Membership Meeting 7/26/2023
2023-07-26 17:00 - 19:00 (America/New_York) | MIC – Maryland Innovation Center, 6751 Columbia Gateway Dr, Columbia, 21046
Chapter Business Meeting Slides: 2023-07-26 Meeting Slides
Speaker Slides: Universal Cyber Intelligence Briefing
New Cybersecurity Policy Considerations — Distribution Copy

Topic: Wide World of Cyber
The need to validate that cybersecurity policies and procedures remain sufficient (or if not are updated/revised/expanded as needed) to appropriately protect the organization relative to new and emerging risks that emanate from new technologies, operational paradigm shifts, and a continually evolving threat landscape. This list includes:

Operations Technology (OT) & Internet of Things
Artificial Intelligence /Machine Learning
Cloud Computing/Shared Public Infrastructure (including Global Communications)
Quantum Computing
Blockchain
5G Networks / Smart City Infrastructure
Return to Office (RTO)
Augmented Reality / Virtual Reality
Biometric Authentication
Autonomous Vehicles
Wearable Technology
Drones
Smart Homes

Speaker: Jason Taule, Cyber Advisory Council Chair and CISO-In-Residence, of the Maryland Innovation Center (MIC)

Jason Taule is a 30+ year information assurance and cybersecurity veteran who has worked in both the intelligence community and commercial sectors first consulting to Federal agencies and then serving as inside CISO and CPO both within Government and at large systems integrators like General Dynamics and CSC.
Mr. Taule helped build the original DARPA CERT, helped develop the first computer security programs at the VA and NASA, and revised the Risk Assessment Methodology still used throughout the Federal Government. Mr. Taule helped author the Maryland Data Privacy Law, led a multi-million-dollar global cyber security practice for a large international consulting firm, ran the team responsible for HIPAA complaint investigations for OCR for 3 years, and for the last 20 years has been a luminary in the US Health IT sector helping hundreds of systems earn their accreditations and avoid compromise. Mr. Taule previously served as the inside CISO and VP of Standards for HITRUST, where he was responsible for developing and maintaining the Common Security Framework (CSF).
Mr. Taule currently serves as the Cyber Advisory Council Chair and CISO-In-Residence, of the Maryland Innovation Center (MIC), an advanced business incubator helping companies in the greater Washington-Baltimore metroplex start and grow. In this capacity, Mr. Taule oversees and directs the cyber activities in which the MIC engages. This includes developing and providing assessment, training, and enhancement programs designed to help residents and affiliates understand, build, and maintain programs of cyber hygiene, developing content and cultivating partnerships and support services to recognize trends and respond to emerging threats, and serving in an CISO advisory capacity with respect to fulfilling customer assurance and regulatory mandates, meeting cyber requirements necessary to raise investment capital, and managing risk to achieve maximum exit valuation.

Summer Social ISACA and ISSA (Nova, DC, Central MD)
2023-08-17 05:30 - 20:00 | MD
August 17 @5:30pm – Linda V. Priebe on EU-US Data Privacy Framework [Summer Social]

