ISACA Greater Washington, D.C. Chapter

Serving ISACA GWDC Members since 1974

CPE Questions   Join ISACA

Cybersecurity 2023 Conference

by

Cybersecurity 2023 Conference

The GWDC is proud to host its annual cybersecurity conference, Cybersecurity 2023. This virtual conference is part of our monthly conference series.

Business leaders and managers, executives, technologists, professionals, and students, interested in staying current in the field of cybersecurity should attend this conference.

Registration closes on October 11, 2023 @ 12pm. 

Conference details will be posted soon!

Register Today!

 

Topics and Speakers

The following speakers and topics are confirmed for this event.  Additional details, including topic descriptions and speaker bios, will be posted soon!

David Branscome
Microsoft
Topic – Where Is AI Taking Us? Cyberinfluence Operations and Synthetic Media

Albert E. Whale
CEH CHS CISA CISSP CMMC-RP
Sr. Cloud Security / Zero Trust Architect NA Cyber – DevSecOps ‘A’ Team @ Capgemini America, Inc

Matt Soseman
CTO & Founder , The Partner Masters

 

Virtual Meeting Information

  • This event will be presented through Zoom.
  • Prior to the event, participants must install the Zoom app on their respective devices or use the web-based Zoom. Calling via the phone may not be entitled to CPE credits.
  • Participants must respond to all the poll questions via the Zoom polling feature or chat log in order to receive NASBA CPE credits.
  • The ISACA Greater Washington, D.C. Chapter will not be responsible for the participant’s inability to respond to the polls.

 

Event Questions and Policies

Registration Questions

If you have any registration questions about this event, please contact the chapter using the Registration Contact Form.

If you have CPE questions after the event has concluded, please contact the chapter using the CPE Contact Form.

 

Cancellation and Refund Policy

Cancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system. Refunds vary depending on the date of cancellation. See ISACA GWDC Event Policies for details.

If ISACA GWDC cancels the event, all registrants will be notified as soon as possible through email at the email address provided during registration. Full refunds will be provided.

 

Complaint Policy

The GWDC welcomes your comments, complaints, suggestions, questions, and other feedback concerning our website information and services. All complaints should be submitted through the Registration Contact Form.

 

CPE Information

Earn up to 4 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org

 

CPE Distribution and Evaluation Survey

CPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit.

 

Learning Objective

After attending this event, attendees will learn about recent topics in the cybersecurity space.

 

CPE-Related Details

  • Prerequisites: None
  • Advance Preparation: None
  • Program Knowledge Level: Basic
  • Delivery Method:  Group Internet Based
  • Field of Study:  Information Technology – Technical

CISA Fall 2023 Review Course

by

The GWDC is sponsoring an intensive 4-day virtual review course for the Certified Information System Auditor® (CISA®) exam.  This review course will provide practical advice on preparing for the CISA exam and specific instruction regarding the job practice areas addressed by CISA as defined by ISACA® Global. The dates of this course are four (4) consecutive Saturdays: October 14, 21, 28 and November 4, 2023 from 8:30 am to 5 pm Eastern.

Please take a moment to hear from one of the instructors, Jim Wiggins, about the course and how it will help you prepare for the CISA exam.  The instructors Jim Wiggins and Tyler Harding combined have over 40 years of audit, IT, and cybersecurity experience and are ISACA accredited instructors.

This event is intended for anyone sitting for the CISA Exam. Students are expected to have prepared for the exam prior to attending the course.

Registration closes on October 13, 2023 @ 3pm. 

Register Today!

 

Re-Take Discount

Students who take this GWDC review class and do not pass the corresponding Exam are eligible for a one-time 50% discount on the next review class offered by the GWDC for the exam. Please read the chapter event policy for discount details.

 

Agenda

Day 1

Module 1 – The Process of Auditing Information Systems

Module 2 – Governance and Management of IT

Day 2

Module 3 – Information Systems Acquisition, Development, and Implementation

Day 3

Module 4 – Information Systems Operations, Maintenance, and Support

Day 4

Module 5 – Protection of Information Assets

 

Course Materials and Exam Resources

Materials Provided During the Course

Participants receive a Study Guide to help them prepare for the CISA exam. The Study Guide contains a presentation, a case study, and 20 quiz questions for each domain in the official CISA Review Manual. The Study Guide contains additional material such as suggested study approach, exam taking tips, list of “must know” vocabulary terms, and other suggested readings to aid participants in their exam preparation.

 

Study Materials

The instructor highly recommends that students purchase the CISA Review Manual and the CISA Review Questions, Answers, and Explanations Database – 12 Month. Below are the study materials available for purchase from the ISACA Bookstore:

  • CISA Review Manual
  • CISA Review Questions, Answers & Explanations Manual
  • CISA Review Questions, Answers & Explanation Database – 12 month subscription

**It is highly recommended to order these at the earliest opportunity to avoid any possible delays in their availability for the start of the program.

 

Additional Study Resources

Candidates should review the Exam Candidate Guide and other resources on the ISACA CISA page as part of their study program. 

 

Instructors

Jim Wiggins

Jim Wiggins
Founder and Principal @ Securible, LLC
CISSP, ISSEP, CISM, CISA, CRISC, CySA+, SCNA, SCNP, CAP, IAM, IEM, SSCP, CEH, ECSA, CHFI, LPT, TICSA, CIWSA, Security+, and MCSE: Security, FITSP-M

Jim has over 26 years of direct experience in the design, operation, management, and auditing of information technology systems, with the past 21 years focused on information systems security. He has an extensive background in technical education and specializes in security certification courses aimed at federal and government contracting clients.

Today, Jim is the Founder and Principal of Securible, LLC. Securible is an information security service provider offering cyber training programs to organizations of all sizes. At Securible, Jim has taught IT security certification courses such as CISSP, CISM, CISA, Ethical Hacking, RMF, Security+, and other courses requested by Securible’s clients. Currently, he provides education and training support for the National Risk Management Center (NRMC) at the Cybersecurity and Infrastructure Security Agency (CISA) within the Department of Homeland Security (DHS ). More information on Securible can be found at: http://www.securible.com.

Jim is also the Founder and Chief Executive Officer (CEO) of the Federal IT Security Institute (FITSI). FITSI is a 501(c)(6) non-profit certification body accredited by the ANSI National Accreditation Board (ANAB) under ISO 17024:2012. FITSI offers a role-based IT security certification program targeted at the federal workforce. More information on FITSI can be found at: http://www.fitsi.org.

Additionally, Jim is the Founder and Executive Director of the FITSI Foundation. The FITSI Foundation is a 501(c)(3) public charity that focuses on cyber education and serves as the philanthropic sister organization of the Federal IT Security Institute. The FITSI Foundation operates the Wounded Warrior Cyber Combat Academy (W2CCA). More information on the FITSI Foundation can be found at: https://www.fitsifoundation.org.

In 2020, Jim launched a TV show on cybersecurity called “Cybersecurity Today,” which can be viewed in the Washington, DC area. Episodes can also be streamed online at the following website: http://www.cybersecuritytoday.org.

In 2019, FCW named Jim to the “Federal 100” for his tireless efforts to promote cybersecurity education across all branches of the federal government.

In 2011, the Federal Information Systems Security Educators’ Association (FISSEA) named him “Educator of the Year” for the impact he continues to make on the federal workforce.

Jim holds the following IA/IT security certifications: CISSP, ISSEP, CISM, CISA, CRISC, CySA+, SCNA, SCNP, CAP, IAM, IEM, SSCP, CEH, ECSA, CHFI, LPT, TICSA, CIWSA, Security+, and MCSE: Security and FITSP-M.

Tyler Harding

Tyler Harding
Senior Manager @ Amazon Supply Chain
CPA, CISA, CISM, CISSP, CAP, GGEIT, FITSP:A, FITSP:M

Tyler Harding is a Senior Manager and leads a commercial and DoD compliance program at Amazon Supply Chain (supplychain.amazon.com). The Compliance team’s goal is to earn customer’s trust and maintain compliance with multiple information security certifications such as ISO 27001, AICPA SOC 2, HiTRUST, and NIST SP 800-171. Prior to his role at Amazon Supply Chain, Tyler was the DoD Security and Compliance Manager for AWS and led efforts to accredit AWS cloud services to Impact Levels 4 and 5 under DoD’s Cloud Computing Security Requirements Guide (CC SRG).

Before joining Amazon in 2019, Tyler spent over 20+ years in public accounting firms such as PWC, KPMG, and Kearney & Company in their respective IT audit practices and led engagement teams through many SOC 1, FISMA, and financial statement audits.

As a recovering IT auditor, Tyler now enjoys his Summers and Falls swimming, cycling, and playing an occasional round of golf! Tyler has also supported the ISACA Greater Washington D.C. Chapter for over 20 years by teaching CISA, CISM, and CGEIT review courses.

 

Virtual Meeting Information

  • This event will be presented online through Microsoft Teams.  
  • The instructor will email students prior to the event with instructions and additional information. 

 

Event Questions and Policies

Registration Questions

If you have any registration questions about this event, please contact the chapter using the Registration Contact Form.

If you have CPE questions after the event has concluded, please contact the chapter using the CPE Contact Form.

 

Cancellation and Refund Policy

Cancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system. Refunds vary depending on the date of cancellation. See ISACA GWDC Event Policies for details.

