FITSC 2018
2018-11-07 07:30 - 18:00 (America/New_York) | University of Maryland College Park, 7801 Alumni Drive, MD, 20707
The Federal IT Security Institute (FITSI) in partnership with Phoenix TS is hosting the third annual Federal IT Security Conference. Speakers from NIST, DHS, the Defense Department as well as private industry will be in attendance discussing the themes and trends that are influencing the Federal/DoD cyber landscape. This year’s conference will take place on Wednesday, November 7 at the Samuel Riggs IV Alumni Center.
All proceeds from the event will go towards retraining members of the Wounded Warriors organization to become cyber defenders!
Please click here for a downloadable PDF overview of the conference.
About the Federal IT Security Institute
The Federal IT Security Institute (FITSI), based in Alexandria, Virginia, offers role-based certification to four groups of federal IT professionals: managers, designers, operators and auditors. FITSI provides certification exams with the objective of making federal IT systems more secure by assuring that the people who create and manage them understand and apply the appropriate federal IT security standards. FITSI is based in Alexandria, VA.
About PhoenixTS
Since 1998, Phoenix TS has committed and delivered on the promise of high quality training services with results at an affordable price point, earning the trust of both public and private sector customers by consistently delivering excellent training results at an affordable price point. We offer a full catalog of vendor specific and vendor agnostic IT, business process, and management training solutions. Our focus on building an enjoyable learning environment is a major reason our students return time after time.
About the Wounded Warrior Cyber Combat Academy (W2CCA)
The mission of the Wounded Warrior Cyber Combat Academy (W2CCA) is “To Build the Next Generation of Cyber Defenders by Cross-Training the League of Wounded Warriors to help Protect and Defend the Nation’s Information Systems.” The W2CCA program is run by the FITSI Foundation which is a 501c3 public charity.

Veterans Day
2018-11-12 00:00

Thanksgiving Day
2018-11-22 00:00

Membership Meeting 11/28/2018
2018-11-28 17:00 - 19:30
Business Meeting Slides: 2018-10-24-Meeting-Presentation.pdf
Speaker: Colton McQue, Zscaler
Topic: No Network Needed?!?!
It seems every day, we are bombarded with news of yet another breach and our personal information being traded and sold on the dark web/Internet. We lose sleep wondering if we have the right controls and policies in place to prevent our companies and our names from appearing in the next morning’s headlines. Is it time for a different approach? What if we could get rid of our network so we no longer had to define complex boundaries and policies? Is it really possible to architect a system that removes all the traditional ingress and egress points? If we resign ourselves to the fact that it’s not IF but WHEN our network gets breached….then why do we still have a network?

Membership Meeting 12/19/2018
2018-12-19 17:00 - 19:30
ISSA Central MD Chapter Meeting Presentation: 2018-12-19-Meeting-Presentation.pdf
Speaker Presentation: Human Securty Officer
Topic: Creating a Human Security Officer
While everyone acknowledges that users are the top security vulnerability, they rely upon awareness to solve the problem, despite the fact that awareness is far from perfect. To solve this problem in a coordinated way, what is required is not an awareness manager, but a Human Security Officer who is responsible for looking at human vulnerabilities and determining the optimal way to mitigate the vulnerability through a combination of process and technology. As opposed to trying to tell people what not to do, the HSO implements technology that reduces the likelihood of attacks reaching users, and creates business processes that tells users how to do their jobs correctly. Awareness programs are then implemented to inform people how to do their jobs correctly. This presentation will cover the implementation of a Human Security Officer.
Speaker: Ira Winkler, CISSP, President of Secure Mentem
He is considered one of the world’s most influential security professionals, and has been named a “Modern Day James Bond” by the media. He did this by performing espionage simulations, where he physically and technically “broke into” some of the largest companies in the World and investigating crimes against them, and telling them how to cost effectively protect their information and computer infrastructure. He continues to perform these espionage simulations, as well as assisting organizations in developing cost effective security programs. Ira also won the Hall of Fame award from the Information Systems Security Association, as well as several other prestigious industry awards. Most recently, CSO Magazine named Ira a CSO Compass Award winner as The Awareness Crusader.
Ira is also author of the riveting, entertaining, and educational books, Advanced Persistent Security, Spies Among Us and Zen and the Art of Information Security. He is also a columnist for ComputerWorld, and writes for several other industry publications.