Register: This is a Hybrid meeting. A dinner meal and drinks will be served (Meal menu TBD). This will be a catered event and advanced registration is required. REGISTER HERE IN PERSON & ONLINE ZOOM. Registration closes on Monday 08/14/2023. The Location is Marymount University Ballston Center Auditorium: 1000 N Glebe Rd, Arlington, VA 22201. This is the annual ISSA and Information Systems Audit and Control Association (ISACA) Summer Social. We have reinitiated this annual event. The Summer Social sponsors are the ISACA Greater Washington DC (GWDC) chapter and the ISSA Northern Virginia (Nova), DC, and Central Maryland Chapters.
Abstract: Biden’s EO EU-US Data Privacy Framework: Is it EU Adequate? Since the CJEU Schrems II ruling in July 2020, EU GDPR compliance for EU-U.S. data transfers/access/flows has been in turmoil for U.S. entities. A whiplash of European legal developments has resulted in much frustration and fear that EU-U.S. data flows are being stifled impairing international trade. This presentation will cover European and U.S. legal developments re: EU-US data transfers/access/flows compliance including supplemental security measures to limit U.S. law enforcement access to European personal data; EU Transfer Impact Assessments (TIAs); New EU Standard Contract Clauses (SCCs); Biden’s Executive Order creating the new EU-U.S. Data Privacy Framework; and the European Commission’s new U.S. Adequacy Decision.
About the Speaker: Linda V. Priebe, JD, CIPP/E is a partner in the Washington DC Office of Culhane Meadows PLLC where she focuses on EU – U.S. Data Privacy/Protection compliance, transactions, and government relations and Co-Chairs the Government, Regulatory, and Compliance Practice Group. She is also former Chair of the Data, Privacy & Cybersecurity Practice Group. Before Culhane Meadows Linda served as Deputy General Counsel and Agency Ethics Official for fourteen years in the White House Office of National Drug Control Policy (ONDCP) from 1999-2013. Her responsibilities at ONDCP included management and day-to day operation of the ethics compliance program including privacy, in particular regarding children, and digital and social media, due diligence, and grantee compliance in addition to Supreme Court and class action litigation. She holds the Information Privacy Professional Europe Certification from the International Association of Privacy Professionals and is Co-Chair of the American Bar Association International Law Section’s Privacy, Cybersecurity and Digital Rights Committee. She is also a member of the ABA Cybersecurity Legal Task Force and Adjunct Professor of Privacy and Cybersecurity in the Masters in Corporate Compliance Program at Fordham Law School in New York City.

Membership Meeting 8/23/2023
2023-08-23 17:00 - 19:00 | Convergint | Federal, 6650 Eli Whitney Dr, Suite 400, Columbia, MD, 21046, United States
Chapter Business Meeting Slides: August 23, 2023 Membership Meeting
Speaker Slides: Jeffrey Wheatman Teaching AI
Topic: Can We Teach an AI to Speak Fluent Cybersecurity
How do you know if your AI really understands cybersecurity? Too many compliance tools claim that they use AI for text processing but fail to deliver on their promises. Can we really give an AI a CISSP? Can we trust AI with our cybersecurity? Yes, AI is useful and valuable, but it won’t fix everything. We need to be clear about what AI can and cannot do. One thing we can say for sure (well, pretty sure) – AI will never replace the human element of cybersecurity. Is the future of cybersecurity people being replaced by AI?This presentation will delve into the three elements to AI that need to be explored:

Business systems are using AI; What are the implications to your cybersecurity defenses?
AI is being used by attackers too!
The market is filled with companies, platforms and tools that all have AI, ML, and other terms sprinkled throughout their marketing literature – but what does it all mean?

We will explore how smart (or dumb) are AIs in cybersecurity in today’s AI-centric world.
Speaker: Jeffrey Wheatman, SVP, Cyber Risk Evangelist, Black Kite
A strategic thought leader with extensive expertise in security and cyber risk management,Jeffrey Wheatman is regarded as a foremost expert in guiding public sector clients and Fortune 500 companies in connection with their cybersecurity and risk management programs. Jeffrey’s history of working with clients to plan, grow, and transform their cyber risk management programs has been instrumental in ensuring organizations continued viability and health as they define short- and long-term expansion plans. Under Jeffrey’s guidance, board and C-level leaders are fortified with the best practice solutions to realize exceptional performance outcomes.In his current capacity as SVP, Cyber Risk Evangelist at Black Kite, Jeffrey has been tasked with raising awareness of the enterprise-wide risk impacts of third party risk, both in the digital and traditional supply chain and supporting the strategic vision of the executive leadership team and investors.Most recently, Jeffrey acted as a VP, Advisor with Gartner, the global strategic advisory firm, where he worked with clients to build and improve their security programs, assess risk, focus on reporting on program status, metrics, performance management, stakeholder engagement, executive communication, and bridging the connection between technology and security risk.Jeffrey guided leaders in selecting frameworks to run cyber programs in compliance with regulatory requirements and expectations of auditors and partners. Jeffrey has extensive experience engaging with executive leaders and board members. Jeffrey has prepared security and risk leaders to present before a board; he has reviewed and advised on upwards of 500 board presentations and briefed 60+ boards of directors to understand their role in managing cyber risk.For four years, Jeffrey served as the Chair of the North America Security and Risk Management Summit, Gartner’s 2nd largest conference with 4000+ annual attendees. As part of this high- profile effort, he guided the creation of the conference agenda comprising more than 150 presentations, 20 case studies, external keynote speakers, and 50 vendor sessions.