If ISACA GWDC cancels the event, all registrants will be notified as soon as possible through email at the email address provided during registration. Full refunds will be provided.

 

Complaint Policy

The GWDC welcomes your comments, complaints, suggestions, questions, and other feedback concerning our website information and services. All complaints should be submitted through the Registration Contact Form.

 

CPE Information

Earn up to 32 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org

 

CPE Distribution and Evaluation Survey

CPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit.

 

CPE-Related Details

  • Learning Objective: After completing the course, students will be prepared to sit for the CISA exam.
  • Prerequisites and Advance Preparation: Students are expected to have prepared for the exam prior to attending the course.
  • Program Knowledge Level: Basic
  • Delivery Method:  Group Internet Based
  • Field of Study:  Information Technology – Technical

Summer Seminar – Cybersecurity

by

Organizations face complex cybersecurity challenges and need to prepare in addressing current and future cybersecurity risks, protection of operations and sensitive data, and compliance with regulatory requirements. Join ISACA Greater Washington DC and Guidehouse for this summer seminar and don’t miss this opportunity to stay ahead of the curve and empower your organization to mitigate cybersecurity risks effectively.

Information security program managers, cybersecurity managers and professionals, IT audit professionals, business executives, students or professionals interested in learning about enhancing cybersecurity posture of organizations should attend this event.

Registration closes on July 26, 2023 @ 8pm.   This is a free virtual event.

Register Today!

 

Event Sponsor

The GWDC is once again pleased to partner with our Platinum Sponsor Guidehouse on another series of summer seminars.

Guidehouse

 

Agenda

8:30 AM – 9:30 AM

Asset Intelligence and Understanding Cyber Risk

Presenter: Amanda Kane (Guidehouse)

The proliferation of technology in today’s digital climate has led to an increase in digital assets, creating more complexity and risks for organizations in securing networks and protecting data. Many organizations struggle with fragmented asset management and outdated legacy systems as the link between asset intelligence and cyber resilience is often underestimated due to the rapid pace of technological advancements.

In this presentation, Amanda Kane will emphasize the need for an entity-wide shift in thinking, sophisticated tools for identity and access management, proactive asset management, and the right combination of technology and processes to improve asset intelligence and increase resilience against cyber threats.

9:30 AM – 10:30 AM

NIST SP 800-216 – Federal Vulnerability Disclosure Guidelines

Presenter: Dr. Kim Schaffer (NIST)

By establishing a vetted reporting structure, federal agencies can focus on mitigating and remediating vulnerabilities in their systems. NIST SP 800-216, Recommendations for Federal Vulnerability Disclosure Guidelines, describes the policies and procedures for receiving vulnerability reports, assessing them, communicating with stakeholders, and releasing advisories. The guidelines build upon ISO/IEC 30111 and ISO/IEC 29147 to cover the multitude of systems used by the Federal Government. In this presentation, Kim Schaffer will highlight the requirements of the IOT Cybersecurity Improvement Act of 2020, the process of adopting ISO/IEC standards for the Federal Government, and the steps to take for implementation.

10:30 AM – 11:30 AM

Cybersecurity: Challenges and Regulatory Trends in the Financial Services Industry

Presenters: Prasun Howli (Guidehouse) and Tracy Angulo (Guidehouse)

The compliance requirements for the ever-changing cybersecurity landscape are increasing and becoming a focal point of interest in the cybersecurity world. As a counter measure to the rising cybersecurity regulations, the adoption of best practices becomes crucial in developing a robust cybersecurity program, and strategies for safeguarding your organizations’ critical assets.

In this presentation, Prasun Howli and Alma Angotti will explore the latest trends and challenges in cybersecurity, with a special focus on two crucial regulatory frameworks: the NYDFS (New York Department of Financial Services) cybersecurity regulations and the SEC (Securities and Exchange Commission) proposed rule.

11:30 AM – 12:30 PM

Privileged Identity and Digital Risk Assessment Playbooks

Presenter: Dr. Kenneth Myers (GSA)

Privileged users are unique user types that perform various security-related duties. As such, privileged accounts are most likely to be targeted by cybercriminals or abused by malicious insiders. Unwanted behavior or compromised privileged accounts are responsible for the most high-profile federal and private security breaches. It is a critical Identity, Credential, and Access Management (ICAM) capability to secure privileged access.

In addition, digital identity represents each individual engaged in an online transaction. However, an individual’s real-life identity may not be known when used to access a digital service. Identity proofing helps establish that the individual is who they claim to be. Digital authentication provides reasonable risk based assurances that the individual accessing the application is the same individual who previously accessed the service.

In this presentation, Dr. Kenneth Myers of the GSA will discuss the Privileged Identity Playbook and Digital Risk Assessment Playbook.

 

 

Presenters

Amanda Kane Partner, Guidehouse

Amanda Kane leads the Identity and Access Management (IAM) offering within the Advanced Solutions Cybersecurity Solutions Team at Guidehouse. Amanda works with clients so that the right people, have the right access, to the right resources, for the right reasons. By taking an identity-centric approach, Amanda works supports clients in establishing IAM strategies, creating IAM solution roadmaps, and implementing IAM technical solutions in the areas of: identity governance, credentialing solutions, privileged access management, logical access control systems, and physical access control systems.

Dr. Kim Schaffer
National Institute of Standards and Technology

Dr. Schaffer is a cybersecurity specialist in the Information Technology Laboratory at the National Institute of Standards and Technology. Formerly a Laboratory Director of a cryptographic security test lab, Dr. Schaffer joined NIST in 2009 where he has been developing and integrating NIST and ISO/IEC cybersecurity standards. He has over 30 years of experience in cybersecurity, is a Certified Information Systems Security Professional, and holds a Doctor of Science in Information Assurance.

Prasun K. Howli
Director, Guidehouse

Prasun K Howli is a Director within Banking, Insurance & Capital Markets practice at Guidehouse. He has over 15 years of experience in advising and working with leading financial institutions. His experience has allowed him to manage some of the large and complex digital transformation, data privacy, cybersecurity, credit reporting and third-party risk management engagements delivering strategic operational improvements. He is experienced in leading alliances with technology vendors and system integrators delivering complex strategic digital transformation engagements with cross functional teams.

He led several cybersecurity and technology risk engagements using various frameworks, standards and regulatory requirements. He also led several data privacy engagements, digital transformation, payments and technology enablement engagements delivering strategic operational improvements.

Tracy Angulo
Director, Guidehouse

Tracy Angulo is a Director in the Financial Crime, Fraud, & Investigative Services (“FFI”) practice at Guidehouse. She is an accomplished attorney, Certified Fraud Examiner (“CFE”), and Certified Anti-Money Laundering Specialist (“CAMS”) with over 20+ years expertise in administrative law and investigations, the last 15 in securities law and regulation, financial crime compliance, anti-money laundering (“AML”) compliance and financial fraud investigations. At Guidehouse, Ms. Angulo has provided a wide compilation of financial crimes compliance and financial compliance services including projects for domestic and global financial institutions.

Prior to joining the private sector, Ms. Angulo served as a Principal Attorney Investigator in FINRA’s Enforcement Department for over six years and served as an Institutional Integrity Officer at the World Bank Group as a lead investigator in a variety of complex, high-profile fraud and corruption investigations.

Dr. Kenneth Myers
General Services Administration

Kenneth Myers is the Director of the Identity Assurance and Trusted Access Division with the General Services Administration Office of Government-wide Policy. He advises and coordinates government-wide cybersecurity policies and collaborates with federal executive branch agencies on implementation guidance. As an identity professional, he has experience working with various public and private organizations on digital identity, PKI, security management, and governance challenges. He is a former active duty Marine and received his Doctorate of Science in Cybersecurity from Marymount University.

 

Event Questions and Policies

Registration Questions

If you have any registration questions about this event, please contact the chapter using the Registration Contact Form.

If you have CPE questions after the event has concluded, please contact the chapter using the CPE Contact Form.

 

Cancellation and Refund Policy

Cancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system. Refunds vary depending on the date of cancellation. See ISACA GWDC Event Policies for details.

If ISACA GWDC cancels the event, all registrants will be notified as soon as possible through email at the email address provided during registration. Full refunds will be provided.

 

Complaint Policy

The GWDC welcomes your comments, complaints, suggestions, questions, and other feedback concerning our website information and services. All complaints should be submitted through the Registration Contact Form.

 

CPE Information

Earn up to 4 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org

 

CPE Distribution and Evaluation Survey

CPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit.

 

Learning Objective

After attending this event, attendees will learn about recent topics in the cybersecurity space.

 

CPE-Related Details

  • Prerequisites: None
  • Advance Preparation: None
  • Program Knowledge Level: Basic
  • Delivery Method:  Group Internet Based
  • Field of Study:  Information Technology – Technical

Women in Technology and Leadership Conference 2023

by

Women in Technology and Leadership Conference 2023

The ISACA GWDC Chapter is proud to host our 2023 Women in Technology and Leadership Conference. This conference is our premier annual event centered around the experience of women in technology and leadership positions. Our technology enrichment topics will focus on awareness and strategies around Cybersecurity, Data Privacy, and Technology Leadership.  Specific leadership focus areas include how to pursue IT and Cybersecurity roles in the organization, discuss if the glass ceiling is too low, and how women and advocates may support women’s career paths in technology. Our speakers are top leaders and experts in the technology field, ready to share their experiences, insights, and tips for succeeding in a rapidly evolving industry. Attendees will have the opportunity to learn about the latest trends and challenges, connect with like-minded professionals, and engage in thought-provoking discussions.

