New Jersey ISSA Chapter

NJ ISSA Chapter Meeting on 12/11/2019
2019-12-11 16:00 - 19:00 (America/New_York)
New Jersey Chapter ISSA Meeting
Date: Wednesday, December 11th, 4:00pm – 7:00pm
Venue: Deloitte, 100 Kimball Drive, Parsippany NJ
Agenda:
3:30 – 4:00 Check In/Registration
4:00 – 4:15 NJ ISSA Chapter Updates
4:15 – 5:00 Presentation: War Stories from the Cyber Front Lines
Ryan Wakeham, Sr Director, Strategic Solutions
Abstract
In this presentation, we will touch on the objectives of penetration testing as well some insights and general learnings. Once oriented, we will explore anecdotes – or war stories – from the NetSPI project archives. These stories will illustrate the breadth of vulnerabilities that are commonly found in systems, networks, and applications that NetSPI tests, as well the creative lengths to which NetSPI pentesters will go to identify these issues and ultimately help clients strengthen their security postures in the uncertain cyber landscape of the post-digital age..
Bio
Ryan is one of the longest tenured members of the NetSPI team managing varying aspects of the company in that time including leading our testing practice. Today he consults directly with clients and prospects on developing IT risk management and security program development solutions. He has years of computer security experience, thirteen of them with NetSPI. He holds a BA in Computer Science from Carleton College and an MS degree in Information Security from the Georgia Institute of Technology.
5:00 – 5:15 Break
5:15 – 6:00 Presentation: Securing the Post-Perimeter World: The biggest threat to your enterprise data is in your hand.
Keith Cowan, Sr Systems Engineer & Frank Arena, Sales Director
Abstract
In this presentation we will discuss why in our now Post-Perimeter World there is a need to move the protection that firewalls provide to the endpoint. More specifically, that any endpoint must be authenticated every time it connects to the enterprise, and should be continuously assessed while connecting to enterprise data.
Bio
Keith Cowan is a Sr Systems Engineer at Lookout. Keith brings over 20 years of Security Engineering and design expertise in a multitude of areas including Cloud Security, Mobile Security, Data Security. He has worked with both Cloud Infrastructure, IAAS, on both hardware and software platforms.
Frank Arena has 30 years IT experience with various Professional Certifications & Accreditations including Juniper Networks VSKO Certification and Cisco Security Sales Specialist Cisco Routing and Switching Sales Specialist. Frank also serves as an elected official in New Jersey where he serves as a Town Councilman in Westfield, NJ. Frank holds a Bachelor of Science in Business Administration, Economics and Marketing from Susquehanna University.
6:00 – 7:00 Cocktail Reception

NJ ISSA Chapter Meeting on 09/25/2019
2019-09-25 16:00 - 19:00 (America/New_York)
More information will be provided

2nd Annual NJ ISSA Golf event
2019-09-12 13:00 - 21:00 (America/New_York)
Annual NJ ISSA Cyber Security Golf Classic is exceptional event that brings together cyber security professionals (NJ ISSA members as well as non-members) for a spectacular day of golf and networking.
More information available here.

ISSA & ISC2 joint chapter meeting
2019-06-27 16:00 - 19:00 (America/New_York) | Deloitte Office, 100 Kimball Drive, Parsippany, New Jersey, 07054
3:30 – 4:00 Check In/Registration
4:00 – 5:00 Presentation: Continuous Vulnerability Management
Peter McMullen, Onapsis
Abstract
How to protect business-critical applications against internal misuse and external attacks to give organizations visibility into the ERP landscape, including threats and vulnerabilities. Further discussion on how to prioritize remediation efforts based on criticality and impact and reduce the attack surface by preventing and blocking misconfiguration or unauthorized changes. Peter will also be providing an overview of the common challenges customers face relative to security, compliance, and moving to S/4HANA.
Bio
Peter McMullen is VP Sales at Onapsis and has been a frequent sponsor of the NJ ISSA in the past at his previous companies, and he is also a member of the NJ ISSA. Peter joined Onapsis in January of 2019 and has been in the cyber security solutions market for 10 years exclusively. Prior to Onapsis, Peter held sales management roles at Anomali, Cyphort, and Juniper Networks via the acquisition of Altor Networks.
5:00 – 5:15 Break
5:15 – 6:00 Group Discussion: Information Security Headlines
Information security incidents and media headlines are omnipresent. We will be reviewing a few interesting recent security headlines and discuss as a group – sharing collective insights, and approaches that organizations can take to respond to similar challenges we face around Cybersecurity today.
6:00 – 7:00 Cocktail Reception

