Virginia Cyber Security Partnership (VCSP)

VCSP 2019 Holiday Networking Event
2019-12-12 16:00 - 20:00 (America/New_York) | Triple Crossing Beer – Fulton, 5203 Hatcher Street, Richmond, VA, 23231, United States
Celebrate the Season
The VCSP 2019 Holiday Networking Event – an open house at Triple Crossing Brewery.
Come and join your fellow practitioners in celebrating the season with wood-fired pizza and some of the finest beer in Richmond!
For more information on this event, please contact Jack Redfield at jredfield@cbh.com
We hope to see you there!

Triple Crossing Brewery (Fulton)
5203 Hatcher St., Richmond VA
Richmond, VA 23231

VCSP Member Meeting Nov 2019
2019-11-05 13:00 - 16:00 | 1717 Innovation Center, 1717 E Cary Street, Richmond, VA, 23223, United States
Contact Us To Register
Registration RSVP will be required. Please arrive early enough for building security check-in.
If you’re a VCSP member, you should have received a meeting invite. Please accept to confirm your registration.
If you’re not a VCSP member, the contact button below will take you to our contact page. Complete the form to send us a message about registering and which organization you’re a member of (ISACA, ISC2, ISSA, or RVATech).
This will help us get your name tag made in advance and will also speed up building security sign-in.

We hope to see you there!

Venue
1717 Innovation Center
1717 E Cary St.
Richmond, VA 23223
Google Map Link: https://goo.gl/maps/msQdvQix3Xs8D1958
AGENDA

Time
Topic
Speaker

VCSP Member Meeting July 2019
2019-07-10 12:15 - 16:15 | VITA, 11751 Meadowville Lane, Chester, VA, 23836, United States
Link for registration
Registration RSVP will be required. Please arrive early enough for building security check-in.
The register button below will take you to the VITA website.
Select the ISOAG/VCSP meeting button and complete the form.
This will help us get your name tag made in advance and will also speed up building security sign-in.

The meeting will also have a remote option using GoTo Webinar.
If you need to attend remotely, be sure to complete the information on this form:
https://register.gotowebinar.com/register/6750984201673647617
We hope to see you there!

Venue
VITA – Commonwealth Enterprise Solutions Center
11751 Meadowville Lane
Chester, VA 23836
Google Map Link: https://goo.gl/maps/msQdvQix3Xs8D1958
Driving directions listed below on this page.
AGENDA

Time
Topic
Speaker

(ISC)2 Monthly Meeting - May 2019
2019-05-30 18:00 - 20:00 | Maxx Potential, 201 W 7th St, Richmond, VA, 23224, United States
(ISC)2 May 2019 Cyber Security Monthly Meeting
Speaker – Don Murdoch, GSE, MSISE, MBA
Don is the author of the Blue Team Handbook: Incident Response Edition book. Don is a seasoned IT leader with over 20 years of IT and InfoSec experience across several disciplines. Most recently, Don is the Director of a MSSP and Security Operations Practice for SLAIT Consulting, where he works with businesses of all sizes to implement SIEM, improve Security Operations, and provide security architecture consulting with an emphasis on risk reduction and mitigation.
The first half of Don’s career emphasized software development, network and systems management, and database administration. At his career midpoint he worked as the Information Systems Security Officer for Old Dominion University in Virginia, where he spent most of his days in the Wild, Wild West of academic computing and put most of his SANS education to the test. For the remainder of his career, Don has worked in computer, network, and information security as the lead Security Engineer/Security Architect, and then Director for the Strategy and Planning team for the Infrastructure division within a Fortune 500 Medicaid focused Insurance company.
Don also has significant experience with the SANS Institute, including Local Mentor, Community Instructor, GCIH grader, active Advisory Board member, and courseware developer for SANS.
If you are unable to attend the meeting at the scheduled location, join via Zoom using the link below.
When: May 30, 2019 6:00 PM Eastern Time (US and Canada)
Register in advance for this meeting:
https://zoom.us/meeting/register/a04f724778948c3b8c34be5db4a05ad8
After registering, you will receive a confirmation email containing information about joining the meeting.