Christmas Day
2018-12-25 00:00

New Year Day
2019-01-01

Martin Luther King Jr. Day
2019-01-21 00:00

Membership Meeting 1/23/2019
2019-01-23 17:00 - 19:30 | UMBC Training Centers, 6996 Columbia Gateway Dr., Suite 100, Columbia, MD, 21046, United States
Meeting Presentation: 2019-01-23 Meeting Presentation
Speaker Presentation: What is Cyber Threat Intelligence?
John Stoner and Ronnie Obenhaus will present on how gathering threat intelligence data is necessary to combat various threat actors from nation states. Threat intelligence solutions gather raw data about emerging or existing threat actors and threats from a number of sources. CTI data is analyzed and filtered to produce threat intelligence feeds and management reports that contain information that can be used by automated security control solutions. The primary purpose of this type of security is to keep organizations informed of the risks of advanced persistent threats, zero-day threats and exploits, and how to protect against them.
Speaker: John Stoner & Ronnie Obenhaus
Cyber Threat Intelligence Analyst John Stoner has over 18 years of experience in the national security and defense sector working a variety of roles, including most recently as a Cyber Threat Intelligence Analyst, Cyber Counterintelligence Analyst and Cyber Instructor. His work experience includes IT, instruction and course design, cyber exercise and testing, penetration testing, intelligence collection, threat support, SIGINT (Signals Intelligence), and Cyber Operations. He holds A+, Net+, CEH, CHFI, CEI, CISD, CASP and CISSP and a Computer Studies degree from UMUC. He is a huge soccer fan and coaches youth soccer. You may see his Zombie response car at unnamed government facilities. By secretly joining the Army at 19 years old, he got started in military intelligence and then eventually government cybersecurity.
Cyber Threat Intelligence Analyst Ronnie Obenhaus is a US Army Veteran and is not good at providing additional facts for his bio. He is married and has several children (amount variable). He may or may not have pets, but seems to like dogs. He currently is a DOD civilian at a federal cyber agency.
Agenda:

5:15 – 5:45 (Chapter Business)
5:45 – 6:15 (Food / Networking)
6:15 – 7:15 (Presentation / Q&A)

Infragard Cybersecurity Conference
2019-01-24 08:45 - 15:45 | Riggs Alumni Center – University of Maryland
InfraGard Md will be hosting its inaugural Cyber Security event. The theme of this event is Cyber Incident Response. This event will be open to the public and you do not need to be an InfraGard Member to attend.
InfraGard is a partnership between the FBI and members of the private sector. The InfraGard program provides a vehicle for seamless public-private collaboration with government that expedites the timely exchange of information and promotes mutual learning opportunities relevant to the protection of Critical Infrastructure. With thousands of vetted members nationally, InfraGard’s membership includes business executives, entrepreneurs, military and government officials, computer professionals, academia and state and local law enforcement; each dedicated to contributing industry specific insight and advancing national security. Audience – Government and private sector employees, CISOs, InfraGard members (currently over 1000 in chapter), fusion centers, state, county, local law enforcement.
Purpose: Raise Cybersecurity awareness within the Maryland Community
Session Topics:

Be aware of cyber threats to Maryland organizations.
Provide incident response and “what do I do now” scenarios.
Help participants understand the lifecycle of threats, protection, and business risk.
Cyber hygiene
Overall training and education

Desired speaker types: IT Security and CISO, Business executives not in cyber, Resilience, gov, law enforcement, legislators.
Goals:

Provide high-demand cyber content to Maryland community
Inform community on Threats and Trends
Provide usable pathways for action
Answer unanswered questions about security
Create engagement between industry, government and InfraGard

Presidents Day (Washingtons Birthday)
2019-02-18 00:00

Membership Meeting 2/27/2019
2019-02-27 17:00 - 19:30
Meeting Presentation: 2019-02-27 Meeting Presentation
Speaker Presentation: Hacking Social Media – ZeroFOX

Social Media Protection For Dummies: Download free book, click HERE.
Topic: What is Social Media Security?
Social media security is the process of analyzing dynamic social media data in order to protect against security and business threats.. Every industry faces a unique set of risks on social, many of which have put organizations in the press or at the center of controversy.
Speaker: Christopher Cullison, VP Emerging Technologies @ ZeroFOX
Co-founder of ZeroFOX and Vice President of Emerging Technologies, has over 16 years of experience in the software industry. Christopher has worked with and managed large scale applications for Fortune 50 corporations, specializing in advanced enterprise architecture solutions. His expertise includes reverse engineering, code inspection, dynamic integrations, and cyber-security. Chris has worked as a consulting expert in patent litigation, specializing in patent and prior art analysis. Besides holding multiple coding and security certifications, he speaks regularly about innovative coding at security conferences. Chris has a Bachelors in Business Information Systems from Stevenson University.
Please note new meeting schedule – February 2019
5:15 to 5:45 Business Meeting
5:45 to 6:15 Networking and Dinner
6:15 to 7:45 Speaker and Q&A

Girl Power STEM Event at JHUAPL
2019-03-10
APL hosts Girl Power, a STEM expo for elementary and middle school students, with support from the Maryland Space Business Roundtable. The annual event features hands-on activities, cool demonstrations, and take-home material for the students to encourage an interest in STEM careers. Visitors have the opportunity to talk to professional women in STEM careers such as aerospace, computer science, electrical engineering, geology, information technology, and space mission engineering. You can find more information by clicking on the flyer @ https://www.jhuapl.edu/STEM/Content/docs/GirlPower2019Flyer.pdf. The event is free and no registration is required. Girl Power is scheduled for March 10, 2019.

Membership Meeting 3/27/2019
2019-03-27 17:00 - 19:30 | UMBC Training Centers, 6996 Columbia Gateway Dr., Suite 100, Columbia, MD, 21046, United States
Chapter Business Meeting Slides: 2019-03-27-Meeting-Presentation
Topic: An Update on Deep Content Inspection and DLP for Government
Deep Content Inspection! OK right, but what is Deep Content Inspection? Is it the ability to work in highly regulated federal agencies? Is it working with other vendors to ensure that file transfers are reviewed prior to allowing? Or ensuring that data transfers to removable media drives do not contain sensitive information? Is it automatically encrypting email messages that contain sensitive information in them? How about all of the above? Today, advanced security and data loss prevention features are needed to combat information borne threats across a wide range of technologies.
Speaker: Scott Messick, Senior Sales Engineer with Clearswift
Scott Messick is a Senior Sales Engineer with Clearswift based in New Jersey. In this role he works with the largest Clearswift customers and prospects across North and South America. Scott joined Clearswift about two years ago, after 12 years with Credit Agricole Corporate Investment Bank (CA-CIB). While with Credit Agricole, Scott was a Windows Technical Lead, a Windows Platform Engineer, a Windows Platform Group Manager and was promoted to Vice President. Scott also served on the IT and IT Security Management Committees that oversaw all North and South America IT and IT Security infrastructure operations for the Bank.
Please note new meeting schedule – February 2019
5:15 to 5:45 Business Meeting
5:45 to 6:15 Networking and Dinner
6:15 to 7:45 Speaker and Questions

SIM Philadelphia Technology Leadership Summit
2019-04-02
Join Innovative Thought Leaders from around the country sharing their real experiences and hundreds of your peers for a day of Networking, Collaboration and Knowledge-Transfer

Your Admission Gets You:
– Opportunity to see world-class keynote speakers with real-life experiences:
Greg Hiebert, Managing Partner, Leadership Forward
Julie Rieger, President, Chief Data Strategist & Head of Media, 20th Century Fox Film–
Unlimited access to all 16 breakout sessions
Access to an interactive learning experience with our sessions featuring:
Digital Transformation • Economic Forecasts • Security & Risk • Leveraging Data
Board Pursuit • Large-Scale M&A • Innovative Tech Discussions
– Opportunity to network with hundreds of local IT executives
– Hot breakfast, lunch and bottomless cups of coffee to fuel your day!