This is an in-person event that will be held at the Hilton McLean Tysons Corner. IT executives, management and operations staff, risk management leaders and professionals, IT auditors, cybersecurity professionals, students or anyone interested in learning more about this topic should attend this event.

There will be a free networking session after this event.   A separate RSVP is required to attend the networking session. 

Registration closes on March 28, 2023 @ 5 pm. 

Register Today!

 

Event Sponsorship

If your organization is interested in being a sponsor for this event, please contact Bonita Patillo, Special Events Director, for details on sponsorship opportunities.  (Go to the Contact Us page select “Special Events” under “I have a question about”)

 

Agenda

10:00 AM – 11:00 AM

Never Trust, Always Verify: The Zero Trust Approach to Cybersecurity

Presenter: Sushila Nair (Capgemini)

Zero Trust is a cybersecurity model that assumes that all resources and services, both internal and external, are not inherently trustworthy, and therefore require strict access control and continuous verification. It’s a departure from traditional perimeter-based security models, which assume that everything inside the network is safe by default.

This presentation will cover the key principles of Zero Trust, including the principle of never trusting, always verifying, the importance of strong identity and access management, and the need for continuous monitoring and analysis of all network activity. We will also discuss the various components of a Zero Trust architecture and how it differs from traditional security models.

Additionally, the presentation will provide an overview of the steps required to implement a Zero Trust architecture, the benefits of Zero Trust, and how Zero Trust can help organizations meet regulatory and compliance requirements. We will also discuss how auditors can assess the effectiveness of a Zero Trust architecture.

By the end of this presentation, attendees will understand the importance of implementing a Zero Trust architecture and how it can help improve their organization’s cybersecurity posture. They will have a solid understanding of the key principles, architecture, and benefits of Zero Trust, as well as how to implement it and how to assess its effectiveness. Overall, the goal is to provide attendees with the knowledge and tools they need to take the first steps toward a Zero Trust architecture.

11:00 AM – 12:00 PM

Taking an Identity-centric Approach to Zero Trust

Presenter: Christine Owen (Guidehouse)

“Identity is the new perimeter” is being repeated over and over again, because it’s true! A viable Zero Trust Architectures requires a mature, enterprise-wide IAM program so an organization can understand who is accessing its resources. Christine will discuss the different IAM tools necessary, and how they interact together to create the foundation of Zero Trust.

12:00 PM – 01:00 PM

Lunch

01:00 PM – 02:00 PM

Data Governance

Presenter: Cortney Worthy (Zoom) and La-Nay Grant (Cisco)

During this session, Cortney will cover the following topics:

  • Understanding the difference between Data Governance, Data Privacy and Data Security and why it matters to your organization.
  • Why a Data Governance Framework is Foundational to an Organization’s Data Security Strategy? And what Role does Identify Management play In Data Governance?

02:00 PM – 03:00 PM

Resilience in an Era of Disruption

Presenter: Terry Grafenstine (Citi)

We are living in a world where pandemics, social unrest, cyber-attacks, and geo-political tensions are becoming the norm. To survive in this era of disruption, organizations must shift from a traditional Business Continuity/Disaster Recovery (BCDR) model to Enterprise Resilience. In this session, attendees will learn about:

  • Impacts of Disruption
  • Regulatory Focus on Resilience
  • The differences between BCDR and Enterprise Resilience
  • Key considerations in an Enterprise Resilience Model

03:00 PM – 04:00 PM

Crack the Cybersecurity Career Code – CISO’s guide to different career paths in cybersecurity

Presenter: Ruchi Shewaramani (WA Health Benefit Exchange)

Do you aspire to join cybersecurity? Already in cybersecurity and aiming to be a CISO? Did you know you do “not” have to be highly technical to excel in cybersecurity?

In this session, Ruchi Shewaramani will present the various career paths to enter and excel in the highly sought after domain of cybersecurity. She will break some popular myths about cybersecurity. You will hear in depth on the various career opportunities across the fields of Application Security, Identity & Access Management, Cloud Security and Governance, Risk and Compliance.

04:00 PM – 05:00 PM

Panel Discussion

Panelists: Cortney Worthy (Zoom), Sarah Abedin (BreaktheTide), K. Casey Watkins (FTI Consulting, Inc.), and Whitney Singletary

During this session, panelists will discuss the following questions:

  • Is the glass ceiling still too short?
  • How to better support and mentor women in technology.

05:00 PM – 07:00 PM

Networking Social

Immediately following this event, the GWDC will host a networking event. A separate RSVP is required for the networking event.

 

Presenters

Instructor Sushila Nair

Sushila Nair
Vice President – North American Cybersecurity Practice at Capgemini
CISSP, GIAC GSTRT, CISA, CISM, CRISC, CDPSE, CCSK, CCAK

Sushila Nair is Capgemini’s Vice President, North American Cybersecurity practice. Capgemini is a global leader in providing secure digital transformation for our clients. Sushila has most recently served as the Vice President for cybersecurity offers at NTT Data Services and has held the role of a CISO for 10 years. Sushila has over 30 years of experience in computing infrastructure, business and security risk analysis, preventing credit card fraud, and served as a legal expert witness. Sushila has been featured in global technical events including RSA, Segurinfo and ISACA’s global conferences, co-authored books and is regularly quoted in the press. She plays an active role in supporting best practices and skills development within the cybersecurity community through her work with ISACA and CSA.

Sushila is part of the ISACA global emerging trends working group and vice president of ISACA Greater Washington, D.C. Chapter. Sushila Nair was named by IT Security Guru as one of the Most Inspiring Women in Cyber 2022!

Christine Owen Women in Technology and Leadership Conference 2023

Christine Owen
Director at Guidehouse

Christine C. Owen is a recovering attorney who found solace as the Zero Trust Lead at Guidehouse. She is interested in securing people, things, applications, devices, and the cloud taking an identity-centric approach. Christine oversees and manages client engagements to provide enterprise IAM and Zero Trust solutions.

Christine learned IAM principles while consulting for an IAM program that encompassed the entire Federal government. She then moved into a sandbox, teaching First Responders how to secure their systems; her work resulted in the ICAM Educational Series, published on the DHS S&T website. In her downtime, Christine enjoys bourbon, her grumpy Westie, and chatting about IAM with anyone who will listen.

Cortney Worthy Women in Technology and Leadership Conference 2023

Cortney Worthy
Leader of Data Governance & Compliance at Zoom Video Communications

Cortney Worthy is a passionate Data Governance & Management executive with 14+ years experience. A Mississippi native, Cortney relocated to the DC Metro area after obtaining a degree in Finance from the University of Memphis and started a career in government consulting. She has successfully led the stand up of several Chief Data Offices across multiple government agencies to include the Department of Defense, Department of State, and United States Citizenship and Immigration Services. Cortney currently serves as the Leader of Data Governance & Compliance at Zoom Video Communications where she leads the maturation of data governance capabilities. Cortney’s self-proclaimed super power is her ability to “build relationships of influence to lead organizations to data driven insights with governance as a foundation”. When she’s not working tirelessly to ensure your data is safe and secure, she serves as a Girl Scout Leader mentoring the next female generation of developers, engineers, data scientists, and leaders. You can also find her making her way up the charts on the Peloton leader board!

Ruchi Shewaramani - Women in Technology and Leadership Conference 2023

Ruchi Shewaramani
Chief Information Security Officer at WA Health Benefit Exchange

Ruchi Shewaramani is a cyber security executive with 15+ years of experience in Information Technology Security, Identity and Access Management (IAM), Governance, Risk and Compliance (GRC) across Healthcare, Education and Financial institutions. She holds a Masters in Software Engineering from Seattle U. In the last decade, she has managed the security program for various Health and Human Services Agencies in the District of Columbia (DC) and Washington state and successfully cleared numerous federal audits. She specializes in leading HealthCare agencies to secure their data, be compliant with state/federal partners and provide digital trust to the citizens they serve. She is currently serving as the Chief Information Security Officer for WA Health Benefit Exchange and as a Board member for ISACA Greater Washington DC Chapter.

 

Terry Grafenstine - Women in Technology and Leadership Conference 2023

Terry Grafenstine
Chief Auditor, Technology and Business Services at Citi
CPA, CISSP, CISA, CIA, CRISC, CGEIT, CGAP

Terry Grafenstine was appointed as the Chief Auditor for Technology and Business Services in November 2020. She is responsible for leading the Internal Audit teams covering technology infrastructure, cyber, resilience, platforms and applications within businesses and functions, and global business services. Terry joined Citi in April 2019 as the Chief Auditor of Cyber, Third Party Risk Management, and Business Continuity.

Terry has over 25 years of experience in the internal auditing and information technology profession. Before joining Citi, Terry was a Managing Director in Deloitte’s Risk and Financial Advisory practice where she provided strategic advisory services to Chief Audit Executives across all commercial industries and IT audit, risk, and governance advisory services to first line executives in the defense and national security space. Prior to joining Deloitte, Terry served for eight years as the appointed Inspector General of the U.S. House of Representatives, where she designed, managed, and delivered audit and investigative services, including the annual financial statement audit and a comprehensive cyber assurance program.

