Central Maryland Chapter of ISSA

CISSP Study Group - Spring 2025
2025-02-18 17:00 - 20:00 (America/New_York) | Norseman Defense Technologies, 10981 Guilford Rd, Annapolis Junction, MD, 20701
To register, click Here.

Each Tuesday at 5:00 PM – 8:00 PM (EST), February 18, 2025 – May 20, 2025
Norseman Defense Technologies | 10981 Guilford Rd | Annapolis Junction, MD 20701
Why attend?
Gain credibility as a security expert.
Become a more marketable/hirable candidate.
Become/remain contractually compliant (DoD 8570.01 Manual / DoDD 8140)
Improve IT security skills and enhancing productivity.
Save money over “boot camp” style courses.
Our Study Group fosters a learning environment to better absorb and understand the material.
This is much better than the alternative of cram it in and regurgitate it on a test immediately following.
Our approach simply makes the information more useful and easier to interpret!
You can attend each session in-person in Columbia, MD, or attend virtually on line. Your choice.
Meals are included each night for in-person sessions
Bonus: Pass your exam within 6 months; get a free year of ISSA membership on us!
Cost: just $450 (+ EventBrite Fees – approximately $32.02)

To register, click Here.
registration available at: https://issa-centralmd.org
For more information, contact Kevin Newman (v_p_education@centralmarylandc-y5eorcwrmb.live-website.com).

Click Here to download the CISSP Study Group Flyer

Please share with your colleagues and work partners.

CISSP Study Group – Spring 2025
2025-02-25 17:00 - 20:00, 2025-03-04 08:00 - 17:00, 2025-03-11 17:00 - 20:00, 2025-03-18 17:00 - 20:00, 2025-03-25 17:00 - 20:00, 2025-04-01 08:00 - 17:00, 2025-04-08 17:00 - 20:00, 2025-04-15 17:00 - 20:00 and 5 more dates | Norseman Defense Technologies, 10981 Guilford Rd, Annapolis Junction, MD, 20701
Each Tuesday at 5:00 PM – 8:00 PM (EST), February 18, 2025 – May 20, 2025
Norseman Defense Technologies | 10981 Guilford Rd | Annapolis Junction, MD 20701
Why attend?
Gain credibility as a security expert.
Become a more marketable/hirable candidate.
Become/remain contractually compliant (DoD 8570.01 Manual / DoDD 8140)
Improve IT security skills and enhancing productivity.
Save money over “boot camp” style courses.
Our Study Group fosters a learning environment to better absorb and understand the material.
This is much better than the alternative of cram it in and regurgitate it on a test immediately following.
Our approach simply makes the information more useful and easier to interpret!
You can attend each session in-person in Columbia, MD, or attend virtually on line. Your choice.
Meals are included each night for in-person sessions
Bonus: Pass your exam within 6 months; get a free year of ISSA membership on us!
Cost: just $450 (+ EventBrite Fees – approximately $32.02)

To register, click Here.
registration available at: https://issa-centralmd.org
For more information, contact Kevin Newman (v_p_education@centralmarylandc-y5eorcwrmb.live-website.com).

Click Here to download the CISSP Study Group Flyer

Please share with your colleagues and work partners.

Membership Meeting 2/26/2025
2025-02-26 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Chapter Business Meeting Slides: February 2025 Membership Meeting Minutes
Chapter Meeting and Speaker Recording: Meeting and Speaker Recording
Topic: Russian and Chinese disinformation
Speaker: Dr. Gregory Carpenter, Principal Partner of CW PENSEC

Dr. Gregory Carpenter is the Principal Partner of CW PENSEC, holds the title of Fellow of the Royal Society for the Arts in London, and was named the National Security Agency’s Operations Officer of the Year. He is coauthor of Reverse Deception and an advisor for RedSeer Security, a Senior Advisor for ARIC, Inc., and a Special Operations Medical Association member. Dr. Carpenter has also served on the International Board of Advisors for the Mackenzie Institute and as an advisor for EC-Council University.
Prior to his current role, Dr. Carpenter held various senior military and civilian positions including Chief Security Officer, Vice President for Cyber Operations, Chief of Security Testing, Chief Operations Officer, Counterintelligence Division Chief, Chief of Special Space Operations, and Functional Team Lead for Electronic Warfare.
Gregory is a retired officer who served 27 years in the U.S. Army. He holds a Bachelor of Science, a Master of Science, and a Doctorate in Public Health. His professional certifications include Certified Information Security Manager, Lean Six-Sigma Black Belt, and ISO-9000 lead auditor.