Register yourself & your team Today For FREE!
www.simphillysummit.org

ISSA Central MD Networking & Social Sponsored By Varonis
2019-04-17 17:00 - 19:00 | Hysteria Brewing Company, 9570 Berger Rd Suite J, Columbia, MD, 21044
Click Here to Register

When: Wednesday, April 17th from 5:00 – 7:00 PM EST
Location: Hysteria Brewing Company, 9570 Berger Rd Suite J, Columbia, MD 21046

Click Here to Register

SANS Network Penetration Testing and Ethical Hacking
2019-04-18
SANS Network Penetration Testing and Ethical Hacking
As a cybersecurity professional, you have a unique responsibility to find and understand your organization’s vulnerabilities and to work diligently to mitigate them before the bad guys pounce. Are you ready? SEC560, the flagship SANS course for penetration testing, fully arms you to address this duty head-on.
For additional details or to register for this class, click HERE.

Membership Meeting 4/24/2019
2019-04-24 17:00 - 19:30
Membership Meeting Slides: 2019-04027 Meeting Presentation
Speaker Presentation: Intro to Cyber Insurance
Topic: Intro to Cyber Insurance
Cyber risk management is something that continues to evolve with the threat landscape as well as innovations in processes and technology. One of these new innovations is the emergence of cyber insurance. While it is new in terms of insurance products it has been around for several years and is quickly developing into something that many commercial organizations are starting to consider. The purpose of this presentation is to provide an overview of the cyber insurance marketplace, the underwriting process and a shallow dive into the coverage provided by a typical policy.
Speaker: MICHAEL VOLK, VP, CYBER RISK SOLUTIONS, PSA INSURANCE
As the lead for PSA’s Cyber Risk Solutions Practice, Mike Volk is responsible for helping clients make informed decisions about cyber insurance and develop strategies to reduce cyber risk. For the past eight years he has worked in several roles where he helped individuals and organizations navigate the complex cybersecurity landscape. Mike is engaged in the cybersecurity community and currently serves on the Board of Directors for the Cybersecurity Association of Maryland, Inc. (CAMI). Prior to joining PSA, Mike worked with individual job-seekers, industry experts, as well as government organizations and contractors in areas related to cybersecurity training and workforce development. He has authored several articles on topics related to cyber risk, cybersecurity education/training and cybersecurity workforce development. Mike contributed to Anne Arundel Community College as the Business Development Coordinator for the CyberCenter and Instructional Specialist for the Cyber and Technology Training area. He also served as the Cybersecurity Navigator and Project Coordinator for the Mayor’s Office of Employment Development in Baltimore City.
Please note new meeting schedule – February 2019
5:15 to 5:45 Business Meeting
5:45 to 6:15 Networking and Dinner
6:15 to 7:45 Speaker and

SANS Hacker Tools, Techniques, Exploits, and Incident Handling
2019-04-25
SANS Hacker Tools, Techniques, Exploits, and Incident Handling
The Internet is full of powerful hacking tools and bad guys using them extensively. If your organization has an Internet connection or one or two disgruntled employees (and whose doesn’t!), your computer systems will get attacked. From the five, ten, or even one hundred daily probes against your Internet infrastructure to the malicious insider slowly creeping through your most vital information assets, attackers are targeting your systems with increasing viciousness and stealth. As defenders, it is essential we understand these hacking tools and techniques.
For additional information and to register, click HERE

