Central Maryland Chapter of ISSA

Spring 2020 CISSP Study Group
2020-05-19 17:00 - 20:00, 2020-05-12 17:00 - 20:00, 2020-05-05 17:00 - 20:00, 2020-04-28 17:00 - 20:00, 2020-04-21 17:00 - 20:00, 2020-04-14 17:00 - 20:00, 2020-04-07 17:00 - 20:00, 2020-03-31 17:00 - 20:00 (America/New_York) and 6 more dates | UMBC Training Centers, 6996 Columbia Gateway Dr., Suite 100, Columbia, MD, 21046, United States
ISSA Central Maryland is pleased to announce the opening of registration for our Spring 2020 session of the CISSP Study Group. As you may know, we conduct these study groups twice a year (Spring and Fall) in order to provide access to high-quality, low-priced resources to further the Information Security profession, and help our community members meet the compliance requirements outlined in DoD 8570.01. At just $450.00, our study group sessions are highly affordable even for those who are not reimbursed for educational expenses.

Living Security CyberEscape Online
2020-05-06 18:00 - 19:00 | MD
ISSA of Central Maryland is partnering with Living Security to provide our members with the opportunity to engage in a virtual Cybersecurity “Escape Room.” We will divide participants up into teams of 8 and they will work together as a virtual team to solve a series of cybersecurity-related challenges and puzzles.
The total time is about 1 hour and we are able to offer this to our members free of charge thanks to Living Security’s generosity. This should be FUN!
To join, register here or paste below URL into your browser:
https://zoom.us/meeting/register/tJ0ldO-uqzovEteHgEosJhmLTt2aJ9bhr6bS
The cost is FREE. Please note that Living Security is handling registration. You are welcome to invite your colleagues and anyone interested in joining ISSA of Central Maryland.
AGENDA

6:00 pm – Introduction by ISSA Central Maryland
6:15 pm – Introduction to Living Security and CyberEscape Online Experience
6:45 pm – CyberEscape Online virtual escape room hosted by Living Security. Group will be split into teams of 8 and will compete to complete a cybersecurity themed escape room, tracking down the insider threat and thwarting their attack before it’s too late!
7:30 pm -8:00 pm – Return to large group session for debrief and Q&A

A PDF describing Living Security’s escape room is available here.

Careers in Cybersecurity Panel Discussion
2020-04-23 11:00 - 12:00 | MD
Come join industry experts as they discuss the various job roles and career paths in the field of cybersecurity. We’ll be discussing how your curiosity and interest in cybersecurity can lead to a new career and what steps to take to make it happen!

Membership Meeting 4/22/2020
2020-04-22 17:00 - 19:30 | Virtual
Chapter Business Meeting Slides: 2020-04-22-Meeting-Presentation.pdf
Chapter Meeting Recording (122MB): Download from ISSA Central MD SharePoint, click here
Speaker Slides: DevSecOps – Phil Kulp 04-22-2020
Topic: DevSecOps: Integrating and Maturing a Security Culture
Cybersecurity professionals have a robust suite of tools and methodologies for assessing risk to operating systems, firewalls, and other components but have limited resources to review webapps. As demonstrated by the Equifax breach, which exploited a third-party library, continuous monitoring and assessment does not always include a review of software dependencies. We rely on regular patches for commercial software and understand how to deploy updates, but maintaining secure custom software requires development team support or integration into a DevSecOps pipeline. The lack of insight into custom software and web applications is due to limited automated review and the technical skills required to identify or understand the unique threats to an organization.
Speaker: Dr. Philip Kulp, PHK Cyber
Dr. Philip Kulp has been consulting in cybersecurity for over 20 years and programming since middle school. In his current role assessing webapps, he combines his passion for both skills while integrating automated cybersecurity checks into the DevSecOps cycle. He also serves as a cybersecurity architect, Incident Responder, independent assessor, and course creator at Cybrary. Philip seeks learning opportunities to balance his cybersecurity skills between academic, technical, and compliance roles. He holds the CISSP certification and two Offensive Security certifications of OSCP and OSCE. In his academic capacity, Dr. Kulp serves as a chair, committee member, and mentor for doctoral students in the Ph.D. and D.Sc. programs at Capitol Technology University.
Note: Due to the COVID-19 Coronavirus, the April General Membership meeting will only be provided virtually via GoToWebinar. There will be no in-person meeting.

Thriving With Resilience and Collective Wisdom
2020-04-22 12:00 - 13:00 | UMBC Training Centers, 6996 Columbia Gateway Dr., Suite 100, Columbia, MD, 21046, United States
Now, more than ever, it’s essential that we come together as organizations and communities to sustain and continue to thrive by crowdsourcing collective wisdom. This one hour lunch and learn will briefly cover the Arc of Learning through conversations about Resilience and Develop Guiding Principles – or Critical Behaviors essential to Resilience. The session is interactive, so it’s expected that everyone participates with both audio AND video. If you join the session, commit to stay for the entire session (i.e. don’t plan to drop in and drop out, as that will not work and will impact everyone else’s experience).