SANS Security East 2025 Community Night
2025-03-05 18:00 - 20:00
oin Us for SANS Community Night
You’re invited to the industry’s most powerful gathering of cybersecurity professionals. This invite-only, all-access celebration will be filled with networking, food, drinks, and buzzing expert discussions!
Engage with world-renowned instructors, curate new connections, and strengthen your cyber community.
PLUS – stay for a complimentary @Night Lighting talk, featuring (3) SANS rockstars following the reception!
When: Wednesday, March 5th
What to Expect:
Check-In & Networking
6:00 – 7:00 PM EST
SANS @Night Talk
7:00 – 8:00 PM EST
*NOTE: Space is limited. Please reserve your space using the form below.
Where:
Hilton Baltimore Inner Harbor
401 West Pratt Street
Baltimore, MD 21201
Phone: 443-573-8700
Featured Speakers & Topics:
Don’t Poison the Water Hole – Christopher Elgee, Certified Instructor
With western critical infrastructure under active attack, we need careful OT pentests now more than ever” earlier. Critical infrastructure is all the stuff that defines the first world bubble we live in. Drinking water, electricity, and hospitals are so essential to how we live that we rarely think about them. Let’s think about them! We’ll talk about why they should be tested – and how we can do so safely.
How do I get a job in CyberSecurity? – Aaron Cure, Principal Instructor
I have the training, a cert or two, now how do I get a job? Join Aaron Cure as he discusses the importance of branding, contributing, and community in your career. Looking to move beyond your first cyber job, into a new field, or a different job? This talk is for you too! Whether you are just starting out, or a seasoned pro, these tips can help you land that next great thing!
Tempering Expectations, Creating Alignment: AI in the Business – David Hoelzer, Fellow
Globally, enterprises are convinced that AI is needed and will revolutionize the business process. Is this true? How will it happen? How can you temper leadership expectations while simultaneously aligning solutions with business operations? Come and find out.

Membership Meeting 3/26/2025
2025-03-26 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Chapter Business Meeting Slides: 2025-03-26 Meeting Slides
Speaker Slides: Redefining the Perimeter
Topic: Redefining the Perimeter: Zero Trust & Device-Bound Access Security
The phrase “identity is the new perimeter” is often used to advocate for centralized Identity and Access Management (IAM) and the rigorous application of least-privilege principles. These concepts align with widely adopted Zero Trust Architecture (ZTA) networking models, frequently positioned as an evolution beyond traditional perimeter-based security. Yet, despite these advancements, security breaches continue to rise. In this presentation, Jim Mathews (Triangle Cyber) and David Rihak (Peig) will dissect the technical reasons why stolen credentials remain the leading cause of successful attacks—and what can be done to mitigate this persistent threat. They will explore the limitations of passwords, traditional MultiFactor Authentication (MFA), and even newer authentication methods, highlighting why these approaches fall short in ensuring truly reliable Zero Trust systems. Most importantly, they will
outline how device-bound access security can serve as a foundational element of a resilient cloud security strategy, ensuring stronger, more reliable policy enforcement across modern enterprise Zero Trust systems.

Speaker: David Rihak: CEO of Peig: David Rihak: As the CEO and co-founder at Peig, David helps organizations get rid of passwords and up their cyber game with passwordless access security. Before this, David was a Digital Identity Director at ADUCID, where he co-designed
citizen-centric identity solutions and helped develop federal and private partnerships. As a frequent speaker at security conferences, David is a vivid promoter of humancentric security architectures that leave passwords in the dust.
Speaker: James Matthews: CEO of Triangle Cyber: Jim Matthews is the Founder and President / CEO of Triangle Cyber. Jim is an Electrical Engineer and former Raytheon Engineering Fellow with over 30 years of engineering and operations experience in information technology, networks, cybersecurity, system hardening, and risk / vulnerability assessments. He has supported multiple DoD and Federal programs, including US Navy, Missile Defense Agency (MDA), and Dept of Homeland Security / Cybersecurity & Infrastructure Security Agency (DHS/CISA). He has also led engineering teams that developed mission-critical capabilities, including a global network of command & control and sensors for missile defense, a geographically distributed intrusion detection system. Jim, a strong advocate of agile methodologies, is also a Scaled Agile Framework (SAFe) Practice Consultant (SPC) and teaches SAFe certification courses. He currently serves as Chief Architect for a major DHS/CISA cybersecurity program.

