Virginia Cyber Security Partnership (VCSP)

VCSP 2019 Holiday Networking Event
2019-12-12 16:00 - 20:00 (America/New_York) | Triple Crossing Beer – Fulton, 5203 Hatcher Street, Richmond, VA, 23231, United States
Celebrate the Season
The VCSP 2019 Holiday Networking Event – an open house at Triple Crossing Brewery.
Come and join your fellow practitioners in celebrating the season with wood-fired pizza and some of the finest beer in Richmond!
For more information on this event, please contact Jack Redfield at jredfield@cbh.com
We hope to see you there!

Triple Crossing Brewery (Fulton)
5203 Hatcher St., Richmond VA
Richmond, VA 23231

Member Meeting #3: "Threat Trends"
2021-06-03

Member Meeting #4: VITA ISOAG-VCSP Joint Meeting
2021-07-14

Roundtable #3, CISO
2021-08-26
By Invitation Only.

VCU Cybersecurity Center Speaker Series
2021-08-26
VCU Cybersecurity Center Speaker Series, Houston Hunt, KoreLogic

VCU Cybersecurity Center Speaker Series: CarMax Architect
2021-09-03

VCU Cybersecurity Career Panel
2021-09-17

VCSP Member Meeting - "Cyber Threat Trends Webinar"
2023-10-05 12:00 - 13:00
Join us on October 5th from 12-1 PM for the latest on where our cyber-attack surface is growing and how to reduce the risk posed by key cyber threats from nation states to critical infrastructure to malicious use of AI. We are fortunate to have a panel of front-line subject matter experts who will share their knowledge of the cyber threat challenges they face every day.

Panelists:
Chris Cope, Field Supervisor, FBI
Sean Stalzer, Director, Cyber Security, Dominion Energy Services
Lance James, Founder and CEO of Unit221B, Former Deloitte Head of Cyber Intelligence, and Chief Scientist for Flashpoint
Moderator:
Beth Bergin Waller, Chair, Cybersecurity and Data Privacy
Practice, Woods Rogers Vandeventer Black

VCSP Member Meeting - "Navigating the Explosive Rise of AI"
2023-11-16 12:00 - 13:00
The use of Generative AI has exploded in the last year, surprising and delighting most consumers in its rise from relative obscurity. Every day there’s a new product or service taking advantage of Generative AI, and it seems that if you don’t use them you’ll be left behind. In this session we’ll look at how this AI revolution occurred, the risks and benefits of using Generative AI services, and some key tooling capabilities and best practices for governance and control in a business environment.

Speaker:
Patrick McNeil
Senior Security Architect, GuidePoint Security
Patrick is a Sr. Security Architect for GuidePoint Security, specializing in application security and DevSecOps programs, API Security, and AI / ML. His background includes software development, system architecture design, network engineering, and security in the defense, banking, and telecom industries. Patrick is a hacker and #telephreak at heart, passionate about teaching and mentoring. He has shared his knowledge at a number of conferences, including DEFCON, DerbyCon, BSidesLV and local BSides events, CarolinaCon, CackalackyCon, regional OWASP meetings, and various telecom industry and fraud prevention forums. Patrick enjoys growing his local security community by volunteering with BSidesRDU and CackalackyCon, and is the president of a nonprofit Oak City Locksport.

CyberCon
2024-02-01 09:00 - 17:00
Join us in Richmond, Virginia, for a day of innovative sessions focused on connecting with the Richmond cyber community and growing your career.
CyberConVA promises a full day of skill development, new ideas, and connections to supercharge your cyber career.