Membership Meeting 5/22/2019
2019-05-22 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Please note the new meeting Location: Hub Spot, 6724 Alexander Bell Drive, Suite 105, Columbia, MD 21046,
Topic: RMF 2.0 for non-Federal Users
Membership Meeting Slides: 2019-05-22 Meeting Presentation
Speaker Presentation: Risk Management for non-Federal Users
Learning objectives
1) Understanding of the NIST Risk Management Framework
2) Briefing on the updates to Revision 2.0 of NIST 800-37
3) Walk through of a fictitious Federal Agency system undergoing the RMF process
The target audience are those who have not yet dealt with the NIST RMF and would like to understand the various components and how it would apply to a specific computer system. The talk will start with the steps included in the RMF process and will end with the review of the controls within one or two control families.
Speaker: Joe Klein, Mitre
Joe Klein is a +30-year veteran of the IT, IA, IoT and IO domains, with extensive experience in DoD, US Government, and commercial sectors. He has a long history of speaking at Computer Science, Technology, Security and Hacker conferences on topics such as IPv6, Time Hacking, Auto Hacking, Physical Security, Risk Management, IoT Security, Cybersecurity as a Business advantage, and success in your security career. National and international speaking venues include Defcon, BlackHat, BSidesDC, ISSA events, ITU, InfraGard, TorCon, SecTor, and Security Days.
He also contributes his talent to standards and practices at NIST, DoD, SPAWAR, IEEE, and IETF.
Please note new meeting schedule – May 2019
5:15 to 5:45 Business Meeting
5:45 to 6:15 Networking and Dinner
6:15 to 7:45 Speaker and Q&A

Memorial Day
2019-05-27 00:00

Membership Meeting 6/26/2019
2019-06-26 17:00 - 19:30 | HubSpot—The Gathering Place on the Gateway, 6724 Alexander Bell Drive Hub Spot, Suite 105, Columbia, MD, 21046
Chapter Meeting Registration
Please note the new meeting Location: Hub Spot, 6724 Alexander Bell Drive, Suite 105, Columbia, MD 21046,
Chapter Business Meeting Slides: 2019-06-26-Meeting-Presentation
Speaker Presentation: Crafting a DLP Program
Topic: Data Loss Prevention Essentials
A how-to primer on overcoming organizational challenges to implement a successful Data Loss Prevention program.
Advances in technology have prompted a rapid evolution of business processes over the last two decades. Along with the benefits provided to organizations, these advances have brought about new types of risks. Data has become the lifeblood of organizations, yet many do not know what data they have, what is important, or how it is being used.
A Data Loss Prevention program provides insight into these new risks, but organizations are often ill-equipped to respond to this new information or manage the associated risks.
Infolock’s Director of Advisory Services, Ryan Dobbins, will discuss the three main areas required for a successful implantation:

Governance: The organizational articulation of what data is important and how it is measured
Visibility: The technical ability to make informed decisions
Protection: The enforcement of organization risk tolerance

A successful DLP program supports and informs organizational leadership as they manage data risk and minimize the occurrence and impact of data incidents. Attendees will leave this presentation with an understanding of how to turn DLP technology into a holistic program to reduce organizational risks.
Speaker: Ryan Dobbins, Director of Advisory Services, Infolock
Ryan Dobbins is Infolock’s Director of Advisory Services and helped develop the Data Risk Management Framework (DRMF). A graduate of James Madison University, Mr. Dobbins holds the SANS GSLC certification and is active in the Governance, Risk, and Compliance (GRC) community where he offers his expertise on topics such as:

Strategic Data Governance
Aligning Compliance Goals with Real Security
Reducing Enterprise Risk with Data Loss Prevention
How to Use a Control Framework to Build a Security Program