ISACA Richmond: Risk Management in the Digital Age
2019-05-29 11:30 - 13:00 | The Place at Innsbrook, 4036-C Cox Road, Glen Allen, VA, 23060, United States
Topic: Risk Management in the Digital Age

Digital transformation is not only changing how companies think about business. It is changing how we think about risk. We need to *act* on risk, not worry about it. We need to start and end with the basics. Join RSA as we review several key areas of digital risk management to target as you are challenged to be a key contributor in your organization’s digital journey.
Attendees will earn 1 CPE for this event.
In addition to the lunch and presentation there will be the raffle for two $ 25 and one $50 Amazon gift cards. The cost for the event is $20 for members and $25 for non-members.
PRESENTER

Ben Smith
Field CTO – US

Ben Smith is Field Chief Technology Officer (Field CTO – US) with RSA, a Dell Technologies business. With 25 years’ experience in the information security, networking and telecommunications industries, he regularly consults on RSA’s security and risk management solutions. His prior employers include UUNET, CSC, and the US Government, along with several technology-oriented startups. He holds industry certifications in information security (CISSP), risk management (CRISC), and privacy (CIPT), and has presented on RSA’s behalf internationally at cybersecurity events sponsored by Gartner, FS-ISAC, SANS, IANS, CERT/SEI, ISSA, (ISC)2, ISACA, MWCA, RMA, BSides, ASIS, InfraGard, HTCIA, SecureWorld, ICI and other organizations.

(ISC)2 Monthly Meeting - April 2019
2019-04-25 18:00 - 20:00 | John Tyler Community College – Midlothian Campus, 800 Charter Colony Parkway, Midlothian, VA, 23114, United States
(ISC)2 April 2019 Cyber Security Monthly Meeting
Speaker – Peter Tsengas – IT Auditor from Dixon Hughes (DHG)
If you are unable to attend the meeting at the scheduled location, join via Zoom using the link below.
When: Apr 25, 2019 6:00 PM Eastern Time (US and Canada)
Register in advance for this meeting:
https://zoom.us/meeting/register/a04f724778948c3b8c34be5db4a05ad8
After registering, you will receive a confirmation email containing information about joining the meeting.

ISACA Richmond: Information System Audit Topics with Stephen Weber
2019-04-25 11:30 - 13:00 | The Place at Innsbrook, 4036-C Cox Road, Glen Allen, VA, 23060, United States
Topic: Information System Audit Topics.

PRESENTER

Stephen Weber
MBA, CISA

Stephen joined Yount, Hyde and Barbour (YHB) in 2018 with extensive experience in IT Audit and Advisory Services. His background includes internal and external IT Audit services for state and federal agencies and Fortune 500 companies in retail, manufacturing and financial lending. Most recently, he was an instructor at Virginia Commonwealth University focusing on technology-related courses in the Accounting Department’s graduate and undergraduate programs.
His expertise spans financial statement audits, SOX, project management, legal and compliance and data analytics. Stephen earned his Masters of Business Administration from the University of Richmond and Bachelors in Business Information Technology from Virginia Tech. He is actively involved in ISACA.

2019 Commonwealth of Virginia Information Security Conference
2019-04-11 - 2019-04-12 | Altria Theater, 6 North Laurel Street, Richmond, VA, 23220, United States
The Commonwealth Information Security Council is holding its sixth annual Information Security Conference for the Commonwealth of Virginia to assist in fulfilling our shared mission of securing information. The conference will include expert presentations for those with responsibilities for managing, auditing or assessing information security in their organizations.
In addition to hearing expert presentations and sharing ideas with fellow managers, auditors and technical professionals around this theme, conference participants will have the opportunity to:

Expand their professional networks. The conference will provide opportunities to meet and share ideas with security-minded colleagues.
Learn about security products and services. Security product and service providers will participate in corporate displays.
Maintain professional certifications. Continuing professional education (CPE) credits are being offered. Participants can claim one hour of CPE for every 50 minutes of presentations attended.
The 2019 conference will be held in downtown Richmond at the Altria Theater. Registration will also include continental breakfast, lunch and afternoon refreshments.