Terry has held numerous leadership roles to support the auditing, accounting, and information technology profession, including as ISACA’s Global Chair (2017-2018) and as a member of the AICPA board of directors. She currently serves on both the IIA’s North American and Global Boards of Directors. Terry speaks globally on a wide range of subjects, including cyber security, internal auditing, accounting standards, resilience, leadership, and risk. In 2019, the Institute of Internal Auditors (IIA) recognized Terry as one of the “Top Ten Audit Thought Leaders of the Decade” and inducted Terry into their Hall of Distinguished Audit Practitioners, the highest honor given by the IIA’s North American board for the accomplishments and contributions made by individuals to advance the internal audit profession. She has received numerous awards and accolades, including FedScoop’s “Golden Gov Federal Executive of the Year,” the Greater Washington DC Society of CPAs “Government CPA Leader of the Year”, the NY Metropolitan ISACA Chapter’s “Joseph J Wasserman Cyber and Governance Leader of the Year,” and ISACAs “Common Body of Knowledge” and “Best International Conference Speaker of the Year” awards.

Terry holds a bachelor’s degree in Accounting from Saint Joseph’s University and is a Certified Public Accountant (CPA), Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified In Risk and Information Systems Control (CRISC), Certified in the Governance of Enterprise IT (CGEIT), and Certified Government Auditing Professional (CGAP). Terry has been with Citi IA for 4 years, has 29 years of auditor experience and 2 years of non-auditor experience.

Sarah Abedin Women in Technology and Leadership 2023

Sarah Abedin
Founder and CEO of BreaktheTide
CISA, CGEIT, CRISC, CDPSE

Sarah Ahmad Abedin is the Founder and CEO of BreaktheTide, a 501c(3) nonprofit organization in the United States. BreaktheTide (www.breakthetide.org) provides a fundraising platform for nonprofit organizations to help raise funds for empowering women, children and underprivileged communities. She is a Board member of Sambhali U.S., a nonprofit organization in the United States. Sambhali U.S. is a volunteer organization for Girls and Women Empowerment in Jodhpur, India. Sarah is also a Board member of Gultaz Memorial School and College in Doulatpur, Chattogram, Bangladesh.

Sarah is an Information Technology and Cybersecurity expert by profession with extensive management and leadership experience on a broad range of complex, fast-paced environments in public and private sectors. She started her career as an IT Auditor for the State of Michigan Office of the Auditor General and over the next 30 years she has worked in various capacities for global companies like KPMG, Financial Industry Regulatory Authority (FINRA), NASDAQ Stock Market, IBM and others. Sarah specialized in IT Security, Cybersecurity, Enterprise Governance, Risk, Compliance and Privacy in addition to her audit experience (internal and external). Her expertise is in the US Federal Law (NIST, FISMA, FedRAMP, US Data Privacy law, SOX, HIPAA), COBIT with an emphasis on Strategy, Governance, Risk, Compliance, Security and Privacy.

Sarah has always been passionate to work in the developmental areas for empowering girls and women.  She has been a mentor and a founding Advisory Council Member of ISACA’s SheLeadsTech (2017-1018). She was also the first Bangladeshi American President (2013-2016) of the Greater Washington DC (GWDC) Chapter of ISACA, the largest chapter in the world. She was a Member of Privacy Advisory Group of ISACA (2020-2021) and Governance Committee of ISACA (2019-2020). She was an Expert Reviewer of COBIT 2019 Framework (Introduction & Methodology; Governance & Management Objectives). She started the annual Women in Leadership & Technology conference for GWDC in 2016 and hosed this event every year since 2016 to present.

Sarah was an Adjunct professor at the University of Maryland Global Campus (Fall 2012) and an Advisory Board Member of University of Maryland Global Campus, Graduate School of Management and Technology (Financial Management & Accounting).

Sarah obtained her BBA in Accounting Information Systems from Eastern Michigan University and MBA in Electronic Business from Carey Business School of Johns Hopkins University.

La-Nay Grant

La-Nay Grant
Data Governance Leader, CISCO

La-Nay is a leader within Data Governance and has 15+ years of experience. She began her career as a Congressional Intern then led advanced Data Analytics efforts as a Federal Government employee. She is an Ex-Big Senior Manager that now works for Cisco. In her current role she creates policy and initiatives that ensures her organization is compliant with local and international rules and regulations. As well as moving data operations forward by creating robust and innovative solutions that increase business value. She is a big believer in understanding how users see, process, and execute on data from various angles to best effect change.

La-Nay is a lifelong East of the River Washingtonian. She is a proud HBCU graduate and an active alumni member. She has created and launched mentoring programs focusing on HBCU students and STEM based extracurricular programs for middle school students. She holds a BS in Information Science and Systems from Morgan State University and a MA in Forensic Psychology from Marymount University.

K. Casey Watkins

K. Casey Watkins
Head of Global Cybersecurity & Privacy, FTI Consulting, Inc.

For more than 15 years Casey Watkins has served as FTI Consulting’s Head of the Global Cybersecurity & Privacy (GCP) Division based in the Mclean, VA office.

Mr. Watkins is an information security, privacy and risk management professional, executive, researcher and cybersecurity change agent with many years of information technology and business leadership experience. He is responsible for maintaining FTI’s security and privacy standards and keeping the firm’s security and privacy program up to date. He has over 30 years professional experience in Information Technology and Management with experiences in IT Management, Project/Program Management, Network Engineering, Systems development design, analysis and implementation; Information Security and IT Audit for complex multi-national organizations and the Department of Defense having spent a combined total of 24 years active and reserve as an Officer in the United States Army.

 

Venue Information

Hilton McLean Tysons Corner
7920 Jones Branch Drive
McLean, Virginia 22102

Hotel Website | Phone Number: (703) 847-5000

Parking Information
The hotel offers complimentary parking (Ballroom Entrance / South Parking location).

Nearest Metro
The hotel offers free shuttle pick up service from Tysons Corner Metro Station.   To arrange a pickup, call the hotel at 703-847-5000.

 

Event Questions and Policies

Registration Questions

If you have any registration questions about this event, please contact the chapter using the Registration Contact Form.

If you have CPE questions after the event has concluded, please contact the chapter using the CPE Contact Form.

 

Cancellation and Refund Policy

Cancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system. Refunds vary depending on the date of cancellation. See ISACA GWDC Event Policies for details.

If ISACA GWDC cancels the event, all registrants will be notified as soon as possible through email at the email address provided during registration. Full refunds will be provided.

 

Complaint Policy

The GWDC welcomes your comments, complaints, suggestions, questions, and other feedback concerning our website information and services. All complaints should be submitted through the Registration Contact Form.

 

CPE Information

Earn up to 6 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org

 

CPE Distribution and Evaluation Survey

CPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit.

 

CPE-Related Details

  • Learning Objective: After this event, attendees will have a better understanding of Women in Technology and Leadership current trends and practices.
  • Prerequisites: None
  • Advance Preparation: None
  • Program Knowledge Level: Basic
  • Delivery Method: Live, in-person
  • Field of Study: Information Technology – Technical

Certificate of Cloud Auditing Knowledge (CCAK™) Spring 2023 Review Course

by

CCAK Spring 2023 Review Course

The GWDC is sponsoring an intensive 3-day virtual review course for the Certificate of Cloud Auditing Knowledge (CCAK™).  The dates of the CCAK review course are three consecutive Saturdays: May 6, 13, and 20, 2023 from 8:30 am to 5:00 PM.

The CCAK course is designed to cover the following five core areas of focus: Cloud governance, Cloud compliance, Cloud auditing, Cloud assurance, and CSA tools. The course will provide knowledge on cloud security assessment methods and techniques, and will assist students in updating their expertise in cloud and hybrid security auditing. CCAK is a joint project by Cloud Security Alliance® and ISACA®. The CCAK is the first credential available for industry professionals to demonstrate their expertise in the essential principles of auditing cloud computing systems. The CCAK credential and training program fills the gap in the market for technical education for cloud IT auditing.

Please take a moment to hear from the instructor, Sushila Nair, about the benefits of the CCAK certification and how the review course will help you prepare for the CCAK exam.  

This event is intended for anyone sitting for the CCAK Exam. Students are expected to have prepared for the exam prior to attending the course.

Registration closes on May 4, 2023 @ 5pm. 

Register Today!

 

Early-Bird Discount

Those who register by April 6, 2023 save $50 off the price of the course.  

Re-Take Discount

Students who take this GWDC review class and do not pass the corresponding Exam are eligible for a one-time 50% discount on the next review class offered by the GWDC for the exam. Please read the chapter event policy for discount details.