DDoS Attacks & Vulnerabilities: Shifts in the DDoS Landscape
2024-03-21 12:00 - 13:00
As geopolitical tensions continue to rise and threat actors are more driven for success than ever before, DDoS attacks are increasing in quantity, scope, and complexity. The days of old are gone and its imperative that security leaders understand the dynamic nature of today’s DDoS attacks. Join VCSP and NETSCOUT Arbor as we explore the shift change in the DDoS attack landscape and how to evaluate your vulnerability to DDoS attacks.
Speaker
Richard Hummel, Senior Threat Intelligence Manager | NETSCOUT

CyberCon 2025
2025-02-06 09:00 - 17:00 | Dominion Energy Center, 600 E Grace St Suite 400,, Richmond, VA, 23219
CyberConVA: Where CISOs Take the Stage
CyberConVA Conference brings together 500+ cybersecurity leaders and professionals for a day of networking, learning, and exploration. The Conference is a platform for security leaders to speak and share their knowledge with others regarding cyber trends and best practices.
Conference participants are looking forward to hearing from engaging speakers who are able to provide information and tools that are tangible and actionable to be utilized when participants return to work. Attendees seek the ability to transform the viable examples provided into opportunities to expand their capabilities.
Who attends CyberConVA? CIOs, CISOs, CTOs and senior cybersecurity managers from Fortune 500 firms including Arko Corp, Altria, Capital One, Car Max, Dominion Energy, Elevance Health (Anthem)/Wellpoint, Estes Express Lines, GE (Information Security Technology Center), Lego, Markel, Owens & Minor, Performance Food Group, WestRock, the Richmond Federal Reserve Bank, as well as government agencies from the Commonwealth.

VCSP Member Meeting - Zero Trust in SaaS: Secure Development & Vendor Risk | April 2025 Webinar
2025-04-24 12:00 - 13:00
CLICK HERE TO REWATCH THE WEBINAR
Implementing Zero Trust Across the SaaS Development Lifecycle: From Design to Deployment Description: SaaS applications have introduced novel vulnerabilities that legacy security frameworks fail to mitigate effectively. A robust cyber defense against these kinds of attacks involves the Zero Trust framework, which is based on the principle of assuming no inherent trust and emphasizes the importance of “never trust, always verify.” The session will discuss the importance of carefully vetting SaaS vendors and understanding secure application development practices in the context of the SaaS product.
Speaker Bio:
Aparna Achanta, Principal Security Architect | IBM Federal Service
As a Principal Security Architect, Aparna oversaw mission-critical projects for US Federal Agencies. Aparna specializes in securing important healthcare applications and sensitive data for organizations. During her tenure, she successfully implemented the Zero Trust framework in federal agencies, which included establishing secure development practices, evaluating vendors, scanning and mitigating vulnerabilities, establishing observability, performing performance monitoring, and making sure that SaaS applications have strong security frameworks and controls in place.

VCSP Member Meeting - GenAI Security Risks & Mitigation Strategies | May 2025 Webinar
2025-05-29 12:00 - 13:00
Click Here to Re-Watch the Webinar
Re-watch passcode: [REDACTED]
Threats, Security, and Vulnerabilities in the LLM World and How We Can Manage Them Description: Deep dive talk into GenAI usage and security risks and mitigation approaches
Speaker Bio:
Dan Han, Chief Information Security Officer | VCU

VCSP Member Meeting - Active Directory Defense Tactics from a Red Teamer | June 2025
2025-06-12 12:00 - 13:00
What I Wish I Saw When Attacking Your Directory
Active Directory has long been a primary target for attackers-and for good reason. As a former AD architect turned pen tester, Eric has seen the same problems over and over again when it comes to securing AD. Gaining complete control over a network should be a difficult and challenging endeavor but, unfortunately, it often only takes a few steps. Eric has a secret: some simple changes would completely turn that around. In this talk, he will share a small list of AD defenses that should be in every environment. Not only would they dramatically slow down attackers, disrupt lateral movement, and increase your detection chances; but they are all native options in Windows and AD. Let’s take a hacker’s playground and make it their nightmare!
Speaker bio:
Eric Kuehn, Principal Security Consultant, Secure Ideas
Eric Kuehn is a Principal Security Consultant at Secure Ideas, where he leverages his extensive experience with Microsoft infrastructures and Active Directory to perform penetration tests and red team assessments. He also teaches a course, Red Team Fundamentals for Active Directory, where he explains the concepts, techniques and best practices for exploiting and defending AD environments. Eric has been working with Active Directory since its release and was the technical leader and architect of one of the largest and most complex AD implementations out there. He is an IANS faculty member and is passionate about sharing his knowledge and skills with others. Eric has delivered talks on Active Directory security and other topics at various conferences, events, webcasts, and Antisyphon Training.

