Central Maryland Chapter of ISSA

Membership Meeting 8/26/2020
2020-08-26 17:00 - 19:30 (America/New_York) | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2020-08-26 Membership Meeting
Speaker Slides: Dell Security Operations 2.0 Transformation
Speaker Recording: Dell Security Operations 2.0 Transformation
Topic: Security Operations 2.0
With Dell Technologies being looked at as a key innovator is response to the rapidly changing workforce, Bob will layout a vision of what the next-gen security operations will begin to look like. Based on his past experience as a cybersecurity director and his current outlook within Dell Technologies, Bob will explore how technology will drive how we assess risk, manage and mitigate risk, and provide situational awareness. Enablers for remote workforce, multi-cloud operations, and enhanced intelligence all play a role in every agency’s modernization strategy. But should how you secure these new environments change how you think about securing the rest?
Speaker: Bob Nicholson, Business Development Executive, Dell Technologies Federal
Bob Nicholson is currently a Business Development Executive for the Dell Technologies’ Federal team with a concentration on Federal Civilian agencies. Bob has been serving in this position for 5 years but brings more than 25+ years of solutioning experience in support of the public sector.
For 15 years he served as a cybersecurity leader and solution architect within the federal government which included designing and implementing many enterprise solutions and establishing many best practices. Many of these as a result of Federal mandates, Bob has a great deal of experience working within government, in coordination with its many bodies of governance, and throughout industry. He has transferred this knowledge and relationships into not only being a strong advocate for innovation within government, but also a facilitator for ensuring its success.

ISSA-DC August Chapter Meeting
2020-08-18 18:30 - 20:00 | Virtual via Go To Meeting, MD
Incident Handling & Threat Hunting w/ Security Onion by Tyrone E. Wilson
Mr. Wilson will discuss how to use a free and open source tool like Security Onion (SO) to provide hands-on experience and increase our knowledge in incident response and threat hunting. This event is for those with minimal experience working with detection alerts, pcap files, and log management. We will learn how to setup Security Onion at home or on an enterprise network and use its features to complete various network defense challenges. Attendees will leave with a higher level of confidence in network defense as well as the ability to crush their next analyst interview. Participants will also receive a booklet of instructions and credentials to a live SO server which will allow them to continue to practice their new found skills from anywhere in the world.

SANS - Cyber Camp for Teens
2020-08-11 - 2020-08-12 | Virtual
SANS introduces the first-ever SANS Cyber Camp for Teens. If you’re interested in a career in cyber security and you attend high school or junior high, this event is for you!
The camp brings together a group of cyber security experts, discussing the latest topics and trends in IT Security. This free Live Online training event includes:

IT Security-Focused Talks – The industry’s top practitioners will present a series of short, age-appropriate talks on Coding, Using Technology Responsibly, Ethical Hacking, Digital Forensics, Security Awareness and more!
Workshops – These hands-on activities are designed to help you learn in a safe and fun environment and do what the professionals do every day.

IT + Cybersecurity Virtual Career Expo
2020-07-23 10:00 - 15:00 | Virtual
The Maryland Tech Council, in collaboration with Montgomery College’s America’s Promise leadership, is hosting a virtual career expo to connect job seekers and students with industry for cybersecurity and IT related career positions and create awareness of the job opportunities available. The Career Expo is complimentary for all students and job seekers, registration is required.
About the IT + Cybersecurity Virtual Career Expo

20 employers in the virtual expo hall
Explore employer information and career opportunities
Ability to engage with employers through the one-on-one online chat feature
Upload your resume and LinkedIn information to make a strong first impression
This event is complimentary and open to all students and job seekers exploring career opportunities in cybersecurity and IT related fields

If your company is interested in exhibiting, please contact Emily Sumpter at emily@mdtechcouncil.com for more details.

Membership Meeting 7/22/2020
2020-07-22 17:00 - 19:30 | Virtual via Zoom, MD
Chapter Business Meeting Slides: Membership Meeting 7/22/2020
Speaker Slides: MSSP Market Overview
Speaker Recording: MSSP Market Overview
Topic: Managed Security Services
An overview of the Managed Security Services market including:

Definition of MSS
Categorization of MSS market segments and the pros and cons of each
Explanation of why certain offerings dominate the MSS market and why other offerings are less common
Overview of vendors and their products aligned with the common MSS offerings
Description of the varying service models and how they align to different types of customers
Predictions of disruptions to the MSS market in the coming years

Speaker:
John Perkins, Founder, ThreatAngler
John Perkins is the Founder of Threat Angler and brings over twenty years of cybersecurity experience. During the first fifteen years of his career at the Federal Reserve, he contributed to nearly all cybersecurity disciplines. John spent the next five years designing, building, and leading managed security services with Optiv, GuidePoint, Insight Enterprises, and other service providers. John’s passion is to build a sustainable managed security service focused on delivering cybersecurity value outcomes while developing cybersecurity talents in team members.

