BEGIN:VCALENDAR VERSION:2.0 PRODID:-//ISACA Greater Washington, D.C. Chapter - ECPv6.17.5//NONSGML v1.0//EN CALSCALE:GREGORIAN METHOD:PUBLISH X-WR-CALNAME:ISACA Greater Washington, D.C. Chapter X-ORIGINAL-URL:https://isaca-gwdc.org X-WR-CALDESC:Events for ISACA Greater Washington, D.C. Chapter REFRESH-INTERVAL;VALUE=DURATION:PT1H X-Robots-Tag:noindex X-PUBLISHED-TTL:PT1H BEGIN:VTIMEZONE TZID:America/New_York BEGIN:DAYLIGHT TZOFFSETFROM:-0500 TZOFFSETTO:-0400 TZNAME:EDT DTSTART:20240310T070000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:-0400 TZOFFSETTO:-0500 TZNAME:EST DTSTART:20241103T060000 END:STANDARD BEGIN:DAYLIGHT TZOFFSETFROM:-0500 TZOFFSETTO:-0400 TZNAME:EDT DTSTART:20250309T070000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:-0400 TZOFFSETTO:-0500 TZNAME:EST DTSTART:20251102T060000 END:STANDARD BEGIN:DAYLIGHT TZOFFSETFROM:-0500 TZOFFSETTO:-0400 TZNAME:EDT DTSTART:20260308T070000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:-0400 TZOFFSETTO:-0500 TZNAME:EST DTSTART:20261101T060000 END:STANDARD BEGIN:DAYLIGHT TZOFFSETFROM:-0500 TZOFFSETTO:-0400 TZNAME:EDT DTSTART:20270314T070000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:-0400 TZOFFSETTO:-0500 TZNAME:EST DTSTART:20271107T060000 END:STANDARD END:VTIMEZONE BEGIN:VEVENT DTSTART;TZID=America/New_York:20260924T083000 DTEND;TZID=America/New_York:20260924T123000 DTSTAMP:20260919T204327Z CREATED:20260908T231437Z LAST-MODIFIED:20260919T204327Z UID:36182-1790238600-1790253000@isaca-gwdc.org SUMMARY:Identity First: Securing Cloud Access & Workflows Conference DESCRIPTION:As organizations accelerate their move to the cloud\, identity has become the new perimeter—and one of the most critical components of a modern security strategy. Identity First: Securing Cloud Access & Workflows brings together security\, IT\, and technology leaders to explore how organizations can strengthen identity\, secure cloud access\, and protect the workflows that power today’s digital environments. \nThe conference will examine the evolving identity landscape\, from human and machine identities to privileged access\, authentication\, authorization\, and identity governance. Attendees will gain practical insights into reducing identity-based risk\, implementing Zero Trust principles\, securing third-party and automated workflows\, and balancing strong security with seamless user experiences. \nThrough expert perspectives\, real-world use cases\, and actionable strategies\, Identity First will help organizations move beyond simply managing accounts and credentials to building an identity-centric security model that enables secure access\, resilient cloud operations\, and business agility. \nKey themes include: cloud identity and access management\, Zero Trust\, privileged access\, identity governance\, machine and workload identities\, workflow security\, automation\, and the future of identity in a rapidly evolving threat landscape. \nCPEs: Attendees can earn up to 4 CPE by attending the full event. \nIntended Audience: IT leaders and administrators; Cybersecurity leaders and administrators; IT operations leaders; Risk\, compliance and governance professionals; IT auditors. \nVirtual Event: The event will be held using Zoom. Prior to the event\, participants must install the Zoom app on their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits. \nRegistration closes on September 23 @ 5PM. Click the link below for the event agenda\, presenters\, and registration. \nEvent Information \n  \n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n\n  \n\nRegistration Questions \nIf you have any registration questions\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\nCPE Questions \nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  URL:https://isaca-gwdc.org/event/identity-first-securing-cloud-access-workflows-conference/ LOCATION:Virtual Event CATEGORIES:Conferences ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2024/08/gwdc_logo_50plus_v3.png ORGANIZER;CN="Avneet Sabharwal":MAILTO:programs@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20260819T180000 DTEND;TZID=America/New_York:20260819T190000 DTSTAMP:20260530T122918Z CREATED:20260529T000414Z LAST-MODIFIED:20260530T122918Z UID:36011-1787162400-1787166000@isaca-gwdc.org SUMMARY:GWDC Volunteer Meetings DESCRIPTION:  \n \n  \nJune 17\, July 15\, and August 19\, 2026\nVirtual (Zoom)\nNo CPE\nNo Registration Fee\n  \n  \n\n\n\nLead\, Learn\, and Connect:\n Volunteer with ISACA-GWDC \nVolunteering with ISACA-GWDC is a powerful way to grow your career\, expand your network\, and give back to the cybersecurity\, IT governance\, risk\, privacy\, and audit community. \nWhether you want to build leadership skills\, gain experience beyond your day job\, or meet inspiring professionals\, volunteering gives you a practical way to learn\, lead\, and make an impact. We will help you find a role that fits your interests\, skills\, and availability. \nRead an inspiring article from ISACA-GWDC President Sushila Nair on how volunteering can supercharge your career. \nEven a few hours a month can make a difference. \nJoin our online volunteer intro meeting to meet chapter leaders\, learn about opportunities\, and see how you can get involved. \nIf you are unable to make it\, please book time with Uma or Amruta to learn more. \nChoose one of three dates or join us in all! \n  \n\n\nRSVP for June 17 meeting \nRSVP Today \n\n\nRSVP for July 15 meeting \nRSVP Today \n\n\nRSVP for August 19 meeting \nRSVP Today \n\n\n  \n\n  \nMore about Volunteering \nChapter volunteers are integral part of the Chapter Board and carry out many of the activities necessary for Chapter events\, publications\, and other activities. The Board of Directors has need for dedicated\, energetic volunteers to support Chapter events and services. Even if you have only a few hours a month to volunteer\, your help is needed. \nVisit our Volunteer page for more information about volunteering and the steps to start your volunteer journey with the GWDC \nLearn more about Volunteering \n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nEvent Details \n\nDate and Time \n\n\nThe meetings will be held on June 17\, July 15\, and August 19 from 6:00 PM to 6:45 PM (EDT). \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThis event will be held via Zoom. You will receive your Zoom link after registering for the event. \n  \n\n\nPricing \n\n\nThere is no fee to attend the event and for GWDC members. \n  \n\n\nEvent Policies \n\n\nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n  \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nThere is no CPE for this event. URL:https://isaca-gwdc.org/event/gwdc-volunteer-meetings-3/ LOCATION:Virtual Event CATEGORIES:Virtual Event ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2026/05/volunteer_meeting.png ORGANIZER;CN="Avneet Sabharwal":MAILTO:programs@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20260715T180000 DTEND;TZID=America/New_York:20260715T190000 DTSTAMP:20260530T122935Z CREATED:20260529T000307Z LAST-MODIFIED:20260530T122935Z UID:36009-1784138400-1784142000@isaca-gwdc.org SUMMARY:GWDC Volunteer Meetings DESCRIPTION:  \n \n  \nJune 17\, July 15\, and August 19\, 2026\nVirtual (Zoom)\nNo CPE\nNo Registration Fee\n  \n  \n\n\n\nLead\, Learn\, and Connect:\n Volunteer with ISACA-GWDC \nVolunteering with ISACA-GWDC is a powerful way to grow your career\, expand your network\, and give back to the cybersecurity\, IT governance\, risk\, privacy\, and audit community. \nWhether you want to build leadership skills\, gain experience beyond your day job\, or meet inspiring professionals\, volunteering gives you a practical way to learn\, lead\, and make an impact. We will help you find a role that fits your interests\, skills\, and availability. \nRead an inspiring article from ISACA-GWDC President Sushila Nair on how volunteering can supercharge your career. \nEven a few hours a month can make a difference. \nJoin our online volunteer intro meeting to meet chapter leaders\, learn about opportunities\, and see how you can get involved. \nIf you are unable to make it\, please book time with Uma or Amruta to learn more. \nChoose one of three dates or join us in all! \n  \n\n\nRSVP for June 17 meeting \nRSVP Today \n\n\nRSVP for July 15 meeting \nRSVP Today \n\n\nRSVP for August 19 meeting \nRSVP Today \n\n\n  \n\n  \nMore about Volunteering \nChapter volunteers are integral part of the Chapter Board and carry out many of the activities necessary for Chapter events\, publications\, and other activities. The Board of Directors has need for dedicated\, energetic volunteers to support Chapter events and services. Even if you have only a few hours a month to volunteer\, your help is needed. \nVisit our Volunteer page for more information about volunteering and the steps to start your volunteer journey with the GWDC \nLearn more about Volunteering \n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nEvent Details \n\nDate and Time \n\n\nThe meetings will be held on June 17\, July 15\, and August 19 from 6:00 PM to 6:45 PM (EDT). \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThis event will be held via Zoom. You will receive your Zoom link after registering for the event. \n  \n\n\nPricing \n\n\nThere is no fee to attend the event and for GWDC members. \n  \n\n\nEvent Policies \n\n\nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n  \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nThere is no CPE for this event. URL:https://isaca-gwdc.org/event/gwdc-volunteer-meetings-2/ LOCATION:Virtual Event CATEGORIES:Virtual Event ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2026/05/volunteer_meeting.png ORGANIZER;CN="Avneet Sabharwal":MAILTO:programs@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20260617T180000 DTEND;TZID=America/New_York:20260617T190000 DTSTAMP:20260530T122950Z CREATED:20260529T000154Z LAST-MODIFIED:20260530T122950Z UID:35985-1781719200-1781722800@isaca-gwdc.org SUMMARY:GWDC Volunteer Meetings DESCRIPTION:  \n \n  \nJune 17\, July 15\, and August 19\, 2026\nVirtual (Zoom)\nNo CPE\nNo Registration Fee\n  \n  \n\n\n\nLead\, Learn\, and Connect:\n Volunteer with ISACA-GWDC \nVolunteering with ISACA-GWDC is a powerful way to grow your career\, expand your network\, and give back to the cybersecurity\, IT governance\, risk\, privacy\, and audit community. \nWhether you want to build leadership skills\, gain experience beyond your day job\, or meet inspiring professionals\, volunteering gives you a practical way to learn\, lead\, and make an impact. We will help you find a role that fits your interests\, skills\, and availability. \nRead an inspiring article from ISACA-GWDC President Sushila Nair on how volunteering can supercharge your career. \nEven a few hours a month can make a difference. \nJoin our online volunteer intro meeting to meet chapter leaders\, learn about opportunities\, and see how you can get involved. \nIf you are unable to make it\, please book time with Uma or Amruta to learn more. \nChoose one of three dates or join us in all! \n  \n\n\nRSVP for June 17 meeting \nRSVP Today \n\n\nRSVP for July 15 meeting \nRSVP Today \n\n\nRSVP for August 19 meeting \nRSVP Today \n\n\n  \n\n  \nMore about Volunteering \nChapter volunteers are integral part of the Chapter Board and carry out many of the activities necessary for Chapter events\, publications\, and other activities. The Board of Directors has need for dedicated\, energetic volunteers to support Chapter events and services. Even if you have only a few hours a month to volunteer\, your help is needed. \nVisit our Volunteer page for more information about volunteering and the steps to start your volunteer journey with the GWDC \nLearn more about Volunteering \n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nEvent Details \n\nDate and Time \n\n\nThe meetings will be held on June 17\, July 15\, and August 19 from 6:00 PM to 6:45 PM (EDT). \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThis event will be held via Zoom. You will receive your Zoom link after registering for the event. \n  \n\n\nPricing \n\n\nThere is no fee to attend the event and for GWDC members. \n  \n\n\nEvent Policies \n\n\nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n  \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nThere is no CPE for this event. URL:https://isaca-gwdc.org/event/gwdc-volunteer-meetings/ LOCATION:Virtual Event CATEGORIES:Virtual Event ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2026/05/volunteer_meeting.png ORGANIZER;CN="Avneet Sabharwal":MAILTO:programs@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20260611T140000 DTEND;TZID=America/New_York:20260611T170000 DTSTAMP:20260514T111001Z CREATED:20260514T110836Z LAST-MODIFIED:20260514T111001Z UID:35960-1781186400-1781197200@isaca-gwdc.org SUMMARY:IT Fraud Event (with ACFE DC) DESCRIPTION:  \n \n  \nJune 11\, 2026\nIn-Person (Alexandria\, VA)\nEarn up to 3 CPE\nGWDC Members Receive a Discounted Price\n  \n  \n  \n\n\n\nJoint ISACA/ACFE Networking Event (Training and Happy Hour) \nWhen: Thursday\, June 11\, 2026 (due to space constraints\, only 20 seats are available for ISACA GWDC registrants on a first-come\, first-served basis) \nTraining: 2pm to 5pm (3 CPEs will be granted)\nLocation: 333 John Carlyle Street\, Alexandria\, VA 22314\nAgenda: \n2:00 – 3:00 PM: AI-Powered Fraud and How to Fight Back with Biometrics \n3:00 – 4:00 PM: Governance\, Resilience\, and the New Fraud Landscape \n4:00 – 5:00 PM: Fraud Controls as Models \nCost:\n– $20 for ACFE DC and ISACA GWDC Members \n– $100 for non-ACFE DC and non-ISACA GWDC members. \nPlease register at http://www.acfedc.org/2026ITFraud – for the training only. ISACA GWDC members should use the code 2026+ISACA+ACFE to avail of the discounted price. \n\nPlease Note: This is a non-GWDC event. All registrations\, questions\, and communications are handled by the ACFE Washington Metropolitan Chapter. Any CPEs will also be issued by the ACFE Washington Metropolitan Chapter. \n\n  \nA complementary Happy Hour courtesy of the sponsor\, Veridas\, will follow the training. \nLocation: Trademark\, 2080 Jamieson Ave\, Alexandria\, VA 22314\nAttendance at the Happy Hour requires a separate registration. Please register at www.acfedc.org/Q2HH_2026 URL:https://isaca-gwdc.org/event/it-fraud-event-with-acfe-dc/ LOCATION:Virtual Event CATEGORIES:Other DC Area Events ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2026/01/FT26_PO_ACFE.png ORGANIZER;CN="Avneet Sabharwal":MAILTO:programs@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20260611T083000 DTEND;TZID=America/New_York:20260611T123000 DTSTAMP:20260530T123812Z CREATED:20250824T011355Z LAST-MODIFIED:20260530T123812Z UID:34387-1781166600-1781181000@isaca-gwdc.org SUMMARY:Risk Management Conference 2026 DESCRIPTION:  \n \n  \nJune 11\, 2026\nVirtual Event (Zoom)\nEarn up to 4 CPE\n$10 for GWDC Members\n$30 for Non-Members \n  \n  \n\n\n\nRisk Management Conference 2026 \nRisk management is the cornerstone of effective governance and cybersecurity in an era defined by rapid technological innovation. The Risk Management Conference is designed to equip professionals in IT audit\, cybersecurity\, and governance with the tools and insights necessary to navigate complex risk landscapes. \nThis conference explores cutting-edge approaches to risk management\, with a focus on the NIST Risk Management Framework (RMF) and other industry-leading frameworks that empower organizations to identify\, assess\, and mitigate risks effectively. Attendees will gain actionable knowledge on: \n\nImplementing and tailoring risk management frameworks to align with organizational goals and compliance requirements\nAddressing the unique risks posed by emerging technologies such as artificial intelligence and cloud computing\nStrengthening governance structures to drive accountability and resilience\nPractical case studies showcasing successful risk management strategies in real-world scenarios\n\nWhether you’re focused on AI risks\, securing cloud environments\, or enhancing your organization’s governance practices\, this conference offers the expertise\, practical guidance\, and collaborative opportunities to advance your risk management strategies. \nJoin us to gain the insights and frameworks you need to navigate today’s risks and prepare for tomorrow’s challenges. \nRegistration closes on June 10 @ 5PM. \nRegister Today! \n  \n\n\n\n  \nSponsorship Opportunities \nIf you are interested in sponsoring this event\, or sponsoring the chapter as an annual sponsor\, please visit our sponsorship page. \nSponsorship Info \n  \n\n\n\nEvent Details \n\nDate and Time \n\n\nThe conference will be held on June 11\, 2026 from 8:30 am to 12:30 pm. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThe conference will be held using Zoom. \nPrior to the event\, participants must install the Zoom app on their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits. \n  \n\n\nPricing \n\n\nThe fee for GWDC Members is $10 for the conference.\nThe fee for all other registrants is $30 for the conference. \nTo become a member and take advantage of the member rate for our events\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \n  \n\n\nEvent Policies \n\n\nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n  \n\n  \n\n\n\n  \nInterested in Speaking at a Chapter Event \nIf you are interested in speaking at an upcoming conference\, please visit the Call for Speakers page and complete the form. \nCall for Speakers \n  \n\n\n\nConference Agenda \nConference agendas may change due to schedule conflicts and other unexpected situations. If a previously published agenda has changed\, the changes will be noted. \nThe conference agenda is being developed and updates will be posted when available. \n  \n \n\n08:30 AM – 09:30 AM \n\n\nOverexposed and Underdeveloped: Why Visibility Alone Has Not Fixed Vulnerability Management \nPresenter: Jonathon Risto (ZenzizenSec Inc. and SANS) \nOrganizations have more vulnerability data than ever before: scanners\, dashboards\, threat intelligence\, asset inventories\, cloud findings\, and exposure signals. Yet many programs still struggle to consistently reduce risk. This talk explores the gap between what security teams can see and what organizations can actually act on. It examines how visibility can outpace maturity\, creating overloaded teams\, unclear priorities\, weak governance\, and growing exposure debt. The session will show why effective vulnerability management is not just about finding more issues\, but about building the decision-making\, prioritization\, mobilization\, and communication capabilities needed to turn visibility into meaningful risk reduction. \n\n \n\n09:30 AM – 10:30 AM \n\n\n90 Days to AI Governance \nPresenter: John Rood (Proceptual) \nGRC and data professionals are increasingly being asked to lead AI governance efforts in 2026 — frequently without additional training or incremental staff. \nThis webinar explores the path to “minimum viable governance” — an effective starting point for a compliant\, long-term AI governance program.\n \n\n \n\n10:30 AM – 11:30 AM \n\n\nIntegrating Risk Management into CMMC Compliance: From Gap Analysis to Continuous Monitoring \nPresenter: Dr. Constance Blanson (Walden University) \nAs organizations across the Defense Industrial Base (DIB) prepare for Cybersecurity Maturity Model Certification (CMMC) Level 2\, risk management is no longer a theoretical exercise—it is a core operational requirement. This session explores how organizations can systematically integrate risk management practices into their CMMC compliance strategy\, aligning with NIST SP 800-171 requirements while building a sustainable\, audit-ready security posture. \nParticipants will gain practical insight into identifying\, assessing\, and prioritizing cybersecurity risks within scoped CUI environments and translating those risks into actionable remediation plans. The session will also examine common pitfalls in gap assessments\, the role of continuous monitoring\, and how leveraging Managed Service Providers (MSPs) or Managed Security Service Providers (MSSPs) can accelerate compliance maturity. Real-world examples and assessor-informed perspectives will be shared to help organizations move from reactive compliance to proactive risk governance. \n\n \n\n11:30 AM – 12:30 PM \n\n\nThe AI Risks You’re Not Ready to Admit You Have \nPresenter: Dr. Keith Morneau (ECPI University) \nMost security teams didn’t see AI coming. Not like this. The tools arrived quickly\, adoption followed\, and somewhere in the middle\, a new attack surface quietly opened.\nPrompt injection\, data poisoning\, model theft\, jailbreaking\, AI-generated phishing\, and deepfakes are just some of the AI risks your organization faces. These risks are emerging across enterprises\, and most organizations are underprepared. Not because you aren’t trying\, but because the frameworks you trust weren’t built for this. \nThis session is about where AI risk actually hides in your organization. Not in your policy documents\, but in your workflows\, vendor relationships\, and data pipelines. We’ll get into threat assessments\, which controls to consider\, and how to build a response posture that protects you. \nNo hype. No doom. Just a clearer picture of what you’re dealing with\, and a practical path forward.\n \n\n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nPresenters \nAt times presenters for a session may change due to schedule conflicts and other unexpected situations. If a previously presenter has been substituted\, the changes will be noted. \n \n\n \n\n\nJonathon Risto\nFounder of ZenzizenSec Incorporated and a SANS Institute instructor \nJonathan Ristro is a cybersecurity leader with more than 25 years of experience in network engineering\, security architecture\, and cyber operations across government and industry. He currently serves as Technical Director for the Government of Canada’s Cyber Posture Management Program\, focused on vulnerability management and automated remediation. \nHe is the Founder of ZenzizenSec Incorporated\, a SANS Institute instructor for LDR516: Strategic Vulnerability and Threat Management\, and a faculty member at the SANS Technology Institute\, where he mentors graduate students in risk and vulnerability management. \nHe has led cybersecurity and incident response work across Bell Canada\, the Canadian International Development Agency\, and Defence Research and Development Canada. \nHe is also the creator of the Vulnerability Management Maturity Model and Continuous Threat Exposure Management Maturity Model\, helping organizations build structured\, risk-based security programs. \n\n \n\n \n\n\nJohn Rood\nFounder and CEO @ Proceptual \nJohn is a recognized expert in AI literacy\, governance\, and organizational implementation\, with extensive experience working specifically with privacy professionals. He’s passionate about helping professionals navigate the rapidly evolving AI landscape with confidence and strategic insight. \nJohn’s Background \n\nSpeaker at SHRM National Conference and multiple SHRM chapters\nSpeaker at Chicago ATD\nInstructor at Michigan State University and University of Chicago\, teaching AI governance\, safety\, and literacy\nHas trained hundreds of leaders on practical AI implementation\n\n\n \n\n \n\n\nConstance Blanson\nCore Faculty\, College of Faculty and Human Potential @ Walden University\nCISSP\, CC\, ITIL\, Sec+\, CMMC-PI\, CCP\n \nDr. Constance Blanson is a cybersecurity professional\, educator\, and consultant specializing in CMMC readiness\, NIST SP 800-171 compliance\, and risk-based cybersecurity strategies. With a PhD in Information Security and multiple industry certifications\, including Certified CMMC Professional (CCP)\, Certified CMMC Assessor (CCA)\, and CISSP\, Dr. Blanson brings both academic rigor and real-world application to cybersecurity program development. \nShe has extensive experience supporting organizations in the Defense Industrial Base with gap assessments\, mock audits\, enclave scoping\, and control implementation aligned to federal requirements. In addition to her consulting work\, Dr. Blanson serves as a doctoral mentor and faculty member\, guiding future leaders in aligning research with practical IT and cybersecurity challenges. Her work focuses on translating complex regulatory frameworks into actionable\, scalable solutions that strengthen organizational resilience and audit readiness.\n \n\n \n\n \n\n\nDr. Keith Morneu\nDean of Computer and Information Science @ ECPI University \nDr. Keith Morneau is the Dean of Computer and Information Science at ECPI University. He has spent more than 30 years at the intersection of technology\, education\, and cybersecurity. He’s been building programs\, closing workforce gaps\, and asking uncomfortable questions about how to close the education and workforce skills gap. His research and practice span education\, software development\, cybersecurity\, AI systems\, and the very human problem of turning technical knowledge into workforce readiness. \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 4 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \n\nPoll Questions \n\n\nParticipants must respond to all the poll questions via the Zoom polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls. \n  \n\n\nCPE Distribution and Evaluation Survey \n\n\nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \n\n\nLearning Objective \n\n\nAfter attending this event\, attendees will learn about current and future trends in the risk management space. \n  \n\n\nCPE-Related Details \n\n\n\nPrerequisites: None\nAdvance Preparation: None\nProgram Knowledge Level: Basic\nDelivery Method:  Group Internet Based\nField of Study:  Information Technology – Technical URL:https://isaca-gwdc.org/event/risk-management-conference-2026/ LOCATION:Virtual Event CATEGORIES:Conferences ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2025/08/risk_management.png ORGANIZER;CN="Avneet Sabharwal":MAILTO:programs@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20260609T090000 DTEND;TZID=America/New_York:20260609T170000 DTSTAMP:20260522T145317Z CREATED:20260407T020943Z LAST-MODIFIED:20260522T145317Z UID:35847-1780995600-1781024400@isaca-gwdc.org SUMMARY:Audit and Control of AI Implementation Workshop DESCRIPTION:  \n \n  \nJune 9\, 2026\nVirtual Event (Zoom)\nEarn up to 7 CPE\n$200 for GWDC Members\n$300 for Non-Members \n  \n  \n\n\n\nAudit and Control of AI Implementation Workshop \nArtificial Intelligence is being rapidly adopted by organizations. In many cases\, the pervasive promotion in the media\, the perceived superman-like benefits\, and the ease with which AI technology can be accessed are driving adoption faster than the risks can be understood and controls put in place to mitigate and manage those risks. \nThis one-day seminar will provide auditors\, risk managers and security professionals with an understanding of the risks inherent in AI. It presents the methods for assessing and managing the risks of AI projects\, from inception through design\, development\, deployment and into ongoing operational use. The course will introduce the participants to important relevant regulatory standards and key industry frameworks. Best practices from industry will be introduced and discussed. \nIntended audience: I.T. Auditors\, Risk Managers\, Security Professionals\, Internal and External Auditors\, IT Management and Staff\, Business Managers Business Continuity and Disaster Recovery Managers\, Financial Executives\, Legal Counsel \nRegistration closes on June 8 @ 5pm. \nRegister Today! \n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nEvent Details \n\nDate and Time \n\n\nThe workshop will be held on June 9\, 2026 from 9:00 am to 5:00 pm. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThe conference will be held using Zoom. \nPrior to the event\, participants must install the Zoom app on their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits. \n  \n\n\nPricing \n\n\nThe fee for GWDC Members is $200 for the workshop.\nThe fee for all other registrants is $300 for the workshop. \nTo become a member and take advantage of the member rate for our events\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \n  \n\n\nEvent Policies \n\n\nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n\n  \n\n\n\n  \nISACA AI Certifications \nISACA has launced new certifications in the AI space: Advanced in AI Audit™ (AAIA™) and Advanced in AI Security Management™ (AAISM™). Click on the links below to learn more about these certifications and how they can further your career in AI. If you are interested in taking one of these certification exams\, check our events calendar for upcoming review courses. \nLearn more about AAIALearn more about AAISM \n  \n  \n\n\n\nCourse Outline \n1. Auditing AI – Why? \n\nThe need for auditing AI\nThe value proposition for an AI audit\nThe goals and objectives of an AI audit\n\n2. Understanding AI and Generative AI (GenAI) – A Primer \n\nWhat is AI?\nHow AI works\nHow AI fails\n\n3. The Risks of Artificial Intelligence \n\nCan we trust AI?