Careers in Software Development Panel Discussion
2020-04-16 11:00 - 12:00 | MD
Come join industry experts as they discuss the various job roles and career paths in the field of software development. We’ll be discussing how your curiosity and interest in software development can lead to a new career and what steps to take to make it happen!

Thriving With Resilience and Collective Wisdom
2020-04-15 12:00 - 13:00 | MD
Leveraging Collective Genius
Now, more than ever, it’s essential that we come together as organizations and communities to sustain and continue to thrive by crowdsourcing collective wisdom. This one hour lunch and learn will briefly cover the Arc of Learning through conversations about Resilience and Develop Guiding Principles – or Critical Behaviors essential to Resilience. The session is interactive, so it’s expected that everyone participates with both audio AND video. If you join the session, commit to stay for the entire session (i.e. don’t plan to drop in and drop out, as that will not work and will impact everyone else’s experience).

Membership Meeting 3/25/2020
2020-03-25 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Cancelled: Membership Meeting: March 25, 2020
Notice: The March membership meeting has been cancelled. Due to the COVID-19 Coronavirus, the Board of Directors of the Central MD Chapter of the Informatin System Security Association, and in followig the guidelines of the local government and medical experts, have decided that it is in the best interest of our members to cancel the March membership meeting. We apologize for any inconvenience.
Stay tuned for news of future metings. We are researching opportunities to virtually conduct the April meeting.

Fort Meade Technical Job Fair
2020-03-25 09:00 - 14:00 | MD
Fort Meade Technical Job Fair
9AM-2PM — Mar 25, 2020
Club Meade
6600 Mapes Road, Fort George G. Meade, Maryland
Open to all job seekers!
Open to the general public!
No registration required!
All Veterans and non-veterans are invited to attend!
Attention all Job Seekers! Got ID Card?
Individuals who want to attend the job fair; but do not possess a Department of Defense (DoD) ID card, must go to the MD 175 and Reece Road gate and report to the Fort Meade Visitor Control Center.
>> All individuals entering on Fort Meade must present a government-issued photo ID card or driver license.
Companies and organizations represent a wide range of jobs and opportunities. Both commercial industry and defense industry recruiters are present at these events.
Considering a career with the NSA? NSA Recruiters are at all events.
Look for IntelligenceCareers.com and DoDHeadhunter at all events!

IT + Cybersecurity Career Expo
2020-03-12 10:30 - 15:00 | MD
The Maryland Tech Council, in collaboration with Montgomery College’s America’s Promise leadership, will host a career expo to connect job seekers and students with industry for cybersecurity and IT related career positions and create awareness of job opportunities available.
In the Expo Arena:

20+ employers
Private meeting space for interviews (full time positions and internships)
Resume review, headshot lounge and networking
LinkedIn demo and more

Howard Community College Internship Fair
2020-02-28 10:00 - 13:00 | MD
The Spring 2020 Internship Fair will be held Friday, February 28, 2020 between 10:00 a.m. and 1:00 p.m. in Burrill Galleria.
Students: By participating, you will have the opportunity to connect with companies about internship opportunities within their organizations. Please dress professionally and bring copies of your resume to the event.
Employers: Registration for the Spring 2020 Internship Fair will be available in mid-December. The fee to participate is $75 for two recruiters and includes lunch vouchers.
Please click here to see the employer invitation letter and click here to register for the event.
If you have questions, please contact Amy Crawford, Internship and Co-op Manager, at 443-518-4009, acrawford@howardcc.edu. Thank you.

Membership Meeting 2/26/2020
2020-02-26 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2020-02-26 Meeting Slides
Speaker Slides: Business Email Compromise (BEC)
Topic: Business Email Compromise: More Sophistication, More Problems
Business Email Compromise (BEC) is a major threat vector for the private sector. These attacks usually begin with a spear-phishing attempt, with the intent to conduct fraudulent wire transfers or take other data from an organization. This is a very sophisticated social engineering attack, so it’s important to understand the way this attack is conducted, as well as how to protect oneself and an organization. This presentation will give a deep-dive into email headers, technical issues and solutions around business email compromise attacks. While this is a technical brief, the idea is to give attendees actionable items to take back to their organization to provide awareness and relevant security configurations.
Speaker: Dr. Nikki Robinson, XLA
Nikki holds a Doctorate of Science in Cybersecurity from Capitol Technology University. Her specialization is in vulnerability management and the challenges around it. She has over 12 years in both the IT and Security fields. Nikki is a Cybersecurity Engineer with an IT background – so she brings technical descriptions to each presentation. She holds certifications in both IT and Security, including CISSP, CEH, CNDA, MCITP, and CCAA. Nikki is excited about helping people to solve issues around vulnerability management and lower their risk profile.

