Monthly Meeting April 26, 2017 Central Maryland Chapter Sponsors: - PowerPoint PPT Presentation

Monthly Meeting April 26, 2017 Central Maryland Chapter Sponsors: Bay Dynamics, Clearswift, LogRhythm, Logical Operations Parsons Cyber, Phoenix TS, Red Owl Analytics, Tenable Network Security, Vencore

Agenda / Announcements ➢ Welcome to Parsons ➢ Any guests or new members in attendance? ➢ (ISC) 2 CPE Submissions – Individual Responsibility ➢ CISSP Chapter Badges / Shirts and Jackets with ISSA-Central MD Logo ➢ CISSP & Study Group ➢ Future Meeting schedule Central Maryland Chapter Sponsors: Bay Dynamics, Clearswift, LogRhythm, Logical Operations Parsons Cyber, Phoenix TS, Red Owl Analytics, Tenable Network Security, Vencore

Please respect the speakers and other members, Silence or turn off cell phones and electronic devices, No video or audio recordings. Thanks Central Maryland Chapter Sponsors: Bay Dynamics, Clearswift, LogRhythm, Logical Operations Parsons Cyber, Phoenix TS, Red Owl Analytics, Tenable Network Security, Vencore

Board of Directors ❖ Bill Smith, Jr., CISSP , GSNA, CEH, GPEN, GCFA, GCFE - President ❖ Sidney Spunt, CISSP - VP Operations ❖ Kevin Drury, CISSP – Secretary ❖ Lorenzo Thweatt, CISSP - VP Professional Development ❖ Chuck Dickert, CISSP , CISA, CISM, CAPM – VP Education ❖ Jack Holleran, CISSP , CAP , (ISC)2 Fellow – Treasurer ❖ Steve Chan, CISSP , PMP – VP Membership ❖ Tom Bakry, CISSP , CISA, PMP – VP Outreach Central Maryland Chapter Sponsors: Bay Dynamics, Clearswift, LogRhythm, Logical Operations Parsons Cyber, Phoenix TS, Red Owl Analytics, Tenable Network Security, Vencore

Central Maryland Chapter Sponsors Central Maryland Chapter Sponsors: Bay Dynamics, Clearswift, LogRhythm, Logical Operations Parsons Cyber, Phoenix TS, Red Owl Analytics, Tenable Network Security, Vencore

New Members Since February 2017 Meeting Jigar Amroliwala Sonali Ghante Janet Menke Zerai Araya Mathew Hagen Patricia Okorie Devon Baker Darius Hines-Cross Erik Peterson Nate’ Hurd Justin Baker Tedock Powell Scott Hussey Michael Bostron Aysha Qazi Genevieve Carnes Susan Janeczek Brandon Rea Pancratius Chuba Lyapo Jones Jonathan Sutton Marco Crivelli Nitin Kumar Shawn Thornton Jason Gebert 269 Total Members Central Maryland Chapter Sponsors: Bay Dynamics, Clearswift, LogRhythm, Logical Operations Parsons Cyber, Phoenix TS, Red Owl Analytics, Tenable Network Security, Vencore

CISSP Study Group Start: February 7, 2017 End: May 16, 2017 Review and Practice Exam 14 Sessions Total Central Maryland Chapter Sponsors: Bay Dynamics, Clearswift, LogRhythm, Logical Operations Parsons Cyber, Phoenix TS, Red Owl Analytics, Tenable Network Security, Vencore

Central Maryland Chapter Sponsors: 8 Bay Dynamics, Clearswift, LogRhythm, Logical Operations Parsons Cyber, Phoenix TS, Red Owl Analytics, Tenable Network Security, Vencore

Future International Conferences 2017 October 10-11, 2017 San Diego, California 2018 October 16-17, 2018 Atlanta, Georgia Central Maryland Chapter Sponsors: Bay Dynamics, Clearswift, LogRhythm, Logical Operations Parsons Cyber, Phoenix TS, Red Owl Analytics, Tenable Network Security, Vencore

CISO Executive Forum Info 2017 ▪ Theme: Security Awareness and Training--Enlisting your entire workforce into your security team Date: July 23-24, 2016 Location: Las Vegas, NV ▪ Theme: Payment Strategies: The Game has Changed Date: October 11-12, 2016 Location: San Diego Sheraton Hotel and Marina http://www.issa.org/?page=CISOhome 10

ISSA International Global SIG Offering Quarterly SIG Liaison Deck 2Q – 3Q EVENTS ISSA International & Global SIG Events 2017

ISSA Strategic Goals Leadership : ISSA will lead the global security community collaboration to protect society from security threats. Program : ISSA will provide the profession with highly qualified practitioners and high quality education and training. Influence : ISSA will serve as a respected and trusted source and advisor on information security related technology, education, standards, and legislation. 12