ISSA 40th Anniversary Event and 2025 Awards Gala
2025-04-03 - 2025-04-05 | Westin Galleria Dallas
Celebrating 40 Years of Growth & Connection in Dallas 2025

For forty years, ISSA has helped members throughout their careers, learn, grow and connect with their local cybersecurity communities. In 2025, as we emerge through some challenging transitions in recent years, ISSA International excited to celebrate where we have been, where we are and where we are going. Join us as we bring our members and chapters together at this special event!

Celebrate Excellence

Join us at the ISSA Awards Ceremony & Gala celebrating outstanding ISSA members.

Gain Exclusive Insights

Attend the ISSA Conference for valuable insights from industry experts.

Learn From the Best

Discover the secrets of success from chapters worldwide at the Chapter Leaders Meeting.

Supercharge Your Career

Catapult your career, seize fresh opportunities, and thrive in this dynamic industry.

Expand Your Network

Unleash new opportunities as you connect, collaborate, and cultivate relationships

Experience Dallas

Experience the energy and excitement of Dallas while networking at the gala.

BSides Charm Baltimore 2025
2025-04-12 - 2025-04-13 | Sheraton Baltimore North, 903 Dulaney Valley Rd, Towson, MD, 21204, United States
BSidesCharm is a non-profit, regional Security BSides held in Baltimore, MD. It operates under the umbrella principles of Security BSides as a larger community project within information security. BSides aims to offer small, intimate events where all participants can engage each other to help develop connections, friendships, and network with different industry professionals.

We recognize the value in engaging a smaller audience and being the big fish in a small pond. Every organization will have different goals and priorities which is why we offer different levels of participation for every individual, group, or organization. We specifically designed several different options for any sized organization to participate and support this event.

Membership Meeting 4/23/2025
2025-04-23 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Special meeting guests – Carroll Community College Cybersecurity Student Club

Chapter Business Meeting Slides: Membership Meeting 04/23/2025
Speaker Slides: ISSA-April-23-2025-TTP-Presentation.pdf
Topic: .Stakeholder Management in Cybersecurity
Brian Vaughan will host a discussion on the pitfalls and pratfalls that can arise when clients or employer management fail to recognize the importance of proper cyber security processes and procedures. Given the present environment in which we live, this topic remains one of high concern, as it represents a continuous and ongoing problem.

Speaker: Brian Vaughn, Technology Transition Paradigm
Brian Vaughn co-founded and led three IT service companies Dataprise, Shipshape IT and Technology Transition Paradigm A Managed Service Provider and Cyber Security consultancy. Brian also donates time as the President for the Information Technology Foundation (ITF), a non-profit partnership between Montgomery County Public Schools and the local business community. ITF promotes IT education in grades K-12, preparing the next generation of technology professionals.
Brian has a Bachelor of Science degree from the University of Maryland in Political Science and graduated in 1991. He lives in Maryland and has one daughter in college.
Brian enjoys snowboarding, golf, soccer, guitar, basketball, and politics.

Memorial Day
2025-05-26

Membership Meeting 5/28/2025
2025-05-28 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Chapter Business Meeting Slides: Membership Meeting 5/28/2025
Speaker Slides: Thought Leadership
Topic: Data Security: The Missing Context
Join us for this executive session designed specifically for CISOs and cybersecurity leaders seeking a more effective, modern approach to data security. You’ll learn why traditional DLP solutions have consistently underdelivered—failing to protect critical business data and demanding constant manual input. We’ll explore how Concentric AI uses powerful, contextual AI to automatically discover, classify, and secure sensitive information—without relying on rules, regex, or training samples. Through compelling use cases, we’ll demonstrate how semantic understanding of data enables better governance, focused remediation, and smarter protection of business-critical assets like IP, financial data, and strategic plans. Walk away with actionable insights into how context-driven security strategies can reduce risk, simplify compliance, and empower your team to confidently support GenAI adoption across the enterprise. It’s time to rethink data security.

Speaker: Patrick McNaught, Senior Solutions Architect, Concentric AI
Patrick previously worked at other data discovery/classification and DSPM vendors over his 10 years in the data security space. Based in Boston, MA, Patrick brings his security expertise and consultative approach to guide customers through their data security journey.

Juneteenth National Independence Day
2025-06-19 08:00 - 17:00

Membership Meeting 6/25/2025
2025-06-25 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Click HERE to register for the June 25, 2025 Membership Meeting
Chapter Business Meeting Slides: TBD
Speaker Slides: TBD
Topic: The perils of introducing AI at scale for security practitioners

What sneaks in via vendors, what comes in via the supply chain for built app, and issues with monitoring and defending it. I will also cover the issues of declining trust in content and results based on AI recycling its own output.