Labor Day
2023-09-04 | MD

ISSA Annual Membership Meeting
2023-09-07 01:00 - 15:00 | Virtual
You are invited to the 2023 Virtual ISSA Annual Membership Meeting.

Why Participate?

Learn about ISSA International current activities to enhance chapter participation and the value of your membership year-to-date in 2023
Discover what ISSA International is planning in 2024 to provide value and opportunity for members and chapters
Review ISSA International financial reporting from 2022
Ask Questions. We want to hear from you. This is your opportunity to ask direct questions to the ISSA Board President and Executive Director of ISSA International
Hear about the newly elected, incoming ISSA International Board Members

We Want to Hear From You.
We are opening the floor for questions from the membership. We encourage you to submit any questions, comments and concerns you would like addressed prior to the meeting. Please email memberservices@issa.org with the subject line: “Annual Meeting Request” and we will answer all questions during the meeting or via email. Your feedback is important to us!

We look forward to seeing you there!

Register Now

ISSA Chapter Leader Meeting
2023-09-15 13:00 - 14:00 | MD

Rosh Hashanah
2023-09-16 | MD

Hack the Building 2.0: Hospital Edition
2023-09-18 - 2023-09-22 | DreamPort, 7000 Columbia Gateway Dr., Columbia, MD, 21046
The Hack The Building 2.0 Hospital Edition and the National Cybersecurity Education Colloquium (NCEC) are two concurrent cybersecurity events by MISI & DreamPort & The National Centers of Academic Excellence in Cybersecurity (NCAE-C) program. These events will converge brilliance from the cybersecurity sphere across dual domains.

Yom Kippur
2023-09-25 | MD

Membership Meeting 9/27/2023
2023-09-27 17:00 - 19:00 | MIC – Maryland Innovation Center, 6751 Columbia Gateway Dr, Columbia, 21046
Chapter Business Meeting Slides: September 27, 2023 Membership Meeting Presentation
Speaker Slides: Crime Lab Presentation ISSA Central MD

Topic: What’s it like to work in a Crime Lab?
We have all seen Crime Lab technicians on television shows such as NCIS and CSI analyzing evidence to try solve crimes. How accurate is television’s portrayal? Hear from experts who work for the Baltimore City Police Department about what they do to analyze and assess evidence. Learn about what tools and techniques are being used to fight crime. What training does it take to do this type of work? Be able to tell your friends if what they are watching on television is the way it really is!
Speaker: Nicole Belle & Kieu P. Danh, Crime Scene Sciences Section, Baltimore Police Department

This meeting features two representatives from the Baltimore Police Department Forensic Science and Evidence Management Division. Nicole Belle is a Crime Laboratory Technician Supervisor. She began her career in Forensics in 2017, starting in the Crime Scene Unit as a Crime Laboratory Technician working and processing hundreds of crime scenes. She received her Master of Science in Forensic Science from National University and her Bachelor of Science in Forensic Chemistry and Chemistry from Towson University. Kieu P. Danh became a Crime Laboratory Supervisor in June 2023 and started with the Division in 2018. She a brief tour in the Carroll County Sheriff’s Office Criminal Investigation Unit. She earned her Master of Science and his Bachelor of Science in Criminal Justice December from the University of Baltimore.

Membership Meeting 10/25/2023
2023-10-25 17:00 - 19:30 | MIC – Maryland Innovation Center, 6751 Columbia Gateway Dr, Columbia, 21046
Chapter Business Meeting Slides: October 25, 2023 Membership Meeting Presentation
Speaker Slides: When disaster strikes
Topic: When disaster strikes… what you can do to prepare until help arrives.

