth Lucci is a Senior Security Consultant at GuidePoint Security. Since 2001, his career has included experience in multiple disciplines and includes over 10 years as a Federal contractor supporting Information Technology (IT) security, information assurance, configuration, program and project management, systems engineering, quality assurance, finance, and business development. He is a subject matter expert (SME) in implementing NIST-based risk management frameworks in the commercial and federal workspace. Seth has been a trusted advisor to C-suite executives in addressing their needs for IT strategic plans, IT transformations, IT risk management, governance, frameworks, and business process improvements.
More recently, Seth has been consulting clients on Payment Card Industry Data Security Standard (PCI DSS) reviews and compliance. Some of his clients include: NGA, DIA, NATO, and Freddie Mac. Seth’s compliance-related initiatives focus on a myriad of associated federal (DOD and IC), as well as commercial standards such as: FISMA, STIGs, NIST 800 Series, DCID 6/3, ICD 503, PCI DSS and ISO.
Seth earned a Bachelor of Business Administration degree in Marketing from Radford University and a Master of Business Administration degree from Marymount University.

MWSO Cyber Security Kids Program, by Metro Warriors STEM Organization
2017-11-19 15:00 - 16:00
Classes will take place on Sundays from 1-2 pm unless determined to move to a different day and time. Additional classes may take place on other days for competition or make-up day purposes. Also, some activities may need to be completed at home. A home computer and internet access are highly recommended for all children participating in this class. Click here for more

Thanksgiving Day 2017
2017-11-23

CyberCon 2017
2017-11-28 08:00 - 16:00
On November 28, Fifth Domain, Defense News, Federal Times and C4ISRNET present the 3rd Annual CyberCon (http://cybercon.fifthdomain.com/). The cyber front is about more than just security. Defending in cyberspace takes a holistic approach, encompassing technology, policy and people. That’s why we’re bringing together military, intelligence community and homeland security leaders to discuss the latest in cyber defense and offense, and the future of cyberwar at home and abroad. Click here for more information.

ElectroMagnetic Pulse Special Interest Group (EMP SIG), Dupont Summit
2017-12-01 08:00 - 17:00
InfraGard National Electromagnetic Pulse Special Interest Group (EMP SIG ™) is pleased to announce the 7th year we have been part of the Dupont Summit. Our sessions are open to the public. Click here for more information.

Cyber Intelligence Symposium: Developing Cyber Solutions & Bridging the Gap
2017-12-04 08:30 - 18:30
To keep pace with the security environment, organizations must use intelligence to build effective teams and develop holistic cyber security solutions. Today, significant gaps exist among an organization’s cyber technology experts, intel analyst teams, and executive decision makers – all of whom are responsible for cyber risk assessments, network defenses, intelligence gathering operations, counterintelligence, preventing breaches and responding to a cyber-attack. Communicating the full scope of how cyber threats actually impact an organization before, during, and after an attack is a vital skill that remains challenging even among the most tech-savvy and cyber-aware organizations. This one-day event offers a unique opportunity to gain a high-level understanding of exactly how to “Bridge the Gap” among these stakeholders by learning from practitioners who have expertise in these roles, as well as the responsibility to ensure their organization’s mission success. Click here for more information.

GreenHouse Cyber Series "Women in Cyber, Mitigating the Insider Threat"
2017-12-06 14:00 - 16:00
This event focuses on addressing and mitigating the insider threat, from a woman’s prospective. Join Amy Apostol (OPM/NBIB), Katarina Megas (NIST, Trusted Identities Group and Commercial Adoption of IOT Security), Vizma Carver (CEO of ClearRoadmap), Lea Hurley (Principal at Booz Allen), and Pamela Wise-Martinez (President of Institute for Critical Infrastructure and Innovation). They will talk about mitigating the insider threat and diversity. This will be a great conversation and a great opportunity to network! It doesn’t matter if you role or desired focus is technical or non-technical. In data protection/cyber, everyone from various backgrounds are important. Click here for more information.