SANS DFIR Summit & Training - Live Online
2020-07-16 - 2020-07-17 | Virtual
DFIR Summit & Training – Live Online
We are opening this virtual Summit (July 16-17) up to the community! Register now for FREE. (Yes — you read that right!)

Two days of in-depth DFIR Summit talks *MULTIPLE TRACKS* → VIEW AGENDA
Solutions Track Now Available → VIEW SOLUTIONS TRACK
Top hands-on SANS DFIR courses → VIEW COURSES
Exclusive networking opportunities

Independence Day
2020-07-03 | Md

Living Security's Breaking Security Awareness Digital Conference
2020-06-25 12:00 - 17:00 | Virtual
Living Security just announced the launch of “Breaking Security Awareness,” a digital conference to help technology leaders develop a customized solution for their organization! During this conference, leaders will learn action steps in:

Developing a gamified solution that resonates across their organization
Phishing Scams and how to change behavior that minimizes risk
Learning Diversity in Security Awareness. This isn’t a one-size-fits-all solution, but it doesn’t have to be complicated either.
Metrics that drive outcomes and creating the data needed to do this

The conference will take place Thursday, June 25,2020 12:00pm – 5:00pm EST. Be sure to stick around afterwards for a Security Improv Show 5:30-6:30pm which will be fun for the entire family! Registration is FREE

Membership Meeting 6/24/2020
2020-06-24 17:00 - 19:30 | MD
Click HERE to Register for the June 2020 Virtual Meeting
Chapter Business Meeting Slides: 2020-06-24-Meeting-Presentation.pdf
Speaker Slides: TBD
Topic: Cybersecurity Maturity Model Certification (CMMC) – A New, Required DoD Cybersecurity Standard
On January 31, 2020, the DoD published a new cybersecurity standard which will be required beginning in spring, 2020 for new acquisitions awarded to contractors who do business with DoD. The Cybersecurity Maturity Model Certification (CMMC) framework consists of 17 domains, five processes across five levels to measure maturity, and 171 practices across five levels to measure technical capabilities. DoD Program Manager’s will determine what level of maturity required to bid on new RFIs and RFPs based upon the sensitivity of the data in the contract. Maturity Levels range from Level 1, Basic Cyber Hygiene which is performed on an ad hoc basis up to Level 5, Advanced / Progressive cybersecurity capabilities performed with optimized maturity. Level 3 will be required for all future DoD acquisitions where basic Controlled Unclassified Information (CUI) will be part of the performance of the contract.
CMMC will be implemented on a crawl, walk, run basis over the course of the next five years. This spring the Accreditation Body will begin to train C3PAO organizations to certify companies. The DoD will train their Program Managers. Starting in June, a few select contracts will be identified with CMMC requirements in RFIs. This fall, CMMC requirements will appear in a few select RFPs. The execution of a new contract will require that prime contractor and their subcontractors to achieve the appropriate level of CMMC called upon in the contract. While details are still evolving, it is important to prepare now! Come learn more about these new requirements and how to get started.
Speaker: Dawn M Greenman, Deputy Program Manager Cybersecurity for Johns Hopkins Applied Physics Laboratory (JHU/APL)
Dawn M Greenman is Deputy Program Manager Cybersecurity for Johns Hopkins Applied Physics Laboratory (JHU/APL). In this position, she oversees cybersecurity projects across the organization and assists in the oversight of JHU/APL’s cyber operations, security engineering, and IT compliance functions.
Over the past 25 years, Ms. Greenman has held positions of increasing responsibility in information technology and cybersecurity, working for companies small to large. In 2017, Dawn lead JHU/APL to compliance with DFARS 7012 and NIST SP 800-171. During this time, she recognized the struggle small organizations were having with compliance requirements and also understood compliance alone was not enough. She started to participate in external projects and lead working groups with DoD and industry to develop strategies to improve the protection of controlled unclassified information.
More recently, passionate to improve the security of the DoD supply chain, Ms. Greenman eagerly accepted a role as Outreach Lead for the DoD Office of Sustainment and Acquisition’s Cybersecurity Maturity Model Certification (CMMC) project. The Cybersecurity Maturity Model, developed by JHU/APL and SEI/CERT, delivered DoD a new common standard in cybersecurity in January 2020. She will continue to participate in efforts to implement this new standard which will begin to be required by all defense contractors doing business with DoD as early as this summer.
Ms. Greenman holds an undergraduate degree in Information Systems with a concentration in Homeland Security. In July 2019, she graduated with an Executive Masters of Business Administration from The University of Maryland Robert H. Smith School Of Business. She is a Certified Information Security Professional (CISSP) and holds the GIAC Security Essentials (GSEC) certification.
Click HERE to Register for the June 2020 Virtual Meeting