In addition to his work at Infolock, Mr. Dobbins was a featured speaker at VA HIMSS (2017), the AMC Security Conference (2017), the NCHICA Conference (2016), and the AMC Conference (2016). Prior to Infolock, Mr. Dobbins developed and managed the information security program at a multi-billion-dollar healthcare enterprise, including its GRC system and Security Operations Center. In this role, Mr. Dobbins and his team worked to detect, respond to, and report on technical security issues. During this time, they responded to internal and external security audits, formed business relationships with various organizational units and provided corporate
guidance on security related issues. The results of their findings were scored against HITRUST and internal policies and added to the GRC system for risk-tracking and remediation. Later, these results were published to a wide audience across a number of formats, including
executive dashboards and technician remediation paths.
Please note new meeting schedule – June 2019
5:15 – 5:45 Chapter Business Meeting
6:00 – 7:30 Speaker and Q&A
Chapter Meeting Registration

Independence Day
2019-07-04 00:00

Membership Meeting 7/24/2019
2019-07-24 17:00 - 19:30
Chapter Business Meeting Slides: 2019-07-24-Meeting-Presentation.pdf
Speaker Presentation: Attackers-Prey-on-Uncertainty_ISSA-Central-MD.pdf
Topic: Attackers Prey on Uncertainty: How to Fail at Threat Detection

It takes a lot of visibility and context to detect and respond to sophisticated threats. Attackers usually target data, where enterprises have the least visibility and most uncertainty. In this session, we’ll explore new, sophisticated threats from inside and out, demonstrate how easy it is for adversaries to bypass traditional controls, and present a methodology to better protect data at scale, improve threat detection, and reduce uncertainty.
Speaker: Courtney Chau, System Engineer at Varonis
Bringing a diverse business and technical skill set, Courtney Chau has had the privilege of working with an elite list of clientele in the Cyber Security & Information Technology sector. Courtney’s commitment to continued learning and academic excellence provided the opportunity for a year of early completion at Virginia Tech with a B.S. in Business Information Technology, summa cum laude, and minor in Applied Business Computing. Courtney embarked on her professional journey in IT Risk Assurance at the multinational professional services network firm PricewaterhouseCoopers (PwC), providing superior client relationship management to cultivate efficient and innovative business solutions. She collaborated with multiple teams, inter-company lines of service, clients, and client third-party service organizations for multiple projects regarding interfaces/configurations, key reports, SDLC, and other IT general controls. Following this, Courtney served Darktrace as a Cyber Defense Technology Specialist to manage deployments and incident responses, ranging from small business to global firms across a variety of industries. She mentored a team of engineers and holds substantial experience covering a global territory. Presently, she works with Varonis to serve the data security needs of large enterprise customers.
Please Note:

Deadline to register is July 22nd at 5 PM.
Chapter & ISSA member’s ticket: FREE
Guest tickets: $15 if registered by 5 PM on July 22nd. Otherwise, $20 at the door (cash or credit card). Refunds available until July 22nd at 5pm.

Agenda:
5:15 – 5:45 Chapter Business Meeting
6:00 – 7:30 Speaker and Q&A

Black Hat
2019-08-03 - 2019-08-08
Register Now for Black Hat USA and Save!
Black Hat USA will take place August 3-8, 2019 at the Mandalay Bay Convention Center, offering the largest lineup of content and features to date. Deeply technical, hands-on Trainings led by the information security industry’s top trainers, will span a variety of topics from infrastructure hacking to social engineering and car hacking. For information on the available courses, check out the Trainings lineup.
Black Hat USA Briefings will present the latest security research, Wednesday, August 7 and Thursday, August 8. View all announced Briefings abstracts and save $200 when you register for your Briefings pass with code 19issa1. Don’t miss the opportunity to expand your knowledge and network during the biggest week in InfoSec!

If you have any questions please contact memberservices@issa.org We hope to see you in Las Vegas!

