Central Maryland Chapter of ISSA

CISSP Study Group – Spring 2025
2025-05-06 17:00 - 20:00, 2025-04-29 17:00 - 20:00, 2025-04-22 08:00 - 17:00, 2025-04-15 17:00 - 20:00, 2025-04-08 17:00 - 20:00, 2025-04-01 08:00 - 17:00, 2025-03-25 17:00 - 20:00, 2025-03-18 17:00 - 20:00 (America/New_York) and 3 more dates | Norseman Defense Technologies, 10981 Guilford Rd, Annapolis Junction, MD, 20701
Each Tuesday at 5:00 PM – 8:00 PM (EST), February 18, 2025 – May 20, 2025
Norseman Defense Technologies | 10981 Guilford Rd | Annapolis Junction, MD 20701
Why attend?
Gain credibility as a security expert.
Become a more marketable/hirable candidate.
Become/remain contractually compliant (DoD 8570.01 Manual / DoDD 8140)
Improve IT security skills and enhancing productivity.
Save money over “boot camp” style courses.
Our Study Group fosters a learning environment to better absorb and understand the material.
This is much better than the alternative of cram it in and regurgitate it on a test immediately following.
Our approach simply makes the information more useful and easier to interpret!
You can attend each session in-person in Columbia, MD, or attend virtually on line. Your choice.
Meals are included each night for in-person sessions
Bonus: Pass your exam within 6 months; get a free year of ISSA membership on us!
Cost: just $450 (+ EventBrite Fees – approximately $32.02)

To register, click Here.
registration available at: https://issa-centralmd.org
For more information, contact Kevin Newman (v_p_education@centralmarylandc-y5eorcwrmb.live-website.com).

Click Here to download the CISSP Study Group Flyer

Please share with your colleagues and work partners.

Membership Meeting 4/23/2025
2025-04-23 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Special meeting guests – Carroll Community College Cybersecurity Student Club

Chapter Business Meeting Slides: Membership Meeting 04/23/2025
Speaker Slides: ISSA-April-23-2025-TTP-Presentation.pdf
Topic: .Stakeholder Management in Cybersecurity
Brian Vaughan will host a discussion on the pitfalls and pratfalls that can arise when clients or employer management fail to recognize the importance of proper cyber security processes and procedures. Given the present environment in which we live, this topic remains one of high concern, as it represents a continuous and ongoing problem.

Speaker: Brian Vaughn, Technology Transition Paradigm
Brian Vaughn co-founded and led three IT service companies Dataprise, Shipshape IT and Technology Transition Paradigm A Managed Service Provider and Cyber Security consultancy. Brian also donates time as the President for the Information Technology Foundation (ITF), a non-profit partnership between Montgomery County Public Schools and the local business community. ITF promotes IT education in grades K-12, preparing the next generation of technology professionals.
Brian has a Bachelor of Science degree from the University of Maryland in Political Science and graduated in 1991. He lives in Maryland and has one daughter in college.
Brian enjoys snowboarding, golf, soccer, guitar, basketball, and politics.

BSides Charm Baltimore 2025
2025-04-12 - 2025-04-13 | Sheraton Baltimore North, 903 Dulaney Valley Rd, Towson, MD, 21204, United States
BSidesCharm is a non-profit, regional Security BSides held in Baltimore, MD. It operates under the umbrella principles of Security BSides as a larger community project within information security. BSides aims to offer small, intimate events where all participants can engage each other to help develop connections, friendships, and network with different industry professionals.

We recognize the value in engaging a smaller audience and being the big fish in a small pond. Every organization will have different goals and priorities which is why we offer different levels of participation for every individual, group, or organization. We specifically designed several different options for any sized organization to participate and support this event.

ISSA 40th Anniversary Event and 2025 Awards Gala
2025-04-03 - 2025-04-05 | Westin Galleria Dallas
Celebrating 40 Years of Growth & Connection in Dallas 2025

For forty years, ISSA has helped members throughout their careers, learn, grow and connect with their local cybersecurity communities. In 2025, as we emerge through some challenging transitions in recent years, ISSA International excited to celebrate where we have been, where we are and where we are going. Join us as we bring our members and chapters together at this special event!

Celebrate Excellence

Join us at the ISSA Awards Ceremony & Gala celebrating outstanding ISSA members.