Membership Meeting 5/27/2020
2020-05-27 17:00 - 19:30 | Virtual
Chapter Business Meeting Slides: 2020-05-27 Meeting Presentation
Meeting Sponsor Slides: Semperis AD Recovery and Protection – 2020-05-27
Speaker Slides: Bricata SOAR Presentation – Carl Bolterstein 2020-05-27
Presentation Title: SOARing into Netsec
Traditional methods of security event management create a constant struggle to keep up with the large volumes of data produced by siloed, highly specialized tools. This segmentation and siloing of capabilities produce a huge manual workload on already over worked and under resourced security operation staffs.
Bridging this gap in analyst and security tool capacity is the concept of security orchestration, automation and response (SOAR). This methodology and toolset allow for cybersecurity tools to react to alerts and incidents automatically to enhance productivity. It is the process and the underlying perspectives and ideas that will be discussed during this presentation.
Speaker Bio: Carl Bolterstein, Senior Solutions Engineer at Bricata
Carl is an experienced Solution Architect and Engineer in cybersecurity. He has spent the last seven years focused on network and data cyber analysis. He has worked in the public and private sector with a wide range of customers from small business to large enterprise in the engineering and analyst capacity. He currently serves as a Senior Solutions Engineer at Bricata.
Note: Due to the COVID-19 Coronavirus, the May General Membership meeting will only be provided virtually via GoToWebinar. There will be no in-person meeting.
The May Membership Meeting is sponsored by

Memorial Day
2020-05-25 | Md

Spring 2020 CISSP Study Group
2020-05-19 17:00 - 20:00, 2020-05-12 17:00 - 20:00, 2020-05-05 17:00 - 20:00, 2020-04-28 17:00 - 20:00, 2020-04-21 17:00 - 20:00, 2020-04-14 17:00 - 20:00, 2020-04-07 17:00 - 20:00, 2020-03-31 17:00 - 20:00 and 2 more dates | UMBC Training Centers, 6996 Columbia Gateway Dr., Suite 100, Columbia, MD, 21046, United States
ISSA Central Maryland is pleased to announce the opening of registration for our Spring 2020 session of the CISSP Study Group. As you may know, we conduct these study groups twice a year (Spring and Fall) in order to provide access to high-quality, low-priced resources to further the Information Security profession, and help our community members meet the compliance requirements outlined in DoD 8570.01. At just $450.00, our study group sessions are highly affordable even for those who are not reimbursed for educational expenses.

Living Security CyberEscape Online
2020-05-06 18:00 - 19:00 | Md
ISSA of Central Maryland is partnering with Living Security to provide our members with the opportunity to engage in a virtual Cybersecurity “Escape Room.” We will divide participants up into teams of 8 and they will work together as a virtual team to solve a series of cybersecurity-related challenges and puzzles.
The total time is about 1 hour and we are able to offer this to our members free of charge thanks to Living Security’s generosity. This should be FUN!
To join, register here or paste below URL into your browser:
https://zoom.us/meeting/register/tJ0ldO-uqzovEteHgEosJhmLTt2aJ9bhr6bS
The cost is FREE. Please note that Living Security is handling registration. You are welcome to invite your colleagues and anyone interested in joining ISSA of Central Maryland.
AGENDA

6:00 pm – Introduction by ISSA Central Maryland
6:15 pm – Introduction to Living Security and CyberEscape Online Experience
6:45 pm – CyberEscape Online virtual escape room hosted by Living Security. Group will be split into teams of 8 and will compete to complete a cybersecurity themed escape room, tracking down the insider threat and thwarting their attack before it’s too late!
7:30 pm -8:00 pm – Return to large group session for debrief and Q&A

A PDF describing Living Security’s escape room is available here.

Careers in Cybersecurity Panel Discussion
2020-04-23 11:00 - 12:00 | Md
Come join industry experts as they discuss the various job roles and career paths in the field of cybersecurity. We’ll be discussing how your curiosity and interest in cybersecurity can lead to a new career and what steps to take to make it happen!