 

Course Modules

Module 1

Cloud Governance

  • Overview of governance
  • Cloud assurance
  • Cloud governance frameworks
  • Cloud risk management
  • Cloud governance tools

Module 2

Cloud Compliance Program

  • Designing a cloud compliance program
  • Building a cloud compliance program
  • Legal and regulatory requirements
  • Standards and security frameworks
  • Identifying controls and measuring effectiveness
  • CSA certification, attestation and validation

Module 3

CCM and CAIQ Goals, Objectives and Structure

  • CCM
  • CAIQ
  • Relationship to standards: mappings and gap analysis
  • Transition from CCM V3.0.1 to CCM V4

Module 4

A Threat Analysis Methodology for Cloud Using CCM

  • Definitions and purpose
  • Attack details and impacts
  • Mitigating controls and metrics
  • Use case

Module 5

Evaluating a Cloud Compliance Program

  • Evaluation approach
  • A governance perspective
  • Legal, regulatory and standards perspectives
  • Risk perspectives
  • Services changes implications
  • The need for continuous assurance/continuous compliance

Module 6

Cloud Auditing

  • Audit characteristics, criteria & principles
  • Auditing standards for cloud computing
  • Auditing an on-premises environment vs. cloud
  • Differences in assessing cloud services and cloud delivery models
  • Cloud audit building, planning and execution

Module 7

CCM: Auditing Controls

  • CCM audit scoping guidance
  • CCM risk evaluation guide
  • CCM audit workbook
  • CCM an auditing example

Module 8

Continuous Assurance and Compliance

  • DevOps and DevSecOps
  • Auditing CI/CD pipelines
  • DevSecOps automation and maturity

Module 9

STAR Program

  • Standard for security and privacy
  • Open Certification Framework
  • STAR Registry
  • STAR Level 1
  • STAR Level 2
  • STAR Level 3

 

CCAK Information and Resources

About the CCAK

The CCAK exam will be offered via Computer-Based Testing (CBT).

Registration for the CCAK exam is administered by ISACA®, not the GWDC. Registering for this review course does not register you for the exam.

» Details on CCAK and Exam Registration

 

CCAK Exam Preparation

Students who wish to take the exam should purchase the exam study guide here. The Q&A database is purchased here and is helpful for the exam revision.

 

Instructor

Instructor Sushila Nair

Sushila Nair
CISSP, GIAC GSTRT, CISA, CISM, CRISC, CDPSE, CCSK, CCAK

Sushila Nair. CISSP, GIAC GSTRT, CISA, CISM, CRISC, CDPSE, CCSK, CCAK, is Capgemini’s Vice President, North American Cybersecurity practice. Capgemini is a global leader in providing secure digital transformation for our clients. Sushila has most recently served as the Vice President for cybersecurity offers at NTT Data Services and has held the role of a CISO for 10 years. Sushila has over 30 years of experience in computing infrastructure, business and security risk analysis, preventing credit card fraud, and served as a legal expert witness. Sushila has been featured in global technical events including RSA, Segurinfo and ISACA’s global conferences, co-authored books and is regularly quoted in the press. She plays an active role in supporting best practices and skills development within the cybersecurity community through her work with ISACA and CSA.

Sushila is part of the ISACA global emerging trends working group and vice president of ISACA Greater Washington, D.C. Chapter. Sushila Nair was named by IT Security Guru as one of the Most Inspiring Women in Cyber 2022!

 

Virtual Meeting Information

  • This event will be presented through Zoom.
  • Prior to the event, participants must install the Zoom app on their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits.
  • Participants must respond to all the poll questions via the Zoom polling feature or chat log in order to receive NASBA CPE credits.
  • The ISACA Greater Washington, D.C. Chapter will not be responsible for the participant’s inability to respond to the polls

 

Event Questions and Policies

Registration Questions

If you have any registration questions about this event, please contact the chapter using the Registration Contact Form.

If you have CPE questions after the event has concluded, please contact the chapter using the CPE Contact Form.

 

Cancellation and Refund Policy

Cancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system. Refunds vary depending on the date of cancellation. See ISACA GWDC Event Policies for details.

If ISACA GWDC cancels the event, all registrants will be notified as soon as possible through email at the email address provided during registration. Full refunds will be provided.

 

Complaint Policy

The GWDC welcomes your comments, complaints, suggestions, questions, and other feedback concerning our website information and services. All complaints should be submitted through the Registration Contact Form.

 

CPE Information

Earn up to 21 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org

 

CPE Distribution and Evaluation Survey

CPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit.

 

Learning Objectives

  • Demonstrate key concepts of cloud governance and the role of assurance, transparency and accountability in the cloud.
  • Explain cloud risk management and the application of cloud governance tools.
  • Devise the designing, building and evaluating of a cloud compliance program based on laws, regulations and regulatory standards.
  • Apply control objectives, technical and process controls, security metrics and relate them to cloud control frameworks, certification, attestation and authorisations.
  • Define and illustrate how to use the CSA Cloud Control Matrix and the CSA Top Threat Analysis Methodology.
  • Build and execute an audit plan that addresses cloud concerns by utilising the Cloud Control Matrix.
  • Discuss the impact of continuous assurance and auditing, cloud automation, native development and integration models on auditing and compliance .
  • Describe the role of the CSA STAR Program.

 

CPE-Related Details

  • Prerequisites and Advance Preparation: Students are expected to have prepared for the exam prior to attending the course.
  • Program Knowledge Level: Basic
  • Delivery Method:  Group Internet Based
  • Field of Study:  Information Technology – Technical

CISA Spring 2023 Review Course

by

CISA Spring 2023 Review Course

The GWDC is sponsoring an intensive 4-day virtual review course for the Certified Information System Auditor® (CISA®) exam.  This review course will provide practical advice on preparing for the CISA exam and specific instruction regarding the job practice areas addressed by CISA as defined by ISACA® Global. The dates of this course are four (4) consecutive Saturdays: March 25; April 1, 8, and 15, 2023 from 8:30 am to 5 pm Eastern.

Please take a moment to hear from one of the instructors, Jim Wiggins, about the course and how it will help you prepare for the CISA exam.  The instructors Jim Wiggins and Tyler Harding combined have over 40 years of audit, IT, and cybersecurity experience and are ISACA accredited instructors.

This event is intended for anyone sitting for the CISA Exam. Students are expected to have prepared for the exam prior to attending the course.

Registration closes on March 24, 2023 @ 5pm. 

Register Today!

 

Re-Take Discount

Students who take this GWDC review class and do not pass the corresponding Exam are eligible for a one-time 50% discount on the next review class offered by the GWDC for the exam. Please read the chapter event policy for discount details.

 

Agenda

Day 1

Module 1 – The Process of Auditing Information Systems

Module 2 – Governance and Management of IT

Day 2

Module 3 – Information Systems Acquisition, Development, and Implementation

Day 3

Module 4 – Information Systems Operations, Maintenance, and Support

Day 4

Module 5 – Protection of Information Assets

 

Course Materials and Exam Resources

Materials Provided During the Course

Participants receive a Study Guide to help them prepare for the CISA exam. The Study Guide contains a presentation, a case study, and 20 quiz questions for each domain in the official CISA Review Manual. The Study Guide contains additional material such as suggested study approach, exam taking tips, list of “must know” vocabulary terms, and other suggested readings to aid participants in their exam preparation.

 

Study Materials

The instructor highly recommends that students purchase the CISA Review Manual and the CISA Review Questions, Answers, and Explanations Database – 12 Month. Below are the study materials available for purchase from the ISACA Bookstore:

  • CISA Review Manual
  • CISA Review Questions, Answers & Explanations Manual
  • CISA Review Questions, Answers & Explanation Database – 12 month subscription

**It is highly recommended to order these at the earliest opportunity to avoid any possible delays in their availability for the start of the program.

 

Additional Study Resources

Candidates should review the Exam Candidate Guide and other resources on the ISACA CISA page as part of their study program. 

 

Instructors

Jim Wiggins Instructor for the ISACA GWDC CRISC Spring Review 2020

Jim Wiggins

Jim has over 25 years of direct experience in the design, operations, management, and auditing of information technology systems, with the past 20 years focused on information systems security. He has an extensive background in technical education and specializes in security certification courses targeted at federal and state government contracting clients.

Today, Jim is the Founder and Principal at Securible, LLC. Securible is an information security service provider offering cyber training programs to organizations of all sizes. At Securible, Jim has taught IT security certification courses such as CISSP, CISM, CISA, Ethical Hacking, C&A, Security+, and other courses requested by Securible’s clients. Today with Securible, Jim provides education and training support for the National Risk Management Center (NRMC) at the Cybersecurity and Infrastructure Agency (CISA) inside of the Department of Homeland Security (DHS). More information on Securible can be found at: http://www.securible.com.

Jim is also the Founder and Chief Executive Officer (CEO) of the Federal IT Security Institute (FITSI). FITSI is a 501c6 non-profit certification body accredited by the ANSI National Accreditation Board (ANAB) under ISO 17024. FITSI provides a role-based IT security certification program targeted at the federal workforce. More information on FITSI can be found at: http://www.fitsi.org.

Additionally, Jim is the Founder and Executive Director of the FITSI Foundation. The FITSI Foundation is a 501c3 public charity that focuses on cyber education and is the philanthropic sister organization of the Federal IT Security Institute. The FITSI Foundation runs the Wounded Warrior Cyber Combat Academy (W2CCA). More information on the FITSI Foundation can be found at http://www.fitsifoundation.org.

In 2020, Jim started a TV show around cybersecurity. This show is called “Cybersecurity Today” and can be viewed in the Washington, DC area. Also, episodes can be streamed online at the following website: http://www.cybersecuritytoday.org.

In 2019, FCW Named Jim to the “Federal 100” for his work to tirelessly promote cybersecurity education across all branches of the federal government.