\nEnsuring that AI is ethical\nLearning from some well-known failures\nHow AI risks differ from legacy IT project risks\n\n4. Best Practices for Controlling AI and Project Risks \n\nControl objectives\nBest practices\nAxiomatic and corollary AI risks\nIndustry examples of success and failure\nCase study #1\n\n5. Conducting an AI Audit \n\nDefining an AI audit\nDetermining scope and objectives\nKey components to audit and how to do so\nCase study #2\n\n6. The AI System Development Methodology and Project Lifecycle \n\nProject workstream and project approval\nData-build workstream\nModel-build workstream\nTrain\, test\, validate workstream\nCase study #3\n\n7. Regulatory Statutes Relevant to an AI Audit \n\nGeneral Data Protection Regulation\nCalifornia Consumer Privacy Act\nCurrent EU Legislation on AI\nNYC Bias Audit Law\n\n8. Frameworks Relevant to AI \n\nNIST AI Risk Management Framework 1.0\nIIA AI Auditing Framework\nNIST Taxonomy of Adversarial Intelligence\nCross Industry Standard Process for Data Mining\nAIRS+ Framework for Identifying and Classifying Implementation Risk\nGAO: An AI Accountability Framework\nOther relevant frameworks\n\n9. Conclusion \n  \n\n\n\n  \nInterested in Speaking at a Chapter Event \nIf you are interested in speaking at an upcoming conference\, please visit the Call for Speakers page and complete the form. \nCall for Speakers \n  \n\n\n\nInstructor \n\n \n\n\nAllan Cytryn\nPrincipal @ Risk Masters International LLC \nAllan Cytryn is a Principal with Risk Masters International. He has more than 35 years of experience in senior IT leadership roles\, including Regional CIO for Deloitte\, Director of Applications for Deloitte\, CIO for Simpson Thacher & Bartlett\, Vice-President of Corporate Finance at Goldman Sachs\, and Group Vice-President for Funds Transfer and Foreign Exchange at Bankers Trust Company. In these roles\, Allan had a broad range of IT responsibilities\, including Business Continuity and Disaster Recovery Planning\, and the implementation and operation of many high-performance mission-critical 24/7/365 system. \nAllan began working in AI in the early 1970s\, where he developed the first suite of AI systems to support computer assisted design in architecture and planning. This suite of systems reduced the time for facilities planning of large offices from 2-4 weeks to under 5 minutes\, while providing a more consistent and higher quality design solution. He subsequently licensed these products to Computervision. Following that\, he developed several AI systems that were deployed successfully in the financial services industry. At Goldman Sachs\, he led the development of an AI-based multi-currency global equity valuation system that supported the Corporate Finance Department. The system reduced the time to develop equity valuation models from 6 weeks to 5 minutes. Also at Goldman\, he developed the first system to use AI to identify “trades of interest” for screening for insider trading. At the law firm of Simpson Thacher & Bartlett\, he developed an interactive research system that identified in seconds contextually relevant documents in a repository of more than 2\,000\,000 documents. \nMore recently\, Allan has been involved in AI policy. In his work with the Boston Global Forum where he is on the Executive Board\, he has co-authored with Governor Michael Dukakis and faculty from Harvard\, MIT and Brown several papers on AI Ethics. In November\, 2019\, he presented at the BCI International conference in London on the subject of When your Artificial Intelligence Becomes Adversarial Intelligence: Risk and Control Considerations. \nAdditionally\, Allan also has significant global IT experience. He was responsible for building the first global networks at Bankers Trust Company\, Simpson Thacher and Bartlett\, and Goldman Sachs Corporate Finance. At Deloitte\, he established the application development offshoring operation in Hyderabad\, India\, and subsequently supported the growth of the offshored Audit practice from its initiation to more than 5\,000 employees. \nWhile at Deloitte\, Allan led the IT recovery after the 9/11 Attack. At Simpson Thacher and Bartlett\, Allan led the recovery after the 1993 NatWest Tower bombing in London. \nOver the past five years\, Allan has published and spoken on Business Continuity and Disaster Recovery Planning\, Management of High-Risk Mission Critical Projects\, Global Cyber Security Policy\, and as previously mentioned\, AI Risk and Control. More recently\, as a member of the Executive Board of the Boston Global Forum (www.bostonglobalforum.org)\, he has advised the governments of Japan and Vietnam on national cyber-security strategy and has co-authored the cyber-security recommendations presented by the Government of Japan to the G7 Leaders at their May\, 2016 G7 Summit in IseShima\, Japan. \nAllan is a graduate of Columbia University\, where he received a BS in Electrical Engineering and Computer Science\, a Master of Architecture\, and an MS in Operations Research. He is an active alumnus\, where his roles have included Chair of the Alumni Board of Visitors of the School of Engineering and Applied Sciences and the Treasurer of the Society of Columbia Graduates. \n \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 7 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \n\nPoll Questions \n\n\nParticipants must respond to all the poll questions polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls. \n  \n\n\nCPE Distribution and Evaluation Survey \n\n\nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \n\n\nLearning Objectives \n\n\nParticipants in this seminar will learn: \n\nWhat AI and Generative AI are\, and how they work.\nThe risks associated with developing\, deploying\, and operating AI systems.\nBest practices for controlling the risks of AI projects\, systems\, and their ongoing use in production.\nEssential goals and techniques for conducting an AI Audit.\nBest practices that provide relevant guidance\, including:\n\nAn AI System Development Methodology and Project Lifecycle.\nRegulatory statutes and frameworks relevant to AI.\nFrameworks relevant to an AI audit.\n\n\n\n\n\nCPE-Related Details \n\n\n\nPrerequisites: None\nAdvance Preparation: None\nProgram Knowledge Level: Basic\nDelivery Method:  Group Internet Based\nField of Study:  Information Technology – Technical URL:https://isaca-gwdc.org/event/audit-and-control-of-ai-implementation-workshop/ LOCATION:Virtual Event CATEGORIES:Workshop ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2026/04/ai_implementation_workshop.png ORGANIZER;CN="Clifton Persaud (Certifications Program and Special Assistance Requests)":MAILTO:certifications@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20260514T083000 DTEND;TZID=America/New_York:20260514T123000 DTSTAMP:20260513T221045Z CREATED:20250824T010024Z LAST-MODIFIED:20260513T221045Z UID:34381-1778747400-1778761800@isaca-gwdc.org SUMMARY:IT Audit and Compliance Conference 2026 DESCRIPTION:  \n \n  \nMay 14\, 2026\nVirtual Event (Zoom)\nEarn up to 4 CPE\n$10 for GWDC Members\n$30 for Non-Members \n  \n  \n\n\n\nIT Audit and Compliance Conference 2026 \nThe IT Audit and Compliance Conference 2026 is part of ISACA GWDC’s monthly conference series focused on professional development in IT audit\, governance\, risk\, and compliance. \nRegistration closes on May 13 @ 5PM. \nRegister Today! \n  \n\n\n\n  \nSponsorship Opportunities \nIf you are interested in sponsoring this event\, or sponsoring the chapter as an annual sponsor\, please visit our sponsorship page. \nSponsorship Info \n  \n\n\n\nEvent Details \n\nDate and Time \n\n\nThe conference will be held on May 14\, 2026 from 8:30 am to 12:30 pm. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThe conference will be held using Zoom. \nPrior to the event\, participants must install the Zoom app on their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits. \n  \n\n\nPricing \n\n\nThe fee for GWDC Members is $10 for the conference.\nThe fee for all other registrants is $30 for the conference. \nTo become a member and take advantage of the member rate for our events\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \n  \n\n\nEvent Policies \n\n\nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n  \n\n  \n\n\n\n  \nInterested in Speaking at a Chapter Event \nIf you are interested in speaking at an upcoming conference\, please visit the Call for Speakers page and complete the form. \nCall for Speakers \n  \n\n\n\nConference Agenda \nConference agendas may change due to schedule conflicts and other unexpected situations. If a previously published agenda has changed\, the changes will be noted. \nThe conference agenda is being developed and updates will be posted when available. \n  \n \n\n08:30 AM – 09:30 AM \n\n\nFederal Cyber Risk in Practice: What FISMA and CMMC Mean for Leaders \nPresenter: Dr. Anthony Foreman (Foreleads Leadership Consulting\, LLC) \nFederal cybersecurity regulations are often approached as compliance exercises\, yet their real value lies in how they inform risk-based decision-making. This session examines FISMA and CMMC through a leadership lens\, focusing on how federal and defense organizations can translate regulatory requirements into practical\, operational cyber risk management. \nAttendees will gain insight into how leaders can align governance\, controls\, and organizational accountability to reduce risk\, strengthen resilience\, and support mission outcomes—without treating compliance as a checkbox activity. \n\n \n\n09:30 AM – 10:30 AM \n\n\nThe Future of Assurance \nPresenter: Mica Jimenez (KPMG) \nExplore the evolving landscape of SOC and third-party assurance reports\, with a deep dive into SOC 1s\, their role in internal controls\, and Artificial Intelligence’s (AI’s) impact on these audits. \n\n \n\n10:30 AM – 11:30 AM \n\n\nImplementing and Auditing the CIS Critical Security Controls – Real World Experience \nPresenter: Randy Marchany (Virginia Tech\, SANS) \nDetails on the topic will be posted soon. \n\n \n\n11:30 AM – 12:30 PM \n\n\nSafeguarding Privacy Across the AI Development Lifecycle \nPresenter: Dr. Kyle David (Dr. David\, LLC) \nAs organizations accelerate adoption of artificial intelligence\, protecting individual privacy must remain a central design principle throughout the AI system lifecycle. This presentation provides a practitioner-friendly walkthrough of the OECD’s AI System Lifecycle Framework\, which identifies seven key stages—plan and design; gather and collect data; build and/or adapt models; test\, evaluate\, verify\, and validate; deploy; operate and monitor; and retire/decommission. Each stage introduces distinct privacy threats and risk vectors\, from consent and lawful basis challenges during collection to prompt injection and membership inference attacks during operation. Using real-world examples\, this talk translates complex AI privacy risks into clear\, actionable concepts accessible to non-AI and non-privacy specialists. Attendees will learn how to apply proven mitigations—such as privacy-by-design principles\, differential privacy\, data governance frameworks\, and continuous monitoring—to ensure responsible AI development and deployment. Participants will leave with a structured understanding of how privacy safeguards can be embedded at every step of the AI lifecycle to strengthen trust\, compliance\, and accountability. \n\n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nPresenters \nAt times presenters for a session may change due to schedule conflicts and other unexpected situations. If a previously presenter has been substituted\, the changes will be noted. \n \n\n \n\n\nDr. Anthony Foreman\nForeleads Leadership Consulting LLC\, Founder and Principal Consultant \nDr. Anthony T. Foreman is a senior IT executive and cybersecurity leader with more than 25 years of experience managing mission-critical infrastructure in some of the most secure and high-visibility federal environments in the United States. \nHe currently serves as Division Chief for Data Center Management at the Library of Congress\, where he provides executive oversight for enterprise infrastructure\, cybersecurity remediation\, network modernization\, and risk management initiatives supporting Congressional operations\, digital preservation\, and public access systems. \nDr. Foreman previously held senior leadership roles supporting the White House\, U.S. Marshals Service\, Securities and Exchange Commission\, and USAID\, where he led large-scale modernization efforts\, compliance initiatives\, and incident response operations across classified and unclassified environments. \nHe holds a Doctorate in Organizational Leadership with a concentration in Information Technology\, with research focused on cloud security limitations and risk mitigation. Dr. Foreman is also the Founder and Principal Consultant of Foreman Leadership Consulting\, where he advises organizations on cybersecurity leadership\, governance\, and risk-based decision-making. \n \n\n \n\n \n\n\nMica Jimenez\nManager in KPMG’s Federal Tech Assurance practice \nMicaela (“Mica”) Jimenez is currently a manager in KPMG’s Federal Tech Assurance practice and has more than 14 years of progressive experience performing information technology (IT) financial statement audits\, attestation examinations (i.e.\, SOC 1 Type 1 and 2)\, and performance audits for various Federal and Department of Defense (DoD) agencies. Additionally\, she has 7 years of progressive experience performing Chief Financial Officers Act of 1990 (CFO Act) audits\, IT financial statement audits\, and attestation examinations (i.e.\, SOC 1 Type 2 & FISMA) for the United States Department of the Army (Army)\, United States Department of Agriculture (USDA)\, Small Business Administration (SBA)\, Pension Benefit Guaranty Corporation (PBGC)\, and United States Department of Labor (DOL). Mica and her family relocated from San Diego\, California back in 2009 and currently live in Maryland. \n \n\n \n\n \n\n\nRandy Marchany\nChief Information Security Officer @ Virginia Tech\nSenior Instructor @ SANS \nRandy is the Chief Information Security Officer of Virginia Tech and the Director of Virginia Tech’s IT Security Laboratory and has 25 years experience as a systems administrator\, IT auditor\, and security specialist. He is a co-author of the original SANS Top 10 Internet Threats\, the SANS Top 20 Internet Threats\, the SANS Consensus Roadmap for Defeating DDoS Attacks\, and the SANS Incident Response: Step-by-Step guides. Randy is currently a senior instructor for the SANS Institute and has taught a wide variety of courses over the years. Currently\, he can be found teaching SEC566: Implementing and Auditing CIS Controls on a regular basis. \nRandy holds the unique position of being the longest running SANS Instructor on the planet. After one of his Solaris systems got hacked in 1991 (part of the attack described in the book @Large: The Strange Case of the World’s Biggest Internet Invasion)\, he submitted a proposal for a talk to a startup called the SANS Institute in 1992. Alan Paller invited him to work on some projects with them and he’s been doing cybersecurity work with SANS and in his professional career ever since. \n \n\n \n\n \n\n\nDr. Kyle David\nFounder @ Dr. David\, LLC\nCIPP/US/E\, CIPM\, AIGP\, FIP\, CISSP\, and AAISM \nDr. Kyle David is the Founder of Dr. David\, LLC\, where he has delivered privacy and AI governance training to more than 10\,000 learners across 125 countries. Previously a Presidential Management Fellow at the U.S. Department of Energy\, he led privacy workforce development\, created DOE’s AI literacy course\, and supported the launch of EnerGPT. He holds a Ph.D.\, five IAPP designations (CIPP/US/E\, CIPM\, AIGP\, FIP)\, CISSP\, and AAISM. \n \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 4 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \n\nPoll Questions \n\n\nParticipants must respond to all the poll questions via the Zoom polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls. \n  \n\n\nCPE Distribution and Evaluation Survey \n\n\nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \n\n\nLearning Objective \n\n\nAfter attending this event\, attendees will learn about current and future trends in the IT audit and compliance space. \n  \n\n\nCPE-Related Details \n\n\n\nPrerequisites: None\nAdvance Preparation: None\nProgram Knowledge Level: Basic\nDelivery Method:  Group Internet Based\nField of Study:  Information Technology – Technical URL:https://isaca-gwdc.org/event/it-audit-and-compliance-conference-2026/ LOCATION:Virtual Event CATEGORIES:Conferences ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2025/08/it_audit.png ORGANIZER;CN="Avneet Sabharwal":MAILTO:programs@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20260423T144500 DTEND;TZID=America/New_York:20260423T170000 DTSTAMP:20260413T000536Z CREATED:20260221T221823Z LAST-MODIFIED:20260413T000536Z UID:35545-1776955500-1776963600@isaca-gwdc.org SUMMARY:Annual FISMA and Risk Management Conference DESCRIPTION:  \n \n  \nApril 23\, 2026\nVirtual Event (Zoom)\nEarn up to 2 CPE\n5 for GWDC Members\n$15 for Non-Members \n  \n  \n\n\n\nAnnual FISMA and Risk Management Conference \nTo protect federal information and systems\, the Federal Information Security Modernization Act of 2014 (FISMA) requires federal agencies to develop\, document\, and implement information security programs. The 2026 Annual FISMA Conference provides a useful update to IT Auditors and the Federal IT community on the current landscape and efforts to comply with FISMA. Come hear perspectives from senior federal executives who play key roles in FISMA compliance efforts. During this session\, you will learn about recent changes to the FISMA metrics\, and the opportunities and challenges agencies face in complying with FISMA. \nWho should attend? IT advisory or IT audit professionals that serve or support the Public Sector\, CIOs\, and CISOs. \nRegistration closes on April 22 @ 5PM. \nRegister Today! \n  \n\n  \nEvent Sponsor \nWe are proud to have Sikich. as the sponsor for this event. \n  \n \nSikich has approximately 2\,000 team members and operates across North America\, EMEA and APAC. Our approach is strategically and thoughtfully designed to help our clients\, teams and communities accelerate success. Sikich draws on a diverse portfolio of technology solutions to deliver transformative digital strategies. From corporations and not-for-profits to state and local governments and federal agencies\, Sikich clients utilize a broad spectrum of services and products to help them improve performance and achieve long-term\, strategic goals. Our professionals have performed extensive IT\, cybersecurity\, and privacy engagements across\nFederal environments. As a full-service provider to Federal government agencies\, our professionals have performed financial management advisory and assurance services\, such as: \n\nAssisting the U.S. Defense Industrial Base (DIB) sector in enhancing its cybersecurity posture within the multi-tier supply chain to ensure compliance with Cybersecurity Maturity Model Certification (CMMC) requirements.\nConducting CFO Act engagements on behalf of more than three dozen federal CFOs and Offices of Inspectors General (OIGs) in the Executive and Legislative Branches.\nConducting FISMA audits\, IT and cybersecurity performance audits\, evaluations of access controls\, configuration and change management\, systems development life cycle including audits of Agile and Waterfall implementations\, disaster recovery and contingency planning\, and overall governance and security frameworks.\nSupporting agencies adhere to the processes outlined in the National Institute of Standards and Technology (NIST) Special Publication (SP) 800 series and conducting Security Assessment and Authorization (SA&A) activities.\n\n  \n\n\n\n  \nSponsorship Opportunities \nIf you are interested in sponsoring a GWDC event\, or sponsoring the chapter as an annual sponsor\, please visit our sponsorship page. \nSponsorship Info \n  \n\n\n\nEvent Details \n\nDate and Time \n\n\nThe conference will be held on April 23\, 2026 from 2:45 PM – 5:00 PM. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThe conference will be held using Zoom. \nPrior to the event\, participants must install the Zoom app on their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits. \n  \n\n\nPricing \n\n\nThe fee for GWDC Members is $5 for the conference.\nThe fee for all other registrants is $15 for the conference. \nTo become a member and take advantage of the member rate for our events\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \n  \n\n\nEvent Policies \n\n\nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n  \n\n  \n\n\n\n  \nInterested in Speaking at a Chapter Event \nIf you are interested in speaking at an upcoming conference\, please visit the Call for Speakers page and complete the form. \nCall for Speakers \n  \n\n\n\nConference Agenda \n \n\n2:45 PM – 2:55 PM \n\n\nOpening Remarks and Housekeeping \nLogistics\, CPEs\, etc. \n  \n\n \n\n3:00 PM – 4:50 PM \n\n\nPanel Discussion: 2026 Annual FISMA and Risk Management Framework \nModerator: \n\nYehuda Schmidt\, CISA\, GRISC\, CGEIT\, CPA\nDirector @ Sikich\n\nPanelists: \n\nJennifer Franks\nDirector\, Center for Enhanced Cybersecurity\, Acting Director & Analytics Foundry @ US Government Accountability Office (GAO)\nVictoria Yan Pillitteri\, CISSP\nSupervisory Computer Scientist and Security Engineering and Risk Management Group Manager @ National Institute of Standards and Technology (NIST)\nPatrick Bevill\, CISSP\n Chief Information Security Officer @ Federal Retirement Thrift Investment Board (FRTIB)\nFormer Fellow @ the National Institute of Standards and Technology\n\n\n\n4:50 PM – 5:00 PM \n\n\nClosing Remarks \n\n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nPresenters \nAt times presenters for a session may change due to schedule conflicts and other unexpected situations. If a previously presenter has been substituted\, the changes will be noted. \n  \n\n \n\n\nYehuda Schmidt\nDirector @ Sikich\nCISA\, CRISC\, CGEIT\, CPA\n \nYehuda Schmidt is a Director with Sikich with over 30 years’ experience in assisting federal government agencies with IT risk assessments\, assessing systems and applications security posture in accordance with NIST standards\, business process improvement\, and program management. He has extensive experience in managing reviews of internal controls over financial reporting\, operational controls\, and risk management in compliance with Office of Management and Budget (OMB) Circular A-123. Yehuda is leading clients’ IT risk assessments in compliance with NIST SP 800-37\, and IT assessment in compliance with NIST SP 800-53. \nYehuda holds an MBA in Finance and Entrepreneurship\, and B.Sc. in Accounting and Economics from the Hebrew University of Jerusalem\, Israel. He is a Certified Public Accountant (CPA)\, a Certified Information Systems Auditor (CISA)\, a Certified Risk and Information Systems (CRISC)\, and Certified Governance of Enterprise IT (CGEIT) \n \n\n\n \n\n\nJennifer Franks\nDirector\, Center for Enhanced Cybersecurity and Acting Director\, Analytics Foundry @ US Government Accountability Office \nJennifer Franks directs the Center for Enhanced Cybersecurity within GAO’s Information Technology and Cybersecurity team. She oversees reviews that primarily focus on emerging cybersecurity issues and assessing an agency’s ability to protect the confidentiality\, integrity\, and availability of its sensitive data and computing infrastructure. Her multi-disciplinary teams actively review agencies’ computer security vulnerabilities across their enterprise-wide computing environment by assessing program management compliance and technical controls recommended for the agencies to follow in accordance with federal guidance and leading practices. In addition\, she leads reviews in the areas of IT management and operations\, financial management\, healthcare and public health IT\, data protection\, and privacy. \nFurther\, Jennifer serves as the Acting Director of the Analytics Foundry; a dedicated cloud computing environment that manages GAO’s complex analytical functions. \nJennifer earned a master’s degree in information security policy and management from Carnegie Mellon University and earned a bachelor’s degree in computer information systems from Hampton University. \n \n\n\n \n\n\nVictoria Yan Pillitteri\nSupervisory Computer Scientist and Security Engineering and Risk Management Group Manager @ National Institute of Standards and Technology (NIST)\nCISSP \nVictoria Yan Pillitteri\, CISSP\, Supervisory Computer Scientist and Security Engineering and Risk Management Group Manager at the National Institute of Standards and Technology (NIST). \nVictoria Yan Pillitteri is a supervisory computer scientist and manager of the Security Engineering and Risk Management Group at the National Institute of Standards and Technology (NIST). The group conducts the research and development of the suite of risk management\, systems security engineering\, and cybersecurity risk analytics and measurement guidance used for managing cybersecurity risk. She is the co-author of multiple NIST publications that are foundational for cybersecurity risk management\, including the security and privacy controls\, control assessment procedures\, the Risk Management Framework\, and the CUI security requirements and assessment procedures (Special Publications (SP) 800-53\, SP 800-53A\, SP 800-53B\, 800-37\, 800-171\, and 800-171A). \nMs. Pillitteri holds a B.S. in Electrical Engineering from the University of Maryland\, a M.S. in Computer Science\, with a concentration in Information Assurance\, from the George Washington University\, completed the Key Executive Leadership Program at American University\, and is a Certified Information Systems Security Professional (CISSP).\n \n \n\n\n \n\n\nPatrick Bevill\nChief Information Security Officer @ Federal Retirement Thrift Investment Board (FRTIB)\nCISSP \nPatrick Bevill is the Chief Information Security Officer at the Federal Retirement Thrift Investment Board (FRTIB). His thirty-year cybersecurity and technology career includes public and private sector experience in a variety of leadership roles\, including as a Federal CISO\, cybersecurity engineer\, and C-level and VP-level positions in everything from Fortune 500 companies to Silicon Valley startups. Patrick’s Federal career has been focused on driving cybersecurity maturity and enabling agile IT Security Operations\, and on interagency advocacy for the cybersecurity needs of the smaller\, non-CFO Act agencies. \nHe has a Master of Science degree in computer information systems from Boston University and a CISSP certification. He is also a recipient of a Fed100 award and a Presidential Rank Award\, the highest of honors for Federal employees. \n \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 2 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \n\nPoll Questions \n\n\nParticipants must respond to all the poll questions via the Zoom polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls. \n  \n\n\nCPE Distribution and Evaluation Survey \n\n\nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \n\n\nLearning Objective \n\n\nAfter attending this event\, attendees will learn about updates on the current FISMA landscape and efforts to comply with FISMA. \n  \n\n\nCPE-Related Details \n\n\n\nPrerequisites: None\nAdvance Preparation: None\nProgram Knowledge Level: Basic\nDelivery Method:  Group Internet Based\nField of Study:  Information Technology – Technical URL:https://isaca-gwdc.org/event/2026-annual-fisma-and-risk-management-conference/ LOCATION:Virtual Event CATEGORIES:Conferences ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2026/02/fisma_rmf.png ORGANIZER;CN="Avneet Sabharwal":MAILTO:programs@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20260417T083000 DTEND;TZID=America/New_York:20260417T160000 DTSTAMP:20260411T151723Z CREATED:20260118T171735Z LAST-MODIFIED:20260411T151723Z UID:35442-1776414600-1776441600@isaca-gwdc.org SUMMARY:Future Tech DC 2026 Post-Event Training: NIST AI RMF Workshop DESCRIPTION:  \n\n\n \n\n\nNIST AI RMF Workshop\nApril 17\, 2026 from 8:30 AM to 4:00 PM\nGeorge Mason University\, Arlington VA Campus\n7 CPE\n$200 for Future Tech Attendees\n$225 for All Other Registrants \n  \n\n\n\n\n\n  \nNIST AI Risk Management Framework (AI RMF) WorkshopA Future Tech DC 2026 Post-Event Workshop \nJoin your fellow Future Tech DC 2026 attendees for an immersive\, full-day workshop designed to equip cybersecurity\, privacy\, risk\, and technology professionals with a comprehensive understanding of the NIST Artificial Intelligence Risk Management Framework (AI RMF 1.0) and its application across modern AI-enabled environments. This program provides a manager-focused exploration of how the AI RMF can be used to identify\, assess\, measure\, and manage AI risks throughout the AI lifecycle\, helping organizations implement responsible and trustworthy AI practices. Participants will gain practical insights into the Framework’s Core functions—Govern\, Map\, Measure\, and Manage—and learn how to apply trustworthiness characteristics\, risk mapping methods\, and lifecycle-aligned controls. Real-world use cases\, ecosystem-wide responsibilities\, and AI-specific risk scenarios (such as bias\, safety\, security\, transparency\, and emergent behavior) are emphasized throughout. Led by Jim Wiggins\, GWDC Media Director and Founder of the Federal IT Security Institute (FITSI)\, this workshop blends expert instruction\, demonstrations\, hands-on exercises\, and collaborative discussions to help technical and non-technical leaders operationalize the AI RMF within their organizations. \n \nRegistration closes on April 16 @ 5pm.  There is no walk-up registration for this event. \nRegister Today! \n\n  \n \n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n \n\nDate and Time \nThe workshop will be held on April 17\, 2026 from 8:30 am to 4:00 pm. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \nVenue Location\, Parking\, and Metro \nGeorge Mason University (GMU) Arlington Campus (Mason Square)\n3351 Fairfax Drive\, Arlington\, VA 22201 \nParking: Visitor parking is available underneath the school in the Fuse building or Van Metre Hall. Entrance to both garages is from Founders Way.  Please view the Mason Square parking map for additional information. Parking garages use the Metropolis parking system. Scan the QR code in the garage. \nMetro: The nearest Metro station is the Virginia Square-GMU station. It is a 5-minute walk from the metro station to the GMU Campus \n  \nPricing \n\nEarly Bird Pricing (through 3/6/26)\n$150 for Future Tech Attendees\n$175 for all other registrants \n\n\nRegular Pricing\n$200 for Future Tech Attendees\n$225 for all other registrants \n\nFuture Tech registrants will receive details in the registration confirmation email for Future Tech DC 2026 regarding the discount for this workshop. \nWhat’s included in the pricing: Lunch will be provided \nTo become a member and take advantage of the member rate for our events\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \n  \nEvent Policies \nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n  \n\n \n\n\n  \nNIST AI RMF Resources \nIf you are interested in learning more about the NIST AI RMF Framework before the workshop\, visit the NIST website linked below. \nLearn More about NIST AI RMF! \n  \n  \n\n\n \n\nWorkshop Format \nA blended learning experience combining: \n\nInteractive discussions and analysis of deployment contexts\, risk scenarios\, and trustworthiness challenges\nGroup activities applying the Govern–Map–Measure–Manage functions\nPractical exercises building AI RMF Profiles and evaluating AI risk controls\n\n  \nCourse Materials \nCourse Materials Include: \n\nExpert lectures\nDemonstrations and walkthroughs\nHands-on lab activities\nSupplemental online resources and references\n\n  \nLearning Objectives \nBy completing this course\, participants will be able to: \n\nUnderstand the foundational components\, structure\, and purpose of the NIST Artificial Intelligence Risk Management Framework (AI RMF 1.0).\nExplain AI risk management concepts—including AI-specific risks\, lifecycle considerations\, and trustworthiness characteristics—and their importance in supporting organizational objectives.\nIdentify and apply the AI RMF Core functions (Govern\, Map\, Measure\, Manage) and their associated categories and subcategories.\nDevelop and use AI RMF Current and Target Profiles to support alignment\, comparative analysis\, and self-assessment.\nAssess the trustworthiness of AI systems by applying measurement methods\, TEVV practices\, and appropriate risk metrics aligned to the Framework.\nConduct AI risk mapping by evaluating context\, potential impacts\, assumptions\, affected actors\, and system categorizations throughout the AI lifecycle.\nIntegrate AI governance structures\, accountability mechanisms\, and organizational policies to support responsible and transparent AI practices.\nEmbed AI risk management activities into system design\, development\, deployment\, and monitoring processes across the AI lifecycle.\nUnderstand and manage ecosystem-wide roles\, responsibilities\, and risks by engaging relevant AI actors—including developers\, deployers\, impacted communities\, and third-party entities—throughout the AI system lifecycle.