A police officer is many things in one. At times a police officer must be a peacekeeper, a counselor, an enforcer, and a life saver. All these jobs carry the responsibility of knowledge in all fields. A police officer must understand mental health issues, information security, local and state laws, criminal and civil laws, and emergency medicine. A police officer is the first person to arrive in an emergency and must act quick and efficiently. Many police officers obtain specialties that further advance them toward solving problems. Teresa specialties are aimed a lifesaving operations and preservation of life after disaster strikes.
Speaker: Teresa Murphy, Prince George’s County Police Department
Teresa Murphy is an eleven-year veteran of Prince George’s County Police. She received a bachelor’s degree in business and accounting from the University of New Mexico and has continued studies in disaster preparedness online from various universities and FEMA instructions. Her current field placement is a Sergeant of Shift 5 in Bowie, Maryland. She is interested in community relations and disaster recovery/ preparation. She is highly trained in special operation techniques to include Swift Water Advanced Rescue, Certified Bomb Technician, Radiation Detection, Civil Disturbance Level 1, Crash Reconstruction Levels 1,2, and 3, and is an FAA certified UAS Remote Pilot. She recently completed Incident Command Systems 400 that deals with large scale natural disaster recovery..

Data Connectors
2023-11-09 08:00 - 18:00 | BWI Arport Marriott, 1743 West Nursery Rd, Linthicum Heights, MD, 21090, United States
DC/Baltimore Cybersecurity Conference
Don’t wait for a breach to happen, take action and safeguard your digital assets now! This is your chance to stay ahead of potential attacks by learning about the latest cybersecurity threats, trends, and solutions at the DC/Baltimore Cybersecurity Conference on 11/09/23. Hear from cybersecurity experts and leaders, and connect with other cybersecurity professionals from the region while gaining an edge against nefarious cybersecurity threat actors.
Admission i includes a full catered lunch, breakfast, snacks, cocktail networking reception, access to all educational presentations, keynote speakers, panel discussions, and exhibit hall. Contact the President (President@centralmarylandc-y5eorcwrmb.live-website.com) or VP (V_P_Operations@centralmarylandc-y5eorcwrmb.live-website.com) for a discount registration code.

Membership Meeting 11/15/2023
2023-11-15 17:00 - 19:00 | MIC – Maryland Innovation Center, 6751 Columbia Gateway Dr, Columbia, 21046
Click Here to register for the November 15, 2023 ISSA Membership Meeting
Chapter Business Meeting Slides: November 15, 2023 Membership Meeting Presentation
Speaker Slides: Public Private Partnerships

Topic: Importance of Public Private Partnerships in Cybersecurity
Private public partnerships for cybersecurity issues have become more important than ever over the last few years.

As cyber threat actors increase their efforts against private and public industry alike, correlating all information to help secure corporate and government networks and help posture defensively is the key.

Speaker: Lorri Janssen-Anessi, BlueVoyent
Hi, I am Lorri Janssen-Anessi, currently the Director of External Cyber Assessments. I am a STEM advocate, volunteer coding teacher, lifelong learner, and lover of all things cybersecurity! I grew up in the Bay Area in Cupertino California. Instead of working at a one of the prevalent tech companies in the areas like many of my peers, I joined the US Air Force.

After enlisting, I spent 20+ years working primarily in the public sector. My career in the US Air Force started as a technical language analyst working on one of the US government’s highest priority missions, counter-terrorism, after 9/11. As national priorities evolved and cyber attacks became more pervasive, my role shifted to work in the Cyber Security Mission at the National Security Agency, an organization that was truly a pioneer in the field of cybersecurity.
Finding this new field to be extremely rewarding it kick-started my passion for all things technology and cyber-related. While working in this mission, the need for more traditional education in this field became evident so I enrolled and successfully completed a master of Electrical and Computer Engineering at the Naval Postgraduate School. This was a challenging program that provided the necessary skills to help me have impactful contributions to the National Cybersecurity mission. It also highlighted the need to foster passion and interest in STEM for women, minorities, and the next generation, which were and continue to be grossly underrepresented in this field.
My path to cybersecurity was not traditional, so hopefully I am an example of how it is possible to get into a technical field with a little curiosity and interest, some effort, and bit of traditional and non-traditional training. I will continue to strive to share as much information and insight on STEM and cybersecurity to hopefully instill a bit of passion for these fields.
Click Here to register for the November 15, 2023 ISSA Membership Meeting

