CISSP Meetup October 2019

CISSP Meetup October 2019

Here are the meetup details for CISSP review questions for October 2019 in Tyson, Virginia

Source: https://www.meetup.com/DCCISSP/events/265671622/ 

We will go over practice exam questions for all the domains in CISSP, and discuss the latest threats on the net. [(ISC2) for the community] has provided us with some free practice questions for The CISSP Study Group.

Sunday, October 20, 2019 11:00 AM to 12:30 PM

Continue reading CISSP Meetup October 2019

The Internet Wants YOU: Consider a Career in Cybersecurity

SUMMARY: October is National Cyber Security Awareness Month (NCSAM)  which is an annual campaign to raise awareness about the importance of cybersecurity. NCSAM is designed to engage and educate public and private sector partners through events and initiatives to raise awareness about the importance of cybersecurity, provide them with tools and resources needed to stay safe online, and increase the resiliency of the Nation in the event of a cyber incident.

The Learn CISSP website is pleased to present “CYBERSECURITY CAREER OUTLOOK” from the Stop-Think-Connect Campaign. If you are thinking about a career change, then you might want to have a look at the burgeoning cybersecurity market which is expected to grow from $75 billion in 2015 to $170 billion by 2020.

CYBERSECURITY CAREER OUTLOOK:
A knack for cat and mouse play may indicate that you have an aptitude for cybersecurity. It is a field where the good guys — cybersecurity professionals — are pitted against the bad guys — cybercriminals a.k.a. hackers. Assuming you’d want to be a good guy – a career can mean a six-figure salary, job security, and the potential for upward mobility.

More than 209,000 cybersecurity jobs in the U.S. are unfilled, and postings are up 74% over the past five years, according to a 2015 analysis of numbers from the Bureau of Labor Statistics by Peninsula Press, a project of the Stanford University Journalism Program.

A report from Cisco puts the global figure at one million cybersecurity job openings. Demand is expected to rise to 6 million globally by 2019, with a projected shortfall of 1.5 million, says Michael Brown, CEO at Symantec, the world’s largest security software vendor.

If you are already in the tech field, then crossing over to security can mean a bump in pay. Cybersecurity workers can command an average salary premium of nearly $6,500 per year, or 9% more than other IT workers, according to the Job Market Intelligence: Cybersecurity Jobs 2015 report published by Burning Glass Technologies.

For newbies to the tech field who are contemplating a career in cybersecurity, they will often start out as information security analysts. U.S. News and World Report ranked a career in information security analysis eighth on its list of the 100 best jobs for 2015. They state the profession is growing at a rate of 36.5% through 2022. Many information security analysts earn a bachelor’s degree in computer science, programming or engineering.

The most recent median pay for an information security analyst is $88,890 per year, according to the Bureau of Labor Statistics, which says the typical entry level education is a Bachelor’s degree. The lowest 10% earned less than $50,300, and the highest 10% earned more than $140,460.

Cybersecurity Innovation Forum – Sept 2017

George Mason University Announces Speakers for September 2017 Cybersecurity Innovation Forum

Please join us for a special event featuring Brian Christos, CEO / Head of Product, Active Canopy, Duncan Sparrell, sFractal Consulting, LLC, Mohamoud Jibrell, Chief Executive Officer, and Candan Bolukabas, Chief Information Officer, NormShield for the next George Mason University (GMU) Cybersecurity Innovation Forum on Tuesday, September 7, 2017, at Research Hall on the GMU Fairfax campus from 7pm – 9pm.

Cybersecurity Innovation Forum - Sept 2017The Forum will consist of a series of 15-20 minute case study presentations by cybersecurity experts and technology innovators followed by a panel discussion and Q&A. Now in its 5th year, the Cybersecurity Innovation Forum at Mason is a regular event series that brings cybersecurity experts and technology innovators to campus to speak on a variety of information security topics. The event focuses on cybersecurity innovations that address current and evolving challenges and have a real and measurable impact.

Previous speakers included:  Raghu Dev, IBM, Naomi Eide, CIO Dive, Grant Elliot, Ostendio, Tim Wilson, Dark Reading, Joe Aliada, Principal Solutions Architect, Clint Beasley, Regional Sales Manager, and Hassanain Kapadia, Sales Engineer, Palo Alto Networks and many more. For a full listing of previous speakers and to sign up for upcoming events, please go here.