Gain Exclusive Insights

Attend the ISSA Conference for valuable insights from industry experts.

Learn From the Best

Discover the secrets of success from chapters worldwide at the Chapter Leaders Meeting.

Supercharge Your Career

Catapult your career, seize fresh opportunities, and thrive in this dynamic industry.

Expand Your Network

Unleash new opportunities as you connect, collaborate, and cultivate relationships

Experience Dallas

Experience the energy and excitement of Dallas while networking at the gala.

Membership Meeting 3/26/2025
2025-03-26 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Chapter Business Meeting Slides: 2025-03-26 Meeting Slides
Speaker Slides: Redefining the Perimeter
Topic: Redefining the Perimeter: Zero Trust & Device-Bound Access Security
The phrase “identity is the new perimeter” is often used to advocate for centralized Identity and Access Management (IAM) and the rigorous application of least-privilege principles. These concepts align with widely adopted Zero Trust Architecture (ZTA) networking models, frequently positioned as an evolution beyond traditional perimeter-based security. Yet, despite these advancements, security breaches continue to rise. In this presentation, Jim Mathews (Triangle Cyber) and David Rihak (Peig) will dissect the technical reasons why stolen credentials remain the leading cause of successful attacks—and what can be done to mitigate this persistent threat. They will explore the limitations of passwords, traditional MultiFactor Authentication (MFA), and even newer authentication methods, highlighting why these approaches fall short in ensuring truly reliable Zero Trust systems. Most importantly, they will
outline how device-bound access security can serve as a foundational element of a resilient cloud security strategy, ensuring stronger, more reliable policy enforcement across modern enterprise Zero Trust systems.

Speaker: David Rihak: CEO of Peig: David Rihak: As the CEO and co-founder at Peig, David helps organizations get rid of passwords and up their cyber game with passwordless access security. Before this, David was a Digital Identity Director at ADUCID, where he co-designed
citizen-centric identity solutions and helped develop federal and private partnerships. As a frequent speaker at security conferences, David is a vivid promoter of humancentric security architectures that leave passwords in the dust.
Speaker: James Matthews: CEO of Triangle Cyber: Jim Matthews is the Founder and President / CEO of Triangle Cyber. Jim is an Electrical Engineer and former Raytheon Engineering Fellow with over 30 years of engineering and operations experience in information technology, networks, cybersecurity, system hardening, and risk / vulnerability assessments. He has supported multiple DoD and Federal programs, including US Navy, Missile Defense Agency (MDA), and Dept of Homeland Security / Cybersecurity & Infrastructure Security Agency (DHS/CISA). He has also led engineering teams that developed mission-critical capabilities, including a global network of command & control and sensors for missile defense, a geographically distributed intrusion detection system. Jim, a strong advocate of agile methodologies, is also a Scaled Agile Framework (SAFe) Practice Consultant (SPC) and teaches SAFe certification courses. He currently serves as Chief Architect for a major DHS/CISA cybersecurity program.

SANS Security East 2025 Community Night
2025-03-05 18:00 - 20:00 | MD
oin Us for SANS Community Night
You’re invited to the industry’s most powerful gathering of cybersecurity professionals. This invite-only, all-access celebration will be filled with networking, food, drinks, and buzzing expert discussions!
Engage with world-renowned instructors, curate new connections, and strengthen your cyber community.
PLUS – stay for a complimentary @Night Lighting talk, featuring (3) SANS rockstars following the reception!
When: Wednesday, March 5th
What to Expect:
Check-In & Networking
6:00 – 7:00 PM EST
SANS @Night Talk
7:00 – 8:00 PM EST
*NOTE: Space is limited. Please reserve your space using the form below.
Where:
Hilton Baltimore Inner Harbor
401 West Pratt Street
Baltimore, MD 21201
Phone: 443-573-8700
Featured Speakers & Topics:
Don’t Poison the Water Hole – Christopher Elgee, Certified Instructor
With western critical infrastructure under active attack, we need careful OT pentests now more than ever” earlier. Critical infrastructure is all the stuff that defines the first world bubble we live in. Drinking water, electricity, and hospitals are so essential to how we live that we rarely think about them. Let’s think about them! We’ll talk about why they should be tested – and how we can do so safely.
How do I get a job in CyberSecurity? – Aaron Cure, Principal Instructor
I have the training, a cert or two, now how do I get a job? Join Aaron Cure as he discusses the importance of branding, contributing, and community in your career. Looking to move beyond your first cyber job, into a new field, or a different job? This talk is for you too! Whether you are just starting out, or a seasoned pro, these tips can help you land that next great thing!
Tempering Expectations, Creating Alignment: AI in the Business – David Hoelzer, Fellow
Globally, enterprises are convinced that AI is needed and will revolutionize the business process. Is this true? How will it happen? How can you temper leadership expectations while simultaneously aligning solutions with business operations? Come and find out.