\n\n  \nWho Should Attend \nThis workshop is ideal for: \n\nCybersecurity managers and technical team leads\nAI program managers and solution owners\nData scientists and machine learning engineers\nFederal and defense IT security personnel\nSecurity auditors and assessors\nGovernance\, Risk\, and Compliance (GRC) professionals\nTechnology leaders preparing to implement or evaluate AI systems\nPrivacy and ethics professionals responsible for evaluating AI impacts\n\n  \nInstructor \n\n \n\n\nJim Wiggins\nAAISM\, AAIA\, AIGP\, CISM\, CISA\, CRISC\, CISSP\, ISSEP\, CGRC (CAP)\, SCNA\, SCNP\, IAM\, IEM\, SSCP\, CEH\, ECSA\, CHFI\, LPT\, TICSA\, CIWSA\, Security+\, FITSP-M\, CGEIT\, MCITP\, MCSE: Security\, MCSE: Messaging\, MCSA\, MCDST\, Server+\, Network+\, A+\, CDPSE\, CIPP/US\, PMP\, ICE-CCP\, DACUM Facilitator \nJim Wiggins is a seasoned IT and cybersecurity expert with over 29 years of industry experience\, 24 of which have been dedicated to information security – and\, more recently\, the last 3 years on artificial intelligence. He is the Founder and CEO of Securible\, LLC\, a Washington\, DC-based cybersecurity training and consulting firm specializing in practical\, forward-thinking solutions. Through Securible\, Jim has championed innovative approaches to address emerging threats\, ensure regulatory compliance\, and harness the power of Artificial Intelligence in IT audit\, cybersecurity\, governance and privacy. Throughout his distinguished career\, Jim has trained well over 20\,000 IT and cyber professionals\, underscoring his commitment to education and the advancement of the field. \nIn addition to his leadership at Securible\, Jim also serves as the Founder and CEO of the Federal IT Security Institute (FITSI)\, a 501(c)(6) non-profit certification body accredited by the ANSI National Accreditation Board (ANAB) under ISO 17024:2012. FITSI provides role-based cybersecurity certifications designed to fortify the U.S. federal cybersecurity workforce. \nEnhancing his contributions to the cybersecurity community\, Jim hosts a TV show in the Washington\, DC area called Cybersecurity Today. The program offers expert insights\, in-depth analysis\, and the latest updates on cybersecurity trends and threats\, further establishing his role as a prominent thought leader in the industry. \nRecognized as a Federal 100 award recipient in 2019 and the Federal Information Systems Security Educators’ Association (FISSEA) “Educator of the Year” in 2011\, Jim is widely respected for his commitment to elevating cybersecurity education. \nIn the rapidly evolving arena of Artificial Intelligence (AI)\, Jim has directly trained well over 1\,000 IT and cyber professionals on generative AI fundamentals through intensive sessions with the Department of the Interior’s University\, the Defense Information Systems Agency (DISA)\, the National Risk Management Center (NRMC) within CISA\, and the Greater Washington DC Chapter of ISACA. He leverages AI-driven tools such as ChatGPT\, Gemini\, Dalle\, Midjourney\, and Copilot to translate complex concepts into practical\, governance-focused applications. \nJim holds numerous certifications\, including: \n\nArtificial Intelligence: AAISM\, AAIA\, AIGP\nCybersecurity: CISM\, CISA\, CRISC\, CISSP\, ISSEP\, CGRC (CAP)\, SCNA\, SCNP\, IAM\, IEM\, SSCP\, CEH\, ECSA\, CHFI\, LPT\, TICSA\, CIWSA\, Security+\, and FITSP-M.\nInformation Technology: CGEIT\, MCITP\, MCSE: Security\, MCSE: Messaging\, MCSA\, MCDST\, Server+\, Network+\, A+.\nPrivacy: CDPSE\, CIPP/US\nProject Management: PMP (Project Management Professional).\nEducation: ICE-CCP (I.C.E. Certified Credentialing Professional)\, DACUM Facilitator\n\nJim is currently finalizing a master’s degree in education from George Washington University with a concentration in Assessment\, Testing\, and Measurement. \n \n\n  \n\n \n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 7 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \nCPE Distribution and Evaluation Survey \nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \nAdditional CPE Details \n\nPrerequisites: None\nAdvance Preparation: None\nProgram Knowledge Level: Basic\nDelivery Method:  Live\, In-Person\nField of Study:  Information Technology – Technical URL:https://isaca-gwdc.org/event/future-tech-dc-2026-post-event-training-nist-ai-rmf-workshop/ LOCATION:George Mason University – Arlington\, 3351 Fairfax Drive\, Arlington\, VA\, 22201\, United States CATEGORIES:Workshop ATTACH;FMTTYPE=image/jpeg:https://isaca-gwdc.org/wp-content/uploads/2025/11/Future-Tech-DC-Logo-2026-Draft1-1.jpg END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20260416T083000 DTEND;TZID=America/New_York:20260416T170000 DTSTAMP:20260414T204422Z CREATED:20251106T161948Z LAST-MODIFIED:20260414T204422Z UID:34087-1776328200-1776358800@isaca-gwdc.org SUMMARY:Future Tech DC 2026 DESCRIPTION:  \n\n\n \n\n\nFuture Tech DC 2026\nApril 16\, 2026 from 8:30 AM to 5:00 PM\nGeorge Mason University\, Arlington VA Campus\n7 CPE\n$179 for Members and Partner Organizations\n$249 for All Other Registrants \n  \n\n\n\n\n\n  \nTrust\, Privacy\, and AI: Resilience and Agility in the Age of Digital Transformation \nJoin us in the heart of Washington\, D.C.\, where innovators\, industry leaders\, and technology enthusiasts converge to shape the future of the digital landscape. This event offers: \n\nInsightful Sessions: Prepare for current and emerging challenges by exploring the balance of innovative emerging technologies with security and privacy in the digital age. Sessions are designed to empower auditors and cybersecurity professionals with strategies to ensure data protection and trust at every level of digital transformation.\nTailored Tracks: Choose from General\, Government\, and Workshop sessions\, including hands-on workshops.\nNetworking & Professional Growth: Connect with peers\, earn 7 CPE credits\, and gain practical tools to secure your organization.\n\nWho Should Attend this Event: IT / Cybersecurity professionals\, cybersecurity students\, auditors\, CISOs\, or business or government leaders \n \nRegistration closes on April 15 @ 5pm.  There is no walk-up registration for this event. \nRegister Today! \n\n  \n \n\n\n  \nRegistration Bundles Available (through April 9) \nEarly-bird registration pricing is not available for bundles and only applies to individual registrations. \n\n\nProfessional Bundles are available for businesses and organizations to purchase bundles of 10 registrations at the member rate. After purchase\, a discount code will be emailed. \nPurchase Professional Bundle \n\n\nStudent Bundles are available for colleges and universities to purchase bundles of 10 registrations for students at discounted student pricing. After purchase\, a discount code will be emailed. \nPurchase Student Bundle \n\n\n\n\n \n\n \nFuture Tech DC 2026 Presenters \nThank you to all of our conference presenters \n\n\n \nTim Brown\nSolarWinds\nOpening Keynote \n\n\n \nGeorge Kamide\nThe CISO Society\nLunch Keynote \n\n\n \nLarry Whiteside Jr.\nCONFIDE\nLunch Keynote \n\n\n \nIra Winkler\nCYE Security\nLunch Keynote \n\n\n\n\n \nDr. Linda Kostic\nUMUC\nGeneral Track Presenter \n\n\n \nMatthew D. Kohel\nSAUL EWING LLP\nGeneral Track Presenter \n\n\n \nDr. Kyle David\nDr. David\, LLC\nGeneral Track Presenter \n\n\n \nDanny Izquierdo\nDemandbase\nGeneral Track Presenter \n\n\n\n\n \nPrabhmeet Kohli\nNovamorph\nGeneral Track Presenter \n\n\n \nLaTonya E. Clark\nGeneral Track Presenter \n\n\n \nMike Keeney\nFreddie Mac\nGeneral Track Presenter \n\n\n \nKelly Siu\nMeta\nGeneral Track Presenter \n\n\n\n\n \nThadi Murali\nGeneral Track Presenter \n\n\n \nAlexis Appollonia Robinson\nAmazon\nGeneral Track Presenter \n\n\n \nDr. Amy Soller\nAI Industry SME\nGeneral Track Presenter \n\n\n \nMèlika D Carroll\nCohere\nGeneral Track Presenter \n\n\n\n\n \nDiya Wynn\nAWS\nGeneral Track Presenter \n\n\n \nAndrew Cunje\nAppian\nGeneral Track Presenter \n\n\n \nJesse Whaley\nCorticle & Digital Cyber Forge\nGeneral Track Presenter \n\n\n \nNat Habtesion\nLumen Technologies\nGeneral Track Presenter \n\n\n\n\n \nFernando Puerto Mendoza\nInter-American Development Bank\nGeneral Track Presenter \n\n\n \nRuchi Shewaramani\nWashington Health Benefit Exchange\nGeneral Track Presenter \n\n\n \nChris Haigh\nGovernment Track Presenter \n\n\n \nJennifer Franks\nGAO\nGovernment Track Presenter \n\n\n\n\n \nPerry Keating\nProtiviti Government Services\nGovernment Track Presenter \n\n\n \nBranden Reber\nFortreum\nGovernment Track Presenter \n\n\n \nGuy Walsh\nNDIA\nGovernment Track Presenter \n\n\n \nJason Boyd\nFederal Retirement Thrift Investment Board\nGovernment Track Presenter \n\n\n\n\n \nSuzanne Yuter\nGuidehouse\nGovernment Track Presenter \n\n\n \nDr. Jeffrey Pullen\nU.S. DOJ\nGovernment Track Presenter \n\n\n \nJason Yovich\nFDIC OIG\nGovernment Track Presenter \n\n\n \nMark Priebe\nDOE OIG\nGovernment Track Presenter \n\n\n\n\n \nVictoria Yan Pillitteri\nNIST\nGovernment Track Presenter \n\n\n \nDr. Michaela Iorga\nNIST/ITL\nWorkshop Instructor \n\n\n \nSelena Xiao\nNIST\nWorkshop Instructor \n\n\n \nInno Eroraha\nNet Security\nWorkshop Instructor \n\n\n  \n\nSpeaker Showcase Videos \nSeveral of the Future Tech presenters have showcase videos for their topics. \nView Speaker Showcase Videos \n  \n\n\n  \n \nAgenda \nThe conference will be held on April 16\, 2026 from 8:30 am to 5:00 pm. Add this event to your calendar using the Add to Calendar link at the bottom of the page. \nTailor your conference experience by choosing sessions in one of the three tracks.  Please note\, no advance selection is required for the General and Government Tracks. Registrants can attend the General and Government sessions on a first come basis on the day of the conference.  Selections for the workshop track will be made during registration. \nClick the link below to view the conference agenda\, parking information\, and CPE requirements. \nView Agenda and Logistics PDF \n  \n\n  \n \nKeynote Presentations \nOpening Keynote \nThe Sunburst Journey – From breach to closure in 5 years \nJoin Tim Brown from SolarWinds as he walks you through the lessons learned through the 5-year process. Starting with the Nation state attack\, the recovery\, the legal actions and finally the SEC dismissal of the case. It has been a journey for Tim personally as well as the company and the industry. \n  \nLunch Keynote \nThe Expanding CISO Role: A Live Debate on Developing Leadership That Delivers \nSee a lively keynote debate of highly experienced CISOs who bring decade of real-world leadership experience to the stage to challenge assumptions and debate what it means to succeed in the role today and what will be required to succeed tomorrow. Drawing on decades of leadership across different organizations and operating models\, they will explore whether it is actually possible for a CISO to get the role right when the expectations themselves are constantly shifting. \nThis lunch keynote is moderated by George Kamide (The CISO Society) and joined by panelists Larry Whiteside Jr. (CONFIDE) and Ira Winkler (CYE Security). \n  \n\n  \n \n\n\nGeneral Track \nVisionary Leaders in AI\, Emerging Tech\, Cybersecurity\, and Privacy \nHear from globally recognized thought leaders who are driving change in artificial intelligence\, emerging technologies\, cybersecurity\, and privacy. These inspirational talks will provide insights into the future of tech and its role in building a safer\, more innovative world. \nView General Track \n\n\nGovernment Track \nGovernment Focus: Federal\, State\, and Local Perspectives \nDive into sessions tailored to the unique challenges and opportunities faced by government entities and contractors. Explore innovative strategies for securing critical infrastructure\, enhancing digital services\, and navigating regulatory landscapes throughout government. \nView Government Track \n\n\nWorkshop Track \nPractical Skills and Cutting-Edge Tools \nParticipate in hands-on\, interactive workshops and labs that bring theory to life. Workshops will have pre-requisites for attendance as well as limited capacity. There is a limit of one workshop per registrant. There are system requirements and prerequisites for each workshop. \nView Workshop Track \n\n\n\n  \n \nPost-Event Activities and Training \n\n\n \nImmediately After the Conference \n5:00PM – 5:15PM: A raffle will be held immediately after the conference ends \n5:15PM – 7:00PM: A networking social will be held. Registrants should indicate during registration if the plan to attend. \n  \n\n\n \nPost-Event Training \nOn April 17\, a workshop on NIST AI Risk Management Framework (AI RMF) will be held at Mason Square. The workshop will be taught by Jim Wiggins from 8:30AM to 4:00PM. \nView Workshop Details \n\n\n\n\n \n\n\n  \nBe a Sponsor of this Year’s Conference! \nEvent sponsorships of $1\,000 per organization are available for this year’s Future Tech DC. Visit the site below for sponsor benefits\, submitting sponsorship payments\, and contacting the sponsorship team. \nSponsorship Info and Payment \n  \n\n\n \n\nEvent Hosts \nFuture Tech DC is led by ISACA GWDC and Hosted by GMU College of Engineering and Computing: \n\n\n \n\n\n \n\n\n\n  \nEvent Sponsors \nThank you to the following companies for sponsoring Future Tech DC 2026: \n\n\n \n\n\n \n\n\n \n\n\n\n\n \n\n\n \n\n\n \n\n\n\n  \nPartner Organizations \nThis event is presented in partnership with the following organizations: \n\n\n \n\n\n \n\n\n \n\n\n\n\n \n\n\n \n\n\n \n\n\n\n\n \n\n\n \n\n\n \n\n\n\n\n \n\n\n \n\n\n \n\n\n\n  \nGWDC Sponsors \nThank you to our annual sponsors for supporting the GWDC and its members! \n\n\n \n\n\n \n\n\n \n\n\n\n\n \n\n\n \n\n\n \n\n\n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\n\n  \nAdditional Event Details \nDate and Time \nThe conference will be held on April 16\, 2026 from 8:30 am to 5:00 pm. \nRegistration will open at 8:00 AM. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \nVenue Location\, Parking\, and Metro \nGeorge Mason University (GMU) Arlington Campus (Mason Square)\n3351 Fairfax Drive\, Arlington\, VA 22201 \nParking: Visitor parking is available underneath the school in the Fuse building or Van Metre Hall. Entrance to both garages is from Founders Way.  Please view the Mason Square parking map for additional information. Parking garages use the Metropolis parking system. Scan the QR code in the garage. \nMetro: The nearest Metro station is the Virginia Square-GMU station. It is a 5-minute walk from the metro station to the GMU Campus \n  \nPricing \n\nEarly Bird Pricing (through 3/6/26)\n$139 for Member and Partner Organizations\n$209 for all other registrants \n\n\nRegular Pricing\n$179 for Member and Partner Organizations\n$249 for all other registrants \n\nWhat’s included in the pricing: Breakfast\, Lunch\, Evening Networking/Social Event \nTo become a member and take advantage of the member rate for our events\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \n  \nEvent Policies \nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 7 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \nCheck-ins and Checkouts \nParticipants must check into and out of the event in order to receive CPE credit. Participants will scan their conference badge in the morning at the registration desk and again at the end of the conference. Participants must attend the full day to receive the full amount of CPE credits. \n  \nCPE Distribution and Evaluation Survey \nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \nLearning Objective \nAfter completing the course\, students will have a greater understanding of current trends and practices in AI\, Cybersecurity and Trust. Learning objectives for each session are included in the session description. \n  \nAdditional CPE Details \n\nPrerequisites: None\nAdvance Preparation: None\nProgram Knowledge Level: Basic\nDelivery Method:  Live\, In-Person\nField of Study:  Information Technology – Technical\n\n  \n\n\n  URL:https://isaca-gwdc.org/event/future-tech-dc-2026/ LOCATION:George Mason University – Arlington\, 3351 Fairfax Drive\, Arlington\, VA\, 22201\, United States CATEGORIES:Conferences ATTACH;FMTTYPE=image/jpeg:https://isaca-gwdc.org/wp-content/uploads/2025/11/Future-Tech-DC-Logo-2026-Draft1-1.jpg END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20260411T090000 DTEND;TZID=America/New_York:20260411T170000 DTSTAMP:20260307T120518Z CREATED:20250908T220709Z LAST-MODIFIED:20260307T120518Z UID:34587-1775898000-1775926800@isaca-gwdc.org SUMMARY:CRISC Review Course 2026 DESCRIPTION:  \n \n  \nApril 11\, 18\, and 25\, 2026\nVirtual Event (Teams)\nEarn up to 24 CPE\n$600 for GWDC Members\n$800 for Non-Members\nOptional Study Kits Available \n  \n  \n\n\n\nCRISC® Review Course \nThe GWDC is sponsoring an intensive 3-day virtual review course for the Certified in Risk and Information Systems Controls™ (CRISC®). This review course will provide practical advice on preparing for the CRISC exam and specific instruction regarding the job practice areas addressed by CRISC as defined by ISACA® Global. \nThis event is ideal for professionals planning to sit for the CRISC exam. Attendees are encouraged to prepare in advance to maximize the benefits of the course. \nRegistration closes on April 9 @ 5PM. \nRegister Today! \n  \n\n\n\n  \nThe CRISC and Exam Registration \n \nA Certified in Risk and Information Systems Control® (CRISC®) certification demonstrates your IT risk management expertise. By taking a proactive approach\, you will learn how to enhance your organization’s business resilience\, deliver stakeholder value and optimize risk management across the enterprise. As a CRISC\, you will be ready to address emerging technology\, including AI risk assessment and general best practices for risk management and mitigation related to AI data governance and ethics. \nMore about the CRISC \n  \n\n\n\nEvent Details \n\nDate and Time \n\n\nThe conference will be held on April 11\, 18\, and 25\, 2026 (Saturdays) from 9:00 am to 5:00 pm. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThe conference will be held using Microsoft Teams. \nPrior to the event\, the instructor will email all participants the Teams link for the course along with course materials \n  \n\n\nPricing \n\n\nThe fee for GWDC Members is $600 for the course.\nThe fee for all other registrants is $800 for the course. \nTo become a member and take advantage of the member rate for our events\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \n  \n\n\nRetake Discount \n\n\nStudents who take this GWDC review class and do not pass the corresponding Exam are eligible for a one-time 50% discount on the next review class offered by the GWDC for the exam. Please read the chapter event policy for discount details. Contact the Certifications Director through the Contact Form if you want to take advantage of this discount. \n  \n\n\nEvent Policies \n\n\nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n\n  \n\n\n\n  \nComments from Review Course Attendees \n“Jim was a great instructor and made all the topics presented and relevant to my job. He kept us engaged\, at ease when we answered questions wrong and provided a background on and good explanations on why other answers were the correct ones.” \n“This was a great course. Jim is very knowledgeable and a great instructor.” \n“The course overall was great and helped me prepare for the CRISC exam\, the content was timely and accurate.” \n“I really enjoyed this course. It was very informative.” \n“The course was great\, thanks to the facilitator’s ability to present the information in an engaging way\, connect it to real-world scenarios\, and actively respond to participants’ questions.“ \n  \n  \n\n\n\nAgenda \n\nDay 1 \n\n\nGovernance (Domain 1) \nIT Risk Assessment (Domain 2) \n\n\nDay 2 \n\n\nIT Risk Assessment (Domain 2) \nRisk Response and Reporting (Domain 3) \n\n\nDay 3 \n\n\nInformation Technology and Security (Domain 4) \n\n  \nCourse Materials and Exam Resources \nMaterials Provided During the Course \nParticipants receive a Study Guide to help them prepare for the CRISC exam. The Study Guide contains a presentation\, a case study\, and 20 quiz questions for each domain in the official CRISC Review Manual. The Study Guide contains additional material such as suggested study approach\, exam taking tips\, list of “must know” vocabulary terms\, and other suggested readings to aid participants in their exam preparation. \n  \nStudy Materials \nThe instructor highly recommends that students purchase the CRISC Review Manual and the CRISC Review Questions\, Answers\, and Explanations Database – 12 Month. Below are the study materials available for purchase from the ISACA Bookstore: \n\nCRISC Review Manual\nCRISC Review Questions\, Answers & Explanations Manual\nCRISC Review Questions\, Answers & Explanation Database – 12 month subscription\n\n**It is highly recommended to order these at the earliest opportunity to avoid any possible delays in their availability for the start of the program. \n  \n\nOptional Study Kits for Purchase \nAt the end of registration\, there will be an option to purchase one of the following study kits to assist students in preparation for the course: \n\nFull Kit: Includes the Review Manual (Digital Copy)\, QAE database\, and a voucher for the Exam. ($965)\nTraining Kit: Includes the Review Manual (Digital Copy) and QAE database. ($359)\n\nPlease note the following about the kits: \n\nThere is no refund for the study kits once purchased.\nThe Review Manual is the digital version and cannot be printed.\nThe QAE database is a 12-month subscription with an option to purchase a subscription extension.\nVouchers for the training kits will be emailed within 72 hours of purchase.\nIf you are not an ISACA member\, you will need to create a free MyISACA account to redeem the vouchers for the kits/exam.\n\nFor further details on the Review Manual and QAE database\, please visit the ISACA Website. \n\n  \nAdditional Study Resources \nCandidates should review the Exam Candidate Guide and other resources on the ISACA CRISC page as part of their study program.  \n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nInstructor \n\n\nJim Wiggins\nAAISM\, AAIA\, AIGP\, CISM\, CISA\, CRISC\, CISSP\, ISSEP\, CGRC (CAP)\, SCNA\, SCNP\, IAM\, IEM\, SSCP\, CEH\, ECSA\, CHFI\, LPT\, TICSA\, CIWSA\, Security+\, FITSP-M\, CGEIT\, MCITP\, MCSE: Security\, MCSE: Messaging\, MCSA\, MCDST\, Server+\, Network+\, A+\, CDPSE\, CIPP/US\, PMP\, ICE-CCP\, DACUM Facilitator \nJim Wiggins is a seasoned IT and cybersecurity expert with over 29 years of industry experience\, 24 of which have been dedicated to information security – and\, more recently\, the last 3 years on artificial intelligence. He is the Founder and CEO of Securible\, LLC\, a Washington\, DC-based cybersecurity training and consulting firm specializing in practical\, forward-thinking solutions. Through Securible\, Jim has championed innovative approaches to address emerging threats\, ensure regulatory compliance\, and harness the power of Artificial Intelligence in IT audit\, cybersecurity\, governance and privacy. Throughout his distinguished career\, Jim has trained well over 20\,000 IT and cyber professionals\, underscoring his commitment to education and the advancement of the field. \nIn addition to his leadership at Securible\, Jim also serves as the Founder and CEO of the Federal IT Security Institute (FITSI)\, a 501(c)(6) non-profit certification body accredited by the ANSI National Accreditation Board (ANAB) under ISO 17024:2012. FITSI provides role-based cybersecurity certifications designed to fortify the U.S. federal cybersecurity workforce. \nEnhancing his contributions to the cybersecurity community\, Jim hosts a TV show in the Washington\, DC area called Cybersecurity Today. The program offers expert insights\, in-depth analysis\, and the latest updates on cybersecurity trends and threats\, further establishing his role as a prominent thought leader in the industry. \nRecognized as a Federal 100 award recipient in 2019 and the Federal Information Systems Security Educators’ Association (FISSEA) “Educator of the Year” in 2011\, Jim is widely respected for his commitment to elevating cybersecurity education. \nIn the rapidly evolving arena of Artificial Intelligence (AI)\, Jim has directly trained well over 1\,000 IT and cyber professionals on generative AI fundamentals through intensive sessions with the Department of the Interior’s University\, the Defense Information Systems Agency (DISA)\, the National Risk Management Center (NRMC) within CISA\, and the Greater Washington DC Chapter of ISACA. He leverages AI-driven tools such as ChatGPT\, Gemini\, Dalle\, Midjourney\, and Copilot to translate complex concepts into practical\, governance-focused applications. \nJim holds numerous certifications\, including: \n\nArtificial Intelligence: AAISM\, AAIA\, AIGP\nCybersecurity: CISM\, CISA\, CRISC\, CISSP\, ISSEP\, CGRC (CAP)\, SCNA\, SCNP\, IAM\, IEM\, SSCP\, CEH\, ECSA\, CHFI\, LPT\, TICSA\, CIWSA\, Security+\, and FITSP-M.\nInformation Technology: CGEIT\, MCITP\, MCSE: Security\, MCSE: Messaging\, MCSA\, MCDST\, Server+\, Network+\, A+.\nPrivacy: CDPSE\, CIPP/US\nProject Management: PMP (Project Management Professional).\nEducation: ICE-CCP (I.C.E. Certified Credentialing Professional)\, DACUM Facilitator\n\nJim is currently finalizing a master’s degree in education from George Washington University with a concentration in Assessment\, Testing\, and Measurement. \n \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 24 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \n\nPoll Questions \n\n\nParticipants must respond to all the poll questions polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls. \n  \n\n\nCPE Distribution and Evaluation Survey \n\n\nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \n\n\nLearning Objective \n\n\nAfter completing the course\, students will be prepared to sit for the CRISC exam. \n  \n\n\nCPE-Related Details \n\n\n\nPrerequisites: None\nAdvance Preparation: Students are expected to have prepared for the exam prior to attending the course.\nProgram Knowledge Level: Basic\nDelivery Method:  Group Internet Based\nField of Study:  Information Technology – Technical URL:https://isaca-gwdc.org/event/crisc-review-course-2026/ LOCATION:Virtual Event CATEGORIES:Review Courses ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2025/08/crisc_review_2026.png ORGANIZER;CN="Clifton Persaud (Certifications Program and Special Assistance Requests)":MAILTO:certifications@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20260329T153000 DTEND;TZID=America/New_York:20260329T180000 DTSTAMP:20260226T172947Z CREATED:20260226T015211Z LAST-MODIFIED:20260226T172947Z UID:35683-1774798200-1774807200@isaca-gwdc.org SUMMARY:Special Meeting of the Chapter Membership DESCRIPTION:  \n \n  \nMarch 29\, 2026\nHybrid (Zoom and The Boardroom in Arlington VA)\nEarn up to 1 CPE\nFor GWDC Members only\nComplimentary – No Registration Fee \n  \n  \n\n\n\nSpecial Member Meeting \nBylaws Vote + 1 CPE Debate + Networking + Prizes \nJoin us for an engaging and high-energy afternoon of networking\, chapter governance\, and a live industry debate that qualifies for 1 CPE. \nThe revised 2026 Chapter Bylaws have been approved by ISACA Global and voted on by the Chapter Board. We now need the membership to vote to formally adopt them. \nThis is a special meeting — and we are making it worth your time. \nWhat’s Included: \n\nNetworking and community connection\nFood and light refreshments\nTwo drink tickets per attendee\nLive debate session qualifying for 1 CPE\nPrizes and raffle giveaways\n\nRegistration closes on March 28 @ 5PM. \nRegister Today! \n  \n\n\n\n  \nSponsorship Opportunities \nIf you are interested in sponsoring a chapter event\, or sponsoring the chapter as an annual sponsor\, please visit our sponsorship page. \nSponsorship Info \n  \n\n\n\nEvent Details \n\nDate and Time \n\n\nThe special meeting will be held on Sundary\, March 29\, 2026 from 3:30 pm to 5:15 pm. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nHybrid Event \n\n\nDuring registration you will be asked whether you plan to attend in person or virtually. Please select “in-person” only if you know you will be able to attend. \n  \n\n\nIn-Person Details \nThe Board Room (Clarendon)\n925 N. Garfield Street\nArlington\, VA 22201 \nParking Information\nThere is street parking near the restaurant.  Parking is also available at the nearby Colonial Parking garage. The GWDC will not be paying for parking for this event. \nNearest Metro\nThe restaurant is a short walk from Clarendon Metro Station (Orange and Silver lines). \n\n\nVirtual Details \nThe conference will be held using Zoom. Prior to the event\, participants must install the Zoom app on their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits. \n\n\n\n  \n\nPricing \n\n\nThis event is for current GWDC members only!\nThere is no registration fee for this event. \nTo become a member and take advantage of the member rate for our events\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \n  \n\n\nEvent Policies \n\n\nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n  \n\n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nAgenda \n \n\n03:30 PM – 04:00 PM \n\n\nNetworking \nNetworking\, food\, and drinks (two drink tickets per person) \nIn-person attendees will be entered into a raffle draw for prizes. \n\n \n\n04:00 PM – 4:15 PM \n\n\nSpecial Member Meeting: Bylaws Vote \nBrief overview of the updates to the chapter bylaws and official member vote (in-person and on Zoom). \nMembers are encouraged to review the proposed bylaws and summary of changes prior the meeting. \nVoting will be conducted via Online Survey. For in-person attendees\, a QR code will be provided to enable voting via mobile devices. For zoom attendees\, a survey link will be provided. \n\n \n\n04:15 PM – 05:15 PM \n\n\nLive Debate on AI Regulation: Protecting Society or Slowing Progress? \nArtificial intelligence is reshaping industries\, economies\, and national security. Governments around the world are proposing and implementing new regulatory frameworks — but are these measures necessary safeguards\, or could they hinder innovation and competitiveness? \nJoin us for a lively\, thought-provoking debate exploring: \n\nThe case for regulation — risk management\, accountability\, transparency\, and societal protection\nThe case against heavy regulation — innovation\, agility\, global competitiveness\, and unintended consequences\nWhat AI governance means for auditors\, cybersecurity professionals\, and technology leaders\n\nAudience participation and Q&A included. \n\n \n\n5:15 PM – 6:00 PM \n\n\nRaffle drawings and Wrap-Up \nContinued networking\, raffle drawings\, and prize announcements. \n\n  \nWhy Your Attendance Matters \nOur bylaws are the foundation for how the chapter operates — governance\, leadership structure\, member engagement\, and long-term sustainability. Your vote ensures the chapter remains strong\, compliant\, and positioned for growth. \nWe have not historically had strong turnout for special meetings. This time\, we are combining governance\, learning\, and community in one meaningful event. \nYour voice. Your vote. Your chapter. \n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 1 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \n\nVirtual Attendees \n\n\nParticipants must respond to all the poll questions via the Zoom polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls. \n  \n\n\nIn-Person Attendees \n\n\nParticipants must stay through the entire debate session to earn the 1 hour of CPE. \n  \n\n\nCPE Distribution and Evaluation Survey \n\n\nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \n\n\nLearning Objective \n\n\nAfter attending this event\, attendees will learn about current and future trends AI regulation. \n  \n\n\nCPE-Related Details \n\n\n\nPrerequisites: None\nAdvance Preparation: None\nProgram Knowledge Level: Basic\nDelivery Method: Group Internet Based and Group-Live\nField of Study: Information Technology – Technical URL:https://isaca-gwdc.org/event/special-meeting-of-the-chapter-membership/ LOCATION:The Board Room\, 925 N. Garfield Street\, Arlington\, VA\, 22201\, United States CATEGORIES:Conferences,Social Events ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2026/02/special_member_meeting.png ORGANIZER;CN="Avneet Sabharwal":MAILTO:programs@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20260307T090000 DTEND;TZID=America/New_York:20260307T170000 DTSTAMP:20260106T232910Z CREATED:20250830T143730Z LAST-MODIFIED:20260106T232910Z UID:34561-1772874000-1772902800@isaca-gwdc.org SUMMARY:CISM Review Course 2026 DESCRIPTION:  \n \n  \nMarch 7\, 14\, 21\, 2026\nVirtual Event (Teams)\nEarn up to 24 CPE\n$500 for GWDC Members\n$800 for Non-Members\nOptional Study Kits Available\n \n  \n  \n\n\n\nCISM® Review Course \nThe GWDC is sponsoring an intensive 3-day virtual review course for the Certified Information Security Manager® (CISM) Exam. The CISM® review course will provide practical advice on preparing for the CISM exam and specific instruction regarding the job practice areas addressed by CISM as defined by ISACA® Global. \nThis event is ideal for professionals planning to sit for the CISM exam. Attendees are encouraged to prepare in advance to maximize the benefits of the course. \nRegistration closes on March 5 @ 5PM. \nRegister Today! \n  \n\n\n\n  \nThe CISM and Exam Registration \n \nCertified Information Security Manager® (CISM®) affirms your ability to assess risks\, implement effective governance\, and proactively respond to incidents. With a highlight on emerging technologies such as AI and blockchain\, it guarantees your skillset meets evolving security threats and industry requirements. By addressing top-of-mind concerns like data breaches and ransomware attacks\, crucial for IT professionals\, this certification ensures you are staying ahead of the pace of change. \nRegistration for the CISM exam is administered by ISACA®\, not the GWDC. Registering for this review course does not register you for the exam. \nMore about the CISM \n  \n\n\n\nEvent Details \n\nDate and Time \n\n\nThe course will be held on March 7\, 14\, and 21\, 2026 (Saturdays) from 9:00 am to 5:00 pm. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThe course will be held using Microsoft Teams. \nPrior to the event\, the instructor will email all participants the Teams link for the course along with course materials \n  \n\n\nPricing \n\n\nThe fee for GWDC Members is $500 for the course.\nThe fee for all other registrants is $800 for the course. \nTo become a member and take advantage of the member rate for our events\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \n  \n\n\nEvent Policies \n\n\nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n\n  \n\n\n\n  \nRe-take Discount \nStudents who take this GWDC review class and do not pass the corresponding Exam are eligible for a one-time 50% discount on the next review class offered by the GWDC for the exam. Please read the chapter event policy for discount details. Contact the Certifications Director through the Contact Form below if you want to take advantage of this discount. \nContact Us \n  \n\n\n\nAgenda \n\nDay 1 \n\n\nModule 1 – Information Security Governance \nModule 2 – Information Security Risk Management \n\n\nDay 2 \n\n\nModule 2 – Information Security Risk Management \nModule 3 – Information Security Program \n\n\nDay 3 \n\n\nModule 3 – Information Security Program \nModule 4 – Incident Management \nModule 5 – Exam Preparation Strategies \n\n  \nCourse Materials and Exam Resources \nMaterials Provided During the Course \nParticipants receive a Study Guide to help them prepare for the CISM exam. The Study Guide contains a presentation\, a case study\, and 20 quiz questions for each domain in the official CISM Review Manual. The Study Guide contains additional material such as suggested study approach\, exam taking tips\, list of “must know” vocabulary terms\, and other suggested readings to aid participants in their exam preparation. \n  \nStudy Materials \nThe instructor highly recommends that students purchase the CISM Review Manual and the CISM Review Questions\, Answers\, and Explanations Database – 12 Month. Below are the study materials available for purchase from the ISACA Bookstore: \n\nCISM Review Manual\nCISM Review Questions\, Answers & Explanations Manual\nCISM Review Questions\, Answers & Explanation Database – 12 month subscription\n\n**It is highly recommended to order these at the earliest opportunity to avoid any possible delays in their availability for the start of the program. \n  \n\nOptional Study Kits for Purchase \nAt the end of registration\, there will be an option to purchase one of the following study kits to assist students in preparation for the course: \n\nFull Kit: Includes the Review Manual (Digital Copy)\, QAE database\, and a voucher for the Exam. ($965)\nTraining Kit: Includes the Review Manual (Digital Copy) and QAE database. ($359)\n\nPlease note the following about the kits: \n\nThere is no refund for the study kits once purchased.\nThe Review Manual is the digital version and cannot be printed.\nThe QAE database is a 12-month subscription with an option to purchase a subscription extension.\nVouchers for the training kits will be emailed within 72 hours of purchase.\nIf you are not an ISACA member\, you will need to create a free MyISACA account to redeem the vouchers for the kits/exam.\n\nFor further details on the Review Manual and QAE database\, please visit the ISACA Website. \n\n  \nAdditional Study Resources \nCandidates should review the Exam Candidate Guide and other resources on the ISACA CISM page as part of their study program.  \n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nInstructor \n\n \n\n\nJim Wiggins\nAAISM\, AAIA\, AIGP\, CISM\, CISA\, CRISC\, CISSP\, ISSEP\, CGRC (CAP)\, SCNA\, SCNP\, IAM\, IEM\, SSCP\, CEH\, ECSA\, CHFI\, LPT\, TICSA\, CIWSA\, Security+\, FITSP-M\, CGEIT\, MCITP\, MCSE: Security\, MCSE: Messaging\, MCSA\, MCDST\, Server+\, Network+\, A+\, CDPSE\, CIPP/US\, PMP\, ICE-CCP\, DACUM Facilitator \nJim Wiggins is a seasoned IT and cybersecurity expert with over 29 years of industry experience\, 24 of which have been dedicated to information security – and\, more recently\, the last 3 years on artificial intelligence. He is the Founder and CEO of Securible\, LLC\, a Washington\, DC-based cybersecurity training and consulting firm specializing in practical\, forward-thinking solutions. Through Securible\, Jim has championed innovative approaches to address emerging threats\, ensure regulatory compliance\, and harness the power of Artificial Intelligence in IT audit\, cybersecurity\, governance and privacy. Throughout his distinguished career\, Jim has trained well over 20\,000 IT and cyber professionals\, underscoring his commitment to education and the advancement of the field. \nIn addition to his leadership at Securible\, Jim also serves as the Founder and CEO of the Federal IT Security Institute (FITSI)\, a 501(c)(6) non-profit certification body accredited by the ANSI National Accreditation Board (ANAB) under ISO 17024:2012. FITSI provides role-based cybersecurity certifications designed to fortify the U.S. federal cybersecurity workforce. \nEnhancing his contributions to the cybersecurity community\, Jim hosts a TV show in the Washington\, DC area called Cybersecurity Today. The program offers expert insights\, in-depth analysis\, and the latest updates on cybersecurity trends and threats\, further establishing his role as a prominent thought leader in the industry. \nRecognized as a Federal 100 award recipient in 2019 and the Federal Information Systems Security Educators’ Association (FISSEA) “Educator of the Year” in 2011\, Jim is widely respected for his commitment to elevating cybersecurity education. \nIn the rapidly evolving arena of Artificial Intelligence (AI)\, Jim has directly trained well over 1\,000 IT and cyber professionals on generative AI fundamentals through intensive sessions with the Department of the Interior’s University\, the Defense Information Systems Agency (DISA)\, the National Risk Management Center (NRMC) within CISA\, and the Greater Washington DC Chapter of ISACA. He leverages AI-driven tools such as ChatGPT\, Gemini\, Dalle\, Midjourney\, and Copilot to translate complex concepts into practical\, governance-focused applications. \nJim holds numerous certifications\, including: \n\nArtificial Intelligence: AAISM\, AAIA\, AIGP\nCybersecurity: CISM\, CISA\, CRISC\, CISSP\, ISSEP\, CGRC (CAP)\, SCNA\, SCNP\, IAM\, IEM\, SSCP\, CEH\, ECSA\, CHFI\, LPT\, TICSA\, CIWSA\, Security+\, and FITSP-M.\nInformation Technology: CGEIT\, MCITP\, MCSE: Security\, MCSE: Messaging\, MCSA\, MCDST\, Server+\, Network+\, A+.\nPrivacy: CDPSE\, CIPP/US\nProject Management: PMP (Project Management Professional).\nEducation: ICE-CCP (I.C.E. Certified Credentialing Professional)\, DACUM Facilitator\n\nJim is currently finalizing a master’s degree in education from George Washington University with a concentration in Assessment\, Testing\, and Measurement. \n \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 24 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \n\nPoll Questions \n\n\nParticipants must respond to all the poll questions polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls. \n  \n\n\nCPE Distribution and Evaluation Survey \n\n\nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \n\n\nLearning Objective \n\n\nAfter completing the course\, students will be prepared to sit for the CISM exam. \n  \n\n\nCPE-Related Details \n\n\n\nPrerequisites: None\nAdvance Preparation: Students are expected to have prepared for the exam prior to attending the course.\nProgram Knowledge Level: Basic\nDelivery Method:  Group Internet Based\nField of Study:  Information Technology – Technical URL:https://isaca-gwdc.org/event/cism-review-course-2026/ LOCATION:Virtual Event CATEGORIES:Review Courses ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2025/08/cism_review_2026.png ORGANIZER;CN="Clifton Persaud (Certifications Program and Special Assistance Requests)":MAILTO:certifications@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20260303T173000 DTEND;TZID=America/New_York:20260306T213000 DTSTAMP:20260222T192741Z CREATED:20250908T225929Z LAST-MODIFIED:20260222T192741Z UID:34610-1772559000-1772832600@isaca-gwdc.org SUMMARY:AAISM Review Course 2026 DESCRIPTION:  \n \n  \nMarch 3 – 6\, 2026\nVirtual Event (Zoom)\nEarn up to 16 CPE\n$400 for GWDC Members\n$600 for Non-Members\nOptional Study Kits Available \n  \n\n\n\nAdvanced in AI Security Management™ (AAISM™) Review Course \nThe GWDC is sponsoring an intensive virtual review course for the Advanced in AI Security Management (AAISM) certification exam. This review course will provide practical advice on preparing for the AAISM exam and specific instruction regarding the job practice areas addressed by AAISM as defined by ISACA® Global. \nThe AAISM validates security management professionals’ ability to demonstrate their expertise in AI. This credential builds upon existing security best practices to enhance expertise and adapt to the evolving AI-driven landscape\, ensuring robust protection and a strategic edge. \nThis event is ideal for professionals planning to sit for the AAISM exam. Attendees are encouraged to prepare in advance to maximize the benefits of the course. \nIt is also beneficial for those seeking knowledge in information security management of AI. \nRegistration closes on March 2 @ 5PM. \nRegister Today! \n  \n\n\n\n  \nThe AAISM and Exam Registration \n \nWith the significant potential of artificial intelligence comes new threats and vulnerabilities. ISACA Advanced in AI Security Management™ (AAISM™) is the first and only AI-centric security management certification designed to help experienced IT professionals reinforce the enterprise’s security posture and protect against AI-specific threats. You’ll be able to manage the evolving security risk related to AI\, implement policy\, and ensure its responsible and effective use across the organization. \nMore about the AAISM \n  \n\n\n\nEvent Details \n\nDate and Time \n\n\nPlease note date and time change from previously advertised dates. \nThe course will be held on March 3 – 6 from 5:30 pm to 9:30 pm. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThe course will be held using Zoom. \nPrior to the event\, participants must install the Zoom app on their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits. \n  \n\n\nPricing \n\n\nThe fee for GWDC Members is $400 for the course.\nThe fee for all other registrants is $600 for the course. \nTo become a member and take advantage of the member rate for our events\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \n  \n\n\nEvent Policies \n\n\nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n\n  \n\n\n\n  \nRe-take Discount \nStudents who take a GWDC review class and do not pass the corresponding Exam are eligible for a one-time 50% discount on the next review class offered by the GWDC for the exam. Please read the chapter event policy for discount details. Contact the Certifications Director through the Contact Form below if you want to take advantage of this discount. \nContact Us \n  \n\n\n\nCourse Outline \nDOMAIN 1: AI Governance and Program Management (31%) \nDOMAIN 2: AI Risk Management (31%) \nDOMAIN 3: AI Technologies and Controls (38%) \nFor full details on these job practices areas\, visit the ISACA Website \n  \nCourse Materials and Exam Resources \nStudy Materials \nThe instructor highly recommends that students purchase the AAISM Review Manual and the AAISM Review Questions\, Answers\, and Explanations Database. These and other the study materials available for purchase from the ISACA Bookstore: \n**It is highly recommended to order these at the earliest opportunity to avoid any possible delays in their availability for the start of the course. \n  \n\nOptional Study Kits for Purchase \nAt the end of registration\, there will be an option to purchase one of the following study kits to assist students in preparation for the course: \n\nFull Kit: Includes the Review Manual (Digital Copy)\, QAE database\, and a voucher for the Exam. ($779)\nTraining Kit: Includes the Review Manual (Digital Copy) and QAE database. ($295)\n\nPlease note the following about the kits: \n\nThere is no refund for the study kits once purchased.\nThe Review Manual is the digital version and cannot be printed.\nThe QAE database is a 12-month subscription with an option to purchase a subscription extension.\nVouchers for the training kits will be emailed within 72 hours of purchase.\nIf you are not an ISACA member\, you will need to create a free MyISACA account to redeem the vouchers for the kits/exam.\n\nFor further details on the Review Manual and QAE database\, please visit the ISACA Website. \n\n  \nAdditional Study Resources \nCandidates should review the Exam Candidate Guide and other resources on the ISACA AAISM page as part of their study program.  \n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nInstructor \n\n \n\n\nJim Wiggins\nAAISM\, AAIA\, AIGP\, CISM\, CISA\, CRISC\, CISSP\, ISSEP\, CGRC (CAP)\, SCNA\, SCNP\, IAM\, IEM\, SSCP\, CEH\, ECSA\, CHFI\, LPT\, TICSA\, CIWSA\, Security+\, FITSP-M\, CGEIT\, MCITP\, MCSE: Security\, MCSE: Messaging\, MCSA\, MCDST\, Server+\, Network+\, A+\, CDPSE\, CIPP/US\, PMP\, ICE-CCP\, DACUM Facilitator \nJim Wiggins is a seasoned IT and cybersecurity expert with over 29 years of industry experience\, 24 of which have been dedicated to information security – and\, more recently\, the last 3 years on artificial intelligence. He is the Founder and CEO of Securible\, LLC\, a Washington\, DC-based cybersecurity training and consulting firm specializing in practical\, forward-thinking solutions. Through Securible\, Jim has championed innovative approaches to address emerging threats\, ensure regulatory compliance\, and harness the power of Artificial Intelligence in IT audit\, cybersecurity\, governance and privacy. Throughout his distinguished career\, Jim has trained well over 20\,000 IT and cyber professionals\, underscoring his commitment to education and the advancement of the field. \nIn addition to his leadership at Securible\, Jim also serves as the Founder and CEO of the Federal IT Security Institute (FITSI)\, a 501(c)(6) non-profit certification body accredited by the ANSI National Accreditation Board (ANAB) under ISO 17024:2012. FITSI provides role-based cybersecurity certifications designed to fortify the U.S. federal cybersecurity workforce. \nEnhancing his contributions to the cybersecurity community\, Jim hosts a TV show in the Washington\, DC area called Cybersecurity Today. The program offers expert insights\, in-depth analysis\, and the latest updates on cybersecurity trends and threats\, further establishing his role as a prominent thought leader in the industry. \nRecognized as a Federal 100 award recipient in 2019 and the Federal Information Systems Security Educators’ Association (FISSEA) “Educator of the Year” in 2011\, Jim is widely respected for his commitment to elevating cybersecurity education. \nIn the rapidly evolving arena of Artificial Intelligence (AI)\, Jim has directly trained well over 1\,000 IT and cyber professionals on generative AI fundamentals through intensive sessions with the Department of the Interior’s University\, the Defense Information Systems Agency (DISA)\, the National Risk Management Center (NRMC) within CISA\, and the Greater Washington DC Chapter of ISACA. He leverages AI-driven tools such as ChatGPT\, Gemini\, Dalle\, Midjourney\, and Copilot to translate complex concepts into practical\, governance-focused applications. \nJim holds numerous certifications\, including: \n\nArtificial Intelligence: AAISM\, AAIA\, AIGP\nCybersecurity: CISM\, CISA\, CRISC\, CISSP\, ISSEP\, CGRC (CAP)\, SCNA\, SCNP\, IAM\, IEM\, SSCP\, CEH\, ECSA\, CHFI\, LPT\, TICSA\, CIWSA\, Security+\, and FITSP-M.\nInformation Technology: CGEIT\, MCITP\, MCSE: Security\, MCSE: Messaging\, MCSA\, MCDST\, Server+\, Network+\, A+.\nPrivacy: CDPSE\, CIPP/US\nProject Management: PMP (Project Management Professional).\nEducation: ICE-CCP (I.C.E. Certified Credentialing Professional)\, DACUM Facilitator\n\nJim is currently finalizing a master’s degree in education from George Washington University with a concentration in Assessment\, Testing\, and Measurement. \n \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 16 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \n\nPoll Questions \n\n\nParticipants must respond to all the poll questions polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls. \n  \n\n\nCPE Distribution and Evaluation Survey \n\n\nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \n\n\nLearning Objective \n\n\nAfter completing the course\, students will be prepared to sit for the AAISM Certification exam. \n  \n\n\nCPE-Related Details \n\n\n\nPrerequisites: None\nAdvance Preparation: Students are expected to have prepared for the exam prior to attending the course.\nProgram Knowledge Level: Basic\nDelivery Method:  Group Internet Based\nField of Study:  Information Technology – Technical URL:https://isaca-gwdc.org/event/aaism-review-course-2026/ LOCATION:Virtual Event CATEGORIES:Review Courses ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2025/08/aaism_review_2026.png ORGANIZER;CN="Clifton Persaud (Certifications Program and Special Assistance Requests)":MAILTO:certifications@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20260221T090000 DTEND;TZID=America/New_York:20260221T170000 DTSTAMP:20260217T014259Z CREATED:20250920T154457Z LAST-MODIFIED:20260217T014259Z UID:34808-1771664400-1771693200@isaca-gwdc.org SUMMARY:Cybersecurity Maturity Model Certification Workshop DESCRIPTION:  \n \n  \nFebruary 21\, 2026\nVirtual Event (Teams)\nEarn up to 7 CPE\n$125 for GWDC Members\n$200 for Non-Members \n  \n  \n\n\n\nCybersecurity Maturity Model Certification (CMMC) Workshop \nThis intensive one-day virtual workshop\, Cybersecurity Maturity Model Certification (CMMC)\, provides participants with a comprehensive understanding of CMMC requirements and the steps necessary to achieve and sustain certification. The workshop will cover the CMMC framework\, scoping and self-assessment strategies\, gap analysis\, and remediation planning\, with practical exercises to ensure participants can confidently prepare for CMMC audits and maintain ongoing compliance. \nRegistration closes on February 20 @ 5PM. \nRegister Today! \n  \n\n\n\n  \nMore about the CMMC \nThe CMMC Program aligns with the DoD’s existing information security requirements for the DIB. It is designed to enforce the protection of sensitive unclassified information shared by the Department with its contractors and subcontractors. The program provides the DoD with increased assurance that contractors and subcontractors are meeting the cybersecurity requirements for nonfederal systems processing controlled unclassified information. \nMore about the CMMC \n  \n\n\n\nEvent Details \n\nDate and Time \n\n\nThe workshop will be held on February 21\, 2026 from 9:00 am to 5:00 pm. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThe workshop will be held using Microsoft Teams. \nPrior to the event\, the instructor will email all participants the Teams link for the course along with course materials \n  \n\n\nPricing \n\n\nThe fee for GWDC Members is $125 for the workshop.\nThe fee for all other registrants is $200 for the workshop. \nTo become a member and take advantage of the member rate for our events\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \n  \n\n\nEvent Policies \n\n\nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n\n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nCourse Outline \nModule 1: Introduction to CMMC \n\nPurpose and history of the Cybersecurity Maturity Model Certification\nKey differences between CMMC 1.0 and 2.0\nOverview of the three maturity levels and their requirements\nRelationship between CMMC\, NIST SP 800-171\, and DFARS 7012\n\nModule 2: Understanding CMMC Domains and Practices \n\nDeep dive into the 14 CMMC domains\nExamples of practices and processes required for each level\nHow practices align with NIST controls and cybersecurity best practices\n\nModule 3: Scoping and Determining Applicability \n\nUnderstanding Controlled Unclassified Information (CUI) vs. Federal Contract\nrmation (FCI)\nDetermining organizational and system boundaries for CMMC scope\nPractical examples of scoping for small\, medium\, and large contractors\n\nModule 4: Self-Assessment and Gap Analysis \n\nConducting a CMMC readiness self-assessment\nMapping current controls against CMMC requirements\nIdentifying and prioritizing gaps for remediation\n\nModule 5: Developing and Implementing Remediation Plans \n\nCreating a Plan of Action & Milestones (POA&M)\nStrategies for implementing missing security controls\nLeveraging technology and policies to meet CMMC objectives\n\nModule 6: Documentation and Evidence Preparation \n\nKey artifacts and documentation needed for CMMC audits\nPolicies\, procedures\, and system security plans (SSPs)\nCapturing and maintaining evidence to support certification\n\nModule 7: Working with Assessors and the Certification Process \n\nUnderstanding the C3PAO (Certified Third-Party Assessment Organization) role\nPreparing for an official CMMC assessment\nCommon pitfalls and lessons learned from mock audits\n\nModule 8: Sustaining Compliance and Continuous Improvement \n\nMaintaining cybersecurity maturity post-certification\nOngoing monitoring\, incident response\, and reporting requirements\nLeveraging CMMC for competitive advantage in DoD contracting\n\n  \n\n\n\n  \nInterested in Speaking at a Chapter Event \nIf you are interested in speaking at an upcoming conference\, please visit the Call for Speakers page and complete the form. \nCall for Speakers \n  \n\n\n\nInstructor \n\n \n\n\nJim Wiggins\nAAISM\, AAIA\, AIGP\, CISM\, CISA\, CRISC\, CISSP\, ISSEP\, CGRC (CAP)\, SCNA\, SCNP\, IAM\, IEM\, SSCP\, CEH\, ECSA\, CHFI\, LPT\, TICSA\, CIWSA\, Security+\, FITSP-M\, CGEIT\, MCITP\, MCSE: Security\, MCSE: Messaging\, MCSA\, MCDST\, Server+\, Network+\, A+\, CDPSE\, CIPP/US\, PMP\, ICE-CCP\, DACUM Facilitator \nJim Wiggins is a seasoned IT and cybersecurity expert with over 29 years of industry experience\, 24 of which have been dedicated to information security – and\, more recently\, the last 3 years on artificial intelligence. He is the Founder and CEO of Securible\, LLC\, a Washington\, DC-based cybersecurity training and consulting firm specializing in practical\, forward-thinking solutions. Through Securible\, Jim has championed innovative approaches to address emerging threats\, ensure regulatory compliance\, and harness the power of Artificial Intelligence in IT audit\, cybersecurity\, governance and privacy. Throughout his distinguished career\, Jim has trained well over 20\,000 IT and cyber professionals\, underscoring his commitment to education and the advancement of the field. \nIn addition to his leadership at Securible\, Jim also serves as the Founder and CEO of the Federal IT Security Institute (FITSI)\, a 501(c)(6) non-profit certification body accredited by the ANSI National Accreditation Board (ANAB) under ISO 17024:2012. FITSI provides role-based cybersecurity certifications designed to fortify the U.S. federal cybersecurity workforce. \nEnhancing his contributions to the cybersecurity community\, Jim hosts a TV show in the Washington\, DC area called Cybersecurity Today. The program offers expert insights\, in-depth analysis\, and the latest updates on cybersecurity trends and threats\, further establishing his role as a prominent thought leader in the industry. \nRecognized as a Federal 100 award recipient in 2019 and the Federal Information Systems Security Educators’ Association (FISSEA) “Educator of the Year” in 2011\, Jim is widely respected for his commitment to elevating cybersecurity education. \nIn the rapidly evolving arena of Artificial Intelligence (AI)\, Jim has directly trained well over 1\,000 IT and cyber professionals on generative AI fundamentals through intensive sessions with the Department of the Interior’s University\, the Defense Information Systems Agency (DISA)\, the National Risk Management Center (NRMC) within CISA\, and the Greater Washington DC Chapter of ISACA. He leverages AI-driven tools such as ChatGPT\, Gemini\, Dalle\, Midjourney\, and Copilot to translate complex concepts into practical\, governance-focused applications. \nJim holds numerous certifications\, including: \n\nArtificial Intelligence: AAISM\, AAIA\, AIGP\nCybersecurity: CISM\, CISA\, CRISC\, CISSP\, ISSEP\, CGRC (CAP)\, SCNA\, SCNP\, IAM\, IEM\, SSCP\, CEH\, ECSA\, CHFI\, LPT\, TICSA\, CIWSA\, Security+\, and FITSP-M.\nInformation Technology: CGEIT\, MCITP\, MCSE: Security\, MCSE: Messaging\, MCSA\, MCDST\, Server+\, Network+\, A+.\nPrivacy: CDPSE\, CIPP/US\nProject Management: PMP (Project Management Professional).\nEducation: ICE-CCP (I.C.E. Certified Credentialing Professional)\, DACUM Facilitator\n\nJim is currently finalizing a master’s degree in education from George Washington University with a concentration in Assessment\, Testing\, and Measurement. \n \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 7 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \n\nPoll Questions \n\n\nParticipants must respond to all the poll questions polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls. \n  \n\n\nCPE Distribution and Evaluation Survey \n\n\nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \n\n\nLearning Objectives \n\n\n\nExplain the purpose and history of the Cybersecurity Maturity Model Certification (CMMC).\nCompare key differences between CMMC 1.0 and 2.0.\nDescribe the 14 CMMC domains and their relationship to NIST controls.\nProvide examples of practices and processes required across maturity levels.\nDifferentiate between Controlled Unclassified Information (CUI) and Federal Contract Information (FCI).\nDetermine organizational and system boundaries when defining CMMC scope.\nConduct a CMMC readiness self-assessment to evaluate compliance.\nIdentify and prioritize gaps through a structured gap analysis.\nDevelop a Plan of Action & Milestones (POA&M) to address deficiencies.\nImplement strategies to remediate missing or incomplete security controls.\nPrepare key artifacts such as policies\, procedures\, and system security plans (SSPs).\nCapture and maintain evidence to support CMMC certification.\nExplain the role of a Certified Third-Party Assessment Organization (C3PAO).\nPrepare effectively for an official CMMC assessment.\nMaintain cybersecurity maturity through continuous monitoring and incident response.\nLeverage sustained CMMC compliance as a competitive advantage in DoD contracting.\n\n  \n\n\nCPE-Related Details \n\n\n\nPrerequisites: None\nAdvance Preparation: None\nProgram Knowledge Level: Basic\nDelivery Method:  Group Internet Based\nField of Study:  Information Technology – Technical URL:https://isaca-gwdc.org/event/cybersecurity-maturity-model-certification-workshop/ LOCATION:Virtual Event CATEGORIES:Workshop ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2025/09/workshop_cmmc.png ORGANIZER;CN="Clifton Persaud (Certifications Program and Special Assistance Requests)":MAILTO:certifications@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20260219T083000 DTEND;TZID=America/New_York:20260219T123000 DTSTAMP:20260219T021800Z CREATED:20250824T003823Z LAST-MODIFIED:20260219T021800Z UID:34370-1771489800-1771504200@isaca-gwdc.org SUMMARY:Emerging Technology Conference 2026 DESCRIPTION:  \n \n  \nFebruary 19\, 2026\nVirtual Event (Zoom)\nEarn up to 4 CPE\n$10 for GWDC Members\n$30 for Non-Members \n  \n  \n\n\n\nEmerging Technology Conference 2026 \nEmerging Technology\, Quantum Computing\, AI \nArtificial intelligence (AI) is reshaping the landscape of IT audit and cybersecurity\, offering unprecedented opportunities and challenges for professionals in the field. This conference brings together thought leaders\, innovators\, and practitioners to explore how AI is transforming the way organizations secure their systems\, manage risks\, and navigate regulatory requirements. Through engaging sessions\, interactive workshops\, and dynamic discussions\, attendees will gain insights into: \n\nPractical applications of AI in enhancing cybersecurity defenses and streamlining IT audits\nNavigating the legal\, regulatory\, and ethical challenges posed by AI adoption\nStrategies for designing and implementing AI-driven solutions in enterprise environments\nLeveraging frameworks and tools to ensure AI systems are secure\, transparent\, and resilient\n\nConference highlights include expert-led discussions on the practical implementation and real-world application of artificial intelligence within the federal landscape and defense industrial base. Sessions will also explore emerging guardrails for responsible AI-assisted coding\, as well as the evolving role of autonomous technologies in strengthening cybersecurity resilience\, specifically AI resilience. \nWhether you’re an IT auditor\, cybersecurity professional\, or business leader\, this conference equips you with the knowledge and tools to harness the power of AI while addressing its unique risks. Prepare to lead your organization into the future with confidence\, innovation\, and resilience. \nRegistration closes on Feburary 18 @ 5PM. \nRegister Today! \n  \n\n\n\n  \nSponsorship Opportunities \nIf you are interested in sponsoring this event\, or sponsoring the chapter as an annual sponsor\, please visit our sponsorship page. \nSponsorship Info \n  \n\n\n\nEvent Details \n\nDate and Time \n\n\nThe conference will be held on February 19\, 2026 from 8:30 am to 12:30 pm. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThe conference will be held using Zoom. \nPrior to the event\, participants must install the Zoom app on their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits. \n  \n\n\nPricing \n\n\nThe fee for GWDC Members is $10 for the conference.