Thanksgiving
2023-11-23 | MD

Membership Meeting 12/13/2023
2023-12-13 17:00 - 19:30 | MIC – Maryland Innovation Center, 6751 Columbia Gateway Dr, Columbia, 21046
Chapter Business Meeting Slides: 2023-12-13 Meeting Presentation
Speaker Slides: Maryland: Economics of Cyber Conferences
Topic: Attending Cybersecurity Events

The Maryland Department of Commerce is involved in shaping the cybersecurity industry within the state. As a leader in the cyber community at the Maryland Department of Commerce, I promote, attract, and support Maryland technology companies through participation in conferences at the local, national, and international levels. In my presentation, I will discuss the economic advantages and opportunities resulting from attending cybersecurity events such as BlackHat, DefCon, and InfoSec Europe.
Speaker: Kimberly Mentzell, Director for Cybersecurity and Aerospace at the Maryland Department of Commerce.
Kimberly has worked in the technology field for over twenty years as an educator and professional in cybersecurity, networking, Linux, and programming. She held positions as a cyber program manager, IT manager, network administrator, technology coordinator, programmer, and auditor. She maintains several industry certifications, as well as teaches at the collegiate level at Capitol Technology University and Frederick Community College. Kimberly serves as a member of the Maryland Cybersecurity Council, the Maryland Cyber Coordinating Council, and as the co-chair for the MD Cyber Education Committee in conjunction with the MD Center for Computing Education (MCCE) Steering Committee. In addition, she serves as a founding/executive board member of the Capitol Technology University Center for Women in Cyber. She is also a member of the Computer Science Teachers Association (CSTA), Women in Cybersecurity (WiCys), Cybersecurity Association of Maryland (CAMI), Maryland Tech Council, TechFrederick Advisory Board, and Ethical Hacking Council Advisory Board. Recently, she received the FISSEA Innovator of the Year Award from NIST for her contributions to cyber education and was inducted into the Order of Thor by the Military Cybersecurity Professionals Association. In addition, she is also an active attendee and/or speaker at many local, national, and international cybersecurity conferences and events such as DefCon, BlackHat, RSA, BSides, and InfoSec – Europe.

Christmas
2023-12-25 | MD

New Year's Day
2024-01-01 | MD

Martin Luther King, Jr. Birthday
2024-01-15 | MD

Membership Meeting 01/24/2024
2024-01-24 17:00 - 19:00 | MIC – Maryland Innovation Center, 6751 Columbia Gateway Dr, Columbia, 21046
Chapter Business Meeting Slides: 2024-01-24 Meeting Presentation

Speaker Slides: Privacy and Law

Topic: PRIVACY AND THE RULE OF LAW IN THE DIGITAL AGE
Have you ever had the microphone on your cell phone turn on, by itself, when you’re having conversations, or, review your tax transcripts and see that someone has electronically sent forms to your tax account, or, been told by a credit company that they were closing your accounts based on false
information provided by a credit reporting bureau – only for the credit reporting bureau to say they never sent that information, or learn that a government agency provided personal and private information about you to another entity? Well, I have. After becoming a Whistleblower, I experienced these and
many other acts that I believe were in response to me being a Whistleblower. For each of these events to occur, I believe that my right to Privacy and the Rule of Law had to be violated. How does Democracy survive when these types of Technology and Cybersecurity threats are allowed and there are no laws or rules in place to hold people accountable. Technology is advancing rapidly; the law and policy aren’t. Not only do Cybersecurity and Privacy field experts need to be aware of the various techniques available that can be used to violate our Constitutional Right to Privacy, and stress the Rule of Law, but so do everyday citizens. If we, US Citizens, do not make IT and government officials aware of these evolving threats, no one will be protected. My experience as a whistleblower has opened my eyes to these items.