In 2011, the Federal Information Systems Security Educators’ Association (FISSEA) named him “Educator of the Year” for the impact he continues to make in the federal workforce.

Jim holds the following IA/IT security certifications: CISSP, ISSEP, CISM, CISA, CRISC, CySA+, SCNA, SCNP, CAP, IAM, IEM, SSCP, CEH, ECSA, CHFI, LPT, TICSA, CIWSA, Security+, and MCSE: Security and FITSP-M.

Tyler Harding

Tyler Harding

Senior Manager, Amazon Supply Chain
CPA, CISA, CISM, CISSP, CAP, GGEIT, FITSP:A, FITSP:M

Tyler Harding is a Senior Manager and leads a commercial and DoD compliance program at Amazon Supply Chain (supplychain.amazon.com). The Compliance team’s goal is to earn customer’s trust and maintain compliance with multiple information security certifications such as ISO 27001, AICPA SOC 2, HiTRUST, and NIST SP 800-171. Prior to his role at Amazon Supply Chain, Tyler was the DoD Security and Compliance Manager for AWS and led efforts to accredit AWS cloud services to Impact Levels 4 and 5 under DoD’s Cloud Computing Security Requirements Guide (CC SRG).

Before joining Amazon in 2019, Tyler spent over 20+ years in public accounting firms such as PWC, KPMG, and Kearney & Company in their respective IT audit practices and led engagement teams through many SOC 1, FISMA, and financial statement audits.

As a recovering IT auditor, Tyler now enjoys his Summers and Falls swimming, cycling, and playing an occasional round of golf! Tyler has also supported the ISACA Greater Washington D.C. Chapter for over 20 years by teaching CISA, CISM, and CGEIT review courses.

 

Virtual Meeting Information

  • This event will be presented online through Microsoft Teams.  
  • The instructor will email students prior to the event with instructions and additional information. 

 

Event Questions and Policies

Registration Questions

If you have any registration questions about this event, please contact the chapter using the Registration Contact Form.

If you have CPE questions after the event has concluded, please contact the chapter using the CPE Contact Form.

 

Cancellation and Refund Policy

Cancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system. Refunds vary depending on the date of cancellation. See ISACA GWDC Event Policies for details.

If ISACA GWDC cancels the event, all registrants will be notified as soon as possible through email at the email address provided during registration. Full refunds will be provided.

 

Complaint Policy

The GWDC welcomes your comments, complaints, suggestions, questions, and other feedback concerning our website information and services. All complaints should be submitted through the Registration Contact Form.

 

CPE Information

Earn up to 32 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org

 

CPE Distribution and Evaluation Survey

CPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit.

 

CPE-Related Details

  • Learning Objective: After completing the course, students will be prepared to sit for the CISA exam.
  • Prerequisites and Advance Preparation: Students are expected to have prepared for the exam prior to attending the course.
  • Program Knowledge Level: Basic
  • Delivery Method:  Group Internet Based
  • Field of Study:  Information Technology – Technical

White House Releases Draft Federal Zero Trust Strategy

by

If you’re interested in cybersecurity, check out our 2021 Cybersecurity Conference or one of our cyber-focused training or certification options. Will we talk about the draft Federal Zero Trust Strategy? Tune in to find out.

This week, the White House released their Federal Zero Trust Strategy to help agencies comply with Executive Order 14028. If you’re not familiar with Executive Order 14028, it sets the following federal security direction.

  1. Remove barriers to sharing threat information.
  2. Modernize federal cybersecurity by prioritizing adoption and use of cloud technology and zero trust implementation planning.
  3. Enhance software supply chain security.
  4. Establish a cyber safety review board.
  5. Standardize the Federal Government’s Playbook for responding to cybersecurity vulnerabilities and incidents.
  6. Improve detection of cybersecurity vulnerabilities by deploying an Endpoint Detection and Response (EDR) initiative.

Federal Zero Trust Strategy

The Federal Zero Trust Strategy, which is open to public comment until September 21, the purpose is to put all Federal agencies on a common roadmap toward a highly mature zero trust architecture. It sets specific zero trust goals to achieve by the U.S. government fiscal year 2024. The goals align with the five zero trust pillars of the identity, device, network, application, and data. Each Federal agency must have an agency plan that aligns with this strategy. The Cybersecurity and Infrastructure Security Agency (CISA) also published two additional documents; a Zero Trust Maturity Model and a Cloud Security Technical Reference Architecture.

Zero Trust Maturity Model

The Zero Trust Maturity Model, which is open to public comment until October 1, supports the continued evolution of CISA’s programs and capabilities within a rapidly changing environment and technology landscape. It focuses on three levels of maturity from traditional to optimal along the five zero trust pillars.

The CISA Zero Trust Maturity Model has three levels of maturity across the five pillars of zero trust

DHS CISA Zero Trust Maturity Model from federal zero trust strategy. Image courtesy of the DHS CISA Zero Trust Maturity Model.

CISA designed this maturity model to help modernize its current cybersecurity programs and services fully functional with cloud-computing environments with zero trust architecture. While CISA created it for their programs, anyone can use the model to help plan or inform security architecture decisions and capabilities. CISA also released a Cloud Security Technical Reference Architecture.

Cloud Security Technical Reference Architecture

The Cloud Security Technical Reference Architecture, which is open to public comment until October 1, illustrates recommended cloud migration and data protection approaches outlined in Executive Order 14028. It touches on topics like FedRAMP, cloud migration strategies and scenarios, and cloud security posture management. It also contains a section on developing a DevSecOps mentality and building a scalable, repeatable architecture that is highly available and resilient to deliver the best digital services.

All three documents, including the draft Federal Zero Trust Strategy, are open to comment through September 21 or October 1.

2021 Cybersecurity Conference

by

AGENDA | TOPICS | PRESENTERS | ADDITIONAL DETAILS & CPE

ISACA Greater Washington DC Chapter

October is Cybersecurity Awareness Month!

Come to our 2021 Cybersecurity Conference on October 7th! Information and data security threats continue to headline every day on organizational and personal breaches. Information security has been designated as a government-wide high-risk area since 1997.  In 2021 alone, at least 45 states have introduced or considered 250 bills or resolutions pertaining to cybersecurity and the President issued Executive Order 14028 charging multiple agencies with enhancing cybersecurity.  ISACA-GWDC Chapter invites you to our 2021 Cybersecurity Conference to engage with our speakers to increase awareness and efforts to minimize and prevent cyber security threats; so we can guide and help focus our organization on securing cyber infrastructure. Our 2021 Cybersecurity Conference is virtual this year.

Who Should Attend?
Cybersecurity professionals, IT advisory or audit professionals, Business executives, students or professionals interested in learning more about cybersecurity.

Agenda:

  • 0830-0930:  NIST SP 800-210: General Access Control Guidance for Cloud Systems
  • 0930-1030:  Zero Trust for Hybrid Cloud
  • 1030-1130:  Cybersecurity Framework Profile for Ransomware Risk Management
  • 1130-1230:  Critical Infrastructure Protection: TSA Is Taking Steps to Address Some Pipeline Security Program Weaknesses
Click Here to Register

Thursday; October 7, 2021 @ 0830 to 1230 EDT

Four (4) NASBA CPE credits

Get a Discount!

Enjoy discounted or free event pricing and other benefits all year round! Join ISACA GWDC Today!

Check out our calendar of upcoming events for more ISACA GWDC and partner activities. Don't forget to follow ISACA GWDC on LinkedIn,  Twitter, and Facebook for the latest news and information from ISACA GWDC, ISACA, and the audit, governance, and security profession.

TOPICS OF THE 2021 CYBERSECURITY CONFERENCE

NIST SP 800-210:  General Access Control Guidance for Cloud Systems
Presented by Dr. Antonios Gouglidis, Lancaster University 

Dr. Antonios Gouglidis, co-author of NIST Special Publication (SP) 800-210 (General Access Control Guidance for Cloud Systems), will discuss the guidance.  NIST SP 800-210 presents cloud access control characteristics and a set of general access control guidance for cloud service models: IaaS (Infrastructure as a Service), PaaS (Platform as a Service), and SaaS (Software as a Service). Different service delivery models require managing different types of access on offered service components. Such service models can be considered hierarchical, thus the access control guidance of functional components in a lower-level service model are also applicable to the same functional components in a higher-level service model. In general, access control guidance for IaaS is also applicable to PaaS and SaaS, and access control guidance for IaaS and PaaS is also applicable to SaaS. However, each service model has its own focus with regard to access control requirements for its service.

NIST SP 800-210 can be found here.

Zero Trust for Hybrid Cloud
Presented by William Malik (Trend Micro)

Although the hybrid cloud now handles much that was formerly done by the in-house IT organization several challenges remain.  

We begin this talk by discussing the elements of conventional I&O that must remain – although transformed – when migrating increasing portions of an organization’s workload to hybrid cloud. We consider the split between previously amalgamated technologies and processes that now requires clear segregation between technical operations (e.g., backing up the file) and supervisory oversight. We will delve into why the separation from technical performance of various tasks (some of which are still in-house on others of which use cloud) requires a consistent way to see what’s being done, by whom, and how it’s being verified – a problem that has challenged some cybersecurity teams for a long time.  