\nThe fee for all other registrants is $30 for the conference. \nTo become a member and take advantage of the member rate for our events\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \n  \n\n\nEvent Policies \n\n\nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n  \n\n  \n\n\n\n  \nInterested in Speaking at a Chapter Event \nIf you are interested in speaking at an upcoming conference\, please visit the Call for Speakers page and complete the form. \nCall for Speakers \n  \n\n\n\nConference Agenda \nConference agendas may change due to schedule conflicts and other unexpected situations. If a previously published agenda has changed\, the changes will be noted. \nThe conference agenda is being developed and updates will be posted when available. \n  \n \n\n08:30 AM – 09:30 AM \n\n\nGuardrails for AI Coding \nPresenter: Jon Zeolla (Zenable and SANS Instructor) \nGenerative AI is quickly becoming a default part of the software development lifecycle. Faster delivery can also increase security risk\, operational fragility\, and decisions that are difficult to review or audit after the fact. This session focuses on AI coding guardrails: practical\, developer-friendly controls that help teams adopt coding assistants with confidence while maintaining strong security\, governance\, and assurance. \nWe will walk through three maturity levels for agentic coding controls. Level 1 uses built-in steering mechanisms in modern agentic IDEs\, including project context files\, rules\, and instruction layers. These establish consistent expectations for architecture\, security patterns\, data handling\, logging\, and “how we do things here\,” so teams reduce variability and improve repeatability. Level 2 adds context-injection agents that deliver guidance at the right time. They provide the relevant requirements\, approved patterns\, and constraints based on what is changing\, the type of work underway\, and where the developer is in the workflow. Level 3 adds deterministic\, policy-as-code guardrails in pull requests and CI/CD to enforce security\, quality\, and compliance requirements with measurable outcomes and audit-ready evidence. These guardrails also learn from code changes and review outcomes\, continuously improving the context used in Levels 1 and 2 to strengthen controls over time. \n\n \n\n09:30 AM – 10:30 AM \n\n\nAI\, Data Governance\, and Sensitive Data Handling in Government Environments \nPresenter: Larry Pitts \nThis session explores how artificial intelligence tools interact with sensitive data in regulated and government-adjacent environments. Drawing on over a decade of government contracting experience\, Larry Pitts examines governance considerations for AI-enabled platforms\, including how data is collected\, processed\, stored\, and retained across government and commercial cloud infrastructures.  \nThe presentation will highlight practical differences between public-sector and commercial data architectures\, common governance gaps organizations encounter when adopting AI tools\, and the importance of transparency\, policy alignment\, and ethical considerations in AI deployment. Attendees will gain a clearer understanding of how to evaluate AI solutions through a data governance and compliance lens without slowing innovation. \nKey Takeaways: \n\nHow AI-based tools handle sensitive and regulated data in government contexts\nKey governance considerations when adopting AI in regulated environments\nDifferences between government and commercial cloud and data infrastructures\nPractical questions GRC teams should ask vendors about AI data usage\nEthical and policy-driven considerations for responsible AI adoption\n\n\n \n\n10:30 AM – 11:30 AM \n\n\nAI integration\, and cybersecurity resilience across the Defense Industrial Base (DIB) \nPresenter: Allen Westley \nThis session provides a senior-leadership perspective on emerging technologies\, AI integration\, and cybersecurity resilience across the Defense Industrial Base (DIB). Drawing from experience leading cybersecurity programs supporting mission-critical and classified environments\, Allen Westley discusses how organizations can align AI adoption with enterprise risk governance\, compliance obligations\, and operational resilience. \nThe presentation bridges strategy and execution\, focusing on translating digital risk into actionable leadership decisions. Topics include AI governance in high-assurance environments\, classified and unclassified network considerations\, and the human dimension of cybersecurity\, including mind privacy and cognitive security. Attendees will leave with a clearer understanding of how to balance innovation\, compliance\, and mission priorities at scale \nKey Takeaways: \n\nLeadership considerations for AI adoption in classified and regulated environments\nAligning AI strategy with enterprise risk governance and compliance needs\nManaging cybersecurity risk across classified and unclassified domains\nUnderstanding the human and cognitive dimensions of emerging technology risk\nPractical insights for building resilient\, compliance-driven AI governance models\n\n\n \n\n11:30 AM – 12:30 AM \n\n\nAutonomous Cybersecurity \nPresenter: Dr. Jeffrey Duffany (Politechnic University of Puerto Rico) \nAutonomous cybersecurity refers to the use of artificial intelligence (AI)\, machine learning (ML)\, and automation to detect\, prevent and respond to cyber threats with minimal human intervention. It aims to enhance traditional cybersecurity by improving speed\, accuracy\, and adaptability to emerging threats. The main benefits are faster threat mitigation\, reduced reliance on human analysts\, improved accuracy in threat detection and scalability across large networks. Some of the major challenges include sophisticated adversarial attacks against AI models and ethical concerns around full automation. Autonomous cybersecurity systems leverage AI\, machine learning (ML) and automation to identify\, analyze\, and neutralize cyber threats in real time. This approach significantly enhances an organization’s ability to counter advanced cyberattacks. \n\n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nPresenters \nAt times presenters for a session may change due to schedule conflicts and other unexpected situations. If a previously presenter has been substituted\, the changes will be noted. \n  \n \n\n \n\n\nJon Zeolla\nCEO @ Zenable; SANS Instructor\nGCSA\, GCWN\, GPEN\, GCUX\, GPPA\, CISSP \nJon Zeolla is a full-stack security engineer and the founder and CEO of Zenable\, working at the intersection of quality engineering\, automation\, and emerging tech. He focuses on helping teams move fast without breaking things or compromising security. As a SANS Certified Instructor\, Jon travels globally to train organizations on AI safety\, cloud-native security\, and compliance. He is also a CNCF Ambassador and an active contributor to the open-source community. Jon regularly builds and shares projects that embed Governance\, Risk Management\, and Compliance (GRC) directly into developer workflows—favoring guardrails over gates to reduce friction and accelerate innovation. \nFinally\, Jon is an organizer of BSides Pittsburgh (the city’s largest security conference)\, an IANS Faculty member\, and an AWS community builder. You can see more of his contributions and awards at jonzeolla.com. \nAs a SANS Certified instructor\, Jon feels it is his responsibility to encourage curiosity in his students\, helping them to understand more than just what a tool says it can do on its label\, but digging deeper and working to understand how it was developed\, learning its tradeoffs and alternative use cases. He encourages students to get creative with how to use tools\, but also to periodically develop their own\, if only just to learn or better appreciate a solution. Jon’s expertise allows him to explain things simply and thoroughly while incorporating real-life examples. \nFrom an early age\, Jon started learning about security due to his competitiveness in video gaming. After developing and improving on a series of hacks and glitches\, he turned his attention to the systems and networks around him\, eventually getting to the point where his high school hired him part time to remediate vulnerabilities that he identified and disclosed. Jon’s love of finding ways that things could have unintended consequences\, coupled with his desire for efficiency and naturally analytical mind\, made the DevOps and Security Automation work a natural progression for him out of college. He has been digging into code\, processes\, and assumptions ever since\, with the goal of identifying and fixing vulnerabilities through automation and the creation of low-friction systems. \nEarly in his career\, Jon identified his interest in solving difficult and unique business problems through technology. When he noticed a clear gap in local technical networking events\, he created Steel City InfoSec and has been creating hands-on labs\, giving and facilitating presentations\, and setting up networking sessions for its roughly 1\,000 members of practitioners over the decade since. Throughout his career working at an R1 research university\, a top 5 US-based bank\, and a retailer with over 1\,200 stores\, Jon has leveraged automation and large scale analysis of security data to perform automated\, active defense activities shown to detect and withstand regular APT activities. \nJon holds three undergraduate degrees\, including a bachelor’s degree in Cyber Forensics and Information Security\, and while in school he was the recipient of two notable awards: “CIS Outstanding Undergraduate Student Award” and “IT Outstanding Student Award”. In 2017 he was inducted into the National Technical Honor Society as an Honorary Member. He holds a number of industry certifications including GCSA\, GCWN\, GPEN\, GCUX\, GPPA and CISSP. He is also a faculty member of the SANS Technology Institute\, an NSA Center of Academic Excellence in Cyber Defense and multiple winner of the National Cyber League competition. Jon is an active contributor to the cybersecurity community in Pittsburgh and nationally through various affiliations. \nWhen not behind a computer screen\, Jon can be found mountain biking through the Appalachian hills\, in the gym weightlifting\, or playing chess with his son. \n \n\n \n\n \n\n\nLarry Pitts\nDirector of Customer Success | AI Enablement & Government Technology \nLarry Pitts is a government contracting professional with over a decade of experience supporting state and federal agencies. He specializes in AI enablement\, data governance in AI-driven tools\, and technology adoption within regulated government environments. Larry has worked across the procurement lifecycle and understands the operational and compliance considerations that shape technology decisions in the public sector. \nAn active voice in the technology community\, he has moderated and participated in panels advocating for ethical AI adoption and expanded small business participation in government contracting. His work focuses on balancing innovation with responsible data governance practices. \n \n\n \n\n \n\n\nAllen Westley\nSenior Cybersecurity Leader | Founder | AI & Classified Network Strategy \nAllen Westley is a senior cybersecurity leader in the Aerospace and Defense sector\, where he drives classified network optimization\, AI-integrated cyber defense strategies\, and enterprise risk governance across mission-critical environments. He has led cybersecurity programs protecting multi-billion-dollar defense contracts and managed teams across secure and unclassified domains. \nAllen builds AI governance frameworks designed for high-assurance\, compliance-driven organizations within the Defense Industrial Base. He is also the founder of Cyber Explorer LLC and serves as a CISO-level advisor. A frequent speaker at NIST FISSEA\, ISC2\, and ISACA forums\, he writes and speaks on AI governance\, cognitive security\, and the evolving human dimension of cyber risk. \n \n\n \n\n \n\n\nDr. Jeffrey Duffany\nProfessor @ Politechnic University of Puerto Ric \nDr. Jeffrey L. Duffany is a full professor at Politechnic University of Puerto Rico in the graduate school of computer science. Duffany has many academic achievements to his name\, including being both a visiting scientist and visiting faculty member at several government and military research labs working in the area of cyberdefense. His biography is listed in “Who’s Who in the World\,” and he is a recipient of the Albert N. Marquis Lifetime Achievement Award for teaching and research. Widely published\, Duffany’s articles have appeared in many engineering and technology journals\, and he was asked by the Springer-Verlag publishing company to write the introductory chapter for a new book on computer and network security essentials. Duffany holds a BS in Electrical Engineering from the University of Connecticut; an MS in electrical engineering from Columbia University; and a dual PhD in computer and information engineering from Stevens Institute. \n \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 4 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \n\nPoll Questions \n\n\nParticipants must respond to all the poll questions via the Zoom polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls. \n  \n\n\nCPE Distribution and Evaluation Survey \n\n\nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \n\n\nLearning Objective \n\n\nAfter attending this event\, attendees will learn about current and future trends in the emerging technology space. \n  \n\n\nCPE-Related Details \n\n\n\nPrerequisites: None\nAdvance Preparation: None\nProgram Knowledge Level: Basic\nDelivery Method:  Group Internet Based\nField of Study:  Information Technology – Technical URL:https://isaca-gwdc.org/event/emerging-technology-conference-2026/ LOCATION:Virtual Event CATEGORIES:Conferences ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2025/08/emerging_tech.png ORGANIZER;CN="Avneet Sabharwal":MAILTO:programs@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20260205T083000 DTEND;TZID=America/New_York:20260206T170000 DTSTAMP:20260106T233035Z CREATED:20251102T140714Z LAST-MODIFIED:20260106T233035Z UID:35049-1770280200-1770397200@isaca-gwdc.org SUMMARY:AAIA Review Course 2026 DESCRIPTION:  \n \n  \nFebruary 5 – 6\, 2026\nVirtual Event (Zoom)\nEarn up to 16 CPE\n$400 for GWDC Members\n$600 for Non-Members\nOptional Study Kits Available \n  \n\n\n\nAdvanced in AI Audit™ (AAIA™) Review Course \nThe GWDC is sponsoring an intensive 2-day virtual review course for the Advanced in AI Audit certification exam. This review course will provide practical advice on preparing for the AAIA exam and specific instruction regarding the job practice areas addressed by AAIA as defined by ISACA® Global. \nThe AAIA Certification Training is designed for IT audit professionals. It’s built to give participants the precise knowledge and practical skills they need to audit artificial intelligence systems effectively. \nThis course guides participants through the full AI audit lifecycle. The course covers everything from AI governance and risk management to understanding AI operations and applying specific auditing tools and techniques. The emphasis is entirely on hands-on application\, so participants can confidently design\, execute\, and manage AI-driven audits that meet stringent standards for ethics\, security\, and compliance. \nThis event is ideal for professionals planning to sit for the AAIA exam. Attendees are encouraged to prepare in advance to maximize the benefits of the course. \nIt is also beneficial for those seeking knowledge in information security and auditing of AI. \nRegistration closes on February 4 @ 5PM. \nRegister Today! \n  \n\nPlease note the date change \nThe dates for this course are now February 5 – 6. They were previously advertised as January 15 – 16. \n\n  \n\n\n\n  \nThe AAIA and Exam Registration \n \nBe one of the first experienced IT auditors to embrace AI and level up their careers with the new ISACA Advanced in AI Audit™ (AAIA™) certification. Designed exclusively for professionals with CISA® and other qualified high-level audit certifications\, AAIA empowers you to stand up to today’s AI challenges and become an AI audit leader that more organizations demand. \nParticipants that wish to gain the AAIA certification must hold an active CISA\, CIA (IIA)\, or CPA (AICPA) certification\, which is subject to audit. \nMore about the AAIA \n  \n\n\n\nEvent Details \n\nDate and Time \n\n\nThe course will be held on February 5 – 6\, 2026 from 8:30 am to 5:00 pm. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThe course will be held using Zoom. \nPrior to the event\, participants must install the Zoom app on their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits. \n  \n\n\nPricing \n\n\nThe fee for GWDC Members is $400 for the course.\nThe fee for all other registrants is $600 for the course. \nTo become a member and take advantage of the member rate for our events\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \n  \n\n\nEvent Policies \n\n\nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n\n  \n\n\n\n  \nRe-take Discount \nStudents who take a GWDC review class and do not pass the corresponding Exam are eligible for a one-time 50% discount on the next review class offered by the GWDC for the exam. Please read the chapter event policy for discount details. Contact the Certifications Director through the Contact Form below if you want to take advantage of this discount. \nContact Us \n  \n\n\n\nCourse Outline \nDOMAIN 1: AI Governance & Risk (33%) \nDOMAIN 2: AI Operations (46%) \nDOMAIN 3: AI Auditing Tools and Techniques (21%) \nFor full details on these job practices areas\, visit the ISACA Website \n  \nCourse Materials and Exam Resources \nStudy Materials \nThe instructor highly recommends that students purchase the AAIA Review Manual and the AAIA Review Questions\, Answers\, and Explanations (QAE) Database. These and other the study materials available for purchase from the ISACA Bookstore. \n**It is highly recommended to order these at the earliest opportunity to avoid any possible delays in their availability for the start of the course. \n  \n\nOptional Study Kits for Purchase (New Option!) \nAt the end of registration\, there will be an option to purchase one of the following study kits to assist students in preparation for the course: \n\nFull Kit: Includes the Review Manual (Digital Copy)\, QAE database\, and a voucher for the Exam. ($779)\nTraining Kit: Includes the Review Manual (Digital Copy) and QAE database. ($295)\n\nPlease note the following about the kits: \n\nThere is no refund for the study kits once purchased.\nThe Review Manual is the digital version and cannot be printed.\nThe QAE database is a 12-month subscription with an option to purchase a subscription extension.\nVouchers for the training kits will be emailed within 72 hours of purchase.\nIf you are not an ISACA member\, you will need to create a free MyISACA account to redeem the vouchers for the kits/exam.\n\nFor further details on the Review Manual and QAE database\, please visit the ISACA Website. \n\n  \nAdditional Study Resources \nCandidates should review the Exam Candidate Guide and other resources on the ISACA AAIA page as part of their study program.  \n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nInstructor \n\n \n\n\nSushila Nair\nCISSP\, GIAC GSTRT\, GSNA GDSA\, CISA\, CISM\, CRISC\, CDPSE\, CCSK\, CCAK \nSushila is a globally recognized cybersecurity executive with over 25 years of experience leading security strategy\, building high-performing practices\, and advising global enterprises and government agencies. She currently serves as President of the ISACA Greater Washington D.C. Chapter\, the second-largest ISACA chapter in the world. \nSushila has held leadership roles as CISO in the United Kingdom and Malaysia\, global portfolio and practice lead in the United States for global consulting companies. She has led multi-million-dollar cybersecurity portfolios\, managed global delivery teams\, and driven the development of next-generation cybersecurity services. \nAn active contributor to ISACA Global’s Emerging Trends workgroup\, Sushila is a respected voice in the industry\, regularly featured in top publications and global conferences such as RSA and ISACA. She is the host of the public radio segment Shore Tech Pulse\, where she educates the community on cybersecurity and technology trends. Her awards include ISACA’s Technology for Humanity Award and recognition as a Top Cybersecurity Leader by Security Magazine and Cyber Magazine in 2024. \n \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 16 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \n\nPoll Questions \n\n\nParticipants must respond to all the poll questions polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls. \n  \n\n\nCPE Distribution and Evaluation Survey \n\n\nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \n\n\nLearning Objective \n\n\nAfter completing the course\, students will be prepared to sit for the AAIA Certification exam. \n  \n\n\nCPE-Related Details \n\n\n\nPrerequisites: None\nAdvance Preparation: Students are expected to have prepared for the exam prior to attending the course.\nProgram Knowledge Level: Basic\nDelivery Method:  Group Internet Based\nField of Study:  Information Technology – Technical URL:https://isaca-gwdc.org/event/aaia-review-course-2026/ LOCATION:Virtual Event CATEGORIES:Review Courses ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2025/08/aaia_review_2026.png ORGANIZER;CN="Clifton Persaud (Certifications Program and Special Assistance Requests)":MAILTO:certifications@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20260126T090000 DTEND;TZID=America/New_York:20260129T170000 DTSTAMP:20260106T223324Z CREATED:20250830T021710Z LAST-MODIFIED:20260106T223324Z UID:34547-1769418000-1769706000@isaca-gwdc.org SUMMARY:CISA Review Course 2026 DESCRIPTION:  \n \n  \nJanuary 26 – 29\, 2026\nVirtual Event (Teams)\nEarn up to 32 CPE\n$600 for GWDC Members\n$1\,000 for Non-Members\nOptional Study Kits Available \n  \n  \n\n\n\nCISA® Review Course \nThe ISACA Greater Washington\, D.C. Chapter (GWDC) is hosting an intensive 4-day virtual review course for the Certified Information Systems Auditor® (CISA®) Exam. This course is designed to provide practical guidance on preparing for the CISA exam and will cover the essential job practice areas as defined by ISACA® Global. \nThis event is ideal for professionals planning to sit for the CISA exam. Attendees are encouraged to prepare in advance to maximize the benefits of the course. \nRegistration closes on January 24 @ 5PM. \nRegister Today! \n  \n\n\n\n  \nThe CISA and Exam Registration \n \nCertified Information Systems Auditor® (CISA®)\, world-renowned as the standard of achievement for auditing\, monitoring\, and assessing IT and business systems\, also acknowledges the importance of emerging technologies. Achieving a CISA certification showcases your expertise and asserts your ability to apply a risk-based approach to audit engagements. Addressing innovations like AI and blockchain\, CISA ensures that IT audit professionals stay current on the latest technology trends and advancements. \nRegistration for the CISA exam is administered by ISACA®\, not the GWDC. Registering for this review course does not register you for the exam. \nMore about the CISA \n  \n\n\n\nEvent Details \n\nDate and Time \n\n\nThe course will be held on January 26 – 29\, 2026 from 9:00 am to 5:00 pm. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThe course will be held using Microsoft Teams. \nPrior to the event\, the instructor will email all participants the Teams link for the course along with course materials \n  \n\n\nPricing \n\n\nThe fee for GWDC Members is $600 for the course.\nThe fee for all other registrants is $1\,000 for the course. \nTo become a member and take advantage of the member rate for our events\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \n  \n\n\nRetake Discount \n\n\nStudents who take this GWDC review class and do not pass the corresponding Exam are eligible for a one-time 50% discount on the next review class offered by the GWDC for the exam. Please read the chapter event policy for discount details. Contact the Certifications Director through the Contact Form if you want to take advantage of this discount. \n  \n\n\nEvent Policies \n\n\nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n\n  \n\n\n\n  \nComments from Review Course Attendees \n“I wanted to express my appreciation for its excellent structure and the quality of instruction provided by the instructor. The course was well-organized\, making it easy to follow and understand complex audit concepts. The instructor’s expertise and engaging teaching style helped me grasp the material effectively\, and I feel more confident. Thank you for providing such a valuable learning experience!” \n“Jim did a great job\, engaged the students\, was able to break down hard concepts to clearly explain issues and topics.” \n“Overall\, I think this will help me understand the concepts better\, and I will be able to go back to my notes and the course material while studying. I think this class was very beneficial and would recommend it to others.“ \n“The course provided a good understanding of the CISA topic areas. I appreciated the explanations by the instructors and the tips shared on exam preparation” \n“Very Professional and knowledgeable about the subject matter. Thank you!“ \n  \n  \n\n\n\nAgenda \nPlease note\, these are estimates as some domains (especially Domains 4 and 5) may span multiple days. \n\nDay 1: 18% Domain 1 – Information Systems Auditing Process & 18% Domain 2 – Governance & Management of IT\nDay 2: 12% Domain 3 – Information Systems Acquisition\, Development & Implementation\nDay 3: 26% Domain 4 – Information Systems Operations & Business Resilience\nDay 4: 26% Domain 5 – Protection of Information Assets\n\n  \nCourse Materials and Exam Resources \nMaterials Provided During the Course \nParticipants will receive a Student Workbook\, including the presentations\, case study\, and quiz questions for each domain. Additional resources\, such as exam tips\, vocabulary lists\, and recommended readings\, will also be provided. \n  \nStudy Recommendations \nThe instructor highly recommends that students purchase the CISA Review Manual and the CISA Review Questions\, Answers\, and Explanations Database – 12 Month ahead of the course date. Below are the study materials available for purchase from the ISACA Bookstore: \n\nCISA Review Manual\nCISA Review Questions\, Answers & Explanations Manual\nCISA Review Questions\, Answers & Explanation Database – 12 month subscription\n\n**It is highly recommended to order these at the earliest opportunity to avoid any possible delays in their availability for the start of the program. \n  \n\nOptional Study Kits for Purchase \nAt the end of registration\, there will be an option to purchase one of the following study kits to assist students in preparation for the course: \n\nFull Kit: Includes the Review Manual (Digital Copy)\, QAE database\, and a voucher for the Exam. ($965)\nTraining Kit: Includes the Review Manual (Digital Copy) and QAE database. ($359)\n\nPlease note the following about the kits: \n\nThere is no refund for the study kits once purchased.\nThe Review Manual is the digital version and cannot be printed.\nThe QAE database is a 12-month subscription with an option to purchase a subscription extension.\nVouchers for the training kits will be emailed within 72 hours of purchase.\nIf you are not an ISACA member\, you will need to create a free MyISACA account to redeem the vouchers for the kits/exam.\n\nFor further details on the Review Manual and QAE database\, please visit the ISACA Website. \n\n  \nAdditional Study Resources \nCandidates should review the Exam Candidate Guide and other resources on the ISACA CISA page as part of their study program.  \n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nInstructor \n\n \n\n\nTyler Harding\nCPA\, CISA\, CISM\, CISSP\, CAP\, GGEIT\, FITSP:A\, FITSP:M \nTyler Harding is an Information Security and Compliance professional with over 25 years of experience. Currently\, Mr. Harding is a Sr. Technical Advisor on cybersecurity and cloud policy with the Department of Defense\, Office of the CIO. Prior to his role at DoD\, he has led security and privacy teams to achieve ISO 27001 certifications and clean SOC 2 attestation reports at Amazon.com. While with Amazon Web Services\, Tyler was the DoD Security and Compliance Manager and led efforts to accredit AWS cloud services to Impact Levels 4 and 5 under DoD’s Cloud Computing Security Requirements Guide (CC SRG). Before joining Amazon in 2019\, Tyler spent over 20+ years in public accounting firms such as PWC\, KPMG\, and Kearney & Company in their respective IT audit practices and led engagement teams through many SOC 1\, FISMA\, and financial statement audits. Tyler holds numerous certifications including his CPA\, CISA\, CISM\, CGEIT\, CISSP\, CGRC\, FITSP:A\, and FITSP:M. \nAs a recovering IT auditor\, Tyler now enjoys his summers and falls swimming\, cycling\, and playing an occasional round of golf! Tyler has also supported the ISACA Greater Washington D.C. Chapter for over 20 years by teaching CISA\, CISM\, and CGEIT review courses. \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 32 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \n\nPoll Questions \n\n\nParticipants must respond to all the poll questions polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls. \n  \n\n\nCPE Distribution and Evaluation Survey \n\n\nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \n\n\nLearning Objective \n\n\nAfter completing the course\, students will be prepared to sit for the CISA exam. \n  \n\n\nCPE-Related Details \n\n\n\nPrerequisites: None\nAdvance Preparation: Students are expected to have prepared for the exam prior to attending the course.\nProgram Knowledge Level: Basic\nDelivery Method:  Group Internet Based\nField of Study:  Information Technology – Technical URL:https://isaca-gwdc.org/event/cisa-review-course-2026/ LOCATION:Virtual Event CATEGORIES:Review Courses ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2025/08/cisa_review_2026.png ORGANIZER;CN="Clifton Persaud (Certifications Program and Special Assistance Requests)":MAILTO:certifications@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20260124T090000 DTEND;TZID=America/New_York:20260124T170000 DTSTAMP:20251022T105004Z CREATED:20250920T153632Z LAST-MODIFIED:20251022T105004Z UID:34764-1769245200-1769274000@isaca-gwdc.org SUMMARY:Generative AI for Privacy Professionals Workshop DESCRIPTION:  \n \n  \nJanuary 24\, 2026\nVirtual Event (Teams)\nEarn up to 7 CPE\n$125 for GWDC Members\n$200 for Non-Members \n  \n  \n\n\n\nGenerative AI for Privacy Professionals Workshop \nThis intensive one-day virtual workshop\, Generative AI for Privacy Professionals\, will provide participants with a comprehensive understanding of how generative AI impacts privacy and data protection practices. The workshop will cover the use of AI tools within the context of global privacy regulations\, privacy-by-design principles\, and risk mitigation strategies\, with practical exercises to ensure participants can effectively operationalize privacy in AI-driven environments. \nRegistration closes on January 22 @ 5PM. \nRegister Today! \n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nEvent Details \n\nDate and Time \n\n\nThe workshop will be held on January 24\, 2026 (Saturday) from 9:00 am to 5:00 pm. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThe workshop will be held using Microsoft Teams. \nPrior to the event\, the instructor will email all participants the Teams link for the course along with course materials \n  \n\n\nPricing \n\n\nThe fee for GWDC Members is $125 for the workshop.