Membership Meeting 2/26/2025
2025-02-26 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Chapter Business Meeting Slides: February 2025 Membership Meeting Minutes
Chapter Meeting and Speaker Recording: Meeting and Speaker Recording
Topic: Russian and Chinese disinformation
Speaker: Dr. Gregory Carpenter, Principal Partner of CW PENSEC

Dr. Gregory Carpenter is the Principal Partner of CW PENSEC, holds the title of Fellow of the Royal Society for the Arts in London, and was named the National Security Agency’s Operations Officer of the Year. He is coauthor of Reverse Deception and an advisor for RedSeer Security, a Senior Advisor for ARIC, Inc., and a Special Operations Medical Association member. Dr. Carpenter has also served on the International Board of Advisors for the Mackenzie Institute and as an advisor for EC-Council University.
Prior to his current role, Dr. Carpenter held various senior military and civilian positions including Chief Security Officer, Vice President for Cyber Operations, Chief of Security Testing, Chief Operations Officer, Counterintelligence Division Chief, Chief of Special Space Operations, and Functional Team Lead for Electronic Warfare.
Gregory is a retired officer who served 27 years in the U.S. Army. He holds a Bachelor of Science, a Master of Science, and a Doctorate in Public Health. His professional certifications include Certified Information Security Manager, Lean Six-Sigma Black Belt, and ISO-9000 lead auditor.

CISSP Study Group - Spring 2025
2025-02-18 17:00 - 20:00 | Norseman Defense Technologies, 10981 Guilford Rd, Annapolis Junction, MD, 20701
To register, click Here.

Each Tuesday at 5:00 PM – 8:00 PM (EST), February 18, 2025 – May 20, 2025
Norseman Defense Technologies | 10981 Guilford Rd | Annapolis Junction, MD 20701
Why attend?
Gain credibility as a security expert.
Become a more marketable/hirable candidate.
Become/remain contractually compliant (DoD 8570.01 Manual / DoDD 8140)
Improve IT security skills and enhancing productivity.
Save money over “boot camp” style courses.
Our Study Group fosters a learning environment to better absorb and understand the material.
This is much better than the alternative of cram it in and regurgitate it on a test immediately following.
Our approach simply makes the information more useful and easier to interpret!
You can attend each session in-person in Columbia, MD, or attend virtually on line. Your choice.
Meals are included each night for in-person sessions
Bonus: Pass your exam within 6 months; get a free year of ISSA membership on us!
Cost: just $450 (+ EventBrite Fees – approximately $32.02)

To register, click Here.
registration available at: https://issa-centralmd.org
For more information, contact Kevin Newman (v_p_education@centralmarylandc-y5eorcwrmb.live-website.com).

Click Here to download the CISSP Study Group Flyer

Please share with your colleagues and work partners.

Presidents' Day
2025-02-17 | MD

FutureCon Baltimore CyberSecurity Conference
2025-02-13 08:00 - 17:00 | BWI Arport Marriott, 1743 West Nursery Rd, Linthicum Heights, MD, 21090, United States
On Behalf of Central Maryland ISSA,
You’re Invited to FutureCon!
FutureCon Baltimore
CyberSecurity Conference
Thursday, February 13th, 2025
8:00 am – 5:00 pm
LIVE @ The BWI Airport Marriott Hotel
Keynote Speaker
Anne Marie Zettlemoyer – Chief Security Officer | Fellow | National Security Institute
Industry Expert Panel
Securing the Future: Current Cyber Threats and Strategic Defense Practices
Jessica Hoffman – Deputy CISO & HIPAA Security Officer | City of Philadelphia
Anne Marie Zettlemoyer – Vice President, Security | Activision Blizzard
Cara Coleman – VP, Information Security | MVB Bank
FutureCon is Offering ISSA Members a Free In-Person VIP Pass
Full day ticket includes CPE Credits, All Sessions, CISO Panel, Networking,
Breakfast, Lunch, Happy Hour, Raffle Prizes and More ($200 Value)
REGISTER HERE
Please use promo code CMISSA to register for a free full day pass
*no students, recruiters, marketing, vendors, sales or independent consultants, must be an employed IT professional
Join us at the wrap-up reception to celebrate your dedication and efforts in combating cybercrime! We can’t wait to see you there!
View Additional Details HERE
https://issa-centralmd.org/wp-content/uploads/ISSA-Baltimore-Invite.pdf