Second, the session will focus on the architectural challenge that zero trust (a successor to network access control) places on conventional information security architectures, procedures, staffing, and audit. We will examine why adding zero trust as an architectural principle puts similar stress on conventional tasks such as provisioning, procurement, network segmentation, IT/OT integration, encryption, key management, certificate management, and continuity of operations. 

Next, we consider zero trust’s enablement of hybrid cloud and mixed environments and why zero trust is becoming recognized as the most robust cybersecurity architecture for the heterogeneous, hybrid cloud world, with natural adaptation to industrial IoT and OT networks in general. We will outline good practices for zero trust incorporation, and some pitfalls to avoid as workloads migrate to hybrid cloud.

Finally, will close with some tips to smooth the passage to this cybersecurity approach.

Cybersecurity Framework Profile for Ransomware Risk Management
Presented by William (Bill) Fischer, National Institute of Standards and Technology (NIST)

Ransomware is a type of malware that encrypts an organization’s data and demands payment as a condition of restoring access to that data. In some instances, ransomware may also steal an organization’s information and demand additional payment in return for not disclosing the information to authorities, competitors, or the public. Ransomware attacks target organizations’ data or critical infrastructure, disrupting or halting operations. 

This report defines a Ransomware Profile, which identifies security objectives from the NIST Cybersecurity Framework that support preventing, responding to, and recovering from ransomware events. The profile can be used as a guide to managing the risk of ransomware events. That includes helping gauge an organization’s level of readiness to mitigate ransomware threats and to react to the potential impact of events.

This presentation will discuss the draft NISTIR 8374 (Cybersecurity Framework Profile for Ransomware Risk Management), which was revised In September 2021 incorporating the public comments from the preliminary draft released in June 2021.  The draft NISTIR 874 can be found here.

Critical Infrastructure Protection:  Observations on Pipeline Security
Presented by Leslie Gordon, Kaelin Kuhn and Orin (Ben) Atwater, United States Government Accountability Office (GAO)

In May, Colonial Pipeline Company announced that it was the victim of a ransomware attack that led to temporary disruption in the delivery of gasoline and other petroleum products across much of the southeast U.S. The attack on Colonial Pipeline highlights the urgent need to address long-standing cybersecurity challenges facing the nation. The federal government must take immediate steps to prevent, more quickly detect, and mitigate the damage of future cyberattacks. In particular, GAO’s testimony on July 27th highlighted the need for the government to develop and execute a more comprehensive federal strategy for national cybersecurity and global cyberspace. We also testified that TSA is making new requirements for pipeline owners to improve their cybersecurity and prevent attacks, and had addressed some previous GAO recommendations from our pipeline security work in 2018 and 2019.

This session will discuss GAO-21-105263 reporting on the progress of TSA, which is primarily responsible for pipeline security, to improve cybersecurity and prevent attacks of pipeline owners.  GAO-21-105263 can be found here.

MEET THE PRESENTERS

Fisher, William-3
William (Bill) Fisher
Security Engineer, National Institute of Standards and Technology (NIST)
Bill Fisher is a security engineer at the National Cybersecurity Center of Excellence (NCCoE). In this role, he is responsible for leading a team of engineers that work collaboratively with industry partners to address cybersecurity business challenges facing the nation. He leads the center’s Attribute Based Access Control (ABAC) project, Mobile Application Single Sign On (SSO) for the Public Safety and First Responder Sector, and is part of the ITL Cybersecurity for IoT program. The NCCoE is a collaborative hub where businesses, government agencies, and academia work together to address broad cybersecurity problems of national importance. As part of the National Institute of Standards and Technology, the NCCoE uses standards, best practices, and commercially available secure technologies to demonstrate how cybersecurity can be applied in the real world. Ultimately, the NCCoE helps promote widespread adoption of cybersecurity technologies by developing example solutions to cybersecurity problems that affect whole sectors of industry, or even multiple sectors.  Prior to his work at the NCCoE, Mr. Fisher was a program security advisor for the System High Corporation in support of the Network Security Deployment division at the Department of Homeland Security. He holds a bachelor’s degree in business administration from American University and a master’s degree in cybersecurity from Johns Hopkins University.
Antonios Gouglidis RS
Dr. Antonios Gouglidis
Lancaster University
Dr. Antonios Gouglidis is a Lecturer (Assistant Professor) at the School of Computing and Communications (SCC) at Lancaster University in the UK. He is a member of the Systems Security Group at SCC and the Research Lead for the Security Lancaster institute stream on "Distributed Systems". His research is related to the design of secure models and systems. Currently, the application domain of his research is on access control (models and policies) and Cloud systems. His research extends to formal methods used to specify complex system properties and their verification using automated techniques. He has been the Principal Investigator of projects funded by the European Commission and the UK Government. Over the past few years, he collaborated with NIST’s Secure Systems and Applications Group contributing to security-related topics. These include the investigation of model checking to verify role-based and attribute-based policies and access control for Cloud systems.
leslie-gordon

Leslie Gordon
Acting Director, United States Government Accountability Office (GAO)
Leslie V. Gordon is an Acting Director in GAO’s Health Care team. She oversees GAO’s work on the Medicare program.  Leslie joined GAO in January 2000 as a member of the Health Care team, where she led work on the Medicaid and Medicare programs and other health policy topics. Prior to joining GAO, Leslie worked as a project director at the National Center for Education in Maternal and Child Health. Leslie earned a master’s degree in public policy from Georgetown University. Leslie earned a bachelor’s degree in American studies and computer applications from the University of Notre Dame.

Resized_Atwater_Professional_Pic_42119292220702 (002)
Ben Atwater
Assistant Director, GAO
Ben Atwater is an Assistant Director in GAO’s Homeland Security and Justice team. For the past 5 years, he has focused on critical infrastructure protection issues, including pipeline and chemical facility security.
2015 Kaelin Kuhn adjusted
Kaelin Kuhn
Assistant Director, GAO 
Kaelin Kuhn is an Assistant Director in GAO’s Information Technology and Cybersecurity team. During his career at GAO, he has managed major cybersecurity reviews of systems supporting federal agencies and critical infrastructure.
Bill Malik Headshot [1]
William J. Malik, CISA
VP Infrastructure Strategies, Trend Micro

Bill helps clients achieve an effective information security posture spanning endpoints, networks, servers, cloud, and the Internet of Things.  This involves technology, policy, and procedures, and impacts acquisition/development through deployment, operations, maintenance, and replacement or retirement.

During his four-decade IT career, Bill has worked as an application programmer with the John Hancock Insurance company; an OS developer, tester, and planner with IBM; a research director and manager at Gartner for the Information Security Strategies service and the Application Integration and Middleware service, and served as CTO of Waveset, an identity management vendor acquired by Sun. He ran his own consulting business providing information security, disaster recovery, identity management, and enterprise solution architecture services for clients including Motorola, AIG, and Silver Lake Partners. Bill has over 160 publications and has spoken at numerous events worldwide.

Bill attended MIT, majoring in Mathematics. He is a member of CT InfraGard and ISACA.

ADDITIONAL DETAILS

ADDITIONAL DETAILS

Special Instructions:

  • Group Internet-Based. Zoom link delivered with registration.
  • Prior to the event, participants must install the Zoom app on their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits.
  • Participants must respond to all the poll questions via the Zoom polling feature or chat log in order to receive NASBA CPE credits.
  • ISACA Greater Washington, D.C. will not be responsible for the participant’s inability to respond to the polls.

Presentations:

Conference presentations are posted to the Presentations Library if permission is received from the presenter and their organization. In some cases, permission is not received.

Sponsor this Event:

If your organization is interested in being an event sponsor, please take a look at the five (5) various event sponsorship packages and click this sponsorship link to become a sponsor.

Cancellation and Refund Policy: 

Cancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system. Refunds vary depending on the date of cancellation. See ISACA GWDC Event Policies for details.

If ISACA GWDC cancels the event, all registrants will be notified as soon as possible through email at the email address provided during registration. Full refunds will be provided.

CPE

CPE

Earn up to 4 Continuing Professional Education (CPE) credits in the area of Information Technology. The ISACA® Greater Washington, D.C. is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website:  www.NASBARegistry.org.

CPE Distribution and Evaluation Survey:

CPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present the full day and respond to polling questions to receive full CPE credit.

CPE-Related Details:

  • Prerequisites and Advance Preparation: None
  • Program Knowledge Level: Basic
  • Delivery Method:  Group Internet based
  • Field of Study:  Information Technology - Technical

Complaint Policy:

The GWDC welcomes your comments, complaints, suggestions, questions, and other feedback concerning our website information and services. All complaints should be directed to the Associate Director of Registrations at registrations@isaca-gwdc.org.

CRISC Fall Review 2021 Course

by

EXAM REGISTRATION | INSTRUCTOR | ADDITIONAL DETAILS | CPE INFORMATION | REGISTRATION DETAILS

DETAILS

Come to our Work Securely Webinar 2020 on April 8th 2020 at 12:00pm

The ISACA GWDC is bringing back our CRISC Fall Review 2021 course, this year virtually! The CRISC Fall Review 2021 Course is an intensive 3-day review course for the ISACA Certified in Risk and Information Systems Controls™ (CRISC) Exam. The CRISC Fall Review 2021 Course will provide practical advice on preparing for the CRISC exam as well as specific instruction regarding the job practice areas addressed by CRISC as defined by ISACA® Global. Don't miss out on our great CRISC Spring Review 2021 Course!