\nThe fee for all other registrants is $200 for the workshop. \nTo become a member and take advantage of the member rate for our events\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \n  \n\n\nEvent Policies \n\n\nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n\n  \n\n\n\n  \nISACA AI Certifications \nISACA has launced new certifications in the AI space: Advanced in AI Audit™ (AAIA™) and Advanced in AI Security Management™ (AAISM™). Click on the links below to learn more about these certifications and how they can further your career in AI. If you are interested in taking one of these certification exams\, check our events calendar for upcoming review courses. \nLearn more about AAIALearn more about AAISM \n  \n  \n\n\n\nCourse Outline \nModule 1: Generative AI and Privacy Fundamentals \n\nIntroduction to Generative AI and large language models (LLMs)\nOverview of privacy risks unique to AI (data leakage\, re-identification)\nUnderstanding personal data exposure in AI training and outputs\n\nModule 2: Global Privacy and AI Regulatory Landscape \n\nKey privacy laws impacting AI (GDPR\, CCPA/CPRA\, HIPAA\, PIPEDA)\nEU AI Act and its privacy implications\nEmerging AI guidance from the FTC\, EDPB\, and NIST\n\nModule 3: Privacy Risks in Generative AI Systems \n\nData collection\, storage\, and processing risks in AI pipelines\nPrompt injection\, model inversion\, and data exfiltration threats\nCase studies of privacy incidents caused by AI tools\n\nModule 4: Privacy-by-Design for AI \n\nEmbedding privacy principles into AI system development\nData minimization\, anonymization\, and pseudonymization strategies\nLeveraging privacy-enhancing technologies (PETs) for AI systems\n\nModule 5: Conducting AI Privacy Impact Assessments (PIAs) \n\nMethodology for AI-specific PIAs and risk assessments\nIdentifying high-risk data flows in generative AI use cases\nDocumenting mitigations for compliance and audit purposes\n\nModule 6: Managing AI Vendors and Third-Party Risks \n\nDue diligence for AI vendors and cloud-based generative AI services\nContractual clauses for privacy compliance (DPA\, SCCs\, AI-specific terms)\nContinuous monitoring of data handling and model behaviors\n\nModule 7: Operationalizing Privacy in AI Deployments \n\nImplementing privacy policies and controls for AI usage\nEmployee training on privacy-conscious AI usage\nResponding to DSARs\, deletion requests\, and breaches in AI contexts\n\nModule 8: The Future of Privacy in the AI Era \n\nTrends in synthetic data and privacy-preserving AI\nPreparing for next-generation AI regulations and enforcement\nBuilding a sustainable privacy strategy in an AI-driven enterprise\n\n  \n\n\n\n  \nInterested in Speaking at a Chapter Event \nIf you are interested in speaking at an upcoming conference\, please visit the Call for Speakers page and complete the form. \nCall for Speakers \n  \n\n\n\nInstructor \n\n \n\n\nJim Wiggins\nAAISM\, AAIA\, AIGP\, CISM\, CISA\, CRISC\, CISSP\, ISSEP\, CGRC (CAP)\, SCNA\, SCNP\, IAM\, IEM\, SSCP\, CEH\, ECSA\, CHFI\, LPT\, TICSA\, CIWSA\, Security+\, FITSP-M\, CGEIT\, MCITP\, MCSE: Security\, MCSE: Messaging\, MCSA\, MCDST\, Server+\, Network+\, A+\, CDPSE\, CIPP/US\, PMP\, ICE-CCP\, DACUM Facilitator \nJim Wiggins is a seasoned IT and cybersecurity expert with over 29 years of industry experience\, 24 of which have been dedicated to information security – and\, more recently\, the last 3 years on artificial intelligence. He is the Founder and CEO of Securible\, LLC\, a Washington\, DC-based cybersecurity training and consulting firm specializing in practical\, forward-thinking solutions. Through Securible\, Jim has championed innovative approaches to address emerging threats\, ensure regulatory compliance\, and harness the power of Artificial Intelligence in IT audit\, cybersecurity\, governance and privacy. Throughout his distinguished career\, Jim has trained well over 20\,000 IT and cyber professionals\, underscoring his commitment to education and the advancement of the field. \nIn addition to his leadership at Securible\, Jim also serves as the Founder and CEO of the Federal IT Security Institute (FITSI)\, a 501(c)(6) non-profit certification body accredited by the ANSI National Accreditation Board (ANAB) under ISO 17024:2012. FITSI provides role-based cybersecurity certifications designed to fortify the U.S. federal cybersecurity workforce. \nEnhancing his contributions to the cybersecurity community\, Jim hosts a TV show in the Washington\, DC area called Cybersecurity Today. The program offers expert insights\, in-depth analysis\, and the latest updates on cybersecurity trends and threats\, further establishing his role as a prominent thought leader in the industry. \nRecognized as a Federal 100 award recipient in 2019 and the Federal Information Systems Security Educators’ Association (FISSEA) “Educator of the Year” in 2011\, Jim is widely respected for his commitment to elevating cybersecurity education. \nIn the rapidly evolving arena of Artificial Intelligence (AI)\, Jim has directly trained well over 1\,000 IT and cyber professionals on generative AI fundamentals through intensive sessions with the Department of the Interior’s University\, the Defense Information Systems Agency (DISA)\, the National Risk Management Center (NRMC) within CISA\, and the Greater Washington DC Chapter of ISACA. He leverages AI-driven tools such as ChatGPT\, Gemini\, Dalle\, Midjourney\, and Copilot to translate complex concepts into practical\, governance-focused applications. \nJim holds numerous certifications\, including: \n\nArtificial Intelligence: AAISM\, AAIA\, AIGP\nCybersecurity: CISM\, CISA\, CRISC\, CISSP\, ISSEP\, CGRC (CAP)\, SCNA\, SCNP\, IAM\, IEM\, SSCP\, CEH\, ECSA\, CHFI\, LPT\, TICSA\, CIWSA\, Security+\, and FITSP-M.\nInformation Technology: CGEIT\, MCITP\, MCSE: Security\, MCSE: Messaging\, MCSA\, MCDST\, Server+\, Network+\, A+.\nPrivacy: CDPSE\, CIPP/US\nProject Management: PMP (Project Management Professional).\nEducation: ICE-CCP (I.C.E. Certified Credentialing Professional)\, DACUM Facilitator\n\nJim is currently finalizing a master’s degree in education from George Washington University with a concentration in Assessment\, Testing\, and Measurement. \n \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 7 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \n\nPoll Questions \n\n\nParticipants must respond to all the poll questions polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls. \n  \n\n\nCPE Distribution and Evaluation Survey \n\n\nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \n\n\nLearning Objectives \n\n\n\nExplain the fundamentals of generative AI and large language models (LLMs).\nDescribe privacy risks unique to AI\, including data leakage and re-identification.\nSummarize key privacy laws impacting AI\, such as GDPR\, CCPA/CPRA\, HIPAA\, and PIPEDA.\nExplain the privacy implications of the EU AI Act and emerging regulatory guidance.\nIdentify privacy risks in AI pipelines related to data collection\, storage\, and processing.\nEvaluate threats such as prompt injection\, model inversion\, and data exfiltration.\nApply privacy-by-design principles to AI system development.\nImplement strategies for data minimization\, anonymization\, and pseudonymization.\nConduct AI-specific privacy impact assessments and risk evaluations.\nDocument mitigations for compliance and audit readiness.\nPerform due diligence on AI vendors and cloud-based generative AI services.\nDraft contractual clauses to ensure AI vendor privacy compliance.\nImplement privacy policies and controls to govern AI usage.\nTrain employees on privacy-conscious use of AI tools.\nAssess emerging trends such as synthetic data and privacy-preserving AI.\nDevelop a sustainable enterprise privacy strategy for the AI era.\n\n  \n\n\nCPE-Related Details \n\n\n\nPrerequisites: None\nAdvance Preparation: None\nProgram Knowledge Level: Basic\nDelivery Method:  Group Internet Based\nField of Study:  Information Technology – Technical URL:https://isaca-gwdc.org/event/generative-ai-for-privacy-professionals-workshop/ LOCATION:Virtual Event CATEGORIES:Workshop ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2025/09/workshop_gen_ai_privacy.png ORGANIZER;CN="Clifton Persaud (Certifications Program and Special Assistance Requests)":MAILTO:certifications@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20260122T083000 DTEND;TZID=America/New_York:20260122T123000 DTSTAMP:20260121T120516Z CREATED:20250823T210159Z LAST-MODIFIED:20260121T120516Z UID:34354-1769070600-1769085000@isaca-gwdc.org SUMMARY:Data Protection\, Privacy\, and Controls Conference DESCRIPTION:  \n \n  \nJanuary 22\, 2026\nVirtual Event (Zoom)\nEarn up to 4 CPE\n$10 for GWDC Members\n$30 for Non-Members \n  \n  \n\n\n\nData Protection\, Privacy\, and Controls Conference \nIn an era where data is currency and breaches dominate headlines\, protecting sensitive information has never been more critical—or more complex. Join the ISACA Greater Washington\, D.C. Chapter for a cutting-edge virtual conference that brings together industry leaders\, privacy professionals\, and cybersecurity practitioners to explore today’s most pressing data security and privacy challenges. \nAs privacy becomes a board-level concern and new AI-driven technologies introduce fresh risks\, this conference offers essential insights to future-proof your data security and compliance strategies. \nSecure your seat\, sharpen your skills\, and stay ahead of the curve in protecting what matters most—your data. \nRegistration closes on January 21 @ 5PM. \nRegister Today! \n  \n\n\n\n  \nSponsorship Opportunities \nIf you are interested in sponsoring this event\, or sponsoring the chapter as an annual sponsor\, please visit our sponsorship page. \nSponsorship Info \n  \n\n\n\nEvent Details \n\nDate and Time \n\n\nThe conference will be held on January 22\, 2026 from 8:30 am to 12:30 pm. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThe conference will be held using Zoom. \nPrior to the event\, participants must install the Zoom app on their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits. \n  \n\n\nPricing \n\n\nThe fee for GWDC Members is $10 for the conference.\nThe fee for all other registrants is $30 for the conference. \nTo become a member and take advantage of the member rate for our events\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \n  \n\n\nEvent Policies \n\n\nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n  \n\n  \n\n\n\n  \nInterested in Speaking at a Chapter Event \nIf you are interested in speaking at an upcoming conference\, please visit the Call for Speakers page and complete the form. \nCall for Speakers \n  \n\n\n\nConference Agenda \nConference agendas may change due to schedule conflicts and other unexpected situations. If a previously published agenda has changed\, the changes will be noted. \n  \n \n\n08:30 AM – 09:30 AM \n\n\nAI Trust – Quality\, Sensitivity\, and Governance \nPresenter: Dr. James Barker (BigEye) \nThe world is excited over the abilities of AI. But\, Agents\, Advisors\, and Assistants all need quality data that is trusted and classified in order to be shared. Privacy professionals battle for the attention\, budget\, and priority of leadership but with the explosion of AI a reset is needed. Teams across a firm need to work to bring together the needs of data quality\, data privacy\, and data security to certify the use of data for AI. \nIn this session\, the idea of AI Trust will be examined\, surfaced\, described\, and direction will be provided in a manner to help privacy professionals educate leadership and stakeholders to build the case for the time\, talent\, and treasure of their organizations. This session will help set the stage for investment for success by discussing the need for information privacy and considering the idea of data sensitivity as it relates to privacy for AI. In addition we will diagram the role of data quality\, and the role of data security and governance of data for AI or CAID (Certified AI Data). \nJoin us in this session to help establish the privacy and security stage for AI. \n\n \n\n09:30 AM – 10:30 AM \n\n\nManaging Data Privacy and Other Risks in AI Agents \nPresenter: Tanya Baccam (SANS) \nAI agents ‐ autonomous or semi-autonomous systems capable of initiating actions\, making decisions\, and interacting with enterprise data ‐ are rapidly transforming operational models across the private sector\, government agencies\, and higher-education institutions. Their capabilities can introduce substantial efficiency and analytical value\, but they also can generate complex privacy\, security\, and compliance risks that exceed those of traditional AI tools. As organizations accelerate adoption\, internal audit\, cybersecurity\, privacy\, and risk management functions must adapt their assurance approaches to ensure safe\, accountable deployment. This session equips auditors and governance leaders with methodologies to assess and manage AI agent risks in environments where sensitive\, regulated\, and mission-critical data is pervasive. Leveraging extensive real-world expertise in AI governance\, cybersecurity\, privacy engineering\, and assurance disciplines\, the session will address how to: \n\nEvaluate the privacy and security risks inherent to AI agents.\nAlign AI agent governance with established regulatory and assurance frameworks – such as NIST AI RMF\, NIST CSF 2.0 Governance Function\, COBIT\, ISO/IEC 27001\, FERPA\, HIPAA\, – to provide cohesive\, auditable control structures across industries.\nAssess AI agent integration within business\, government\, and university workflows.\nDesign actionable audit procedures for AI agents.\n\nParticipants will leave with repeatable approaches to governing and auditing AI agents\, enabling them to support secure and ethical AI adoption while meeting escalating expectations from regulators\, boards\, and executive leadership. \n\n \n\n10:30 AM – 11:30 AM \n\n\nYour Car’s Hidden Passengers: Companies\, Cops\, and Criminals. Retake Control \nPresenters: Mike Pedrick\, Merry Marwig (Privacy4Cars)\, and Justin Pollard \nNot your grandparents’ Oldsmobile ‐ from integration with our smartphones to voice assistants to autonomous driving functionality\, today’s automotive products are more connected to the world around us than ever. With added convenience comes some interesting challenges to consumer privacy. In this panel\, two and a half car enthusiasts\, two privacy professionals\, and three data nerds will unpack the world of Connected Cars\, including the state of technology\, the effect of increasing regulatory pressures\, and most importantly\, what YOU can do to manage risk in this ever-changing landscape. \n\n \n\n11:30 AM – 12:30 PM \n\n\nData Protection for the Future: Threat Focused Data Protection\, Data Handling Best Practices and Thoughts on Protecting Data in an Era of Growing AI and Quantum Computing Capabilities \nPresenter: Kevin Garvey (SANS) \nData is the currency of companies worldwide. Protecting data has always been a challenge to companies and the rise of AI and concerns about Quantum continue to be talked about in alignment to data security. Protecting data requires administrative and technical controls to provide a level of comfort to senior leaders that their companies’ data is being protected. In this talk\, thoughts about how to have a threat-based view will be discussed\, best practices on handling data in organization from an administrative and technical perspective\, and what all leaders should know about when thinking of new AI and Quantum cybersecurity risks against their data. \n\n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nPresenters \nAt times presenters for a session may change due to schedule conflicts and other unexpected situations. If a previously presenter has been substituted\, the changes will be noted. \n  \n \n\n \n\n\nDr. James Barker\nDirector of Professional Services @ BigEye \nDr. James M Barker has over three decades of experience in AI and Data. Jim currently serves as the Director of Professional Services at Bigeye\, where he leads professional services and champions data literacy\, governance\, and operational efficiency powered by AI. Collaborating with cross-functional teams\, Jim helps businesses adopt robust DataOps frameworks to drive measurable outcomes\, leveraging proven methodologies and innovative approaches to data management. He is singularly focused on introducing and expanding Data Trust in all aspects of data including AI\, Analytics\, Operations Management\, Data Quality\, Data Privacy\, Data Security\, Compliance\, and DataOps. \nDr. Barker’s career spans consulting\, data strategy\, and digital transformation across a wide variety of industries including health care\, manufacturing\, finance\, and oil & gas. His experiences at Best Buy originated the system use of Gamification and Market Basket Analysis. At Thomson Legal & Regulatory (Thomson-Reuters) his team was one of the first to put Big Data into practice. The professional Services team at Informatica expanded the use of Data Quality and built the Velocity Data Migration Methodology which was further enhanced with data governance at Honeywell. The Honeywell data and data governance council originated the ‘House of Data’ to include aspects of data quality\, data privacy\, data security\, and standards for operational efficiency. \nAt Bigeye\, he focuses on empowering organizations to treat data as a strategic asset\, fostering data enablement and literacy at scale. His mission is to improve data quality and governance processes while advancing industry-wide adoption of cutting-edge solutions in data observability and AI-driven insights. \n  \n\n \n\n \n\n\nTanya Baccam\nSenior Instructor & Faculty Research Advisor @ SANS\nCPA\, GIAC GPPA\, GIAC GCIH\, CISSP\, CISM\, CISA\, CITP\, and OCP DBA \nTanya is an experienced information security and audit consultant and long-time instructor for SANS. She has consulted with a variety of clients about their cybersecurity and audit controls. She regularly conducts IT audits\, cybersecurity assessments\, web application penetration testing and issues SOC 2 reports. She regularly consults in areas such as system audits\, web server security\, web application security\, risk assessments\, penetration testing\, database security\, and network infrastructure design. She has played an integral role in developing multiple business applications in roles ranging from the Director of Assurance Services for a security services consulting firm\, the Manager of Infrastructure Security for a healthcare organization\, and as a Manager at Deloitte in the Security Services practice. Tanya is also a faculty member of the SANS Technology Institute\, an NSA Center of Academic Excellence in Cyber Defense and multiple winner of the National Cyber League competition. She currently holds CPA\, GIAC GPPA\, GIAC GCIH\, CISSP\, CISM\, CISA\, CITP\, and OCP DBA certifications. \n \n\n \n\n \n\n\nMike Pedrick \nMike Pedrick has been on both sides of the IT\, IS\, and GRC consulting/client table for more than 20 years. A doggedly client-focused program leadership advisor\, mentor\, and trainer for organizations including ISACA\, as well as a Chapter Board member for the same\, Mike has been building consulting programs and helping clients of all sizes across several industries navigate the troubled waters of risk management\, cybersecurity\, and business enablement. \n \n\n \n\n \n\n\nMerry Marwig\nPrivacy4Cars\nFIP\, CIPP/US\, CIPM \nMerry Marwig is a pro-consumer\, pro-business privacy advocate who is optimistic about what data privacy rights mean for everyday people’and for the companies they do business with. At Privacy4Cars ‘ the world’s leading authority on vehicle privacy and data security ‐ she helps protect driver and passengers’ personal data while creating business opportunities for automotive companies. Merry holds three IAPP certifications (FIP\, CIPP/US\, CIPM)\, is certified in Logical AI Governance\, and earned a master’s degree from the University of Illinois at Urbana-Champaign. \n  \n\n \n\n \n\n\nJustin Pollard \nJustin Pollard has been a leader in data and analytics for more than 15 years. An advocate for leveraging data with purpose\, his consumer-first approach to solving complex business problems has consistently proven that driving value and respecting consumer privacy are not mutually exclusive. Justin has enabled companies in industries including healthcare\, hospitality\, media\, and more to build data programs where decisions and value come together. \n  \n\n \n\n \n\n\nKevin Garvey\nCertified Instructor @ SANS \nKevin Garvey is a certified SANS Instructor and teaches about data protection\, privacy and controls worldwide as part of the SANS LDR (Leadership) 512 course. Previously\, Kevin was the Director of Governance\, Risk and Compliance at CLS Bank\, an international bank responsible for FX settlement based in New York City. Additionally\, Kevin previously headed Security Operations for CLS with responsibility for overseeing incident response\, vulnerability management\, cyber threat intelligence\, and the security operations center (SOC). Previously\, Kevin was the manager of Threat Management and Incident Response at WarnerMedia. Previous cybersecurity experience included his time at New York Power Authority and JP Morgan. Kevin has always had a passion to hunt down the adversary and has loved tackling the risk and threat challenges his responsibilities have thrown at him. Kevin teaches SANSLDR512: Security Leadership Essentials for Managers \n  \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 4 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \n\nPoll Questions \n\n\nParticipants must respond to all the poll questions via the Zoom polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls. \n  \n\n\nCPE Distribution and Evaluation Survey \n\n\nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \n\n\nLearning Objective \n\n\nAfter attending this event\, attendees will learn about current and future trends in the data security and privacy space. \n  \n\n\nCPE-Related Details \n\n\n\nPrerequisites: None\nAdvance Preparation: None\nProgram Knowledge Level: Basic\nDelivery Method:  Group Internet Based\nField of Study:  Information Technology – Technical URL:https://isaca-gwdc.org/event/data-security-privacy-conference-2026/ LOCATION:Virtual Event CATEGORIES:Conferences ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2026/01/data_privacy_controls.png ORGANIZER;CN="Avneet Sabharwal":MAILTO:programs@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20251218T083000 DTEND;TZID=America/New_York:20251218T123000 DTSTAMP:20251215T014217Z CREATED:20250823T203556Z LAST-MODIFIED:20251215T014217Z UID:34339-1766046600-1766061000@isaca-gwdc.org SUMMARY:Security and Risks Insights Conference 2025 DESCRIPTION:  \n \n  \nDecember 18\, 2025\nVirtual Event (Zoom)\nEarn up to 4 CPE\n$10 for GWDC Members\n$30 for Non-Members \n  \n  \n\n\n\nSecurity and Risks Insights Conference 2025 \nNavigating the Future: A CISO’s Perspective on 2025 Security and Risk Priorities \nThe ISACA Greater Washington D.C. Chapter (GWDC) invites you to our Annual Security and Risk Insight Conference—a must-attend event for cybersecurity professionals and business leaders. This year’s seminar offers a comprehensive review of the most critical cybersecurity and risk trends from 2025 and provides actionable insights on where to focus your budget and training efforts for 2026. Whether you’re a CISO\, IT manager\, or business executive\, this conference equips you with the knowledge you need to prepare for the year ahead. \nThis conference provides in-depth analysis of 2025 Trends to understand the key developments that shaped the cybersecurity landscape in 2026. Attendees will gain actionable insights that you can apply immediately to strengthen your organization’s security posture. \nRegistration closes on December 17 @ 5PM. \nRegister Today! \n  \n\n\n\n  \nSponsorship Opportunities \nIf you are interested in sponsoring this event\, or sponsoring the chapter as an annual sponsor\, please visit our sponsorship page. \nSponsorship Info \n  \n\n\n\nEvent Details \n\nDate and Time \n\n\nThe conference will be held on December 18\, 2025 from 8:30 am to 12:30 pm. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThe conference will be held using Zoom. \nPrior to the event\, participants must install the Zoom app on their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits. \n  \n\n\nPricing \n\n\nThe fee for GWDC Members is $10 for the conference.\nThe fee for all other registrants is $30 for the conference. \nTo become a member and take advantage of the member rate for our events\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \n  \n\n\nEvent Policies \n\n\nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n  \n\n  \n\n\n\n  \nInterested in Speaking at a Chapter Event \nIf you are interested in speaking at an upcoming conference\, please visit the Call for Speakers page and complete the form. \nCall for Speakers \n  \n\n\n\nConference Agenda \nConference agendas may change due to schedule conflicts and other unexpected situations. If a previously published agenda has changed\, the changes will be noted. \n  \n \n\n08:30 AM – 09:30 AM \n\n\nUnpopular Opinions in Cybersecurity: What CISOs Must Know and Do Differently in 2025 \nPresenter: Joshua Copeland (Crescendo) \nJoshua’s signature candid style tackling myths\, best practices\, and actionable insights for CISOs to lead effectively in a rapidly changing cyber landscape. \n\n \n\n09:30 AM – 10:30 AM \n\n\nA Pragmatic Approach to Security Leadership – From Vision to Investment \nPresenter: Charu Bansal (ING Bank) \nWith the rapidly evolving threat landscape\, rise in emerging technologies and increasing regulatory oversight\, the role of a security leader is to enable the business and manage risk while continuously investing in proactive defense. \nIn this talk\, I will share the fundamental pillars of our security roadmap\, highlighting key initiatives and risk management priorities that shape our approach. I’ll share how we view the “business of security” in a pragmatic way and the metrics used to measure impact and success. By bridging vision and investment\, this session will shed a light on how we foster a culture of security\, enable sustainable growth and build trust. \n\n \n\n10:30 AM – 11:30 AM \n\n\nIt’s the end of the world as we know it (and I feel fine) \nPresenter: Mike Coogan (Brinks Home) \nEvery year for the past 30 years\, security folks have talked about how next year will change the game. And for the most part\, we have been right. Threats increase\, adversaries get smarter\, and losses mount. Looking back on 2025\, we have seen a big increase in the threat landscape\, and there is no reason to believe that 2026 will get easier. That said\, rather than complaining about it and stirring up angst and fear\, perhaps we should look to the future with anticipation and hope. We get better every year as well and as long as we make attacks more costly for our adversaries\, we make progress in the war. \n\n \n\n11:30 AM – 12:30 PM \n\n\nStrategic Compliance Investment & ROI Optimization for Federal Contractors \nPresenter: Derrich Phillips (Aspire Cyber) \nCMMC 2.0 isn’t just a compliance hurdle it’s a strategic opportunity disguised as a requirement. Derrich Phillips dismantles the “checkbox mentality” plaguing CMMC implementations\, revealing how smart CISOs transform mandatory compliance into competitive advantage. Drawing from his military cyber operations background and federal contractor expertise\, this session provides a battlefield-tested approach to CMMC budgeting that strengthens security posture while maximizing business value. \nWhat Participants Will Achieve: \n\nMaster Strategic Budgeting: Develop comprehensive cost models covering assessments\, technology upgrades\, training\, and ongoing maintenance for sustainable CMMC compliance\nBuild Executive Buy-In: Learn proven techniques to present CMMC investments as business enablers that unlock federal contract opportunities and enhance market positioning\nOptimize Resource Allocation: Prioritize CMMC spending across 17 domains using risk-based frameworks that deliver maximum security impact per dollar invested\nCreate Implementation Roadmaps: Walk away with actionable 2026 planning templates that integrate CMMC milestones with broader cybersecurity and business objectives\nLeverage Compliance for Growth: Transform CMMC readiness into a competitive differentiator that accelerates federal contracting opportunities and client trust\n\nTarget Audience: CISOs\, Security Directors\, and Finance Leaders at organizations pursuing or maintaining federal contracts\, particularly those planning CMMC compliance strategies for 2026 and beyond. \n\n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nPresenters \nAt times presenters for a session may change due to schedule conflicts and other unexpected situations. If a previously presenter has been substituted\, the changes will be noted. \n  \n \n\n \n\n\nJoshua Copeland\nDirector of Cybersecurity @ Crescendo \nJoshua Copeland is a seasoned cybersecurity leader and engineer with 25 years of experience focused on cloud and on-prem security. He specializes in building and operating security stacks\, SOC operations\, and cybersecurity governance\, risk\, and compliance (GRC) processes. Joshua excels at assembling diverse teams that translate technical details into actionable business capabilities. He has managed cybersecurity teams ranging from 1 to over 100 members and led security and compliance programs across physical\, personnel\, and cyber domains. Since 2021\, he has been known as the “Unpopular Opinion Guy” (UOG) on LinkedIn\, sharing candid perspectives on hiring\, mentoring\, and cybersecurity topics. Joshua serves as Adjunct Faculty at Tulane University and is a member of the Louisiana State Guard. He holds expertise across cybersecurity\, risk management\, VPN\, SIEM tools like McAfee ESM and Devo\, social engineering\, pen testing\, DISA STIGs\, and more. He previously held TS/SCI\, Public Trust\, and CJIS clearances. \n \n\n \n\n \n\n\nCharu Bansal\nInformation Security Lead\, Global Infrastructure @ ING Bank \nCharu is an accomplished information security leader with over 15 years of experience spanning a variety of industries – Media and Entertainment\, Technology\, and most recently Financial Services. Having lived and worked in Asia\, North America and Europe\, she has a global mindset and is known for her strategic foresight and ability to drive organizational transformation. She has successfully implemented enterprise-wide security programs\, strengthened organizational resilience against emerging cyber threats\, and fostered a culture of security awareness. In her current role\, she oversees the security for Global Infrastructure including cloud environments at ING bank and is based in the Netherlands. \n \n\n \n\n \n\n\nMike Coogan\nVice President\, IT Services & Chief Information Security Officer (CISO) @ Brinks Home \nMike Coogan is a Texas cybersecurity executive and the Vice President\, IT Services & Chief Information Security Officer (CISO) at Brinks Home. He joined the company in 2024\, bringing more than 25 years of broad IT experience across multiple industry sectors including financial services\, logistics and education. At Brinks Home\, Mike Coogan oversees global network\, infrastructure\, cloud\, database\, and security operations\, driving risk management\, production resilience\, technology innovation\, and budget optimization in partnership with business and IT leaders. \nA recognized community leader\, Mike has served in various roles with ISSA\, ISACA\, Infragard\, WiCyS\, Gartner/Evanta\, and HMG Strategy’s Houston Advisory Board\, shaping the regional and national executive dialogue on security\, risk\, and digital transformation. \n \n\n \n\n \n\n\nDerrich Phillips\nPresident and Founder @ Aspire Cyber \nDerrich Phillips is the President and Founder of Aspire Cyber\, a consultancy dedicated to guiding organizations through complex cybersecurity compliance frameworks like CMMC\, HIPAA\, and ISO 27001. A U.S. Army veteran and former Cyber Network Defender\, Derrich managed Top Secret communications in combat zones\, bringing military-grade discipline and precision to every mission. His post-service career spans top firms including Lockheed Martin and Bank of America\, where he recognized a critical need for cybersecurity support among small businesses and federal contractors. Today\, through Aspire Cyber\, Derrich empowers clients with clear\, actionable strategies and tools\, rooted in integrity\, service\, and leadership. \n \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 4 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \n\nPoll Questions \n\n\nParticipants must respond to all the poll questions via the Zoom polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls. \n  \n\n\nCPE Distribution and Evaluation Survey \n\n\nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \n\n\nLearning Objective \n\n\nAfter attending this event\, attendees will learn about current and future trends in the cybersecurity and risk space. \n  \n\n\nCPE-Related Details \n\n\n\nPrerequisites: None\nAdvance Preparation: None\nProgram Knowledge Level: Basic\nDelivery Method:  Group Internet Based\nField of Study:  Information Technology – Technical URL:https://isaca-gwdc.org/event/security-and-risks-insights-conference-2025/ LOCATION:Virtual Event CATEGORIES:Conferences ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2025/08/security_risk.png ORGANIZER;CN="Avneet Sabharwal":MAILTO:programs@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20251217T120000 DTEND;TZID=America/New_York:20251217T130000 DTSTAMP:20251217T012301Z CREATED:20251101T152335Z LAST-MODIFIED:20251217T012301Z UID:35027-1765972800-1765976400@isaca-gwdc.org SUMMARY:Back to Basics Webinar: Artificial Intelligence Audit and Security DESCRIPTION:  \n \n  \nDecember 17\, 2025\nVirtual Event (Zoom)\nEarn up to 1 CPE\n$5 for GWDC Members\n$10 for Non-Members\nComplimentary student registration (no CPE) \n  \n\n\n\nBack to Basics Webinar Series \nArtificial Intelligence Audit and Security \nThe Back to Basics Lunch & Learn Webinar Series is a webinar series designed for students\, young professionals and members and non-members who are looking to refresh concepts\, switch careers and diversify their professional portfolio and stand out in a competitive job market. These bite-sized\, actionable sessions focus on the skills that don’t always come with a certification—but make a big difference in landing the job or leadership role you want. \nWe’ll cover the topics that are the heart and essence of ISACA as a professional organization\, from IT Audit\, IT Governance\, Data Management\, Risk Management\, Disaster Recovery/ Business Continuity and IT Forensic basics. These concepts sessions can also serve as a refresher for seasoned professionals in the industry. \nAll sessions are short\, high-impact\, and recorded for later viewing on our YouTube channel. For those attending 1 CPE will be awarded. Join us and get insights to grow your brand\, expand your opportunities\, and take your career to the next level. \n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nPricing and Registration \nFor the Back to Basics webinars\, we are offering two different ways to join the webinar: Professional registration and student registration. \n\nProfessional registration \nProfessional registration is for those who want to attend the webinar and earn CPE credit (1 CPE). \nThe registration fees are: \n\nGWDC Members: $5 per person.