Parking will be in VCU’s West Main Street Deck, located at 801 W. Main Street. Parking passes will be emailed to registered attendees about a week prior to the conference and are required. Parking passes will need to be printed out and laid on the dashboard of the vehicle. Mobile passes will not be accepted.
Who Should Attend:
The program is designed for:

Information Security Officers
Information Security Analysts and Engineers
Chief Information Officers
IT Auditors
Privacy/Compliance Officers
Risk Officers
Other IT officers, managers, and staff with an interest in security or privacy

Registration Cost: $175 for conference, including continental breakfast, lunch and afternoon refreshments.

PRESENTERS

Steve Uzzell
Internationally renowned photographer and inspirational speaker.

April 11 – Day 1

His photographic assignments have taken him to all 50 United States and 30 countries: from corporations such as Boeing and IBM to more than 100 publications including National Geographic, Smithsonian and Time.
As a speaker, he has taken his message of creativity and the power of ideas to over 500 organizations, associations, corporations and colleges (in all 50 states and 6 countries, India and China among them) including the U.S. Naval Post Graduate School, Merrill Lynch, J.P. Morgan Chase, Northrop Grumman, HSBC, Marriott, BNY Mellon and Adobe.
Steve began his photography career as the assistant to the editor of National Geographic and a member of its photographic staff. He struck out on his own in 1975 and today spends six months of the year traveling the world for his photographic clients and the rest as a teacher and inspirational speaker. Along the way, Steve has published 3 books of his photography, and received 10 prestigious Communication Arts awards.
Steve lives in Lyons, CO with his partner, photographer, author and speaker Susan Lambert and their multi-talented Golden Retriever, Dudley.

Jake Kouns
CISO for Risk Based Security

April 12 – Day 2

Jake Kouns is the CISO for Risk Based Security that provides vendor risk ratings, vulnerability and data breach intelligence. He previously oversaw the operations of the Open Sourced Vulnerability Database (OSVDB.org) and DataLossDB. Kouns is the founder of RVAsec and has also presented at many well-known security conferences, including RSA, Black Hat, DEF CON, DerbyCon, Bsides, CISO Executive Summit, IEEE, FIRST, CanSecWest, InfoSecWorld, SOURCE and SyScan.
He is the co-author of Information Technology Risk Management in Enterprise Environments, Wiley, 2010, and The Chief Information Security Officer, IT Governance, 2011. He holds both a bachelor of business administration and master of business administration degree from James Madison University, with a concentration in information security. In addition, he holds a number of certifications, including: ISC2’s CISSP, and ISACA’s CISM, CISA and CGEIT.
Mr. Kouns was the Director of Cyber Security and Technology Risks Underwriting at Markel Corporation and has briefed the DHS and Pentagon on Cyber Liability Insurance issues and is frequently interviewed as an expert in the security industry by Information Week, eWeek, Forbes, PC World, CSO, and CIO Magazine. He has appeared on CNN as well as the Brian Lehrer Show, and was featured on the cover of SCMagazine.

Cybersecurity Career Discussion Panel
2019-04-02 17:30 - 19:30 | VCU College of Engineering East Hall, Room 2214, 401 West Main Street, Richmond, VA, 23284, United States
Description:
With advancement in technology and telecommunications, we are seeing a rapidly increasing amount of innovations and an increased reliance on technology and data by our society. With the availability of technology and big data fueling our world economy, security of the technology systems and privacy of our data are becoming ever more important in today’s world. As such, cybersecurity is a profession that is blossoming under these conditions, and there is a continuous increase in demand for qualified cybersecurity professionals to join the cyber workforce.
This panel discussion will bring recognized cybersecurity leaders across multiple industry verticals to discuss challenges and opportunities related to a career in the field. Additionally, these leaders will provide practical guidance for any aspiring individuals seeking a career in the cybersecurity realm.
Who should attend:

Individuals who are considering cybersecurity as a career in the future.
Individuals who wants to learn a bit more about the different career path in cybersecurity.
Individuals who are new to the cybersecurity profession, and wants to learn about ways to grow.

Admission: Free

PANELISTS

Bob Austin
President, Korelogic

Bob is President and co-founder of KoreLogic Inc., an information security consulting firm that primarily serves Fortune 500 companies and founded in 2004. Bob is responsible for KoreLogic’s strategic direction and growth as well as delivery of consulting services. Bob received his MBA from University of Maryland and is also currently the president of the Richmond Area chapter of the Information Systems Security Association (ISSA). Bob is a VCSP Board Member.

