SANS DC Cyber Challenge Connect Event
2017-12-15 16:00 - 21:00 (America/New_York)
Youth & Adult Cyber Challenges, Panel Speakers, Networking, and SANS@Night sessions. Support our multi-generational mixer and become a Ambassador, Champion, and help mentor along our next generation of CYBER talent. Register here.

Christmas Day 2017
2017-12-25

New Year Day
2018-01-01 00:00

Martin Luther King Jr. Day
2018-01-15 00:00

Membership Meeting 01/24/2018
2018-01-24 17:00 - 19:30
Business Meeting Slide Presentation: 2018-01-24-Meeting-Presentation.pdf
Speaker slides: Moving Beyond The Basics in a Post-Perimeter World
Topic: Moving Beyond The Basics in a Post-Perimeter World
Discussion on the evolution of the network, the challenges this evolution poses, and the best practices for addressing these challenges in what Duo is calling the post-perimeter world. How Google’s BeyondCorp is introducing the idea of ZeroTrust Networks and the advantages of securing access to applications through a user and device-centric authentication and authorization workflow.
Speaker: Mark Royal, Sr. Solutions Architect at Duo
Mark is a Senior Solution’s Architect with 16 years of experience in the Security, Identity, and Access Management. Professional experience includes roles in support, consulting, architecture, and sales. Have worked closely with customers in Federal Government, State and Local Government, Healthcare, Finance, Manufacturing, Ecommerce, and more.
==============================================

WIS SIG 2018 Webinar Series
2018-01-25 14:00 - 15:00
Women in Security Special Interest Group 2018 Webinar Series 2030:
Building a Diverse Cybersecurity Workforce
Thursday, January 25, 2018, 2:00 – 3:00 PM (Eastern)
Cybersecurity has a diversity problem. In the shifting landscape of cyber threats, we need a new approach to hiring and retention if we have any hope of winning the cyber war. In this panel, the experts will discuss a future-focused cybersecurity industry landscape, key technological drivers, burgeoning career opportunities, seminal cyber workforce career categories, supporting roles and applicable skills, strategies for job searching and hiring that are inclusive and foster diversity, and what challenges one might expect within a cybersecurity career.
The presentation will be remote and accessible virtually to our community members. Registration is available at the following location: https://www.nationalcyberwatch.org/event/2030-building-diverse-cybersecurity-workforce/

Fall 2018 CISSP Study Group
2018-02-13 17:00 - 20:00

Presidents Day (Washingtons Birthday)
2018-02-19 00:00

CISSP certification study group
2018-02-20 00:00, 2018-02-27 00:00, 2018-03-06 00:00, 2018-03-13 00:00, 2018-03-20 00:00, 2018-03-27 00:00, 2018-04-03 00:00, 2018-04-10 00:00 and 5 more dates

Membership Meeting 02/28/2018
2018-02-28 17:00 - 19:30 | Parsons, 110 Samuel Morse Drive, Suite 200, Columbia, MD, 21046, United States
Business Meeting Slide Presentation: 2018-02-28-Meeting-Presentation.pdf
Speaker Slides: Automating Security in Your IAC Pipeline
ISSA Special Interest Groups (SIG): SIG-LIaisons-Decks-1Q_2018_rev3.pdf
Topic: Automating Security in AWS Infrastructure Deployments

The Cloud has introduced the concept of Infrastructure as Code. You can now spin up or change servers, databases, and entire network boundaries in just moments. In a DevOps world you can update your Infrastructure multiple times a week, a day or even in a single hour. But how do you ensure the network boundary is secure? How do you know you are not introducing a backdoor for infiltrators to exploit? What guardrails and workflows can you leverage to help drive security into your infrastructure deployments? Come to this talk to learn more and to see AWS CodePipeline, AWS CodeDeploy and AWS CloudFormation at work.

Speaker: Stephen Alexander, Sr. Solutions Architect, Amazon Web Services

Stephen Alexander is a Sr. Solutions Architect with Amazon Web Services. He focuses on National Security and DoD customers, helping them to design scalable and secure systems that operate efficiently on AWS. Stephen holds five AWS certifications, including AWS Certified DevOps Engineer – Professional and AWS Certified Solutions Architect – Professional. He has delivered talks and workshops on Infrastructure as Code, DevSecOps, and Security Deep Dives at conferences, Meetups, and customer events.