Women in Tech's Trailblazers Series
2020-02-20 16:00 - 18:00 | MD
The Maryland Innovation Center’s Women in Technology (WiT) Group invites you to join them for the kick-off of the 2020 Trailblazer Series!.
Hear the stories of WiT women and how they forged a career in tech and beyond. Learn how through their journey they are growing and sustaining a community that fosters the professional development of women. Meet women who are changing the face of tech. We want to get to know you and show you how you can become part of the growing effort to mentor, educate and empower women throughout their professional journey. Invest in your future and join us for conversations, sharing, and learning. This will be an information happy hour gathering where you can build your network and discover opportunities to get involved.
Click HERE for more information and to register.

Threat Hunting With RSA
2020-02-18 08:30 - 16:00 | UMBC Training Centers, 6996 Columbia Gateway Dr., Suite 100, Columbia, MD, 21046, United States
Ask 5 people what threat hunting is, and you’ll get 6 different answers, because when it comes to threat hunting, it’s still the Wild West. This workshop will cut through all of the nonsense and give you real world practical knowledge of why threat hunting is a critical part of any security program. We’ll discuss tactics and techniques used by world class hunters around the globe, and give you a framework for getting your analysts started, regardless of their skill level. Then we’ll jump into several hands on scenarios that will let you put into action some of the techniques we just discussed. But don’t sweat it if you feel overwhelmed, our experts will be on hand to help walk through each scenario in detail so everyone walks away with a solid grasp of the value of the hunt. Come spend the day with us, where we’ll give you the heads up on hunting, and the hands on experience to put it into action.
WORKSHOP FOCUS: Cyber Threat Hunting Methodologies and Exercises using Security Tools
RECOMMENDED AUDIENCE: This is an educational and hands on workshop. Knowledge of network protocols is required.
CPE CREDITS: This workshop is eligible for 6 CPE credits. Certificates will be passed out at the conclusion of the workshop.
WORKSHOP DETAILS:
Tuesday, February 18, 2020
8:30 AM – 4:00 PM
UMBC Training Centers
6996 Columbia Gateway Dr #100
Room 12 / Ale Room
Columbia, MD 21046
The hands-on exercises will utilize attendees’ devices.
AGENDA
8:30 AM – Registration & Kick off
9:00 AM – The Importance of a Threat Hunter
Hunting Methodology, The Importance of Logs, Packets and Endpoint, role of Automation
10:30 AM – Phishing Exercise
11:30 AM – Catered Lunch with RSA NetWitness Overview
12:15 PM – Hands-on Exercises – Webshell Attack & Drive by Download
2:30 PM – COMPETITION – PRIZE AWARDED
4:00 PM – Conclude
Attendance is reserved for RSA customers and prospects only. Partners and other vendors please contact Brittany.Blackburn@rsa.com to inquire about eligibility to attend.

REGISTRATION

Presidents Day (Washingtons Birthday)
2020-02-17 | MD

SANS SEC505 Securing Windows and PowerShell Automation
2020-02-06 18:00 - 21:00 | MD
Hackers know how to use PowerShell for evil. Do you know how to use it for good? In SEC505 you will learn how to use PowerShell to automate Windows security management across an Active Directory enterprise.
DON’T JUST LEARN POWERSHELL SYNTAX, LEARN HOW TO LEVERAGE POWERSHELL AS A PLATFORM FOR SECURITY.
Additional detais on this SANS instructor led training class can be found at: https://www.sans.org/mentor/class/sec505-columbia-06feb2020-james-honeycutt

Membership Meeting 1/22/2020
2020-01-22 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Business Meeting Slides: 2020-01-22-Meeting-Presentation.pdf
Speaker Slides: The Next Gen of Vulnerability Management
Topic: The Next Gen of Vulnerability Management
Traditionally, Vulnerability Management has become entrenched in the CVSS scoring system which itself, has undergone some revision to more appropriately address things like exploitability, degree of sophistication and human intervention. While CVSS allows centralization of data and a consistent scoring system, it falls short of adequately addressing risk from a dynamic perspective. We’ve seen the industry shift in the last few years to a realization that every vulnerability cannot be addressed, inclusion of individual threat feeds and a more specific approach to dealing with risk. As a result, the landscape has shifted to a pro-active approach to identify where the best value can be aimed on the vulnerabilities that are most important.
Speaker: Michael Morgan, Chris Edson: Tenable Network Security
Mike Morgan & Chris Edson have been helping customers understand the need for protecting their network, both on-prem and in the cloud for over 10 years. They have been instrumental in advocating and supporting clients to introduce, implement, and build out vulnerability management programs leading to a greater understanding of risk.
Please Note:

Deadline to register is December 16th at 5 PM.
Chapter & ISSA member’s ticket: FREE
Guest tickets: $15 if registered by 5 PM on December 16th. Otherwise, $20 at the door (cash or credit card). Refunds available until December 16th at 5pm.

Agenda:
5:15 – 5:45 Chapter Business Meeting
6:00 – 7:30 Speaker and Q&A