Speaker: Danielle Spencer
Danielle Spencer, author, protector of freedom, a privacy rights Advocate, and U.S. Federal Government whistleblower. I am a senior leader with over 20 years of experience focused on business, finance, and acquisition management. I am a change agent, transforming and improving business operations and processes. I have two Masters degrees in Business Administration and Information Systems, and a Bachelor of Science degree in Medical and Research Technology and am certified in Information Assurance (cybersecurity) and Project Management.

Presidents Day
2024-02-19 | MD

FutureCon Baltimore
2024-03-14 08:00 - 17:00 | Sheraton Inner Harbor, 300 S Charles St,, Baltimore, MD, 21201, United States
FutureCon Events brings high-level Cyber Security Training discovering cutting-edge security approaches, managing risk in the ever-changing threat of the cybersecurity workforce.
Join us as we talk with a panel of C-level executives who have effectively mitigated the risk of Cyber Attacks.
Educating C-suite executives and CISOs (chief information security officers) on the global cybercrime epidemic, and how to build Cyber Resilient organizations.
“Cybersecurity is no longer just an IT problem”
Gain the latest knowledge you need to enable applications while keeping your computing environment secure from advanced Cyber Threats. Demo the newest technology, and interact with the world’s security leaders and gain other pressing topics of interest to the information security community.
The FutureCon community will keep you updated on the future of the Cyberworld and allow you to interact with your peers and the world’s security leaders.
FutureCon is Offering All ISSA Members a Free In-Person VIP Pass. (Contact Chapter President of VP Operations for Promo Code)
Full day ticket includes CPE Credits, All Sessions, CISO Panel, Networking,
Breakfast, Lunch, Happy Hour, Raffle Prizes and More ($200 Value)

Membership Meeting 03/27/2024
2024-03-27 17:00 - 19:00 | MIC – Maryland Innovation Center, 6751 Columbia Gateway Dr, Columbia, 21046
Chapter Business Meeting Slides: 2024-03-27 Meeting Presentation
Topic: Advanced Degrees in Cyber
Have you ever thought about advanced degrees in cyber but thought, there’s no way you have time, or that it will be way too difficult with a demanding full time job? Yeah, me too. Hear about the upside, downside, and my research experience so far as I make progress toward identifying my dissertation topic. Interested in the path that led me here? We can talk about that too. As a volunteer career coach in the community, I enjoy answering questions and helping others come up with ideas of what could be next for them in their cyber career path. I hope to not only share some about my experience but to help with questions you might have for your cyber career.

Speaker: Jennifer Havermann

Jennifer Havermann is a senior technical leader with over 35 years of experience in the Intelligence, Defense, and Federal sectors, in a variety of both civilian and industry roles. Her career spans technical and business roles in cyber and intelligence for multiple market leaders, small business, U.S. Department of Education, Department of Defense, and the National Security Agency. She currently serves with the National Security Agency, focused on technology and mission enablement. She holds a Bachelor of Science in Information Assurance, Network Engineering Certificate, MBA, and is currently in a Doctoral program focused on cyber. She maintains Certified Information System Security Professional (CISSP) and Certified Ethical Hacker (C|EH) certifications. She is one of the highlighted cyber professionals in the book, “Tribe of Hackers” and is often found volunteering in the cyber community. Jen has volunteered as a Career Coach over the last 10 years in a combination of DEFCON and BSides career tracks.

BSidesCharm 2024
2024-04-20 - 2024-04-21 | Sheraton Baltimore North, 903 Dulaney Valley Rd, Towson, MD, 21204, United States
BSidesCharm is a regional Security BSides held in the Baltimore region of Maryland. It operates under the umbrella principles of Security BSides as a larger community project within information security. BSides aims to offer small, intimate events where all participants can engage each other to help develop connections, friendships, and network with different industry professionals.

We recognize the value of engaging a smaller audience and being the big fish in a small pond. Every organization will have different goals and priorities, so we offer different levels of participation for every individual, group, or organization. We specifically designed several different options for any sized organization to participate in and support this event.