Speaker: Amélie Koran

Amélie Erin Koran is a seasoned technology and cybersecurity executive with over 25 years of leadership across both public and private sectors, including roles at Walmart Global Technology, Electronic Arts, Splunk, and multiple U.S. federal agencies. She has driven modernization and innovation initiatives across cybersecurity, enterprise architecture, and DevSecOps environments, and has been instrumental in shaping national and international cybersecurity and technology policy. A frequent keynote speaker at major industry events such as USENIX LISA, ShmooCon, InfoSec World, and DEF CON, she was recently a Senior Fellow at the Atlantic Council, where she advises on digital supply chain security and open-source software practices.

Click HERE to register for the June 25, 2025 Membership Meeting
The ISSA Central MD Chapter is unable to support non-US in person registrants this month.

Independence Day
2025-07-04

Membership Meeting 7/23/2025
2025-07-23 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Click HERE to register for the July 23, 2025 Membership Meeting
Chapter Business Meeting Slides: 2025-07-23 Meeting Presentation
Speaker Slides: TBD
Topic: Convergence of Networking and Security
As digital infrastructure becomes increasingly complex and interconnected, the traditional boundaries between networking and security are dissolving. This talk explores the foundational principles of security—defining risk, the core triad of confidentiality, integrity, and availability—and how these principles underpin every secure system. We’ll examine the critical role of identity in modern architectures and trace the historical evolution of networking alongside the reactive development of security controls.
With this context, the session will delve into the challenges of implementing a true Zero Trust model in today’s dynamic environments, where perimeter-based defenses are no longer sufficient. Finally, we’ll explore how the advent of 5G technology exemplifies the convergence of networking and security, enabling orchestration, automation, and policy enforcement at unprecedented scale and speed. Attendees will leave with a deeper understanding of how integrated approaches are shaping the future of secure, resilient networks.

Speaker: David Henning, Global Director Cybersecurity Operations, Hughes Network Systems – An EchoStar Company
David has over 26 years of experience in the Information Security field, 21 of them with Hughes Network Systems. He has worked for major universities, large government agencies, and as a consultant for a variety of corporations. David is currently the Director of the Security Operations Center team at HughesNet. He started out as a firewall and IDS analyst heading up the first IDS ever installed at the USDA. He went on to perform penetration testing, risk assessments, and worked at an MSSP monitoring customer IDS. David earned his CISSP in 2005, GCPM Gold in 2009, PCI ISA in 2015, and GSTRT in 2024. Previously, David has worked for SANS building demonstration networks at security conferences and mentoring CISSP training sessions. At Hughes, David is also responsible for PCI and other compliance efforts. He is looking forward to sharing his experiences ensuring the security of manufacturing systems.
Click HERE to register for the July 23, 2025 Membership Meeting

Membership Meeting 8/27/2025
2025-08-27 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Click HERE to register for the August 27, 2025 Membership Meeting
Chapter Business Meeting Slides: 2025-08-27 Meeting Presentation
Speaker Slides: ISSA Central Maryland – Building a Cybersecurity Program from Noting (Aug 27 2025)
Topic: Building a Cyber Security Program from Nothing – First 90 Days
Launching a cybersecurity program from the ground up is one of the most challenging — and rewarding — opportunities in a security professional’s career. In this session, I will guide you through the critical first steps: how to begin with clarity when there’s no existing program, align security with business drivers, and build trust by making security and compliance accessible to all. You’ll leave with actionable insights, key considerations, and a roadmap to help you make a lasting impact in your first 90 days — and set the tone for long-term success.

Speaker: David Brown, Head of Security & Compliance, Andesite AI, Inc. (“Andesite”)
Dave Brown is the Head of Security & Compliance at Andesite AI, leading security, compliance, and IT transformation strategies. Formerly at Qualtrics, he integrated the Clarabridge security program after its $1.12 billion acquisition. At US-CERT, he held leadership roles, including Deputy Director, where he oversaw national cybersecurity initiatives. Dave holds an M.S. in Management and Information Systems Security, has three certifications (QTE, CISM, CISSP), and is President of the ISSA Blue Ridge Chapter. He also authored The Lean CISO: Bootstrapping Cybersecurity in Startups.
Click HERE to register for the August 27, 2025 Membership Meeting

Labor Day
2025-09-01

Billington CyberSecurity Summit
2025-09-09 - 2025-09-12 | WALTER E. WASHINGTON CONVENTION CENTER, 801 Allen Y. Lew Place, Washington DC, 20001

Rosh Hashannah
2025-09-23