Candice Camp
Director, Insider Threat, GE

Candice has developed a robust and bleeding edge Insider Threat program. She has developed the strategic vision for Insider Threat and has developed it as a product protecting 300,000 employees and 1.22 Billion in revenue. Her passion for the protection of intellectual property has led her to be a thought leader in the space, baselining with industry peers, leading industry task forces and most importantly, developing a talented team of investigators.
She has committed her time and resources to facilitate swift exchange of intelligence information and insider threat best practices, tactics and techniques through her involvement in the Open Source Insider Threat Symposium and leading other external Insider Threat working groups.
Candice is committed to diversity and growing people. She is a member of several affinity groups such as the GE Women’s Network, GE African American Forum, GE Asian Pacific American Forum, The GLBTA Alliance, and previously co-chaired the GE People with Disabilities Network. She has actively participated in Habitat for Humanity, STEM programs and many other community building initiatives.
Candice works toward providing visibility, opportunity and education of women in the community in her volunteer work with RVATech’s annual Women’s Conference. She personally mentors many women in IT, providing career guidance and challenging women to increase their technical skills.

Jack Redfield
Information Security Officer, Cherry Bekaert, LLP

With over 20 years of professional information security experience, Jack has proven expertise in both public and private sectors, establishing programs and implementing; policies and procedures, risk assessments and evaluation, disaster recovery, multiple organization system security integration, and project management. He has served in a leadership capacity with a variety of industries, including as Information Security Director at Rochester Gas and Electric Corporation (NY), a Business Information Security Officer at Student Loan Corp. (Citibank), and Information Security and Compliance Manager at a Constellation Brands, Inc. Most recently, Jack was the Information Security Officer for the Supreme Court of Virginia and is currently the ISO for Cherry Bekaert LLP.
Jack received a Bachelor of Science degree in Business Administration at the Rochester Institute of Technology, and a Master of Science degree in Computer Science, Information Security at James Madison University. In addition, Jack is a Certified Information Security Manager and Payment Card Industry Professional with ties to the Information Systems and Audit Control Association and Payment Card Industry, Security and Standards Council. Jack is a VCSP Board Member.

Charles Tango
Chief Information Security Officer, Altria

Charles is the Chief Information Security Officer at Altria, the parent company of producers of superior branded tobacco and wine products such as Philip Morris USA and Ste. Michelle Wine Estates. During his past year at Altria, Charles has been responsible for maturing the Information Security program and establishing a global five year strategic vision for the IT Risk program.
Charles also represents Altria on the board of the Richmond Technology Council, which supports technology innovation in the greater Richmondarea, as well as the board of the Virginia Cybersecurity Partnership—a joint information sharing organization between government agencies and the private sector.
Prior to his role at Altria, Charles held senior level Information Security positions with financial institutions in the NY metro area, including Chief Information Security & Risk Officer for Sterling National Bank and Senior Vice President, IT & Operational Risk at Citigroup. Charles is a VCSP Board Member.

Patti Titus
Chief Privacy and Information Security Officer, Markel Corporation

Patti joined Markel Corporation in January 2016 as the CISO and Chief Privacy Officer where she is responsible for ensuring the security and privacy of Markel’s information assets and the protection of customer information. Previously, Patti was the Vice President and Chief Information Security Officer at Freddie Mac, Symantec, Unisys Corporation and the Transportation Security Administration within the Department of Homeland Security. She serves on the Executive Advisory Board for Forcepoint and LogicHub, the Board of Advisors for Guardant Global and the Executive Women’s Forum, is on the Board of the Girl Scouts for the Commonwealth of Virginia, and is a Distinguished Fellow at the Ponemon Institute.