The CRISC Fall Review 2021 Course dates are: Three consecutive Saturdays October 16, 24, and 30 @ 9:00 am - 5:00 pm eastern.

Location: Virtual with the link provided after registration.

WHO SHOULD ATTEND

This event is intended for anyone sitting for the CRISC Exam window. Students are expected to have prepared for the exam prior to attending the course.

EXAM REGISTRATION

The CRISC exam will be offered via Computer-Based Testing (CBT). 

Registration for the CRISC exam is administered by ISACA, not the GWDC. Registering for this review course does not register you for the exam. 

» Details on Exam Registration

Re-Take Discount

Students who take this GWDC review class and do not pass the corresponding Exam are eligible for a one-time 50% discount on the next review class offered by the GWDC for the exam. Please read the full policy for discount details.

» Discount Details

 

Register Here

AGENDA

Day 1

  • Introduction
  • IT Risk Identification (Domain 1)

Day 2

  • IT Risk Assessment (Domain 2)
  • Risk Response and Mitigation (Domain 3)

Day 3

  • Risk and Control Monitoring and Reporting (Domain 4)
  • Practice Tests

MEET THE INSTRUCTOR

Jim Wiggins Instructor for the ISACA GWDC CRISC Spring Review 2020

Jim Wiggins

CISSP-ISSEP, CISM, CISA, CySA+, SCNA, SCNP, CAP, IAM, IEM, SSCP, CEH, ECSA, CHFI, LPT, TICSA, CIWSA, Security+, and MCSE: Security and FITSP-M

Jim has over 23 years direct experience in the design, operation, management, and auditing of information technology systems, with the past 18 years focused on information systems security. He has an extensive background in technical education and specializes in security certification courses targeted at federal and government contracting clients. 

Jim is the founder and executive director of the Federal IT Security Institute (FITSI). FITSI is a 501(c)6, non-profit organization that provides a role-based IT security certification program targeted at the federal workforce. Jim is also the executive director of the FITSI Foundation, which is a 501(c)3 public charity that runs the Wounded Warrior Cyber Combat Academy (W2CCA).

Currently, as a contractor, Jim provides education and training support for the Federal Network Resilience Division at DHS and its Continuous Diagnostics and Mitigation program.

In 2011, the Federal Information Systems Security Educators’ Association (FISSEA) named him "Educator of the Year" for the impact he continues to make in the federal workforce. In 2019, Federal Computer Week (FCW) Named Jim to the "Federal 100" for his work to tirelessly promote cybersecurity education across all branches of the federal government.

ADDITIONAL DETAILS

Materials Provided During the Course

Participants receive a Study Guide to help them prepare for the CRISC exam. The Study Guide contains a presentation, a case study, and 20 quiz questions for each domain in the official CRISC Review Manual. The Study Guide contains additional material such as suggested study approach, exam taking tips, list of "must know" vocabulary terms, and other suggested readings to aid participants in their exam preparation.

Study Materials

The instructors highly recommend that students purchase the CRISC Review Manual and the CRISC Review Questions, Answers, and Explanations Database - 12 Month. Below are the study materials available for purchase from the ISACA Bookstore:

  • CRISC Review Manual
  • CRISC Review Questions, Answers & Explanations Manual
  • CRISC Review Questions, Answers & Explanation Database - 12 month subscription

**It is highly recommended to order these at the earliest opportunity to avoid any possible delays in their availability for the start of the program.

Additional Study Resources

Candidates should review the Exam Candidate Guide as part of their study program. We've included additional resources for exam candidates on our Certifications page, including links to ISACA resources and Knowledge Center study groups.

Special Instructions 

Requests for Assistance: If you require assistance for an audio, visual, or other disability, please contact the Certifications Director, Clifton Persaud,  the event planner to discuss your needs as soon as possible.  We need as much advance notice as possible to determine whether requests can be accommodated. Thank You.

Cancellation and Refund Policy: 

Cancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system. Refunds vary depending on the date of cancellation. See ISACA GWDC Event Policies for details.

If ISACA GWDC cancels the event, all registrants will be notified as soon as possible through email at the email address provided during registration. Full refunds will be provided.

CPE INFORMATION

Earn up to 24 Continuing Professional Education (CPE) credits in the area of Information Technology. The ISACA® Greater Washington, D.C. is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website:  www.NASBARegistry.org.

CPE Distribution and Evaluation Survey

CPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present the full day and respond to polling questions to receive full CPE credit.

CPE-Related Details:

  • Delivery Method: Group Internet-Based. Zoom link delivered with registration.
  • Prior to the event, participants must install the Zoom app in their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits.
  • Participants must respond to all the poll questions via the Zoom polling feature or chat log in order to receive NASBA CPE credits.
  • ISACA Greater Washington, D.C. will not be responsible for the participant’s inability to respond to the polls.
  • Prerequisites and Advance Preparation: Students are expected to have prepared for the exam prior to attending the course.
  • Program Knowledge Level: Basic
  • Field of Study:  Information Technology - Technical

Complaint Policy:

The GWDC welcomes your comments, complaints, suggestions, questions, and other feedback concerning our website information and services. All complaints should be directed to the Associate Director of Registrations at registrations@isaca-gwdc.org.

VCW 2021: I Know It When I See It

by

AGENDA | TOPICS | PRESENTERS | ADDITIONAL DETAILS & CPE

Join our next Virtual Cyber Workshop (VCW) 2021 on Data Protection.

In an effort to keep our members, the Greater Washington DC region, and the world informed and connected we are holding a series of FREE Cyber workshops. We want to give you an outlet as we all adjust to the new norms we are faced with as a result of the escalating health concerns related to the spread of the novel coronavirus (COVID-19).

We have a great lineup of presenters who will cover a variety of interesting topics for which one (1) CPE can be earned for each webinar attended. You will need to self-certify, however, as GWDC will not be sending you a CPE certificate.

In case you missed our cyber workshops, click here to view all recordings. 

Click Here to Register

Interested in becoming a member and enjoy these and other benefits all year round? Join ISACA!

VCW 2021: I Know It When I See It

I Know It When I See It - Importance of Controls to Protect Data

Join us for a lively discussion on why controls are critical to the protection of our data. What are controls, who is responsible for controls, and what happens when effective controls are not in place? We will take a look at the largest data breaches, ransomware, and other cyber-attacks. Could they have been prevented?

VCW 2021: I Know It When I See It - SPEAKER INFO

Teresa Skehan speaking at VCW 2021 I Know It When I See it

Teresa Skehan

Director, Information Privacy and Protection Office Cyber & Biometrics - IBM Global Business Services, Public Sector

CRISC, CISA, CISM, CDPSE, CCSK, IAPT, IAPP-US

Ms. Skehan is the Director of the Information Privacy and Protection Office and the Security Focal for IBM GBS North America. She is successfully leading a program to drive long-lasting, sustainable compliance with government, industry, and corporate security policies, standards, and procedures. She also oversees the management of Security Risk Assessors and Security Experts in the US, Canada, India, and Mexico.

Throughout her career, her professional accomplishments and awards have been associated with thought leadership, technology evaluation and business alignment, security/privacy controls, and privacy management. She has successfully transformed a cybersecurity risk management program to align with strategic technologies such as cognitive, mobile, cloud, and Internet of Things; directed the remediation of numerous audit findings associated with the absence of business controls and inadequate management of system/technology changes; launched the
design, development, and implementation of a Public Key Infrastructure and automated a company’s entire operations through the various stages of design, development, installation, and support.

Recipient of numerous company awards; Crystal Award for displaying Exemplary Performance and Leadership; Premier Achievement Award and Technology Breakthrough Award; President’s Award for Leadership and Innovation; Management Team and Most Valuable Player Awards. She holds a Master’s Degree in Security Engineering Management and several professional certifications: ISACA’s CRISC, CISA, CISM, and CDPSE; IAPP’s Fellow of Information Privacy, Certified Information Privacy Technologist and Certified Information Privacy Professional for Canada, US Private Sector, US Government and Europe; CSA’s Certificate Cloud Security Knowledge (CCSK); ADCG’s Data Privacy and Protection Specialist. She is Director of Academic Relations, ISACA, Greater Washington DC Chapter.

ADDITIONAL DETAILS

ADDITIONAL DETAILS

Special Instructions:

  • Group Internet-Based. Zoom link delivered with registration.
  • Prior to the event, participants must install the Zoom app on their respective devices.

Presentations:

Presentations are posted to the Presentations Library if permission is received from the presenter and their organization. In some cases, permission is not received.

Sponsor this Event:

If your organization is interested in being an event sponsor, please take a look at the five (5) various event sponsorship packages and click this sponsorship link to become a sponsor.

Cancellation and Refund Policy: 

Cancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system. Refunds vary depending on the date of cancellation. See ISACA GWDC Event Policies for details.

If ISACA GWDC cancels the event, all registrants will be notified as soon as possible through email at the email address provided during registration. Full refunds will be provided.

CPE

Earn up to 1 Continuing Professional Education (CPE) through self-reporting.

Complaint Policy:

The GWDC welcomes your comments, complaints, suggestions, questions, and other feedback concerning our website information and services. All complaints should be directed to the Associate Director of Registrations at registrations@isaca-gwdc.org.

ISACA GWDC