This September’s event speakers include:

  • Brian Christos, CEO / Head of Product, Active Canopy – As Chief Executive Officer, Brian provides his bold vision and pioneering cyber experience for developing ActiveCanopy’s dynamic solutions.
  • Duncan Sparrell, sFractal Consulting, LLC – Duncan Sparrell is a seasoned software developer and network security evangelist. Besides having various certs (CSSIP, CSSLP, CCSK, PE), he was awarded the Intelligence Community Seal Medallion, and the AT&T Science and Technology Medal.
  • Mohamoud Jibrell, Chief Executive Officer, and Candan Bolukabas, Chief Information Officer, NormShield – Mohamoud Jibrell is responsible for business development and the overall growth of the company. He brings 25 years of executive leadership experience to NormShield. He was the CIO of the Howard Hughes Medical Institute in Chevy Chase, Maryland. Candan Bolukabas is responsible for the technical direction and innovation of NormShield products. He is a certified ethical hacker, a certified secure programmer, certified incident handler, and a certified computer hacking forensic investigator.

George Mason University’s (GMU) Volgenau School of Engineering and School of Business sponsor the events. Follow us on Twitter @MasonCyber for more up-to-date discussions on cybersecurity and innovation or please go to: http://business.gmu.edu/partnerships-grants for more information.

Cybersecurity Innovation Forum - Sept 2017

REGISTER NOW

Details: Tuesday, September 7, 2017, 7pm – 9pm,
Light refreshments will be provided.

George Mason University, Research Hall, Room 163, 4400 University Drive, Fairfax, VA (map)Directions

Parking: Visitor Parking available in the Shenandoah Parking Deck (No. 43 on map), located next to Research Hall (No. 50 on map). Parking fee, $3 an hour.

Registration: Please RSVP. There is no charge for the event.

Contact: Christina Batcheler, cbatchel@gmu.edu703-993-3746

Mark Your Calendars:

2017 Cybersecurity Innovation Forum #3
December 5, 2017 (Tuesday)
7:00 pm – 9:00 pm
Room 163, Research Hall, Fairfax Campus, George Mason University


 Christina Batcheler

Program Operations & Public Relations Specialist
Research Partnerships & Grants Initiative, School of Business
Center for Assurance Research and Engineering (CARE), Volgenau School of Engineering

George Mason University

http://business.gmu.edu/partnerships-grants/

http://care.vse.gmu.edu/

cbatchel@gmu.edu

P: 703-993-3746

Cell: 703-868-2488

4400 University Drive, Fairfax, VA 22030

For our latest news, please go to: http://business.gmu.edu/blog/tech/category/research/

Follow our tweets at: https://twitter.com/masoncyber

Obama’s proposed $19 billion cybersecurity budget for fiscal 2017

cybersecurityThe Obama administration has unveiled a national strategy meant to help agencies, companies and individuals bolster defense of their computer systems and sensitive data, the Christian Science Monitor reported Tuesday.

Sara Sorcher writes President Barack Obama’s proposed $19 billion cybersecurity budget for fiscal 2017 includes $3.1 billion for government information technology modernization efforts as part of the Cybersecurity National Action Plan (CNAP). “We’re going to prioritize applications in federal agencies that have a high cybersecurity challenge,” U.S. Chief Information Officer Tony Scott was quoted as saying. The White House also plans to appoint a federal chief information security officer to coordinate data security efforts at civilian agencies, Sorcher reports.

http://www.executivegov.com/2016/02/white-house-develops-19b-cybersecurity-action-plan/

CNAP – https://www.whitehouse.gov/the-press-office/2016/02/09/fact-sheet-cybersecurity-national-action-plan

Sunday’s CISSP Study Group at Microsoft Store—Happy Valentine’s Day!

Sunday’s CISSP Study Group at Microsoft Store

Sunday, February 14, 2016
9:00 AM to 12:00 PM at the Microsoft Store
1961 Chain Bridge Road, Tysons Corner, VA
We will go over practice exam questions for all the domains in CISSP, and discuss  the latest threats on the net.

microsofts-logo## Update #1 ##

The store is located inside Tyson’s Corner Center Mall on the second floor by Macy’s in Tysons Corner, VA. The mall does not officially open until 11:00AM, but we can enter the building by 9:00 AM through the main entrance near Macy’s.