Michael Watson
Chief Information Security Officer & Deputy Chief Information Officer, Commonwealth of Virginia

Michael Watson is the Chief Information Security Officer and Deputy CIO for the Commonwealth of Virginia at the Virginia Information Technologies Agency (VITA). With over 15 years of experience working in the information security field, he leads the Commonwealth Security and Risk Management team which provides security governance, oversight, and risk management for the executive, judicial, and legislative branches of government in Virginia.
Michael holds a graduate degree in telecommunications with a focus on security and management from the University of Pennsylvania and earned his undergraduate degree from James Madison University. He is a Certified Information Systems Security Professional (CISSP), incident handler, intrusion analyst, penetration tester, and information systems auditor.

ISACA Richmond: AI & Machine Learning Network Security with Barrett Elkins
2019-03-21 11:30 - 13:00 | The Place at Innsbrook, 4036-C Cox Road, Glen Allen, VA, 23060, United States
Topic: AI & Machine Learning Network Security.

PRESENTER

Barrett Elkins
Enterprise Account Manager – Government and Education at Cylance Inc.

I have had the pleasure of working extensively in the SLED space during my 13+ years of sales, gaining deep, meaningful insights into how the right IT solutions can enable innovative, thriving business enterprises. I have introduced successful implementations for storage, networking, client refreshes, support operations, systems management, disaster recovery, secure and privileged access, identity management, data governance, and EPP/EDR.
My strengths include:
– Understanding near- and long-term initiatives set forth by executive leadership of large, complex organizations
– Accurately positioning appropriate and fiscally responsible solutions across dynamic IT landscapes
– Aligning the resources necessary to ensure the highest probability of customer success before, during, and after my solutions are implemented.
Ultimately, I am a sales professional who enjoys the challenge of a lofty goal, and the thrill of chasing that goal down while leveraging every resource available through technology, peers, leadership, networking, and family.

ISACA Richmond: Audit Topics with John Gatto
2019-03-13 08:00 - 16:30 | The Place at Innsbrook, 4036-C Cox Road, Glen Allen, VA, 23060, United States
Audit Topics: Supplier Audits, Disaster Recovery Plan Audits, Social Networking and Ethics Issues.

PRESENTER

John Gatto
Over 45 years of audit experience, most of it in the IT Audit arena

John Gatto was with Health Care Service Corporation (HCSC) in Chicago, IL from December, 2005 until his retirement in January, 2015. He was the Divisional Vice President, Audit Services and was responsible for all aspects of IT Audit for the five Blue Cross Blue Shield Plans comprising HCSC (Illinois, Texas, Montana, New Mexico and Oklahoma) and encompasses NAIC / MAR compliance and testing, risk based audits, advisory engagements for new development projects, coordination of SOC-1 and SOC-2 reviews and E&Y Year-End Financial Audits. John was a member of a number of Steering Committees within the IT area of HCSC.
Prior to HCSC, John worked at Federal-Mogul in Michigan as the Sox coordination supervisor, Avery Dennison in California as a Project Manager, and spent 13 years with Horizon BlueCross BlueShield of New Jersey, where he was Director of Systems Audit, Customer Audit and Operations Audit. John has over 45 years of audit experience, most of it in the IT Audit arena. He is a CISA and CRISC and has his MBA from Fairleigh-Dickinson University in New Jersey. John is a frequent speaker for the BCBSA, IIA and ISACA organizations. In 2010 he was named “Educator of the Year” by the Chicago Chapter of the IIA.
In 2015, John has spoken at the Southeastern and Southwest Intergovernmental Audit Forums, the ISACA CACS Conference and at the ISACA Chapters in South Carolina, Harrisburg, New Jersey and Central Florida.
Since retiring from HCSC, John is focusing on speaking at conferences for ISACA and IIA chapters covering a range of topics such as PCI, BYOD, Disaster Recovery, etc.

VCSP Member Meeting March 2019
2019-03-12 10:00 - 14:00
Event details viewable for members only.
Registration RSVP will be required.
Lunch will be provided.