Membership Meeting 04/24/2024
2024-04-24 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Chapter Business Meeting Slides: Membership Meeting 04-24-2024
Topic: Federal Government Proposed Cybersecurity Regulations and False Claims Risks
Are you aware of the cybersecurity regulations proposed by the Federal Government? As more businesses shift towards digital operations, it’s crucial to stay informed about the evolving cybersecurity landscape. In addition to protecting your business from cyber threats, failing to comply with these regulations could also put you at risk of facing false claims allegations. Let’s learn more about this important topic together.
This session will include an overview of the CMMC rule, the proposed FAR rule for Software Bill of Materials (SBOMs), FedRAMP equivalency requirements for contractors, and the potential consequences of False Claims Act.

Speaker: Dawn Greenman, Program Manager for Cybersecurity Compliance and Supply Chain Risk Management (C-SCRM). Johns Hopkins Applied Physics Laboratory (APL)
Dawn Greenman is the Program Manager for Cybersecurity Compliance and Supply Chain Risk Management (C-SCRM) for Johns Hopkins Applied Physics Laboratory (“APL”). Ms. Greenman oversees the cybersecurity compliance strategy across the organization to ensure APL can meet its information technology mission needs. Ms. Greenman is a subject matter expert in the federal regulations to protect controlled unclassified information. She is a trusted partner to government and to industry. In her role as program manager, Ms. Greenman supports sponsor work related to the design and implementation of the new Department of Defense cybersecurity program, Cybersecurity Maturity Model Certification (CMMC). Further, she leads working groups with peer organizations to collaborate on cybersecurity threats, risks and compliance while identifying ways to improve cybersecurity of small-to-medium businesses in the defense industrial base.
Prior to her 18-year tenure at APL, Ms. Greenman held a variety of Information Technology positions with small to medium businesses where she drove organizational change through the use of information technology. She has designed and delivered data centers, implemented major ERP systems, assured information technology compliance with Sarbanes Oxley, and built world class Help Desk teams.
Dawn holds an undergraduate degree in Information Systems with a concentration in Homeland Security and an Executive Masters of Business Administration from The University of Maryland Robert H. Smith School of Business. She is a Certified Information Security Professional (CISSP) and holds the GIAC Security Essentials (GSEC) certification.

Membership Meeting 05/22/2024
2024-05-22 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Chapter Business Meeting Slides: 2024-05-22-Meeting-Presentation
Speaker Slides: Navigating the New Frontier – Penetration Testing in the AI ML Era
Topic: Navigating the New Frontier: Penetration Testing in the AI/ML Era

As we enter a new era of technological innovation, startups are increasingly harnessing artificial intelligence (AI), machine learning (ML), and Large/Small Language Models (LLMs/SLMs) to accelerate their application development processes. This presentation, “Navigating the New Frontier: Penetration Testing in the AI/ML Era,” focuses on the double-edged sword these technologies present to cybersecurity. While AI/ML can dramatically speed up development and bring sophisticated capabilities to applications, they often do so at the expense of security, embedding potentially severe vulnerabilities into new software.
The talk delves into how startups may neglect rigorous security protocols, thereby increasing the prevalence of insecure coding practices. We will explore specific cases where the push for innovation has led to significant security oversights, resulting in a heightened risk of zero-day vulnerabilities. The presentation will highlight the crucial role that penetration testing must play in this evolving landscape, adapting to not only identify but also mitigate the unique vulnerabilities introduced by AI-driven development.
Additionally, we will discuss the strategic importance of incorporating security at the foundational level of application design and argue for a paradigm shift in startup cultures—from a focus on speed to an equal emphasis on secure innovation. Attendees will gain insights into the complexities of securing AI/ML-driven applications and learn about the latest methodologies in penetration testing that are essential for protecting against the next generation of cyber threats.