• Cyber Security Career Lifecycle Offerings • CISO Executive Forum (Meets Quarterly) • Domestic and International Chapter Base • E-News • ISSA Intl Special Interest Groups • ISSA Industry Webinars • ISSA Journal • ISSA Web Conferences • Mentoring Programs • US and European Conferences 13

CISO Executive Forum Info Security Awareness & Training Enlisting your Entire Workforce into your Security Team July 23-24, 2017 Bally's Las Vegas Questions: Leah Lewis (llewis@issa.org) https://www.issa.org/page/CISO2017July 14

CISO Executive Forum Info Payment Strategies: The Game Has Changed October 11-12, 2017 San Diego Sheraton Hotel and Marina Questions: Leah Lewis (llewis@issa.org) https://www.issa.org/page/CISO2017Oct 15

ISSA INTERNATIONAL CONFERENCE 2017 October 9-11, 2017 San Diego, CA, USA #ISSAConf Save the date and join us for solution-oriented and innovative sessions, all designed to help you get your hands around some of security's https://www.issa.org/page/IIC2017RSVP hottest topics. 16

Support Our SIGs! • Financial • Ms. Andrea Hoy • Healthcare • Mr. Andy Reeder • Security Awareness • Ms. Jill Feagans • Mr. Kelley Archer • Women In Security • Ms. Domini Clark • Rhonda Farrell http://www.issa.org/?page=SIGs 17

ISSA INTL SIG Membership Drive ISSA International Memberships* are 20% off for SIG Members, use Discount Codes at Checkout: 20FSIG16, 20HCSIG16, 20SEASIG16, 20WISSIG16 *NOT APPLICABLE TO STUDENT MEMBERSHIPS 18

Join US at our GLOBAL SIG Events! May 08, 2017 - Maximize Your IT Career with Mentoring and Sponsorship - Dori Farah , National Center for Women & IT https://attendee.gotowebinar.com/register/8098022264328401156 ***** May 10, 2017 – Change is Simply an Act of Survival - Bil Harmer https://attendee.gotowebinar.com/register/3966125740322596097 ***** June 12, 2017 - Driving Innovation within STEM & Cyber Across the Generations - Part II https://register.gotowebinar.com/register/941692505273917188 ***** July 10, 2017 - Technology Leadership Series - Part III: Diana Burley, Ph.D, Chair, Institute for Information Infrastructure Protection (I3P) https://attendee.gotowebinar.com/register/42775778869377284 19

ISSA 2017 Meetings and Events Date Speaker Organization Topic Assurance Data, Inc. Data Engine Security Management April 26, 2017 Charles Sirois Secure Mentem Advanced Persistent Security: May 24, 2017 Ira Winkler Learning from failure Michael Misumi JHU/APL CIO - IT dept. – Cyber Innovation June 28, 2017 NCC Group Risk Management and July 26, 2017 Pradeep Governance Ponnuswamy RSA TBD August 23, 2017 Lucas Dowd Code Dx Application Security September 27, 2017 Curtis Bragdon Wapack Labs Cyber Threat Intelligence October 25, 2017 Jeffrey Stutzman GuidePoint Security TBD November 15, 2017 George Henderson Central Maryland Chapter Sponsors: Bay Dynamics, Clearswift, LogRhythm, Logical Operations Parsons Cyber, Phoenix TS, Red Owl Analytics, Tenable Network Security, Vencore

April 26, 2017 Speaker Chuck Sirois, Chief Security and Strategy Officer Assurance Data Chuck has been a thought leader for Enterprise Security for nearly 20 years, Chuck’s expertise stems from independent security software development and consulting for the largest Federal DoD/ civilian and fortune 500 firms. Chuck has demonstrable experience in how threat actors operate and how to defend the Enterprise against them. Further, Chuck has proven his skills effective by successfully finding and preventing weaponized threats in hostile environments. Previously Chuck was founder of Contegrity Partners LLC and DataLeakTest.com, as well as Security Engineer for Websense, Novell, NetIQ, Tufts HC, and Citigroup. Central Maryland Chapter Sponsors: Bay Dynamics, Clearswift, LogRhythm, Logical Operations Parsons Cyber, Phoenix TS, Red Owl Analytics, Tenable Network Security, Vencore

April 26, 2017 Topic Data Engine Security Management Please Join Charles Sirois, Chief Security and Strategy Officer and creator of DataLeakTest.com for a discussion on “Data Engine Security Management” In this presentation Charles will discuss the inner workings of the inside-out Data Engine model for data protection. We will discuss handling data protection in 3 major phases; Inbound Data handling controls, Internal Data handling controls, and Output Data handling controls. Time permitting Charles will discuss Data controls deployment methodology including; Data Security Deployment phases, Data protection, ROI matrix, and 4 golden rules of deploying Data Security Central Maryland Chapter Sponsors: Bay Dynamics, Clearswift, LogRhythm, Logical Operations Parsons Cyber, Phoenix TS, Red Owl Analytics, Tenable Network Security, Vencore