\nNon-Members: $10 per person\n\nRegistration closes on December 17th @ 11 AM. \nProfessional Registration \n\n\nStudent registration \nStudent registration is available to support the students and young professionals in our area. \nAdditional details: \n\nNo registration fee.\nNot eligible to earn CPE.\n\nRegistration closes on December 17th @ 11 AM. \nStudent Registration \n\n  \n\nJoin ISACA and the GWDC! \nTo become a member and take advantage of the member rate for our events\, among other benefits\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \nJoin ISACA Today! \n\n  \nAdditional Event Details \n\nDate and Time \n\n\nThe conference will be held on December 17\, 2025 from 12:00 pm to 1:00 pm. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThe webinar will be held using Zoom. \nPrior to the event\, participants must install the Zoom app on their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits. \n  \n\n\nEvent Policies \n\n\nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n\n  \n\n\n\n  \nSponsorship Opportunities \nIf you are interested in sponsoring this event\, or sponsoring the chapter as an annual sponsor\, please visit our sponsorship page. \nSponsorship Info \n  \n\n\n\nAgenda \nAgendas may change due to schedule conflicts and other unexpected situations. If a previously published agenda has changed\, the changes will be noted. \n  \n \n\n12:00 PM – 1:00 PM \n\n\nAI Fundamentals for Cybersecurity and Audit Professionals \nThis session is a clear\, practical 50-minute introduction to how AI works and what cyber and audit teams really need to know. The session explains how AI uses data\, introduces a few common algorithm types\, and highlights how bias can enter and influence AI outcomes. Participants will then learn how to interpret the MITRE ATLAS matrix as a simple\, visual way to understand AI-specific attacks and the growing threat landscape. We will walk through a handful of key attack types—such as prompt injection\, data poisoning\, model theft\, and model inversion—focusing on what they are\, why they matter\, and where auditors and security professionals should look for risk. This short\, focused session provides the essential grounding needed to engage confidently in conversations about AI systems\, AI risk\, and AI governance without overwhelming technical detail. \n\n  \nPresenter \nAt times presenters for a session may change due to schedule conflicts and other unexpected situations. If a previously presenter has been substituted\, the changes will be noted. \n  \n\n \n\n\nSushila Nair\nCISSP\, GIAC GSTRT\, GSNA GDSA\, CISA\, CISM\, CRISC\, CDPSE\, CCSK\, CCAK \nSushila is a globally recognized cybersecurity executive with over 25 years of experience leading security strategy\, building high-performing practices\, and advising global enterprises and government agencies. She currently serves as President of the ISACA Greater Washington D.C. Chapter\, the second-largest ISACA chapter in the world. \nSushila has held leadership roles as CISO in the United Kingdom and Malaysia\, global portfolio and practice lead in the United States for global consulting companies. She has led multi-million-dollar cybersecurity portfolios\, managed global delivery teams\, and driven the development of next-generation cybersecurity services. \nAn active contributor to ISACA Global’s Emerging Trends workgroup\, Sushila is a respected voice in the industry\, regularly featured in top publications and global conferences such as RSA and ISACA. She is the host of the public radio segment Shore Tech Pulse\, where she educates the community on cybersecurity and technology trends. Her awards include ISACA’s Technology for Humanity Award and recognition as a Top Cybersecurity Leader by Security Magazine and Cyber Magazine in 2024. \n \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 1 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \n\nPoll Questions \n\n\nParticipants must respond to all the poll questions via the Zoom polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls. \n  \n\n\nCPE Distribution and Evaluation Survey \n\n\nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \n\n\nLearning Objective \n\n\nAfter attending this event\, attendees will learn or refresh their knowledge about AI and cybersecurity. \n  \n\n\nCPE-Related Details \n\n\n\nPrerequisites: None\nAdvance Preparation: None\nProgram Knowledge Level: Basic\nDelivery Method:  Group Internet Based\nField of Study:  Information Technology – Technical URL:https://isaca-gwdc.org/event/back-to-basics-webinar-artificial-intelligence-audit-and-security/ LOCATION:Virtual Event CATEGORIES:Webinar ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2025/08/back-to-basics.png ORGANIZER;CN="Avneet Sabharwal":MAILTO:programs@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20251210T120000 DTEND;TZID=America/New_York:20251210T130000 DTSTAMP:20251210T015429Z CREATED:20251101T150420Z LAST-MODIFIED:20251210T015429Z UID:35023-1765368000-1765371600@isaca-gwdc.org SUMMARY:Back to Basics Webinar: IT Audit Fundamentals DESCRIPTION:  \n \n  \nDecember 10\, 2025\nVirtual Event (Zoom)\nEarn up to 1 CPE\n$5 for GWDC Members\n$10 for Non-Members\nComplimentary student registration (no CPE) \n  \n\n\n\nBack to Basics Webinar Series \nIT Audit Fundamentals \nThe Back to Basics Lunch & Learn Webinar Series is a webinar series designed for students\, young professionals and members and non-members who are looking to refresh concepts\, switch careers and diversify their professional portfolio and stand out in a competitive job market. These bite-sized\, actionable sessions focus on the skills that don’t always come with a certification—but make a big difference in landing the job or leadership role you want. \nWe’ll cover the topics that are the heart and essence of ISACA as a professional organization\, from IT Audit\, IT Governance\, Data Management\, Risk Management\, Disaster Recovery/ Business Continuity and IT Forensic basics. These concepts sessions can also serve as a refresher for seasoned professionals in the industry. \nAll sessions are short\, high-impact\, and recorded for later viewing on our YouTube channel. For those attending 1 CPE will be awarded. Join us and get insights to grow your brand\, expand your opportunities\, and take your career to the next level. \n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nPricing and Registration \nFor the Back to Basics webinars\, we are offering two different ways to join the webinar: Professional registration and student registration. \n\nProfessional registration \nProfessional registration is for those who want to attend the webinar and earn CPE credit (1 CPE). \nThe registration fees are: \n\nGWDC Members: $5 per person.\nNon-Members: $10 per person\n\nRegistration closes on December 10th @ 11 AM. \nProfessional Registration \n\n\nStudent registration \nStudent registration is available to support the students and young professionals in our area. \nAdditional details: \n\nNo registration fee.\nNot eligible to earn CPE.\n\nRegistration closes on December 10th @ 12 PM. \nStudent Registration \n\n  \n\nJoin ISACA and the GWDC! \nTo become a member and take advantage of the member rate for our events\, among other benefits\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \nJoin ISACA Today! \n\n  \nAdditional Event Details \n\nDate and Time \n\n\nThe conference will be held on December 10\, 2025 from 12:00 pm to 1:00 pm. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThe webinar will be held using Zoom. \nPrior to the event\, participants must install the Zoom app on their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits. \n  \n\n\nEvent Policies \n\n\nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n\n  \n\n\n\n  \nSponsorship Opportunities \nIf you are interested in sponsoring this event\, or sponsoring the chapter as an annual sponsor\, please visit our sponsorship page. \nSponsorship Info \n  \n\n\n\nAgenda \nAgendas may change due to schedule conflicts and other unexpected situations. If a previously published agenda has changed\, the changes will be noted. \n  \n \n\n12:00 PM – 1:00 PM \n\n\nIT Audit: Basics and Beyond \nThis Lunch & Learn session\, IT Audit: Basics and Beyond\, provides a practical introduction to the purpose\, importance\, and real-world application of IT auditing. Designed for students and early- to mid-level professionals\, the session will cover key audit types\, including SOX and SOC audits\, as well as core concepts such as IT General Controls and cloud security audits. Participants will also gain insight into how emerging technologies like AI are transforming the IT audit landscape. The session will highlight major audit frameworks\, governing bodies\, and essential certifications for career growth. Attendees will leave with a clear understanding of the evolving role of IT audit in today’s digital organizations. \nLearning Objectives \nBy the end of this session\, participants will be able to: \n\nUnderstand the purpose and importance of IT audit in modern organizations\nIdentify major types of IT audits\, including SOX and SOC audits\nExplain the role of IT General Controls (ITGCs) and cloud security audits\nRecognize the impact of emerging technologies such as AI on IT audit\nIdentify key skills\, certifications\, and career pathways in the IT audit field\n\n\n  \nPresenter \nAt times presenters for a session may change due to schedule conflicts and other unexpected situations. If a previously presenter has been substituted\, the changes will be noted. \n  \n\n \n\n\nAvneet Sabharwal\nCISA\, CMMC-AB Registered Practitioner \nAvneet Sabharwal is an experienced IT Auditor with nearly a decade of expertise across various industries\, including consulting\, finance\, and telecommunications. She has worked extensively on SOX\, SOC 1\, and FSA audits. In her current role\, Avneet is an Internal Audit Manager at a financial planning firm\, focusing on information systems and data analytics. \nAvneet holds a Master’s degree in Information Systems and Technology and an MBA from the George Washington School of Business. She is also certified as a CISA and a CMMC-AB Registered Practitioner. \nIn addition to her professional role\, Avneet serves as the Director of Virtual Conferences on the ISACA GWDC chapter Board\, where she is responsible for planning\, organizing\, and hosting monthly conferences. \nIn her free time\, Avneet enjoys traveling and exploring new places with her family\, reading thriller novels\, and\, recently\, delving into the art of prompting. \n \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 1 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \n\nPoll Questions \n\n\nParticipants must respond to all the poll questions via the Zoom polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls. \n  \n\n\nCPE Distribution and Evaluation Survey \n\n\nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \n\n\nLearning Objective \n\n\nSee session abstract for learning objectives. \n  \n\n\nCPE-Related Details \n\n\n\nPrerequisites: None\nAdvance Preparation: None\nProgram Knowledge Level: Basic\nDelivery Method:  Group Internet Based\nField of Study:  Information Technology – Technical URL:https://isaca-gwdc.org/event/back-to-basics-webinar-it-audit-fundamentals/ LOCATION:Virtual Event CATEGORIES:Webinar ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2025/08/back-to-basics.png ORGANIZER;CN="Avneet Sabharwal":MAILTO:programs@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20251206T090000 DTEND;TZID=America/New_York:20251206T170000 DTSTAMP:20251205T021055Z CREATED:20250920T153031Z LAST-MODIFIED:20251205T021055Z UID:34786-1765011600-1765040400@isaca-gwdc.org SUMMARY:Generative AI for Cyber Auditors Workshop DESCRIPTION:  \n \n  \nDecember 6\, 2025\nVirtual Event (Teams)\nEarn up to 7 CPE\n$125 for GWDC Members\n$200 for Non-Members \n  \n  \n\n\n\nGenerative AI for Cyber Auditors Workshop \nThis intensive one-day virtual workshop\, “Generative AI for Cyber Auditors\,” will provide participants with a comprehensive understanding of how generative AI can be incorporated into the audit process to enhance efficiency and accuracy. The workshop will cover the use of AI tools for data analysis and compliance verification\, with practical exercises to ensure participants can apply these techniques effectively. \nRegistration closes on December 5 @ 3PM. \nRegister Today! \n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nEvent Details \n\nDate and Time \n\n\nThe workshop will be held on December 6\, 2025 (Saturday) from 9:00 am to 5:00 pm. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThe workshop will be held using Microsoft Teams. \nPrior to the event\, the instructor will email all participants the Teams link for the course along with course materials \n  \n\n\nPricing \n\n\nThe fee for GWDC Members is $125 for the workshop.\nThe fee for all other registrants is $200 for the workshop. \nTo become a member and take advantage of the member rate for our events\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \n  \n\n\nEvent Policies \n\n\nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n\n  \n\n\n\n  \nISACA AI Certifications \nISACA has launced new certifications in the AI space: Advanced in AI Audit™ (AAIA™) and Advanced in AI Security Management™ (AAISM™). Click on the links below to learn more about these certifications and how they can further your career in AI. If you are interested in taking one of these certification exams\, check our events calendar for upcoming review courses. \nLearn more about AAIALearn more about AAISM \n  \n  \n\n\n\nCourse Outline \nModule 1: Overview of Generative AI \n\nDefinition and significance of generative AI.\nKey concepts and technologies involved.\nApplications of generative AI in various fields\, with a focus on auditing.\n\nModule 2: Generative AI in the Audit Process \n\nRole of AI in modern auditing.\nBenefits of using generative AI for cyber auditors.\nKey areas of application within the audit process.\n\nModule 3: Incorporating AI Tools into Auditing \n\nOverview of AI tools available for auditing.\nHow to select and implement the right AI tools.\nBenefits of AI tools in improving audit accuracy and efficiency.\n\nModule 4: Data Analysis with Generative AI \n\nTechniques for using AI in data analysis.\nExamples of AI models used for analyzing audit data.\nComparative benefits over traditional data analysis methods.\n\nModule 5: Compliance Verification Using AI \n\nHow AI can streamline compliance verification.\nReal-world examples of AI-driven compliance checks.\nBenefits of AI in ensuring thorough and accurate compliance.\n\nModule 6: Content Creation with Generative AI \n\nIntroducing Generative AI for Documentation\nTypes of Audit Documents AI Can Assist With\nBenefits of Using AI in Content Creation\n\nModule 7: Advanced Prompting for Compliance Integration \n\nIntegration with Compliance Frameworks (NIST 800-53 Rev5\, ISO 27001:2022)\nDrafting Audit Artifacts like SSPs\, Risk Assessments\, SARs\nEnhancing Accuracy and Efficiency in Documentation\n\nModule 8: Ethical and Regulatory Considerations \n\nEthical challenges in using AI for auditing.\nBalancing innovation with ethical considerations.\nOverview of current and future regulations impacting AI in auditing.\n\nModule 9: Future Trends in Generative AI and Auditing \n\nEmerging trends in generative AI relevant to auditing.\nImpact of these trends on the audit process.\nPreparing for future AI advancements in auditing.\n\n  \n\n\n\n  \nComments from Prior Workshop Attendees \nVery eye-opening. Had a lot of real-world examples to help learn the subject matter. – Kasey K \nThe course was excellent for someone who has never had experience with AI. – Rebecca B \nJim did an amazing job sharing a touch topic. Considering how large the class he continue to remain in control and command of the class. Well Done! – Kelli B \nThis was a great intro to using generative AI in general\, not just for cyber auditors. I loved examples\, especially the examples on writing procedures and plans. I’m pretty sure my organization has a “private” AI I can use to try and write some procedures and plans. – Jane L \nCourse was very informative and went beyond what was just in the course materials – Kevin O \n10/10\, Jim was great – Omotayo O \n  \n  \n\n\n\nInstructor \n\n \n\n\nJim Wiggins\nAAISM\, AAIA\, AIGP\, CISM\, CISA\, CRISC\, CISSP\, ISSEP\, CGRC (CAP)\, SCNA\, SCNP\, IAM\, IEM\, SSCP\, CEH\, ECSA\, CHFI\, LPT\, TICSA\, CIWSA\, Security+\, FITSP-M\, CGEIT\, MCITP\, MCSE: Security\, MCSE: Messaging\, MCSA\, MCDST\, Server+\, Network+\, A+\, CDPSE\, CIPP/US\, PMP\, ICE-CCP\, DACUM Facilitator \nJim Wiggins is a seasoned IT and cybersecurity expert with over 29 years of industry experience\, 24 of which have been dedicated to information security – and\, more recently\, the last 3 years on artificial intelligence. He is the Founder and CEO of Securible\, LLC\, a Washington\, DC-based cybersecurity training and consulting firm specializing in practical\, forward-thinking solutions. Through Securible\, Jim has championed innovative approaches to address emerging threats\, ensure regulatory compliance\, and harness the power of Artificial Intelligence in IT audit\, cybersecurity\, governance and privacy. Throughout his distinguished career\, Jim has trained well over 20\,000 IT and cyber professionals\, underscoring his commitment to education and the advancement of the field. \nIn addition to his leadership at Securible\, Jim also serves as the Founder and CEO of the Federal IT Security Institute (FITSI)\, a 501(c)(6) non-profit certification body accredited by the ANSI National Accreditation Board (ANAB) under ISO 17024:2012. FITSI provides role-based cybersecurity certifications designed to fortify the U.S. federal cybersecurity workforce. \nEnhancing his contributions to the cybersecurity community\, Jim hosts a TV show in the Washington\, DC area called Cybersecurity Today. The program offers expert insights\, in-depth analysis\, and the latest updates on cybersecurity trends and threats\, further establishing his role as a prominent thought leader in the industry. \nRecognized as a Federal 100 award recipient in 2019 and the Federal Information Systems Security Educators’ Association (FISSEA) “Educator of the Year” in 2011\, Jim is widely respected for his commitment to elevating cybersecurity education. \nIn the rapidly evolving arena of Artificial Intelligence (AI)\, Jim has directly trained well over 1\,000 IT and cyber professionals on generative AI fundamentals through intensive sessions with the Department of the Interior’s University\, the Defense Information Systems Agency (DISA)\, the National Risk Management Center (NRMC) within CISA\, and the Greater Washington DC Chapter of ISACA. He leverages AI-driven tools such as ChatGPT\, Gemini\, Dalle\, Midjourney\, and Copilot to translate complex concepts into practical\, governance-focused applications. \nJim holds numerous certifications\, including: \n\nArtificial Intelligence: AAISM\, AAIA\, AIGP\nCybersecurity: CISM\, CISA\, CRISC\, CISSP\, ISSEP\, CGRC (CAP)\, SCNA\, SCNP\, IAM\, IEM\, SSCP\, CEH\, ECSA\, CHFI\, LPT\, TICSA\, CIWSA\, Security+\, and FITSP-M.\nInformation Technology: CGEIT\, MCITP\, MCSE: Security\, MCSE: Messaging\, MCSA\, MCDST\, Server+\, Network+\, A+.\nPrivacy: CDPSE\, CIPP/US\nProject Management: PMP (Project Management Professional).\nEducation: ICE-CCP (I.C.E. Certified Credentialing Professional)\, DACUM Facilitator\n\nJim is currently finalizing a master’s degree in education from George Washington University with a concentration in Assessment\, Testing\, and Measurement. \n \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 7 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \n\nPoll Questions \n\n\nParticipants must respond to all the poll questions polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls. \n  \n\n\nCPE Distribution and Evaluation Survey \n\n\nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \n\n\nLearning Objectives \n\n\n\nUnderstand the foundational concepts of generative AI and its relevance in the auditing process.\nExplore the applications of AI tools in enhancing audit efficiency and accuracy.\nLearn how to utilize AI for data analysis and compliance verification.\nEngage in practical exercises to apply AI techniques in real-world audit scenarios.\nDevelop strategies for integrating generative AI into existing audit frameworks.\n\n  \n\n\nCPE-Related Details \n\n\n\nPrerequisites: None\nAdvance Preparation: None\nProgram Knowledge Level: Basic\nDelivery Method:  Group Internet Based\nField of Study:  Information Technology – Technical URL:https://isaca-gwdc.org/event/generative-ai-for-cyber-auditors-workshop/ LOCATION:Virtual Event CATEGORIES:Workshop ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2025/09/workshop_gen_ai_cyberauditors.png ORGANIZER;CN="Clifton Persaud (Certifications Program and Special Assistance Requests)":MAILTO:certifications@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20251205T173000 DTEND;TZID=America/New_York:20251205T203000 DTSTAMP:20251117T134929Z CREATED:20251114T021603Z LAST-MODIFIED:20251117T134929Z UID:35111-1764955800-1764966600@isaca-gwdc.org SUMMARY:GWDC Holiday Party DESCRIPTION:  \n \n  \nDecember 5\, 2025\nKitchen+Bar (Washington D.C.)\nNo CPE\nFor GWDC members only\nRSVP early as space is limited ($10 RSVP Fee) \n  \n  \n\n\n\n GWDC Holiday Party — You’re Invited!  \nISACA-GWDC is wrapping up another amazing year\, and we’re celebrating with our annual Members-Only Holiday Party!\nJoin us for an evening of festive fun\, networking\, and good cheer.\n Friday\, December 5\, 2025\n 5:30 PM – 8:30 PM  –  Networking from 5:30 – 6:30 pm and a sit down dinner from 6:30pm to 8:30pm  \n a.Kitchen+Bar DC (Hotel AKA Washington Circle) 1 Washington Circle NW\, Washington\, D.C.\, 20037 \nNearest Metro Station: Foggy Bottom  \nParking: $10 Valet Parking for all dining patrons – A strict 3-hour time period is enforced by the hotel. Costs for parking are substantially higher after 3 hours. \n What to expect: \n\n\nDelicious 3 course dinner including vegetarian choices \n\n\nTwo drink tickets included (Beer/wine/non-alcoholic drinks) – Cheers! \n\n\nExclusive raffle giveaways\, including GWDC merch  \n\n\nA chance to meet and mingle with fellow members and celebrate the year together \n\n\n Members Only | $10 reservation fee \nSpace is limited — please register only if you plan to join us so we can plan accordingly. \n RSVP Required\nSecure your spot via registration link below. \nRegistration is open until December 3rd or when capacity is reached. Please register only if you plan to attend. \nRSVP today! \n  \nLet’s close out the year with good vibes\, great connections\, and holiday spirit. \nWe can’t wait to celebrate with you!  \n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n  \n\n\n\nCPE Information \nThere is no CPE for this event. URL:https://isaca-gwdc.org/event/gwdc-holiday-party/ LOCATION:a.Kitchen+Bar DC\, 1 Washington Circle NW\, Washington\, D.C.\, 20037\, United States CATEGORIES:Social Events ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2025/11/holiday2025.png ORGANIZER;CN="Avneet Sabharwal":MAILTO:programs@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20251204T090000 DTEND;TZID=America/New_York:20251204T170000 DTSTAMP:20251203T171925Z CREATED:20250920T204101Z LAST-MODIFIED:20251203T171925Z UID:34828-1764838800-1764867600@isaca-gwdc.org SUMMARY:Audit and Control of Enterprise Artificial Intelligence Workshop DESCRIPTION:  \n \n  \nDecember 4\, 2025\nVirtual Event (Zoom)\nEarn up to 7 CPE\n$200 for GWDC Members\n$300 for Non-Members \n  \n  \n\n\n\nAudit and Control of Enterprise Artificial Intelligence (AI):\nMaximizing the Gains\, Minimizing the Risks \nArtificial Intelligence is introducing transformational changes across all aspects of our society. It is delivering insights into complex problems that have eluded humans\, providing unique capabilities that in some cases replace humans\, and in others outperform humans. Your business most likely has begun to consider or even to adopt AI. But AI is not well understood. \nThis one-day workshop will provide auditors and managers with an understanding of what AI is (and what it is not)\, its risks\, the methods for auditing and managing those risks and achieving enterprise value from AI\, and ultimately how to be a leader in the successful adoption of AI. \nIntended audience: Internal and External Auditors\, I.T. Auditors\, Risk Managers\, Security Professionals\, Business Continuity and Disaster Recovery Managers\, IT Management and Staff\, Business Managers\, Financial Executives\, Legal Counsel \nRegistration closes on December 3 @ 2 PM. \nRegister Today! \n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nEvent Details \n\nDate and Time \n\n\nThe workshop will be held on December 4\, 2025 from 9:00 am to 5:00 pm. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThe conference will be held using Zoom. \nPrior to the event\, participants must install the Zoom app on their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits. \n  \n\n\nPricing \n\n\nThe fee for GWDC Members is $200 for the workshop.\nThe fee for all other registrants is $300 for the workshop. \nTo become a member and take advantage of the member rate for our events\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \n  \n\n\nEvent Policies \n\n\nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n\n  \n\n\n\n  \nISACA AI Certifications \nISACA has launced new certifications in the AI space: Advanced in AI Audit™ (AAIA™) and Advanced in AI Security Management™ (AAISM™). Click on the links below to learn more about these certifications and how they can further your career in AI. If you are interested in taking one of these certification exams\, check our events calendar for upcoming review courses. \nLearn more about AAIALearn more about AAISM \n  \n  \n\n\n\nCourse Outline \nModule 1 – AI Background \n\nWhat is AI (and what is not AI)?