## Update #2 ##

Break down of the exam. e.g. if you have 60 questions, and you can eliminate 2 choices from a question and have some feelings about the questions.
What I mean is that you have some ideas what the question is asking, then your score would likely 45 as shown below.
You add all those points and you have answered a total of 182 questions correctly. You need at least 175 questions correctly to pass the test.
700 points -> 175 (70%) questions

70% * 250 = One needs to answer 175 questions correctly to pass the exam!

SOURCE: http://www.meetup.com/DCCISSP/events/228677652/ 

Training for a Career in Cyber

Training for a Career in Cyber

Securing, protecting, and defending our nation’s digital information and critical infrastructure require building an agile and highly skilled workforce that can respond to the challenges of the day.

Whether you are a current cyber employee looking to build your skills, a career changer seeking to forge a new path, or a veteran hoping to retrain for the next phase in life, the NICCS Training Catalog is the place to start.

The NICCS Training Catalog offers more than 2,000 cyber and IT courses available throughout the country, online, and in person. Visit the Training Catalog today and find the course that paves the way to your future in cyber.

Free Government Training

The Federal Virtual Training Environment (FedVTE) and FedVTE Live! (Formerly FedCTE) programs offer access to online and in-person cybersecurity training for the entire government workforce, both at federal and state and local events. FedVTE provides flexible online training, while FedVTE Live! offers live courses taught either in-person or through a virtual environment. These programs are available for free to government employees and veterans can also take advantage of FedVTE courses at no cost. Learn about FedVTE. Learn about FedVTE Live!.

Source: https://niccs.us-cert.gov/training/training-home

Federal Reserve InfoSec Concerns Raised

Inspector General Audit Sketchy on Risks to STAR System

Federal Reserve InfoSec Concerns Raised

An inspector general report on a Federal Reserve audit raises more questions than it answers regarding the security risks facing one of the Fed’s systems.

The Office of the Inspector General for the Board of Governors of the Federal Reserve System and Consumer Financial Protection Bureau recently issued an executive summary of the audit, which focuses on the Fed’s Statistics and Reserve System, or STAR. It recommends the Fed strengthen information controls related to planning; security assessment and authorization; contingency planning; auditing; access control; risk assessment; and system and information integrity.

“Given that this system is classified as a moderately critical system, we must appreciate that it will be targeted for intrusion and corruption.” 

STAR is a mainframe system developed in 1998 that supports the statistics and reserves functions at the Federal Reserve’s Board and banks. The system collects and edits more than 75 periodic statistical reports that are received from financial institutions, according to OIG. In addition, the system manages financial institutions’ reserve requirements and term deposits.

 

Source: http://www.inforisktoday.com/blogs/federal-reserve-infosec-concerns-raised-p-2024?linkId=20138971

by Eric Chabrow (GovInfoSecurity) • January 5, 2016

cybersecurity career fair

Upcoming virtual cybersecurity career fair hosted by SANS Institute!

Looking for a job in cybersecurity? Take a minute and check out the SANS CyberTalent Fair(SCTF), the fourth online career fair hosted by the SANS Institute coming up on Thursday, November 19, 2015. You can register now at https://app.brazenconnect.com/events/SANS-cybertalent-fair-2

Employers already signed up for this event include L-3 Communications, Solutionary, Stroz Friedberg, UnitedHealth Group, Protiviti, Kellogg, Juniper Networks, the 780th Military Intelligence Cyber Brigade, UPS, QVC, American Transmission Co., Susquehanna International Group, Sage Data Security, and more. SCTF uses an innovative event platform that will allow for dynamic one-on-one chats with company representatives. In the event, you can also view and apply for jobs.

The SANS CyberTalent Fair is open to interested jobseekers as well y employers who have cyber vacancies. All registrants have the opportunity to take the SANS CyberTalent Test at no cost! Please contact mshuftan@sans.org or visit https://app.brazenconnect.com/events/SANS-cybertalent-fair-2 for more information. Connect with SANS CyberTalent on Twitter, Facebook, and LinkedIn