Membership Meeting 1/22/2025
2025-01-22 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Chapter Business Meeting Slides: January 2025 Membership Meeting Slides
DTEX Sponsor Slides: DTEX-Corporate Pitch Deck
Speaker Slides: Hacking LLM-IOActive
Topic: Hacking LLM: Attacks & Defenses Against Large Language Models

This talk will focus on defining what LLM is. Take a look at the OWASP top 10 for LLM, then dive into Prompt Injection and how attackers use prompts to make the model ignore its original instructions to perform unintended actions.

Speaker: Ilker Adiyaman, IOActive
Ilker Burak Adiyaman is a Security Consultant at IOAcive. He has more than 15 years of industry experience, and has a proven track record of accomplishments on web engineering and security testing. During his professional experience, he worked with companies in Turkey and in US, gained significant experience on secure code development using multiple programming languages, web security testing and acquired skills on application and network security.

Martin Luther King, Jr. Day
2025-01-20 | MD

New Year’s Day
2025-01-01 | MD

Christmas Day
2024-12-25 | MD

Membership Meeting 12/18/2024
2024-12-18 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Click Here to register for the December ISSA Central MD Monthly Meeting
Chapter Business Meeting Slides: Security-Essentials-for-Business-Growth-in-2025
Speaker Slides: Security-Essentials-for-Business-Growth-in-2025
Topic: Cybersecurity Essentials for SMB Growth in 2024
In today’s rapidly evolving business landscape, organizations face increasing pressure to maintain robust cybersecurity practices while adopting cloud services, SaaS platforms, and AI tools. This presentation examines critical security practices that businesses should implement in 2024, highlighting how traditional security risks have transformed with the shift to third-party services. Through real-world examples of breaches and near-misses, we explore the often-overlooked risks in common business tools, the challenges of vendor risk management, and the critical importance of maintaining defensible security practices. Special attention is given to upmarket growth challenges, where larger clients demand extensive security documentation and proof of controls, along with emerging considerations for AI security policy. By understanding and implementing these essential security measures, businesses can better position themselves for growth while protecting against evolving cyber threats and meeting increasingly stringent client security requirements.

Speaker: Albie Swartz, founder of Secureside
Albie Swartz is the founder of Secureside, a Virtual CISO & Cybersecurity business. He is an experienced IT and Information Security professional with a focus in healthcare and has spent the past 7 years consulting and providing cyber and IT services to clients.
Click Here to register for the December ISSA Central MD Monthly Meeting

Thanksgiving Day
2024-11-28 | MD

Membership Meeting 11/20/2024
2024-11-20 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Click Here to register for the November ISSA Central MD Monthly Meeting
Chapter Business Meeting Slides: November Membership Meeting Slides
Speaker Slides: TBD
Topic: Zero Trust Methodology with a Heavy Push into SASE

In today’s rapidly evolving business landscape, organizations face increasing pressure to maintain robust cybersecurity practices while adopting cloud services, SaaS platforms, and AI tools. This presentation examines critical security practices that businesses should implement in 2024, highlighting how traditional security risks have transformed with the shift to third-party services. Through real-world examples of breaches and near-misses, we explore the often-overlooked risks in common business tools, the challenges of vendor risk management, and the critical importance of maintaining defensible security practices. Special attention is given to upmarket growth challenges, where larger clients demand extensive security documentation and proof of controls, along with emerging considerations for AI security policy. By understanding and implementing these essential security measures, businesses can better position themselves for growth while protecting against evolving cyber threats and meeting increasingly stringent client security requirements.