Location: Parsons Cyber, Address: 7110 Samuel Morse Dr., Suite #200, Columbia, MD
Time: 5:00 PM to 7:00 PM

Membership Meeting 03/28/2018
2018-03-28 17:00 - 19:30 | Parsons, 110 Samuel Morse Drive, Suite 200, Columbia, MD, 21046, United States
Meeting Presentations Slides: March 28 Meeting Slides
Speaker Presentation Slides: Privacy and IOT in the Infrastructure
Topic: Privacy and IOT in the Critical Infrastructure for the Energy Sector
Diane will present information on the exposure of consumer privacy data through smart meters, smart grids, and the internet of things. The issue of privacy is essential knowledge to anyone who uses Internet-connected devices in the home, vehicle, and on the body. Diane will discuss privacy of data transmitted via the smart meters, smart grids, and the Internet of Things. She will also address the Energy Critical Infrastructures.
Speaker: Diane Groth, President and CEO, Laetare Cybersecurity, LLC

Diane Groth has worked in the fields of security, information assurance, information security, network security, systems security, and cybersecurity for the past 30 years. She has worked as a defense contractor, GG15 systems security engineer, worked in industry security, and as a cybersecurity university professor. She has taught cybersecurity classes at the US Naval Academy, University of Maryland, The Catholic University of America, and Webster University primarily Master’s Degree and PHD students. She has her own woman-owned cybersecurity firm focusing on cybersecurity for the Energy Critical Infrastructure. She teaches cybersecurity in the Schools of Engineering and the Schools of Business. She is pursuing a PHD and her topic of interest is privacy in the Smart Grid, Energy Grid, and the Internet of Things for the Energy Critical Infrastructure.

If you are a non-US citizen, you MUST send a follow-up email to president@centralmarylandc-y5eorcwrmb.live-website.com and v_p_operations@centralmarylandc-y5eorcwrmb.live-website.com.
All attendees are required to show a government-issued ID for admittance to the chapter meeting. Failure to do so will prevent admission to the meeting.

Membership Meeting 04/25/2018
2018-04-25 17:00 - 19:30
ISSA Chapter Business Meeting Presentation: Click Here
Speaker Presentation: Click Here
Topic: Maryland CyberSecurity initiatives
In the cybersecurity industry, the most significant barrier to growth is a critical mass of expert, experienced, and talented cybersecurity professionals at all skill levels. Maryland, perhaps uniquely among all states, has that critical mass of talent and we are investing significantly to further broaden the pool of qualified workers for the government and cybersecurity companies to draw upon. In my presentation to the ISSA Central Maryland group, I will discuss the current state of the workforce and initiatives underway to grow it to meet the demand. I would like to hear the members’ thoughts and ideas on the subject as well!

Speaker: Ken McCreedy, MD Department of Commerce
Colonel (Ret.) Kenneth O. McCreedy, Senior Director of Cybersecurity and Aerospace in the Maryland Department of Commerce, is a 1980 Distinguished Military Graduate of the University of California, Berkeley. Commissioned as a military intelligence officer, he served overseas in Panama, Germany, Kuwait, and Bosnia. He commanded a scout platoon, a counterintelligence/ interrogation company, a signals intelligence battalion, and finally, he took command of Fort George G. Meade, Maryland in June, 2005 and served in that capacity until July 2008. Since his retirement in 2008, McCreedy has worked as a defense contractor and led a non-profit organization that provides therapeutic horseback riding to people with disabilities..
In his current position, Col. McCreedy is charged with growing and retaining cybersecurity and aerospace companies in Maryland and attracting new business to the state. He is also working to educate people about the cyber threat and encouraging them to take steps to protect themselves and their businesses..