(ISC)2 Monthly Meeting - January
2019-01-31 18:00 - 20:00 | ECPI University Richmond Moorefield, 800 Moorefield Park Dr., Richmond, VA, 23236, United States
Speakers: Irina Piven and Reginal Bryant
Irina and Reginal will be discussing the Federal Reserve’s history, structure and role in the economy; including how they handle information security given that the Fed process over $4 trillion in payments daily.
Registration required: https://www.isc2rva.com/event-3045500

ISACA Virginia Chapter January 2019
2019-01-24 11:30 - 13:00 | The Place at Innsbrook, 4036-C Cox Road, Glen Allen, VA, 23060, United States
Information Security Risk: Analysis, Scenarios, and Prioritization
ISACA Virginia Chapter is very pleased to have Mr. Jack Jones, Founder and President of the FAIR Institute as our featured speaker.
Abstract
Effective prioritization is one of the most significant problems facing the information security and technology risk management professions. In this talk, you will hear about concepts and methods that have proven to significantly improve an organization’s ability to prioritize its risk landscape.
Speaker Bio
Jack is the foremost authority in the field of information risk management. As the Chairman of the FAIR Institute and co-founder and EVP R&D at RiskLens, he continues to lead the way in developing effective and pragmatic ways to manage and quantify information risk.
Members: $20.00 / Non-Members: $25.00

User Authentication for a Zero Trust Security Model
2018-12-10 08:00 - 09:00
(ISC)² EMEA Secure Webinars
During episode 1 in our Trust No One Series, we heard about the origins of Zero Trust. Episode 2 showed us how Banco Santander started their Zero Trust journey.
In this Part 3, Duo will demonstrate how they deliver Zero Trust models to their customers.
You’ll leave with a hands-on basic understanding of how to deploy Duo to a cloud-based web-application.
Duo has been a pioneer in bringing Zero Trust models to the commercial market, allowing organisations to protect themselves quickly and easily.

Register for Webinar

VCSP Member Meeting DEC
2018-12-06 12:30 - 18:00 | Virginia Museum of Fine Arts, 200 N Boulevard, Richmond, Virginia, 23220, United States
AGENDA
1230 – 1300
CHECK-IN
1300 – 1310
INTRODUCTION AND WELCOME
Cyrus Beheshti, VCSP Advisory Board Chair (Deloitte)
1310 – 1340
VCSP UPDATE AND … “THE BIG REVEAL”
Cyrus Beheshti, VCSP Advisory Board Chair (Deloitte)
1340 – 1430
SECURITY METRICS AND REPORTING
Cameron Smith (Info-Tech)
Speaker Biographies
Cameron will be speaking about security metrics. He will propose a risk-driven approach to security metrics, starting from the foundational considerations of what you hope to achieve with your metrics, how to identify an appropriate variable to measure, and thoughts around your audience and reporting of your metrics.
1430 – 1450
BREAK – NETWORKING
1450 – 1645
THREE KEYS TO NEGOTIATING WITH EXECUTIVE STAKEHOLDERS
Scott Wayne (Envoy)
There are three key concepts that transform any negotiation. In this talk, Scott spends 15 minutes on each, citing examples from neuro-economic literature and current event case studies. Whatever issues are in the news that week, he’ll illustrate how and where the three keys are at play.
Then Scott switches to an interactive exercise where the audience works through relevant cybersecurity case study practicing the application of the three keys and working through Q&A.
1800
OPTIONAL: Gather at the Dominion Energy Jazz Club in the VMFA

Washington, D.C. Cybersecurity Conference 2018
2018-12-06 08:00 - 17:00 | Renaissance Washington, DC Downtown Hotel, 999 9th St NW, Washington, D.C, 20001
This is a one-day conference. There will be 8-13 educational cybersecurity speaker sessions with 30-60 tabletop exhibitors. Speaking sessions will be in one main room with breaks in between speaker sessions to browse the vendor table top exhibits. Exhibit hours are 8am to 3pm and speaker sessions will start at 8:45am and go as late as 5pm.
Passes include a light breakfast and lunch, as well as entrance to our general session and expo areas.
This conference qualifies for CPE credits! See our CPE FAQ for details.

Black Hat Europe 2018
2018-12-03 - 2018-12-06 | ExCeL London, One Western Gateway, Royal Victoria Dock, London, E16 1XL, United Kingdom
Black Hat Europe provides attendees with the very latest in research, development, and trends in Information Security. Here the brightest professionals and researchers in the industry will come together for a total of four days—two or four days of deeply technical hands-on Trainings, followed by two days of the latest research and vulnerability disclosures in the Briefings.