Speaker: Herman Cowart, Founder & Chief Executive Officer, Paradoxical Security LLC
Herman Cowart is an accomplished cybersecurity professional with over 15 years of experience in offensive security. As the Founder and owner of Paradoxical Security and Penetration Testing Program Manager as a government contractor, he specializes in leading comprehensive Red Teaming and penetration testing programs for network, web applications, and many other forms of offensive security. His expertise extends to developing custom security tools in Python, C, C++, C#, and Assembly, as well as mentoring a robust team to effectively identify and mitigate zero day vulnerabilities.
With a distinguished military background in the U.S. Army’s Information Technology sector, Herman brings a strategic and tactical approach to cybersecurity. He holds many GIAC certifications such as the Mobile Device Security Analyst , Certified Penetration Tester, and Web Application Penetration Tester and has been recognized with awards such as the Presidential Service Badge in support of the White House Communications Agency. Herman is passionate about technology and is committed to fostering knowledge through his work at Paradoxical Security, and his various community-engaged tech projects.

Memorial Day
2024-05-27 | MD

Juneteenth National Independence Day
2024-06-19 | MD

Membership Meeting 06/26/2024
2024-06-26 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Chapter Business Meeting Slides: 2024-06-26-Meeting-Presentation
Speaker Slides: CSAIC DoD Information Analysis Centers
Topic: DoD Information Analysis Centers
The DoD Information Analysis Centers are comprised of the Defense Systems (DSIAC), Homeland Defense & Security (HDIAC), and the Cybersecurity and Information Systems Information Analysis Centers (CSIAC). This session will discuss services available to federal government users and their contractors to foster collaboration and innovation across departments.
In this session will cover:

Technical Inquiry services
Access to analysts
Subject Matter Experts
Research Digests
Voice of the Community highlights
State-of-the-art Reports – in depth, peer-reviewed reports released bi-annually.
Scientific and Technical Information Collection (Library)
DoD funded for government users, including access to DTIC’s Research & Engineering Gateway.

Speaker: Phil Payne, CAISC

Philip Payne is the CSIAC Technical Lead. Mr. Payne (CISSP and Security+ Certified) comes from a rich background of Cyber Security with the US Army C5ISR center (formerly CERDEC) and possesses a BS and MS in Computer Engineering from Johns Hopkins University and Polytechnic University respectively. At the C5ISR center, he led a world class Cross Domain Solution (CDS) Lab. Within the lab, he performed Cross Domain Solution (CDS) lab-based security assessments on Army CDSs going through the Secret and Below Interoperability (SABI) CDS Certification and Accreditation Approval process. He was a key member of the INFOSEC Branch, which has made a myriad of contributions in the Cyber Space for the DoD at large. At SURVICE Engineering he served as a vital member of the Cyber R&D team as Senior Cyber Security Engineer supporting the Data Analysis Center (formerly AMSAA) on early acquisition Cyber Security Assessments for Army Systems.

Independence Day
2024-07-04 | MD

Membership Meeting 07/24/2024
2024-07-24 17:00 - 19:00 | Stumpy’s Hatchet House, 6695 Dobbin Rd, Columbia, MD, 21045, United States
Chapter Business Meeting Slides: July Membership Meeting Slides
Speaker Slides: 2024-07-24 Zero Trust At Home
Topic:Securing Your Home Network

Home users often think that their home networks are too small to be at risk of a cyberattack or believe that their home devices are secure enough right out of the box. But cybersecurity threats are proliferating faster than the growth of smart home technology. As remote and hybrid work are being normalized it is essential for cyber security professionals to begin thinking of home networks and local coffee shops in their security solutions. Join us in this insightful meeting featuring Dr. Amy Hamilton, a cybersecurity expert with experience at the top echelons of the U.S. Government, who will share tips and best practices on how to secure your home environment to protect yourself and your family from cyber threats using the principles of zero trust.

Speaker: Amy Hamilton, DOE

Amy Hamilton, PhD, is an award-winning public speaker who with wide international experience. While in the US Army Officer Signal Corps, she served in the US European Command, the US Northern Command, and North American Aerospace Defense Command (NORAD). She later served two years as a senior cyber security policy analyst at the Office of Management and Budget, and as the Senior Cyber Security Advisor for the Department of Energy. She is currently a visiting faculty chair to the Department of Defense National Defense University, College of Information and Cyberspace.
