ISACA Greater Washington, D.C. Chapter
Serving ISACA GWDC Members since 1974
Upcoming Chapter Events
Below are upcoming chapter conferences, seminars, review courses, and other events. Prior chapter events can also be viewed.
For information on our event policies, see https://isaca-gwdc.org/event-policies/.
NIST Cybersecurity Framework (CSF) v2 Workshop
January 23, 2025 @ 8:30 am - January 24, 2025 @ 12:30 pm EST
GWDC Member $299, Non-GWDC Member $399
This two-day workshop offers participants a deep dive into the complexities and nuances of the NIST Cybersecurity Framework requirements.
Designed to be comprehensive and practical, this workshop is tailored to equip attendees with the knowledge and skills necessary to proficiently implement and adhere to each requirement within the NIST CSF. Each of the NIST CSF Functions will walk through the function, category and subcategory; providing the students with the thorough understanding of the people, processes, and technology in addition to the use cases and case studies within each of the six CSF Functions.
Upon conclusion of this workshop, participants will possess actionable insights to enhance their organization’s cybersecurity posture. This workshop is intended for anyone interesting in gaining a deeper understanding of NIST CSV v2.
Prerequisites
Participants will need to have a fundamental grasp of cybersecurity concepts and terminology. Familiarity with fundamental IT concepts, technologies, services, capabilities and practices is highly recommended and desired.
Registration closes on January 22nd @ 12 pm
Workshop Overview
Date and Time
The workshop will be held on January 23 and 24, 2025 from 8:30 am to 12:30 pm.
Pricing
The fee for GWDC Members is $299 for the workshop.
The fee for all other registrants is $399 for the workshop.
CPE Credits
Attendees can earn up to 8 CPEs for this event.
Virtual Event
The workshop will be held using Zoom. Prior to the event, participants must install the Zoom app on their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits.
Participants must respond to all the poll questions via the Zoom polling feature or chat log in order to receive NASBA CPE credits. The ISACA Greater Washington, D.C. Chapter will not be responsible for the participant’s inability to respond to the polls.
Agenda
Day 1: Understanding NIST CSF and Core Functions
- Session 1: NIST Primer & Refresher
- Session 2: CSF Governance Function
- Session 3: CSF Identify Function
- Session 4: CSF Protect Function
- Session 5: CSF Detect Function
Day 2: Implementing and Adhering to NIST CSF
- Session 6: CSF Respond Function
- Session 7: CSF Recover Function
- Session 8: Continuous Improvement & Compliance
- Session 9: Future-proofing
- Session 10: Wrap-up and Beyond
Session Skeleton
- Each session will reference previous session to identify the relationships between functions.
- Each session will cover and define the function, categories and sub-categories
- Each session will include Practical Insights & Takeaways
- Each session will provide example use cases
- Each session will provide example roles
- Each session will provide example processes
- Each session will provide example technology
- Each session will include a case study
- Each session will summarize that session
- Each session will have an Open Forum Q&A
Instructor
Edward McCabe
The Rubicon Advisory Group
CISM | CRISC | CGEIT | CDPSE | COBIT | ISO/IEC 27K1 ISMS LI | SABSA
A business focused information security professional, Edward is an active practitioner, mentor, and instructor with over three decades of experience supporting Fortune 100 companies, various domestic state, federal and foreign government agencies. Industries supported include Financial Services, Defense Industrial Base, Retail, Electric Power Transmission & Distribution, Hospitality, Legal Services, Payment Processing, Health Care, Construction, Insurance, Technology, Aviation, Manufacturing, and Media.
Edward specializes in Enterprise Governance, Risk Management, Compliance, Incident Response, Threat Intelligence Program Management, Enterprise Security Architecture, and Advanced Adversarial Attack & Penetration Testing.
Edward is often invited to present and speak on a variety of topics including Social Engineering, Incident Response & Digital Forensics, Threat Intelligence Analysis & Management, Practical Security Data Visualization, Advanced Attack & Penetration Testing, IT Audit Development, Enterprise Governance & Risk Management, and Adopting Information Security as part of Corporate Culture.
Venues have included: the ISACA Computer Audit, Control and Security (CACS) Summit, ISACA Cyber Security Nexus (CSX), ISACA Atlanta Geek Week, Central Ohio Information Security Summit, various Security BSides, (ISC) 2 eSymposium on Threat Intelligence, the Health Information Management Summit, Data Management (DAMA) International, CircleCityCon, DerbyCon, Louisville’s Annual InfoSec Summit, and HackRedCon. Edward receives invitations to speak with specific industries and organizations around the globe.
A veteran of the United States Navy, Edward holds various professional certifications including the Governance of Enterprise Information Technology (CGEIT), Risk and Information Systems Controls (CRISC), Information Security Manager (CISM), Data Privacy Solutions Engineer (CDPSE) and COBIT, in addition to being an ISO/IEC 27001 Lead Implementer, SABSA/Chartered Architect, and a former Qualified Security Assessor (QSA) for the Payment Card Industry.
Edward is an accredited instructor for ISACA’s CISM, CRISC, CGEIT, CDPSE and COBIT certifications and the co‐author for the CGEIT, CRISC, CISM and the soon to be released Certified Cybersecurity Operations Analyst (in Beta) certification bodies of knowledge and the lead for ISACA’s Ransomware Readiness Audit Program and Blueprint for Ransomware Defense. Additionally, Edward develops and delivers custom trainings on a wide range of courses from Analysis of Competing Hypotheses to Zero Trust.
Edward enjoys spending time with his family in Brandenburg, KY where you will often find him relaxing by the fire pit, sitting on the balcony, smoking various meats or contemplating how restoring their historic Queen Anne home is the embodiment and personification of the Information Security industry.
Event Questions and Policies
Registration Questions
If you have any registration questions about this event, please contact the chapter using the Registration Contact Form.
If you have CPE questions after the event has concluded, please contact the chapter using the CPE Contact Form.
Cancellation and Refund Policy
Cancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system. Refunds vary depending on the date of cancellation. See ISACA GWDC Event Policies for details.
If ISACA GWDC cancels the event, all registrants will be notified as soon as possible through email at the email address provided during registration. Full refunds will be provided.
Complaint Policy
The GWDC welcomes your comments, complaints, suggestions, questions, and other feedback concerning our website information and services. All complaints should be submitted through the Registration Contact Form.
CPE Information
Earn up to 8 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org
CPE Distribution and Evaluation Survey
CPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit.
Learning Objectives
To gain a practical understanding of how to effectively implement and adhere to these requirements
Use of the practical insights, takeaways, use cases and case studies should sufficiently give those who meet the prerequisites the ability to meet the desired learning objectives
CPE-Related Details
- Prerequisites: Participants will need to have a fundamental grasp of cybersecurity concepts and terminology. Familiarity with fundamental IT concepts, technologies, services, capabilities and practices is highly recommended and desired.
- Advance Preparation: None
- Program Knowledge Level: Basic
- Delivery Method: Group Internet Based
- Field of Study: Information Technology – Technical