Monthly Meeting December 19, 2018

Transcription

1 Monthly Meeting December 19, 2018

2 Agenda / Announcements Welcome to UMBC Training Center Any guests or new members in attendance? (ISC) 2 CPE Submissions Individual Responsibility CISSP Chapter Badges / Shirts and Jackets with ISSA-Central MD Logo CISSP & Study Group Future Meeting schedule

3 Please respect the speakers and other members, Silence or turn off cell phones and electronic devices, No video or audio recordings. Questions are welcome; please keep them on-topic and brief. Further discussion should be taken off-line with the presenters so as to allow them the courtesy of being able to finish their presentations within the allotted time without being rushed. Sidebar discussions should be constrained. If you must discuss something, allow your fellow members (and the presenter) the courtesy of doing so outside or on break.

4 Board of Directors Bill Smith, Jr., CISSP, GSNA, CEH, GPEN, GCFA, GCFE - President Sidney Spunt, CISSP - VP Operations Zac Lechner, CISSP, CEH, MBA Secretary Carol Klessig, CISSP - VP Professional Development Kevin Newman, CISSP, GCIH VP Education Jack Holleran, CISSP, CAP, (ISC)2 Fellow Treasurer Steve Chan, CISSP, PMP VP Membership Open - VP Outreach

5 Central Maryland Chapter Sponsors Platinum Sponsor

6 New Members Since October Meeting Zachary G. DeMunda Joanne Murachver Total Chapter Membership: 233

7 Officer Elections December 2018 VP Outreach Keith Bull

8 ISSA Member Benefits Discount of SANS Training SANS is pleased to offer current ISSA members a 10% tuition discount on all Community SANS and Mentor classes. Please contact coins@sans.org with the event name and number of people registering and you will be provided with a specific discount code. This code must be entered at time of registration and is valid in conjunction with Early Bird savings of up to $500 but cannot be combined with other promotions, Group Discounts or Voucher program. To find out more about a SANS live training event in your Community or the many free resources we offer, visit The discounts on this page have not been subjected to any testing by the Information System Security Association (ISSA). These offers are made by third parties and not endorsed by ISSA. Members should thoroughly review the details, privacy policies, and information provided by these vendors prior to selection or implementation.

9 Spring 2019 CISSP Study Group Start: February 19, 2019 End: May 21, 2019 Review and Practice Exam 14 Sessions Total

10 January 23 rd Meeting Location This Photo by Unknown Author is licensed under CC BY- NC-ND Westridge Corporate Center 6996 Columbia Gateway Drive, Suite 100 Columbia, MD Phone:

11 Update on Fees for Chapter Meetings Members will NOT be charged at this time. Board will revisit after the new year One possible option is refunding members who pre-register and attend or pre-register / cancel ahead of deadline Will begin charging guests at November meeting per structure outlined below Fees: Rules $15 for guests until 5 pm the day before meeting $20 for guests paying at the door (exact cash or credit card) No charges for speakers and their guests Sponsor benefits of the Chapter will be updated to provide TBD number of free passes Refunds available up to 5pm the day before

12 Updates to Meeting Schedule January :15 to 5:45 Business Meeting 5:45 to 6:15 Networking and Dinner 6:15 to 7:45 Speaker and Q&A

13 ISSA Meetings and Events Date Speaker Organization Topic December 19, 2018 Ira Winkler President of Secure Mentem January 23, 2019 John Stoner Ronnie Obenhaus February 27, 2019 Dr. Sam Small, Chief ZeroFOX Security Officer Creating a Human Security Officer What is Cyber Threat Intelligence? Social Media Security

14 January 23, 2018 Speaker John Stoner & Ronnie Obenhaus Cyber Threat Intelligence Analyst John Stoner has over 18 years of experience in the national security and defense sector working a variety of roles, including most recently as a Cyber Threat Intelligence Analyst, Cyber Counterintelligence Analyst and Cyber Instructor. His work experience includes IT, instruction and course design, cyber exercise and testing, penetration testing, intelligence collection, threat support, SIGINT (Signals Intelligence), and Cyber Operations. He holds A+, Net+, CEH, CHFI, CEI, CISD, CASP and CISSP and a Computer Studies degree from UMUC. He is a huge soccer fan and coaches youth soccer. You may see his Zombie response car at unnamed government facilities. By secretly joining the Army at 19 years old, he got started in military intelligence and then eventually government cybersecurity. Cyber Threat Intelligence Analyst Ronnie Obenhaus is a US Army Veteran and is not good at providing additional facts for his bio. He is married and has several children (amount variable). He may or may not have pets, but seems to like dogs. He currently is a DOD civilian at a federal cyber agency. Ronnie has met all the famous people, as you can see. Please visit his movie blog:

15 January 23, 2018 What is Cyber Threat Intelligence?

16 December 19, 2018 Speaker Ira Winkler, CISSP, President of Secure Mentem Ira is considered one of the world s most influential security professionals, and has been named a Modern Day James Bond by the media. He did this by performing espionage simulations, where he physically and technically broke into some of the largest companies in the World and investigating crimes against them, and telling them how to cost effectively protect their information and computer infrastructure. He continues to perform these espionage simulations, as well as assisting organizations in developing cost effective security programs. Ira also won the Hall of Fame award from the Information Systems Security Association, as well as several other prestigious industry awards. Most recently, CSO Magazine named Ira a CSO Compass Award winner as The Awareness Crusader. Ira is also author of the riveting, entertaining, and educational books, Advanced Persistent Security, Spies Among Us and Zen and the Art of Information Security. He is also a columnist for ComputerWorld, and writes for several other industry publications.

17 December 19, 2018 Creating a Human Security Officer While everyone acknowledges that users are the top security vulnerability, they rely upon awareness to solve the problem, despite the fact that awareness is far from perfect. To solve this problem in a coordinated way, what is required is not an awareness manager, but a Human Security Officer who is responsible for looking at human vulnerabilities and determining the optimal way to mitigate the vulnerability through a combination of process and technology. As opposed to trying to tell people what not to do, the HSO implements technology that reduces the likelihood of attacks reaching users, and creates business processes that tells users how to do their jobs correctly. Awareness programs are then implemented to inform people how to do their jobs correctly. This presentation will cover the implementation of a Human Security Officer.