Speaker: Shawn Slater, Network Security Practice Lead, GuidePoint Security
Shawn Slater, Practice Lead, Network Security has been working in the fields of networking and information security since 2006. He has a strong routing and switching background with various vendor technologies from Cisco, Juniper, and others leading him to pursue increased responsibilities in the network security space. Beginning with Juniper Netscreen and Cisco ASA firewalls earlier in his career, his focus is Next Generation firewall technologies from vendors such as Palo Alto Networks. His experience on both the Enterprise and value-added resellers (VAR) sides includes countless successful deployments and migrations of multiple firewall technologies to these next generation platforms. With the growth of the Public Cloud, he focused on Amazon Web Services (AWS) and Microsoft Azure, deploying all manner of Next Generation firewalls in traditional Transit VPC/VNET and Gateway Load Balancer designs. His experience crosses internationally to all areas of industry including education and government (i.e., U.S. Department of Defense (DoD), the Federal Reserve Bank), Kimpton Hotels, and the Export Import Bank of the United States. Shawn is focused on efficiently delivering the right solution for the customer while ensuring the maintaining staff is properly trained to manage and support it.
Shawn holds active certifications and accreditations from numerous security and network vendors including Cisco with the CCNP Routing and Switching and CCNP Security as well as numerous with Palo Alto including Palo Alto Certified Network Security Engineer (PCNSE), Palo Alto Certified Network Security Consultant (PCNSC) and the PSE: Professional series for Platform, Endpoint and Data Center/Cloud.
Note: If you are registering as a non-US citizen and plan to attend in person, Please notify the President or V P Operations at least one week prior to the meeting.

Veterans Day
2024-11-11 | MD

Membership Meeting 10/23/2024
2024-10-23 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Click Here to register for the October ISSA Central MD Monthly Meeting
Chapter Business Meeting Slides: October Membership Meeting Slides
Speaker Slides: TBD
Topic: Exploring Linux and Android Software in the Automotive World
Even if the most ambitious plans for Software Defined Vehicles are not realized, vehicles are becoming more software defined every year. The ability to dynamically change functionality and target hardware on vehicles will drive more advanced operating systems than those currently in wide use in automotive, like Classic AutoSAR. Many new automotive platforms will choose Linux and Android because of their popularity and broad use in many different domains. Linux and Android are widely deployed in secure systems, but what about securing them for automotive applications? This talk will briefly review how Linux and Android are currently being deployed in automotive applications. The current security advantages and limitations of automotive Linux and Android are discussed. Finally, the talk will chart a path forward on securing the application of these important operating systems for automotive systems.

Speaker: Anuja Sonalker, PhD, CEO STEER Tech
Anuja Sonalker is the founder and CEO of autonomous vehicle software company, STEER Tech and has been recognized as Automotive News’ Top 100 Leading Women in the North American Automotive Industry (2020), and Distinguished Alumni of University of Maryland. Dr. Sonalker draws two decades of experience from both the automotive industry and the US cybersecurity defense sector. Most recently she was appointed to the Board of the US DOT National Center for Transportation Cybersecurity and Resiliency. Under her leadership, STEER emerged as Automotive News Best Emerging Business Model and Fast Company’s honorable mention for Ideas that Change the World. Prior to STEER she held executive leadership positions at global organization Battelle where she led their automotive cybersecurity practices, go to market and successfully franchised the Battelle Cyberauto Challenge to SAE and at Parsons and Cobham PLC. She holds several chairperson positions leading global, pan-industry efforts in Automotive Cybersecurity at SAE (Society of Automotive Engineers) and ISO (International Standards Organization). Apart from these, Dr. Sonalker serves on the following esteemed boards:

Board of the US DOT National Center for Transportation Cybersecurity and Resiliency (established by the President’s Order)
Executive Board Member of Center for Automotive Research (CAR), Michigan, USA
Board of Visitors for the University of Maryland
The Board of PAVE (Partners for Automated Vehicle Education)
Economic development board of Howard County, MD.

She holds a Ph.D in Electrical Engineering from the University of Maryland College Park and enjoys mentoring women and high school students in STEM in her spare time. She lives in Maryland with her husband and her two sons.
Click Here to register for the October ISSA Central MD Monthly Meeting

Columbus Day
2024-10-14 | MD