Location: Parsons Cyber, Address: 7110 Samuel Morse Dr., Suite #200, Columbia, MD
Time: 5:00 PM to 7:00 PM

Data Connections Baltimore Cyber Security Conference 2018
2018-04-26 08:00 - 17:00
Data Connectors will be hosting the Baltimore Cyber Security Conference on Thursday, April 26th. The event will start at 8:15 AM with a check-in and opening introductions before presentation sessions begin at 8:45. Between the educational sessions that go throughout the day, there will be time to visit vendor booths to obtain information regarding product and service offerings. Click here for more information.

CSA Federal Summit 2018
2018-05-15
CSA Federal Summit 2018
Cloud Security Alliance
MAY 15, 2018
Washington D.C., United States
FREE to Government employees—bring government ID to event for verification at check-in
$150 for non-government employees until April 2
$175 for non-government employees after April 2
$50 students –bring student id for verification at check-in
+ CCSK & CCM Training (not included in Summit registration)
https://csacongress.org/event/csa-federal-summit-2018/
Tuesday, May 15, 2018 at the Marriott Metro Center, 775 12th street, NW, Washington DC.
Theme: Agencies Can Shift to a Secure Cloud for Mission Critical Systems
Join your information security colleagues from civilian and defense agencies and from innovators in cloud security to share case studies, lessons learned and new technologies that support secure implementation of cloud computing to support agency missions.
Register NOW at https://csacongress.org/event/csa-federal-summit-2018/#registration
A world-class program of speakers and panelists will provide perspectives on the Federal cloud computing strategy, civilian and defense agency cloud security standards, and real-world implementation experience with state-of-the-art cloud security architectures.
Training ONLY:
CCSK Foundation Training: $795 – Does not include Summit registration.
CCM Foundation Training Course: $695 – Does not include Summit registration.

WomenHack Baltimore
2018-05-17
WomenHack Baltimore event on May 17th. Event will be held at Softrams and could be a great opportunity to meet 15-20 companies within two hours as well network with other top women developers, designers and product managers in the area.
If interested, please register here: https://womenhack-baltimore-may2018-dev.eventbrite.com?discount=ALLACCESS

Membership Meeting 05/23/2018
2018-05-23 17:00 - 19:30
Monthly ISS Meeting Slides: Click Here
Speaker Slides: Risk Management Framework 2.0
Title: Risk Management Framework Version 2.0

The NIST special publication on RMF was updated in September. We will see how 800-37 can be used a blue print. RMF promotes the concept of near real-time risk management and ongoing system authorization through the implementation of continuous monitoring processes; provides senior leaders and executives with the necessary information to make cost-effective, risk management decisions about the systems supporting their missions and business functions; and integrates security and privacy controls into the system development life cycle. Applying the RMF tasks enterprise-wide helps to link essential risk management processes at the system level to risk management processes at the organization level.

Speaker: Tom Volpe Sr., CEO of Volpe Information Technology Group
With over 26 years of commercial industry and governmental experience in information security, software assurance and development, network systems security, project and program management, secure application development, system engineering and testing, a B.S. degree in computer science from Loyola College in Baltimore, and specialized experience in secure application development. Mr. Volpe has performed efforts that focused on ensuring the confidentiality, integrity, and availability of systems, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement of information systems security programs, policies, procedures, and tools. As a Risk Analyst and Sr. Security Assessment and Authorization (SA&A) Principal on various projects, Mr. Volpe has excelled in security package preparation and review process for many government and commercial clients. Mr. Volpe has lead multiple software security assurance efforts at various government agencies and produced developer-oriented process frameworks for integrating secure code review scanning and analysis into the systems development lifecycle.

Memorial Day
2018-05-28 00:00

2018 Mid-Atlantic Information Security Conference
2018-06-01 | Universities at Shady Grove, 9630 Gudelsky Dr., Rockville, MD, 20850
ISSA Mid-Atlantic Information Security Conference
Save the date for the ISSA Mid-Atlantic Information Security one day conference on Friday, June 1, 2018 at the Universities at Shady Grove Conference Center, Building II. The event will feature a spectacular line up of speakers, a capture the flag contest and some great networking opportunities. Sponsor opportunities are still available. The cost to attend is $130 for Early Registration and $100 for Students. The agenda will be posted within the next couple of weeks. Register online at: https://www.fbcinc.com/e/ISSA-ISC/attendeereg.aspx