SECON 2019 Social Engineering Awareness Conference
2019-05-21 08:00 - 16:00 (America/New_York)
You are invited to SECON 2019 – Social Engineering Awareness Conference, organized by the ( ISC)2 New Jersey, ISACA New Jersey, and ISSA New Jersey with volunteers from OWASP, Women In AppSec, Women CyberSecurity Society (NY) Chapters.
The SECON promises to be well-attended by members of the information technology, information security, audit, academic, and business communities. This year’s conference will be limited to 300 quality attendees including 250 mid-level to senior managers and 50 students from technology and business.
For more information, click here.

NJ ISSA Chapter Meeting on 03/27/2019
2019-03-27 13:00 - 16:00 (Africa/Abidjan)
Exciting news! Our next chapter meeting will be held at the NJCCIC Regional Operations Intelligence Center. The New Jersey Cybersecurity and Communications Integration Cell (NJCCIC) is the State’s one-stop shop for cybersecurity information sharing, threat analysis, and incident reporting. Please visit their website, https://www.cyber.nj.gov/, for more information.
Please contact Arthur Hedge if you are planning on attending our meeting. You must provide your full name and the license plate of the vehicle that you will be using to get there. No on-site registration will be allowed.
New Jersey Chapter ISSA Meeting
Date: Wednesday, March 27, 2019
Time: 1:00pm – 4:00pm
Venue: NJCCIC, 2 Schwarzkopf Dr., Ewing Township, NJ 08628
Tentative Agenda
1:00 – 1:30pm Arrival (plan to arrive no later than 1:30)
1:30 – 2:00pm Introduction from Chapter Officers
2:00 – 3:00pm NJ CCIC Overview and Facility Tour
3:00 – 4:00pm Presentation

NJ ISSA Chapter Meeting on 12/12/2018
2018-12-12 16:00 - 19:00 (Africa/Abidjan)
3:45 – 4:15 Check In/Registration
4:15 – 5:00 Understanding and Breaking the Barriers to “Privileged Access Management”
Richard Conte, One Identity
Abstract
A discussion of the top reasons PAM fails, and a roadmap for the simplest way to PAM
Bio
Rich Conte is a Senior Solutions Architect with over 30 years of information technology and security expertise. This experience includes solutions architecture, application development, Identity and Access Management, Directory Infrastructure, Single Sign On, Privileged Access Management, and Identity Governance.
Today, as a Quest Software Security Solution Architect, Rich is helping customers’ address their biggest Identity Governance, Access Management, and Privileged Access Management challenges using a proactive, rather than a reactive, approach. Prior to joining Quest, Rich held similar rolls at Sun Microsystems and HP.
5:00 – 6:00 Enhancing Security in Microsoft Office 365 & at the Endpoint
Scott Messick, Senior Sales Engineer, ClearSwift
Melvin Montalvo, USA Enterprise Account Manager
Abstract
Many organizations across various verticals have either moved or are strongly considering a move to Office 365. Yet, these systems represent a substantial threat of data loss due to hackers, phishing and insider threats – and the threat landscape is continually evolving. This presentation will examine the current threat landscape and Secure Email Gateway’s ability to substantially enhance Office 365 security via an integrated approach. Traditional endpoint tools incorporate threat protection but regulations and business requirements have raised awareness to tighten the Endpoint by enhancing DLP controls. Today, advanced security and data loss prevention (DLP) features are needed to combat information borne threats across email as well as the endpoint.
Bio
Scott Messick is a Senior Sales Engineer with Clearswift based in New Jersey. In this role he works with the largest Clearswift customers and prospects across North and South America. Scott joined Clearswift after 12 years with Credit Agricole Corporate Investment Bank (CA-CIB). While with Credit Agricole, Scott was a Windows Technical Lead, a Windows Platform Engineer, a Windows Platform Group Manager and was promoted to Director prior to moving to Clearswift. Scott also served on the IT and IT Security Management Committees that oversaw all North and South America IT and IT Security infrastructure operations for the Bank.
Melvin Montalvo is a USA Enterprise Account Manager based in New Jersey. Melvin develops business relationships for Clearswift in regulated sectors across the country. Prior to Clearswift, Melvin started and built an MSP practice serving customers in the financial, healthcare, pharmaceutical and technology sectors delivering a host of cloud based applications and business continuity/disaster recovery solutions. He successfully sold the MSP business and has served on several committees, councils and peer groups discussing the latest technology threats and cultivating infrastructures for mid markets and enterprise organizations. Besides his own MSP practice, his corporate experience includes Bank of America & Robert Half International.
6:00 – 7:00 Cocktail Reception