Membership Meeting 4/22/2020
2020-04-22 17:00 - 19:30 | Virtual
Chapter Business Meeting Slides: 2020-04-22-Meeting-Presentation.pdf
Chapter Meeting Recording (122MB): Download from ISSA Central MD SharePoint, click here
Speaker Slides: DevSecOps – Phil Kulp 04-22-2020
Topic: DevSecOps: Integrating and Maturing a Security Culture
Cybersecurity professionals have a robust suite of tools and methodologies for assessing risk to operating systems, firewalls, and other components but have limited resources to review webapps. As demonstrated by the Equifax breach, which exploited a third-party library, continuous monitoring and assessment does not always include a review of software dependencies. We rely on regular patches for commercial software and understand how to deploy updates, but maintaining secure custom software requires development team support or integration into a DevSecOps pipeline. The lack of insight into custom software and web applications is due to limited automated review and the technical skills required to identify or understand the unique threats to an organization.
Speaker: Dr. Philip Kulp, PHK Cyber
Dr. Philip Kulp has been consulting in cybersecurity for over 20 years and programming since middle school. In his current role assessing webapps, he combines his passion for both skills while integrating automated cybersecurity checks into the DevSecOps cycle. He also serves as a cybersecurity architect, Incident Responder, independent assessor, and course creator at Cybrary. Philip seeks learning opportunities to balance his cybersecurity skills between academic, technical, and compliance roles. He holds the CISSP certification and two Offensive Security certifications of OSCP and OSCE. In his academic capacity, Dr. Kulp serves as a chair, committee member, and mentor for doctoral students in the Ph.D. and D.Sc. programs at Capitol Technology University.
Note: Due to the COVID-19 Coronavirus, the April General Membership meeting will only be provided virtually via GoToWebinar. There will be no in-person meeting.

Thriving With Resilience and Collective Wisdom
2020-04-22 12:00 - 13:00 | UMBC Training Centers, 6996 Columbia Gateway Dr., Suite 100, Columbia, MD, 21046, United States
Now, more than ever, it’s essential that we come together as organizations and communities to sustain and continue to thrive by crowdsourcing collective wisdom. This one hour lunch and learn will briefly cover the Arc of Learning through conversations about Resilience and Develop Guiding Principles – or Critical Behaviors essential to Resilience. The session is interactive, so it’s expected that everyone participates with both audio AND video. If you join the session, commit to stay for the entire session (i.e. don’t plan to drop in and drop out, as that will not work and will impact everyone else’s experience).

Careers in Software Development Panel Discussion
2020-04-16 11:00 - 12:00 | Md
Come join industry experts as they discuss the various job roles and career paths in the field of software development. We’ll be discussing how your curiosity and interest in software development can lead to a new career and what steps to take to make it happen!

Thriving With Resilience and Collective Wisdom
2020-04-15 12:00 - 13:00 | Md
Leveraging Collective Genius
Now, more than ever, it’s essential that we come together as organizations and communities to sustain and continue to thrive by crowdsourcing collective wisdom. This one hour lunch and learn will briefly cover the Arc of Learning through conversations about Resilience and Develop Guiding Principles – or Critical Behaviors essential to Resilience. The session is interactive, so it’s expected that everyone participates with both audio AND video. If you join the session, commit to stay for the entire session (i.e. don’t plan to drop in and drop out, as that will not work and will impact everyone else’s experience).

Membership Meeting 3/25/2020
2020-03-25 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Cancelled: Membership Meeting: March 25, 2020
Notice: The March membership meeting has been cancelled. Due to the COVID-19 Coronavirus, the Board of Directors of the Central MD Chapter of the Informatin System Security Association, and in followig the guidelines of the local government and medical experts, have decided that it is in the best interest of our members to cancel the March membership meeting. We apologize for any inconvenience.
Stay tuned for news of future metings. We are researching opportunities to virtually conduct the April meeting.

Fort Meade Technical Job Fair
2020-03-25 09:00 - 14:00 | Md
Fort Meade Technical Job Fair
9AM-2PM — Mar 25, 2020
Club Meade
6600 Mapes Road, Fort George G. Meade, Maryland
Open to all job seekers!
Open to the general public!
No registration required!
All Veterans and non-veterans are invited to attend!
Attention all Job Seekers! Got ID Card?
Individuals who want to attend the job fair; but do not possess a Department of Defense (DoD) ID card, must go to the MD 175 and Reece Road gate and report to the Fort Meade Visitor Control Center.
>> All individuals entering on Fort Meade must present a government-issued photo ID card or driver license.
Companies and organizations represent a wide range of jobs and opportunities. Both commercial industry and defense industry recruiters are present at these events.
Considering a career with the NSA? NSA Recruiters are at all events.
Look for IntelligenceCareers.com and DoDHeadhunter at all events!

IT + Cybersecurity Career Expo
2020-03-12 10:30 - 15:00 | Md
The Maryland Tech Council, in collaboration with Montgomery College’s America’s Promise leadership, will host a career expo to connect job seekers and students with industry for cybersecurity and IT related career positions and create awareness of job opportunities available.
In the Expo Arena:

20+ employers
Private meeting space for interviews (full time positions and internships)
Resume review, headshot lounge and networking
LinkedIn demo and more
