New Jersey ISSA Chapter

Save The Date: VIRTUAL NJ ISSA Chapter Meeting on 3/30/2022
2022-03-30 16:00 - 18:00 (America/New_York)
New Jersey Chapter ISSA Meeting
Date: Wednesday, March 30th, 4:00pm – 6:00pm
Venue: Remote via Zoom (NJ ISSA Members will receive an email with Zoom instructions. Please use a contact form to request dial in details if you did not receive the email.)
3:55 – 4:00 Check In/Registration
4:00 – 4:15 NJ ISSA Chapter Updates
4:15 – 5:55 Cloud Security Controls
Jonathan Villa, GuidePoint
Abstract
Many organizations have attempted to align their cloud security programs to existing industry standards while their cloud teams seek to implement controls using cloud-native services. Unfortunately, because most standards were written for brick-and-mortar data centers, many requirements become “not applicable” or are deferred to the CSP. GuidePoint Security will discuss how organizations can implement CSA CCM controls using AWS services by walking through examples of people, process and technology within the specific scope of cloud computing.
Speaker Bios
Jonathan Villa has worked as a technology and security for over 20 years. Jonathan has consulted to organizations in various verticals and across varying sizes ranging from startups to enterprises. Jonathan has architected and managed automated CI environments since the mid-2000’s that included static and dynamic code analysis for over 150 applications being deployed to several distinct environments and platforms. Jonathan is currently the national Practice Director for GuidePoint Security’s Cloud Security Practice and has worked with early stage FinTech startups as a co-founder and advisor since 2007 by designing cloud-first security programs that meet industry and regulatory compliance requirements. Jonathan continues to stay active as a technologist through advising organizations throughout their cloud transformation journey.
5:55 – 6:00 Closing Comments

Save The Date: VIRTUAL NJ ISSA Chapter Meeting on 6/28/2023
2023-06-28 16:00 - 17:30
New Jersey Chapter ISSA Meeting
Date: Wednesday, June 28th, 4:00pm – 6:00pm
Venue: Remote via Zoom (NJ ISSA Members will receive an email with Zoom instructions. Please use a contact form to request dial in details if you did not receive the email.)
4:00 Check In/Registration
4:00 – 4:15 NJ ISSA Chapter Updates
4:15 – 5:45 Best Practices in Storytelling: What You MUST Implement to Effectively Communicate and Security and Risk Management
Jeffrey Wheatman, SVP, Cyber Risk Evangelist, Black Kite
Abstract
“Once upon a time” are the most powerful words in the English language. Why? Because storytelling is as old as human communication itself. Why do we tend to compile data, charts, graphs, facts and opinions and throw them at an audience for ingestion and likely misinterpretation? We need to learn how to construct a story that effectively communicates messages, goals and objectives to the business executives in your organization. In this presentation, attendees will learn:

What is storytelling and how does it work?
How to create the elements of good stories that get our points across without drowning the audience in unnecessary details
Best practices in delivering your stories to focus on messages that garner support for program actions

Speaker Bio
A strategic thought leader with extensive expertise in security and cyber risk management, Jeffrey Wheatman is regarded as a foremost expert in guiding public sector clients and Fortune 500 companies in connection with their cybersecurity and risk management programs. Jeffrey’s history of working with clients to plan, grow, and transform their cyber risk management programs has been instrumental in ensuring organizations’ continued
viability and health as they define short- and long-term expansion plans. Under Jeffrey’s guidance, board and C-level leaders are fortified with the best practice solutions to realize exceptional performance outcomes.
In his current capacity as SVP, Cyber Risk Evangelist at Black Kite, Jeffrey has been tasked with raising awareness of the enterprise-wide risk impacts of third party risk, both in the digital and traditional supply chain and supporting the strategic vision of the executive leadership team and investors.
Most recently, Jeffrey acted as a VP, Advisor with Gartner, the global strategic advisory firm, where he worked with clients to build and improve their security programs, assess risk, focus on reporting on program status, metrics, performance management, stakeholder engagement, executive communication, and bridging the connection between technology and security risk. Jeffrey guided leaders in selecting frameworks to run cyber programs in compliance with regulatory requirements and expectations of auditors and partners.
Jeffrey has extensive experience engaging with executive leaders and board members. Jeffrey has prepared security and risk leaders to present before a board; he has reviewed and advised on upwards of 500 board presentations and briefed 60+ boards of directors to understand their role in managing cyber risk.
For four years, Jeffrey served as the Chair of the North America Security and Risk Management Summit, Gartner’s 2nd largest conference with 4000+ annual attendees. As part of this high-profile effort, he guided the creation of the conference agenda comprising more than 150 presentations, 20 case studies, external keynote speakers, and 50 vendor sessions.
5:15 – 5:30 Closing Comments