VCSP Member Meeting - GenAI in Cybersecurity: Risks, Attacks & Secure Use | July 2025 Webinar
2025-07-31 12:00 - 13:00
Rewatch the webinar –
Use code: FzNi0.Y9

To AI or not to AI, why it matters in Cybersecurity
In this talk, we will take a look at Gen AI based attacks and how they can be used to evade legacy technologies. We’ll take a look at other areas of Gen AI and understand the different vectors companies need to consider when protecting against those types of attacks. We understand that organizations want to use AI to better their industry/business, but how do you do it in a secure fashion.
Speaker bio:
Kyle King, Security Engineering Manager | Check Point Software
Kyle King has engineered cybersecurity systems for SMBs and Enterprise organizations for highly regulated industries throughout his 25+ year career. A native of North Carolina, he has been employed by Check Point Software Technologies for the last 8+ years where he manages a team of engineers to help assess and architect security solutions to protect organizations from the ever expanding threat landscape.

VCSP Member Meeting - Forget FAIR: How to Actionably Quantify Cyber | August 2025 Webinar
2025-08-14 12:00 - 13:00
Rewatch the webinar
Use code: yKAt2*f7
Forget FAIR: How to Actionably Quantify Cyber
You’re struggling to prioritize cybersecurity projects and vulnerabilities, all while trying to show that your team is a value add to your company. To combat this, leading cybersecurity teams have been rapidly establishing quantitative cybersecurity risk assessment processes.
In this engaging talk, we’ll explore how to transform abstract cyber threats into clear, actionable financial insights that drive smarter decisions and maximize the return on investment of your cybersecurity purchases. Discover the strategies top organizations use to align budgets with real risks and protect their bottom line. Join us as we look at the future of cyber risk management and examine how to turn cybersecurity into a measurable business advantage!
Speaker bio:
Alex Nette, CEO& Founder, Derive
Alex helped start Derive with his passion for cybersecurity and the role it plays in today’s interconnected world. He brings executive level expertise in the establishment and continuous improvement of preeminent cybersecurity programs and applies his work from various cybersecurity disciplines in a holistic approach that prioritizes organizations operations.

VCSP Member Meeting - Hidden Dangers of AI in Developer Workflows | October 2025 Webinar
2025-10-30 12:00 - 13:00
Rewatch the webinar
Use code: Sk8DK*z@
AI tools like ChatGPT and Copilot have become indispensable in developers’ daily workflows. Whether it is for code samples and scaffolding, prototyping, or documentation, AI can help eliminate a lot of toil from the developer’s day-to-day.
However, there are hidden dangers that AI have introduced that are worth exploring. The good news is that for most of these concerns the answer is not more tech or tools, but something we have been getting right for generations – humans in the loop!
This presentation will explore the critical security challenges associated with AI-enhanced development workflows and the essential role of human oversight in mitigating these risks.
Join this talk to see some real examples of AI getting it wrong, but stay for a discussion on how you can leverage already existing tools to make the best use of the most valuable resource in the company & your team’s time. Expect to leave with a fresh perspective on how bright a future we can build as people fostering more secure and efficient development practices.
Speaker bio:
Dwayne McDaniel | Developer Advocate, GitGuardian
Dwayne McDaniel has been working as a Developer Relations professional since 2015 and has been involved in the wider tech community since 2005. He loves sharing his knowledge and enthusiasm about Git, Open Source tools, and tech in general and he has done so at over a hundred events all over the world. He has been fortunate enough to speak at institutions like MIT, Stanford, and far-off places like Paris and Iceland. You can see some of his past talks on Drupal.tv and WordPress.tv.
