ISSA Baltimore Chapter. Monthly Meeting October 28, 2015

Transcription

1 ISSA Baltimore Chapter Monthly Meeting October 28, 2015

2 Agenda / Announcements Welcome to Parsons, 7110 Samuel Morse Drive, Suite 200 Columbia, Maryland Non-U.S. Citizen Requirements Any guests or new members in attendance? (ISC) 2 CPE Submissions Individual Responsibility CISSP Chapter Badges / Shirts and Jackets with ISSA-Baltimore Logo CISSP Study Group Chapter STEM Activity Future Meeting schedule

3 Board of Directors Bill Smith, CISSP, GSNA, CEH, GPEN, GCFA, GCFE - President Sidney Spunt, CISSP - VP Operations Kevin Drury, CISSP Secretary Carol Klessig, CISSP - VP Professional Development Rod Zwainz, CISSP, PMP - VP Education Phil Rogofsky, CISSP, Network+, CPA Treasurer Steve Chan, CISSP, PMP VP Membership Vacant - VP Outreach

4 Dennis Dworkowski Memorial Service: St. Alphonsus Rodriguez Catholic Church, Woodstock, Maryland 21163, November 14, 2015, 1:00 PM

5 Baltimore Chapter Sponsors

6 New Members Since September Meeting Michelle Ritter Traci Anne Harrell Earnest Sherrod Joseph Krupa Michael Hennessy Oladipo Oladapo Monique Jeffrey Adebowale Adenupebi Jason Schlemmer * Alvaro Sanchez 241 Total Members

7 Leah Lewis Chapter Services, Manager of Special Interest Groups and CISO Forum Events

8 Joe Grimes Executive Director, ISSA

9 Chapter Elections: Nov. Meeting Nomination Committee: Renee Esposito Chair + 2 members: TBD 2015 Elected Positions: VP Operations Treasurer Secretary VP Prof. Development

10 1 st Maryland STEM Festival Nov Science, Technology, Engineering & Math related resources, professionals and activities are sprouting up all over. The Festival serves as a central hub for those events and resources to be highlighted all over the state! Chapter is an inaugural sponsor at the Supporter level

11 Learn why you should become a Cybersecurity Professional, Learn about the latest advances in the field from top organizations A Free Event Open to High School and College Students and Cybersecurity Professionals November 9 th 6:30-8:30 Phoenix TS Little Patuxent Parkway, Suite 500 Columbia, Maryland One of the over 300 events of he Maryland STEM Festival Cake and Light Refreshments will be served

12 SANS Activities SANS VetSuccess Academy: The VetSuccess Academy is an intensive training program in which transitioning veterans receive three SANS courses and GIAC certifications at no cost. SANS CyberTalent Fair (SCTF): A virtual career fair in which leading companies looking to hire in cybersecurity can connect and chat with top candidates in an online event. Our next virtual career fair will be held on Nov. 19 and registration is currently open. SANS CyberTalent Assessments: Online performance tools that organizations use to map out training or evaluate potential hires and contractors.

13 ISSA International Woman in Security Special Interest Group

14 Mission Connecting the World, One Cybersecurity Practitioner at a Time. Creating Leaders Together ISSA WIS SIG embraces a spirit of collaboration within its organization and throughout the industry. We partner with organizations to provide leadership programs and services, and challenge these companies to create cybersecurity-oriented professional advancement opportunities for women. Vision The WIS SIG is committed to developing women leaders globally, building a stronger cybersecurity community fabric, and enabling success across the globe.

15 ISSA 2015 Meetings and Events Date Speaker Organization Topic Oct. 28, 2015 Brett Miller Nov. 6 15, 2015 Nov. 9, 2015 Nov. 18, 2015 Dec. 15, 2015 Nick Keller Amazon, World Wide Public Sector Professional Services 1 st Maryland STEM Festival ISSA Baltimore STEM Festival Invencea Jailbreak Brewing Company Simplifying Security Compliance with Cloud Reference Implementations Advanced Endpoint Protection

16 Oct. 28, 2015 Speaker Brett Miller Amazon, Senior Consultant, World Wide Public Sector Professional Services Brett Miller is an Amazon Web Services (AWS) Senior Consultant with the Security and Compliance Practice. Brett has been working closely with commercial, civilian and IC organizations to migrate their applications into the cloud and modernize their security practices using cloud technologies. Before AWS, Brett spent 14 years as a mission developer, network and security engineer and a cloud security SME. Brett spent 3 years with a government enterprise security organization and led the authoring and deployment of the IC shared responsibility matrix that has been used to accredit several clouds within the intelligence community. Brett was also the primary security architect and accreditation advisor for several cloud platforms currently deployed within the government.

17 Simplifying Security Compliance with Cloud Reference Implementations Cloud technology is transforming commercial and government systems by providing costeffective, near limitless scalability, and providing developers rapid and direct access to technology that is helping to transform startups into multi-billion dollar enterprises. Unlike the commercial sector that has been migrating to cloud technologies over the past 8 years, the government is just starting their cloud journey. Most federal, state, and IC organizations are accelerating their cloud migrations so they can obtain the cost savings and scalability that their commercial counterparts have been realizing for the past 6-7 years. This cloud revolution is creating some concern within government compliance and security organizations that have invested significant amounts of time and resources on security processes that may be challenged by the pace of innovation that the cloud empowers. For the first time in IT history, developers can build and deploy cloud based infrastructures within minutes yet cannot go into production for months due to the time and manpower it takes to manually ATO systems. This is a big problem that security professionals need to address so that mission applications can deploy and keep up with our adversaries.