NJ ISSA Chapter Meeting on 06/27/2018
2018-06-27 16:00 - 19:00 (Africa/Abidjan)
3:30 – 4:00 Check In/Registration
4:00 – 4:45 Moving to SOC 2.0 and an Intelligence-Led Security Operation
Michael Katz & Teddy Powers – Anomali
Abstract
Review of best practices in threat intelligence, automating collection and integration, and enabling security teams to analyze and respond to threats.
Bio
Teddy is a Senior Sales Engineer who has been with Anomali for over 3 years. He supports Anomali customers and partners in the NY Metro regions, and frequently speaks at conferences and trade show events.
4:45 – 5:15 Myths and Realities of the Deep and Dark Web
Mark Eaton & Frank Lulgjuraj – Solutions Architect
Abstract
Educational overview of the threats in the Dark Web and what companies can do to prepare and address including threat intelligence and cybersecurity platforms.
Bio
Mark and Frank are Solutions Artichtects at Flashpoint and specialize in delivering sophisticated technology and human-powered analysis enable enterprises and public-sector organizations globally to bolster cybersecurity, confront fraud, detect insider threats, enhance physical security, assess M&A opportunities, and address vendor risk and supply chain integrity.
5:15 – 6:00 Threat Hunting and Proactive Processed to Measure Probability of Compromise
Ondrej Krehel – CEO and Founder LIFARS
Abstract
This session will cover real strategic tactics and techniques to seek for malicious threat actors (example of APT10 will be presented) and model situations through leveraging unified threat intelligence solution on endpoints, network, and SIEM. Particular attention will be put on the early detection and effective elimination of false positives.
Bio
Ondrej Krehel is the Digital Forensic Lead, CEO & Founder of LIFARS LLC, an international Cybersecurity Intelligence, Digital Forensics, and Incident Response firm based in New York City.
6:00 – 7:00 Cocktail Reception

NJ ISSA Chapter Meeting on 04/25/2018
2018-04-25 16:00 - 19:00 (Africa/Abidjan) | Deloitte Office, 100 Kimball Drive, Parsippany, New Jersey, 07054
3:30 – 4:00 Check In/Registration
4:00 – 6:00 Presentation: How to think like a Hacker to beat a hacker
Phil Caturegli, Chief Hacking Officer/Partner – Netragard
Abstract
In our presentation we walk through 3 case studies of how we compromised different environments and what we did to harden the security. This informative presentation will provide real life examples of how environments can both be compromised and protected.
Bio
Philippe a partner at Netragard, which provides penetration testing, advisory and consulting services in the domain of information security. Philippe is a Pen-tester and Security researcher who has discovered and published several security vulnerabilities in leading products including Cisco, Symantec and Hewlett-Packard. Before founding Seralys, Philippe held a Senior Manager position within Deloitte Luxembourg Information & Technology Risk department and held several roles within the IT security department of a global pharmaceutical company in UK.
6:00 – 7:00 Cocktail Reception