\nWhy AI is essential to a business today\nBenefits and risks\n\nModule 2 – Understanding how AI works (and fails) \n\nRule-based AI\nData/Deep Learning-based AI\nComposite AI\nAI can get it wrong\nAdversarial Intelligence\nKey takeaways\n\nModule 3 – Preparing the Organization for AI \n\nGovernance\nRole of the Board\nThe AI Ethics Committee\nDivisional Roles and transformation\nCase Study – Auditing the AI Planning and Governance Structure\n\nModule 4 – Launching an enterprise AI Program \n\nObjectives\nTeam and Project selection\nCritical success factors\nRisks\nControls\nCase Study – “To Do list” for Launching an AI Program\n\nModule 5 – Identifying and Managing AI Risk \n\nAxiomatic risk\nCorollary risk\nAdversarial AI risk (cyber)\nIdentifying and managing risk\nCase Study – Developing a risk profile for a project\n\nModule 6 – Conclusion \n\n\n  \n\n\n\n  \nInterested in Speaking at a Chapter Event \nIf you are interested in speaking at an upcoming conference\, please visit the Call for Speakers page and complete the form. \nCall for Speakers \n  \n\n\n\nInstructor \n\n \n\n\nAllan Cytryn\nPrincipal @ Risk Masters International LLC \nAllan Cytryn is a Principal with Risk Masters International. He has more than 35 years of experience in senior IT leadership roles\, including Regional CIO for Deloitte\, Director of Applications for Deloitte\, CIO for Simpson Thacher & Bartlett\, Vice-President of Corporate Finance at Goldman Sachs\, and Group Vice-President for Funds Transfer and Foreign Exchange at Bankers Trust Company. In these roles\, Allan had a broad range of IT responsibilities\, including Business Continuity and Disaster Recovery Planning\, and the implementation and operation of many high-performance mission-critical 24/7/365 system. \nAllan began working in AI in the early 1970s\, where he developed the first suite of AI systems to support computer assisted design in architecture and planning. This suite of systems reduced the time for facilities planning of large offices from 2-4 weeks to under 5 minutes\, while providing a more consistent and higher quality design solution. He subsequently licensed these products to Computervision. Following that\, he developed several AI systems that were deployed successfully in the financial services industry. At Goldman Sachs\, he led the development of an AI-based multi-currency global equity valuation system that supported the Corporate Finance Department. The system reduced the time to develop equity valuation models from 6 weeks to 5 minutes. Also at Goldman\, he developed the first system to use AI to identify “trades of interest” for screening for insider trading. At the law firm of Simpson Thacher & Bartlett\, he developed an interactive research system that identified in seconds contextually relevant documents in a repository of more than 2\,000\,000 documents. \nMore recently\, Allan has been involved in AI policy. In his work with the Boston Global Forum where he is on the Executive Board\, he has co-authored with Governor Michael Dukakis and faculty from Harvard\, MIT and Brown several papers on AI Ethics. In November\, 2019\, he presented at the BCI International conference in London on the subject of When your Artificial Intelligence Becomes Adversarial Intelligence: Risk and Control Considerations. \nAdditionally\, Allan also has significant global IT experience. He was responsible for building the first global networks at Bankers Trust Company\, Simpson Thacher and Bartlett\, and Goldman Sachs Corporate Finance. At Deloitte\, he established the application development offshoring operation in Hyderabad\, India\, and subsequently supported the growth of the offshored Audit practice from its initiation to more than 5\,000 employees. \nWhile at Deloitte\, Allan led the IT recovery after the 9/11 Attack. At Simpson Thacher and Bartlett\, Allan led the recovery after the 1993 NatWest Tower bombing in London. \nOver the past five years\, Allan has published and spoken on Business Continuity and Disaster Recovery Planning\, Management of High-Risk Mission Critical Projects\, Global Cyber Security Policy\, and as previously mentioned\, AI Risk and Control. More recently\, as a member of the Executive Board of the Boston Global Forum (www.bostonglobalforum.org)\, he has advised the governments of Japan and Vietnam on national cyber-security strategy and has co-authored the cyber-security recommendations presented by the Government of Japan to the G7 Leaders at their May\, 2016 G7 Summit in IseShima\, Japan. \nAllan is a graduate of Columbia University\, where he received a BS in Electrical Engineering and Computer Science\, a Master of Architecture\, and an MS in Operations Research. He is an active alumnus\, where his roles have included Chair of the Alumni Board of Visitors of the School of Engineering and Applied Sciences and the Treasurer of the Society of Columbia Graduates. \n \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 7 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \n\nPoll Questions \n\n\nParticipants must respond to all the poll questions polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls. \n  \n\n\nCPE Distribution and Evaluation Survey \n\n\nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \n\n\nLearning Objectives \n\n\n\nWhat AI is\, how it works\, and how it can fail\nHow AI impacts an organization\n\nHow an organization may be transformed by AI\nWhat steps an organization must take tprepare itself for adoption of AI\nHow key roles in an organization are transformed by the adoption of AI\nHow tadopt AI successfully\n\nAI risk management\n\nWhat the risks of AI are\nHow to audit and manage AI risks\nHow to construct a control framework for AI\n\nHow to promote successful adoption of AI\n\nGovernance\nData sources and value\nProject selection and management\nEffective auditing of risks and controls\n\n\n  \n\n\nCPE-Related Details \n\n\n\nPrerequisites: None\nAdvance Preparation: None\nProgram Knowledge Level: Basic\nDelivery Method:  Group Internet Based\nField of Study:  Information Technology – Technical URL:https://isaca-gwdc.org/event/audit-and-control-of-enterprise-artificial-intelligence-workshop/ LOCATION:Virtual Event CATEGORIES:Workshop ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2025/09/workshop_audit_enterpriseAI.png ORGANIZER;CN="Clifton Persaud (Certifications Program and Special Assistance Requests)":MAILTO:certifications@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20251203T120000 DTEND;TZID=America/New_York:20251203T130000 DTSTAMP:20251203T023114Z CREATED:20250823T162440Z LAST-MODIFIED:20251203T023114Z UID:34291-1764763200-1764766800@isaca-gwdc.org SUMMARY:Back to Basics Webinar: Disaster Recovery & Business Continuity DESCRIPTION:  \n \n  \nDecember 3\, 2025\nVirtual Event (Zoom)\nEarn up to 1 CPE\n$5 for GWDC Members\n$10 for Non-Members\nComplimentary student registration (no CPE) \n  \n\n\n\nBack to Basics Webinar Series \nDisaster Recovery & Business Continuity \nThe Back to Basics Lunch & Learn Webinar Series is a webinar series designed for students\, young professionals and members and non-members who are looking to refresh concepts\, switch careers and diversify their professional portfolio and stand out in a competitive job market. These bite-sized\, actionable sessions focus on the skills that don’t always come with a certification—but make a big difference in landing the job or leadership role you want. \nWe’ll cover the topics that are the heart and essence of ISACA as a professional organization\, from IT Audit\, IT Governance\, Data Management\, Risk Management\, Disaster Recovery/ Business Continuity and IT Forensic basics. These concepts sessions can also serve as a refresher for seasoned professionals in the industry. \nAll sessions are short\, high-impact\, and recorded for later viewing on our YouTube channel. For those attending 1 CPE will be awarded. Join us and get insights to grow your brand\, expand your opportunities\, and take your career to the next level. \n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nPricing and Registration \nFor the Back to Basics webinars\, we are offering two different ways to join the webinar: Professional registration and student registration. \n\nProfessional registration \nProfessional registration is for those who want to attend the webinar and earn CPE credit (1 CPE). \nThe registration fees are: \n\nGWDC Members: $5 per person.\nNon-Members: $10 per person\n\nRegistration closes on December 2nd @ 5 PM. \nProfessional Registration \n\n\nStudent registration \nStudent registration is available to support the students and young professionals in our area. \nAdditional details: \n\nNo registration fee.\nNot eligible to earn CPE.\n\nRegistration closes on December 2nd @ 5 PM. \nStudent Registration \n\n  \n\nJoin ISACA and the GWDC! \nTo become a member and take advantage of the member rate for our events\, among other benefits\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \nJoin ISACA Today! \n\n  \nAdditional Event Details \n\nDate and Time \n\n\nThe conference will be held on December 3\, 2025 from 12:00 pm to 1:00 pm. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThe webinar will be held using Zoom. \nPrior to the event\, participants must install the Zoom app on their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits. \n  \n\n\nEvent Policies \n\n\nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n\n  \n\n\n\n  \nSponsorship Opportunities \nIf you are interested in sponsoring this event\, or sponsoring the chapter as an annual sponsor\, please visit our sponsorship page. \nSponsorship Info \n  \n\n\n\nAgenda \nAgendas may change due to schedule conflicts and other unexpected situations. If a previously published agenda has changed\, the changes will be noted. \n  \n \n\n12:00 PM – 1:00 PM \n\n\nIntegrating BC/DR and Emergency Management to Achieve Organizational Resilience (Using DRII Professional Practices & NFPA 1660) \nModern organizations are facing increasingly complex and interconnected threats – from cyberattacks and infrastructure failures to severe weather\, supply-chain disruptions\, and human-caused incidents. Traditional Business Continuity (BC)\, Disaster Recovery (DR)\, and Emergency Management (EM) programs often operate in silos\, creating dangerous gaps during actual crises. This presentation describes how to unify these disciplines into a cohesive organizational resilience program using two authoritative standards: the Drii Professional Practices (PP) and NFPA 1660: Standard on Emergency\, Continuity\, and Crisis Management. \nAttendees will learn how DRII’s lifecycle – Risk Assessment\, Business Impact Analysis\, Strategy Development\, Plan Development\, Training & Awareness\, and Exercise Programs – maps directly to NFPA 1660’s Emergency Management and Continuity requirements. By aligning these frameworks\, organizations can build resilience capabilities that protect people\, sustain operations\, and restore critical technology under real-world conditions. This session provides actionable guidance on integrating emergency response (ICS/NIMS)\, business continuity\, IT disaster recovery\, and crisis communications into a single\, governance-driven approach. Practical examples\, maturity indicators\, and lessons learned from real incidents will illustrate how organizations can strengthen preparedness\, response\, and recovery activities across IT\, physical operations\, and leadership teams. \nKey Takeaways: \n\nUnderstand the complementary roles of DRII Professional Practices and NFPA 1660 and how to use them together – these are key BC/DR/EM Frameworks used by the authors.\nLearn how to integrate BC\, DR\, and EM functions to eliminate silos and strengthen response coordination.\nSee how the DRII Professional Practices lifecycle maps to NFPA 1660’s Emergency\, Continuity\, and Crisis Management standards.\nGain actionable strategies to improve governance\, cross-functional planning\, crisis leadership\, and resource coordination.\nLearn about ISACA’s IT Business Continuity/Disaster Recovery Audit Program\, produced in 2021\, and how to download it.\n\n\n  \nPresenters \n\n \n\n\nHarvey Nusz\nCIPM\, CRISC\, CISA\, CGEIT \nHarvey Nusz is a seasoned cybersecurity\, privacy\, governance\, and BC/DR advisor experience in Business Continuity\, IT Disaster Recovery\, and organizational resilience. He has worked as a DR Manager at a large oil and gas company\, and has also audited BC/DR functions at various companies. He has strong governance credentials and has passed the CBCP exam\, and is currently pursuing full certification based on his professional experience. \nHarvey is a past President of both the ISACA Greater Houston and Milwaukee Chapters\, as well as the ISSA South Texas Chapter. He serves on the Program Committee for the ISACA GWDC Chapter\, founded and leads the Cybersecurity SIG for the Association of Continuity Professionals (ACP)\, and was recognized as ACP’s Spotlight Member for November 2025. \n \n\n\n \n\n\nStephen Kastensmidt\nCEM\, CGEMC \nStephen G. Kastensmidt is a veteran Crisis and Emergency Manager with extensive experience in designing and leading emergency exercises. Over his career\, he has managed and developed dozens of preparedness exercises\, particularly within the maritime and energy sectors. \nStephen’s maritime expertise is demonstrated through his collaborative work with the Maritime Security Council\, the Energy Security Council\, as well as his service as a U.S. Coast Guard (USCG) Emergency Management Coordinator. Notably\, he served as Director of Offshore Operations during the Deepwater Horizon incident\, providing critical leadership in a significant maritime emergency. \nAs a lead planner\, Stephen contributed to the five-year MEXUS series\, culminating in a full-scale exercise involving more than 400 participants and over 1\,200 exercise injects. He has been a key member of planning teams for multiple large-scale maritime terrorism exercises\, demonstrating expertise in both strategic planning and operational response. \n \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 1 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \n\nPoll Questions \n\n\nParticipants must respond to all the poll questions via the Zoom polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls. \n  \n\n\nCPE Distribution and Evaluation Survey \n\n\nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \n\n\nLearning Objective \n\n\nAfter attending this event\, attendees will learn or refresh their knowledge about disaster recovery and business continuity. \n  \n\n\nCPE-Related Details \n\n\n\nPrerequisites: None\nAdvance Preparation: None\nProgram Knowledge Level: Basic\nDelivery Method:  Group Internet Based\nField of Study:  Information Technology – Technical URL:https://isaca-gwdc.org/event/back-to-basics-webinar-disaster-recovery-business-continuity/ LOCATION:Virtual Event CATEGORIES:Webinar ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2025/08/back-to-basics.png ORGANIZER;CN="Avneet Sabharwal":MAILTO:programs@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20251119T120000 DTEND;TZID=America/New_York:20251119T130000 DTSTAMP:20251101T142241Z CREATED:20250823T161442Z LAST-MODIFIED:20251101T142241Z UID:34289-1763553600-1763557200@isaca-gwdc.org SUMMARY:Back to Basics Webinar: IT Forensics DESCRIPTION:  \n \n  \nNovember 19\, 2025\nVirtual Event (Zoom)\nEarn up to 1 CPE\n$5 for GWDC Members\n$10 for Non-Members\nComplimentary student registration (no CPE) \n  \n\n\n\nBack to Basics Webinar Series \nIT Forensics \nThe Back to Basics Lunch & Learn Webinar Series is a webinar series designed for students\, young professionals and members and non-members who are looking to refresh concepts\, switch careers and diversify their professional portfolio and stand out in a competitive job market. These bite-sized\, actionable sessions focus on the skills that don’t always come with a certification—but make a big difference in landing the job or leadership role you want. \nWe’ll cover the topics that are the heart and essence of ISACA as a professional organization\, from IT Audit\, IT Governance\, Data Management\, Risk Management\, Disaster Recovery/ Business Continuity and IT Forensic basics. These concepts sessions can also serve as a refresher for seasoned professionals in the industry. \nAll sessions are short\, high-impact\, and recorded for later viewing on our YouTube channel. For those attending 1 CPE will be awarded. Join us and get insights to grow your brand\, expand your opportunities\, and take your career to the next level. \n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n\n\n\nPricing and Registration \nFor the Back to Basics webinars\, we are offering two different ways to join the webinar: Professional registration and student registration. \n\nProfessional registration \nProfessional registration is for those who want to attend the webinar and earn CPE credit (1 CPE). \nThe registration fees are: \n\nGWDC Members: $5 per person.\nNon-Members: $10 per person\n\nRegistration closes on November 18th @ 5 PM. \nProfessional Registration \n\n\nStudent registration \nStudent registration is available to support the students and young professionals in our area. \nAdditional details: \n\nNo registration fee.\nNot eligible to earn CPE.\n\nRegistration closes on November 18th @ 5 PM. \nStudent Registration \n\n  \n\nJoin ISACA and the GWDC! \nTo become a member and take advantage of the member rate for our events\, among other benefits\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \nJoin ISACA Today! \n\n  \nAdditional Event Details \n\nDate and Time \n\n\nThe conference will be held on November 19\, 2025 from 12:00 pm to 1:00 pm. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThe webinar will be held using Zoom. \nPrior to the event\, participants must install the Zoom app on their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits. \n\n\nEvent Policies \n\n\nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n  \n\n  \n\n\n\n  \nSponsorship Opportunities \nIf you are interested in sponsoring this event\, or sponsoring the chapter as an annual sponsor\, please visit our sponsorship page. \nSponsorship Info \n  \n\n\n\nAgenda \nAgendas may change due to schedule conflicts and other unexpected situations. If a previously published agenda has changed\, the changes will be noted. \n  \n \n\n12:00 PM – 1:00 PM \n\n\nComputer Forensics Basics: Unmasking Digital Truth \nPresenter: Jennifer Marden (University of Alabama Huntsville) \nIn this session\, you will discover the hidden world of digital evidence. Did you know that over 60% of all crimes now involve a digital component (Source: FBI Cyber Crime Report\, 2023)? Join us to decode the digital breadcrumbs criminals leave behind. Learn to identify\, preserve\, analyze\, and present digital evidence and understand the critical skills needed for law enforcement\, corporate security\, and incident response. \n\n  \nPresenter \nAt times presenters for a session may change due to schedule conflicts and other unexpected situations. If a previously presenter has been substituted\, the changes will be noted. \n  \n \n\n \n\n\nJennifer Marden\nCybersecurity Research Scientist/ Cybersecurity Curriculum Instructor @ Center for Cybersecurity Research and Education at the University of Alabama Huntsville\nMBA\, PMP \nJennifer Marden is a distinguished trainer and research scientist with the Regions Investing in the Next Generation (RING) cybersecurity curriculum team at the Center for Cybersecurity Research and Education at the University of Alabama Huntsville. Her primary responsibilities include providing cybersecurity curriculum training to K-12 educators and demonstrating cyber curricula to stakeholders and government partners. She collaborates closely with the National Centers of Academic Excellence in Cybersecurity and Education Pathway National Centers (EPNC) to promote cybersecurity education through the RING program and curriculum. \nMrs. Marden brings a wealth of experience from her 13-year tenure as a teacher in Virginia’s Loudoun County Public Schools\, where she taught Introduction to Cybersecurity\, Cybersecurity Operations\, Python programming\, Computer Information Systems\, and Personal Finance. \nEducational Background: Mrs. Marden graduated from Mary Baldwin University in Staunton\, VA\, with a Bachelor of Arts in Business Administration\, minoring in Economics and Computer Information Systems. She earned her Master’s in Business Administration from Liberty University in Lynchburg\, VA. She also holds a Virginia state teaching licensure with endorsements in Business Education and Marketing from Shenandoah University. Additionally\, Mrs. Marden has served as an adjunct professor at the Kogod School of Business. She has contributed to the Master of Business Administration program at American University in Washington\, DC. \nProfessional Experience: Before embarking on her teaching career\, Mrs. Marden accumulated 17 years of experience in Information Technology as a system engineer\, consultant\, developer\, manager\, and director for various consulting and telecommunications firms in Northern Virginia and Kansas and internationally in Malaysia\, the Philippines\, South Korea\, Chile\, and Canada. \nLeadership & Recognition: Since 2018\, Mrs. Marden has been a member of the Virginia Cyber Range Executive Board and the K-12 Advisory Committee. Her work includes collaborating with Virginia Cyber Range and Cyber.org on cybersecurity curriculum review and standards and partnering with the Virginia Department of Education to update and advocate for cybersecurity curriculum standards. She co-directs the Virginia CyberSlam conference for high school students\, growing the initiative to over 580 participants statewide over the past three years. Her contributions have earned her the Virginia Cybersecurity Educator Award in 2022\, a nomination for the Presidential Cybersecurity Educator Award in 2023\, and a nomination for the National Cybersecurity Teacher of the Year in 2020. \n \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 1 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \n\nPoll Questions \n\n\nParticipants must respond to all the poll questions via the Zoom polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls. \n  \n\n\nCPE Distribution and Evaluation Survey \n\n\nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \n\n\nLearning Objective \n\n\nAfter attending this event\, attendees will learn or refresh their knowledge about IT forensics. \n  \n\n\nCPE-Related Details \n\n\n\nPrerequisites: None\nAdvance Preparation: None\nProgram Knowledge Level: Basic\nDelivery Method:  Group Internet Based\nField of Study:  Information Technology – Technical URL:https://isaca-gwdc.org/event/back-to-basics-webinar-it-forensics/ LOCATION:Virtual Event CATEGORIES:Webinar ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2025/08/back-to-basics.png ORGANIZER;CN="Avneet Sabharwal":MAILTO:programs@isaca-gwdc.org END:VEVENT BEGIN:VEVENT DTSTART;TZID=America/New_York:20251115T090000 DTEND;TZID=America/New_York:20251115T170000 DTSTAMP:20251022T104906Z CREATED:20250920T152344Z LAST-MODIFIED:20251022T104906Z UID:34798-1763197200-1763226000@isaca-gwdc.org SUMMARY:Generative AI for Governance Professionals Workshop DESCRIPTION:  \n \n  \nNovember 15\, 2025\nVirtual Event (Teams)\nEarn up to 7 CPE\n$125 for GWDC Members\n$200 for Non-Members \n  \n  \n\n\n\nGenerative AI for Governance Professionals Workshop \nThis intensive one-day virtual workshop\, Generative AI for Governance Professionals\, will provide participants with a comprehensive understanding of how generative AI can be leveraged to enhance governance\, risk\, and compliance functions. The workshop will cover the use of AI tools to streamline policy development\, automate reporting\, and strengthen internal controls\, with practical exercises to ensure participants can effectively apply these techniques within their governance and compliance workflows. \nRegistration closes on November 13 @ 5PM. \nRegister Today! \n  \n\n\n\n  \nShare this Event \nIf you are interested\, planning to attend\, or attending this event\, please share with your colleagues across your social media networks. \n\n \n \n \n \n \n \n \n \n \n Share on X\n \n \n \n \n \n \n \n \n \n \n \n Share on Linkedin\n \n \n \n \n \n \n \n \n \n \n \n Share on Facebook\n \n \n \n \n \n \n \n \n \n \n \n Share on Print\n \n \n \n \n \n \n \n \n \n \n Share on Email\n \n \n \n \n \n \n\n \n\n\n  \n  \n\n\n\nEvent Details \n\nDate and Time \n\n\nThe workshop will be held on November 15\, 2025 (Saturday) from 9:00 am to 5:00 pm. \nAdd this event to your calendar using the Add to Calendar link at the bottom of the page. \n  \n\n\nVirtual Event \n\n\nThe workshop will be held using Microsoft Teams. \nPrior to the event\, the instructor will email all participants the Teams link for the course along with course materials \n  \n\n\nPricing \n\n\nThe fee for GWDC Members is $125 for the workshop.\nThe fee for all other registrants is $200 for the workshop. \nTo become a member and take advantage of the member rate for our events\, among other benefits\, join ISACA and select the Greater Washington D.C. Chapter as your local chapter. \n  \n\n\nEvent Policies \n\n\nCancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system by the date registration closes. Refunds vary depending on the date of cancellation and cost of the event. See ISACA GWDC Event Policies for details. \nThe GWDC welcomes your comments\, complaints\, suggestions\, questions\, and other feedback concerning our website information and services. \nAll complaints should be submitted through the Registration Contact Form. \n\n  \n\n\n\n  \nISACA AI Certifications \nISACA has launced new certifications in the AI space: Advanced in AI Audit™ (AAIA™) and Advanced in AI Security Management™ (AAISM™). Click on the links below to learn more about these certifications and how they can further your career in AI. If you are interested in taking one of these certification exams\, check our events calendar for upcoming review courses. \nLearn more about AAIALearn more about AAISM \n  \n  \n\n\n\nCourse Outline \nModule 1: Introduction to Generative AI for Governance \n\nFundamentals of Generative AI and large language models (LLMs)\nUnderstanding how AI impacts governance\, compliance\, and decision-making\nKey terms and concepts for non-technical governance professionals\n\nModule 2: AI in Governance\, Risk\, and Compliance (GRC) \n\nUse cases of Generative AI in risk assessment and internal controls\nEnhancing policy development\, auditing\, and compliance monitoring with AI\nAutomating documentation\, reporting\, and regulatory submissions\n\nModule 3: Risks and Challenges of Generative AI \n\nEthical\, legal\, and operational risks in AI adoption\nData privacy\, intellectual property\, and confidentiality concerns\nGovernance risks from AI bias\, hallucinations\, and lack of explainability\n\nModule 4: Regulatory and Standards Landscape \n\nOverview of global and U.S. AI regulations (EU AI Act\, NIST AI RMF\, ISO/IEC 42001)\nImpact of AI on SOX\, HIPAA\, GDPR\, and other compliance obligations\nAnticipating changes in the governance environment with emerging AI policies\n\nModule 5: Designing AI Governance Frameworks \n\nCore principles of responsible AI governance\nBuilding AI oversight and internal review mechanisms\nAligning AI governance with enterprise GRC and risk frameworks\n\nModule 6: Vendor and Third-Party AI Risk Management \n\nEvaluating AI tools and third-party providers for compliance\nPerforming due diligence and AI-specific contract reviews\nContinuous monitoring of AI vendors and their data handling practices\n\nModule 7: Implementing AI in Governance Workflows \n\nPractical AI applications for board reporting\, audit committees\, and compliance teams\nCase studies: AI in enterprise governance programs\nMitigating the operational challenges of AI integration\n\nModule 8: Future-Proofing Governance Programs \n\nPreparing for AI-driven organizational transformation\nContinuous improvement and auditing of AI systems\nStrategic roadmap for AI adoption in governance and compliance\n\n  \n\n\n\n  \nInterested in Speaking at a Chapter Event \nIf you are interested in speaking at an upcoming conference\, please visit the Call for Speakers page and complete the form. \nCall for Speakers \n  \n\n\n\nInstructor \n\n \n\n\nJim Wiggins\nAAISM\, AAIA\, AIGP\, CISM\, CISA\, CRISC\, CISSP\, ISSEP\, CGRC (CAP)\, SCNA\, SCNP\, IAM\, IEM\, SSCP\, CEH\, ECSA\, CHFI\, LPT\, TICSA\, CIWSA\, Security+\, FITSP-M\, CGEIT\, MCITP\, MCSE: Security\, MCSE: Messaging\, MCSA\, MCDST\, Server+\, Network+\, A+\, CDPSE\, CIPP/US\, PMP\, ICE-CCP\, DACUM Facilitator \nJim Wiggins is a seasoned IT and cybersecurity expert with over 29 years of industry experience\, 24 of which have been dedicated to information security – and\, more recently\, the last 3 years on artificial intelligence. He is the Founder and CEO of Securible\, LLC\, a Washington\, DC-based cybersecurity training and consulting firm specializing in practical\, forward-thinking solutions. Through Securible\, Jim has championed innovative approaches to address emerging threats\, ensure regulatory compliance\, and harness the power of Artificial Intelligence in IT audit\, cybersecurity\, governance and privacy. Throughout his distinguished career\, Jim has trained well over 20\,000 IT and cyber professionals\, underscoring his commitment to education and the advancement of the field. \nIn addition to his leadership at Securible\, Jim also serves as the Founder and CEO of the Federal IT Security Institute (FITSI)\, a 501(c)(6) non-profit certification body accredited by the ANSI National Accreditation Board (ANAB) under ISO 17024:2012. FITSI provides role-based cybersecurity certifications designed to fortify the U.S. federal cybersecurity workforce. \nEnhancing his contributions to the cybersecurity community\, Jim hosts a TV show in the Washington\, DC area called Cybersecurity Today. The program offers expert insights\, in-depth analysis\, and the latest updates on cybersecurity trends and threats\, further establishing his role as a prominent thought leader in the industry. \nRecognized as a Federal 100 award recipient in 2019 and the Federal Information Systems Security Educators’ Association (FISSEA) “Educator of the Year” in 2011\, Jim is widely respected for his commitment to elevating cybersecurity education. \nIn the rapidly evolving arena of Artificial Intelligence (AI)\, Jim has directly trained well over 1\,000 IT and cyber professionals on generative AI fundamentals through intensive sessions with the Department of the Interior’s University\, the Defense Information Systems Agency (DISA)\, the National Risk Management Center (NRMC) within CISA\, and the Greater Washington DC Chapter of ISACA. He leverages AI-driven tools such as ChatGPT\, Gemini\, Dalle\, Midjourney\, and Copilot to translate complex concepts into practical\, governance-focused applications. \nJim holds numerous certifications\, including: \n\nArtificial Intelligence: AAISM\, AAIA\, AIGP\nCybersecurity: CISM\, CISA\, CRISC\, CISSP\, ISSEP\, CGRC (CAP)\, SCNA\, SCNP\, IAM\, IEM\, SSCP\, CEH\, ECSA\, CHFI\, LPT\, TICSA\, CIWSA\, Security+\, and FITSP-M.\nInformation Technology: CGEIT\, MCITP\, MCSE: Security\, MCSE: Messaging\, MCSA\, MCDST\, Server+\, Network+\, A+.\nPrivacy: CDPSE\, CIPP/US\nProject Management: PMP (Project Management Professional).\nEducation: ICE-CCP (I.C.E. Certified Credentialing Professional)\, DACUM Facilitator\n\nJim is currently finalizing a master’s degree in education from George Washington University with a concentration in Assessment\, Testing\, and Measurement. \n \n\n  \n\n\n\n  \nQuestions about this Event \n\n\nIf you have any registration questions about this event\, please contact us by completing the Registration Contact Form linked below. \nRegistration Questions \n  \n\n\n\n\nIf you have CPE questions after the event has concluded\, please contact us by completing the CPE contact form linked below. \nCPE Questions \n  \n\n\n  \n\n\n\nCPE Information \nEarn up to 7 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington\, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org \n  \n\nPoll Questions \n\n\nParticipants must respond to all the poll questions polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls. \n  \n\n\nCPE Distribution and Evaluation Survey \n\n\nCPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit. \n  \n\n\nLearning Objectives \n\n\n\nExplain the fundamentals of generative AI and large language models (LLMs).\nDescribe how AI impacts governance\, compliance\, and decision-making.\nAnalyze use cases of generative AI in risk assessment and internal controls.\nApply AI to enhance policy development and compliance monitoring.\nEvaluate ethical\, legal\, and operational risks associated with AI adoption.\nAssess governance risks arising from bias\, hallucinations\, and lack of explainability.\nSummarize the key provisions of major AI regulations and standards.\nExplain how AI affects compliance obligations under laws such as SOX\, HIPAA\, and GDPR.\nDescribe the core principles of responsible AI governance.\nDesign oversight mechanisms that align AI governance with enterprise GRC frameworks.\nEvaluate AI vendors for compliance with governance requirements.\nPerform due diligence and continuous monitoring of AI third-party providers.\nApply AI solutions to improve board reporting and audit workflows.\nPropose strategies to address operational challenges in AI integration.\nDevelop a strategic roadmap for AI adoption in governance and compliance.\nImplement continuous improvement processes for auditing AI systems.\n\n  \n\n\nCPE-Related Details \n\n\n\nPrerequisites: None\nAdvance Preparation: None\nProgram Knowledge Level: Basic\nDelivery Method:  Group Internet Based\nField of Study:  Information Technology – Technical URL:https://isaca-gwdc.org/event/generative-ai-for-governance-professionals-workshop/ LOCATION:Virtual Event CATEGORIES:Workshop ATTACH;FMTTYPE=image/png:https://isaca-gwdc.org/wp-content/uploads/2025/09/workshop_gen_ai_governance.png ORGANIZER;CN="Clifton Persaud (Certifications Program and Special Assistance Requests)":MAILTO:certifications@isaca-gwdc.org END:VEVENT END:VCALENDAR