Membership Meeting 8/28/2019
2019-08-28 17:00 - 19:30
Chapter Business Meeting Slides: 2019-08-28-Meeting-Presentation.pdf
Speaker Presentation: Failing-at-Cybersecurity.pdf
Topic: Fail Secure: 20 Ways to Undermine Your Security Program
There’s policy, and then there’s reality. All too often, security teams find their efforts overridden or bypassed. Here’s some unconventional wisdom and tips on how to engage your stakeholders and keep your program moving forward.
Speaker: Tom Hallewell, VP of Programs and Event for the ISSA DC Chapter
Tom Hallewell works for the Government. He’s also VP of Programs for ISSA-DC. He’s worked in just about every area of cybersecurity, and has the scars to prove it. Hopefully this talk will help you avoid getting them yourself. Tom Hallewell is the VP of Programs and Event for the ISSA DC Chapter
Please Note:

Deadline to register is August 26th at 5 PM.
Chapter & ISSA member’s ticket: FREE
Guest tickets: $15 if registered by 5 PM on August 26th. Otherwise, $20 at the door (cash or credit card). Refunds available until August 26th at 5pm.

Agenda:
5:15 – 5:45 Chapter Business Meeting
6:00 – 7:30 Speaker and Q&A

SANS SEC511: Continuous Monitoring and Security Operations
2019-08-29
SEC511: Continuous Monitoring and Security Operations No network is impenetrable, a
reality that business executives and security professionals alike have to accept. Prevention is
crucial, and we can’t lose sight of it as the primary goal. However, a new proactive approach
to security is needed to enhance the capabilities of organizations to detect threats that will
inevitably slip through their defenses. SEC511 will teach you how to strengthen your skills to
undertake that proactive approach.
For additional ionformation, see the attached flier (Click Here).

Labor Day
2019-09-02 00:00

MD Cyber Solutions Showcase
2019-09-19 12:30 - 17:00
Innovation Showcase ∙ Cybersecurity Product & Service Company Expo ∙ “Ask a Cyber Specialist” Information Stations ∙ Live Cyber Trivia ∙ Fireside Chat with Industry Experts ∙ Networking
The Maryland Cybersecurity Solutions Showcase is the single source for businesses, government agencies and nonprofit organizations of every size in every industry to find:

INFORMATION: get answers to cybersecurity questions, help identifying cybersecurity risks and details on Maryland’s new cyber tax credit program from cyber specialists
INNOVATION: discover some of Maryland’s most innovative cybersecurity technologies
CONNECTIONS: with local solutions for cybersecurity as well as companies/organizations willing to share their cyber stories and strategies

Membership Meeting 9/25/2019
2019-09-25 17:00 - 19:30
Chapter Business Meeting Slides: 2019-09-25-Meeting-Presentation.pdf
Speaker Presentation: .govCAR: Threat Based Cyber Capability Review
Topic: .govCAR: Threat Based Cyber Capability Review
The Cybersecurity and Infrastructure Security Agency (CISA) developed the .govCAR methodology to take a threat-based approach to cybersecurity risk management. .govCAR represents an evolution in managing cybersecurity —an advancement from the traditional consequence (compliance) and vulnerability (cyber hygiene) based approaches. This next-generation approach looks at cybersecurity capabilities the same way an adversary does to directly identify areas where mitigations should be applied for best defense. .govCAR creates opportunities for organizations to make their own threat-informed risk decisions and develop a prioritized approach to reducing risk to known threats. .govCAR is vendor agnostic and does not evaluate specific vendors or products.
The speaker will walk the audience through the concept of threat based architecture reviews and will discuss how cybersecurity threat framework and architectural cybersecurity capabilities come together to allow organizations to improve their cybersecurity posture.
Speaker: Branko S. Bokan, Department of Homeland Security
Branko Bokan is a Cybersecurity specialist with the Cybersecurity and Infrastructure Security Agency (CISA) at the Department of Homeland Security (DHS). In his role, Branko assists federal agencies to adopt the .govCAR methodology. A proud holder of all three ISC2 CISSP concentrations (ISSAP, ISSEP, ISSMP), Branko also teaches cybersecurity as an adjunct professor at a local university.
