Cybersecurity in Maryland

CYBERSECURITY POWERHOUSE

The vitality of Maryland’s cybersecurity sector has spurred cyber-focused developments, including Annapolis Junction in Anne Arundel County, Port Covington (pictured) in Baltimore City, and Columbia Gateway and Merriweather District in Howard County. Port Covington has already attracted venture capital firm Allegis Cyber, start-up studio DataTribe, and investment bank and corporate advisory firm Evergreen Advisors to anchor the project’s first phase.

Entrepreneurs and Innovators Top Ten Global Cybersecurity Hub for 2019* The National Security Agency at Fort Meade, the nation’s pioneering “code maker and code breaker,” seeded the ground for a one-of-a-kind cybersecurity foundation in Maryland. Today, the state is a global leader, rich with seasoned industry leaders and entrepreneurial startups developing spectrum-wide innovative computer and network security products and solutions for commercial and national use.

Entrepreneurs & Innovators

page 1

Incentives & Investments

Business Support

page 12

page 15

Cybersecurity Ecosystem

Federal Cyber Assets

page 10

Workforce

page 6

15 Maryland Companies Named to 2019 Annual Cybersecurity 500** Company

Cybersecurity Sector

Corporate HQ

Lockheed Martin

Cybersecurity Solutions & Services

Bethesda

Tenable Network Security

Vulnerability Scanning

Columbia

Fidelis Cybersecurity

Threat Detection & Response

Bethesda

Arxan

Application Security Products

Bethesda

ZeroFOX

Social Risk Management

Baltimore

KEYW

Cyber Defense & Digital Forensics

Hanover

Cybrary

Free Cybersecurity Training

Greenbelt

IronNet Cybersecurity

Threat Detection & Mitigation

Fulton

Protenus

Health Data Security

Baltimore

TrustedKnight

Malware Detection & Protection

Annapolis

Terbium Labs

Dark Web Monitoring

Baltimore

Sonatype

Enterprise Application Security

Fulton

Enveil

Data-In-Use Encryption

Fulton

Silent Circle (Atilla)

Enterprise Mobile Privacy

Columbia

Dragos, Inc.

Industrial Control Systems Security

Hanover

*source: CSO Online **source: cybersecurityventures.com

1

IronNet Cybersecurity, a leader in collective defense and network traffic analysis, was founded in 2014 by GEN (Ret) Keith Alexander. The company is a global cybersecurity leader that is revolutionizing how enterprises, industries, and governments secure their networks by delivering the first-ever collective defense platform operating at scale.

Employing an extraordinarily high percentage of former NSA cybersecurity operators with offensive and defensive cyber experience, IronNet integrates deep tradecraft knowledge into its industry-leading products to solve the most challenging cyber problems facing the world today.

Tenable, along with five other Maryland cybersecurity companies: Cybrary, Dragos, IronNet, Sonotype, and ZeroFox was among Cybercrime Magazine’s list of the world’s “Hot 150 Cybersecurity Companies to Watch in 2020.”

Tenable, Inc. is the Cyber Exposure Company. Based in Columbia, Maryland, over 27,000 organizations around the globe rely on Tenable to understand and reduce cyber risk.

As the creator of Nessus®, Tenable extended its expertise in vulnerabilities to deliver Tenable.io, the world’s first platform to see and secure any digital asset on any computing platform. Tenable customers include more than 50 percent of the Fortune 500, more than 25 percent of the Global 2000 and large government agencies. To accommodate its rapid growth, Tenable is expanding its Maryland presence with the development of 150,000 square feet in its new amenity-rich headquarters in the Merriweather District.

Cybrary is a cybersecurity and IT workforce development platform that provides IT and cybersecurity learning opportunities to anyone, anywhere, anytime. Since January 2015, Cybrary has grown its user base to over 2 million and has 96% of Fortune 1000 companies learning on

2

EN|VEIL is a pioneering data security company protecting Data in Use. Entrepreneur Ellison Anne Williams, Ph.D., founder and CEO used homomorphic encryption technology developed at NSA to create a virtual veil that protects data at rest, in transit, or in use. Since its founding in 2016, Enveil has attracted national recognition – most recently, the company was among just 28 startups recognized by CB Insights’ Cyber Defenders list for their potential to transform cybersecurity.

“Being in this area allows us to take advantage of that rich engineering talent that doesn’t really exist in this concentration anywhere else in the country.”

—Ellison Anne Williams, Ph.D., founder and CEO of Enveil

IronNet continues growth with the announcement of a team in Asia/Pacific and Japan December 17, 2019

their platform. Cybrary has become the largest online cybersecurity and IT training platform delivering more than 300 million minutes of training on more than 3,000 topics.

In 2019, the company closed on a $15 million Series B funding round bringing Cybrary’s total capital raise to $23 million. This latest funding round was led by Texas-based BuildGroup and included participation from existing investors Arthur Ventures and Gula Tech Adventures. Gray Hall, managing director at BuildGroup, and Ron Gula, president of Gula Tech Adventures, will join Cybrary’s board of directors.

Fulton-based Cisco Talos Group, is the industry-leading threat intelligence group, comprised of more than 250 of the industry’s top threat researchers and supported by extremely sophisticated systems to create threat intelligence for Cisco products. As a primary member of Cisco’s Collective Security Intelligence ecosystem, the Cisco Talos Group is dedicated to protection before, during, and after a threat manifests itself in a network, and providing data to surface bad actors in real time using the largest threat detection network in the world.

Sonatype is a leader in software supply chain automation technology with more than 300 employees, over 1,000 enterprise customers, and is trusted by over 10 million software developers Sonatype has been one of the fastest growing companies in North America, with annual revenue growth close to 250% over the past three years. More than 60 of the Fortune 100 companies depend on Sonatype’s Nexus products and OSS solutions to automate the modern software supply chain including, 8 of the top 10 US and European banks, 8 of the top 10 US credit card companies, 7 of the top 10 US tech companies, and 4 out of 5 U.S. Armed Forces.

ZeroFOX, a cybersecurity company based in Baltimore, provides cloud-based software as a service (SaaS) for organizations to detect risks found on social media and digital channels, such as phishing, malware, scams, impersonator accounts, piracy, counterfeit and more. The patented ZeroFOX SaaS technology processes and protects millions of posts, messages and accounts daily across the social and digital landscape, spanning LinkedIn, Facebook, Slack, Twitter, Instagram, Pastebin, YouTube, mobile app stores, the deep & dark web, domains and more.

Located in Baltimore, the Baltimore Cyber Range facility is the first stand-alone, hands-on real world environment training cybersecurity training center in the nation. Cyber Range trains cybersecurity professionals in strategies through threat simulations using a platform developed by Cyberbit, an Israeli technology company, which develops simulated training products. Cyberbit’s Range Platform gives security teams hands on training in realistic settings and allows them to keep pace with evolving cyber threats. The Cyber Range provides academia, government and commercial entities access to a state-of-the-art virtual training environment.

Protenus provides healthcare compliance analytics to help health systems reduce risk and save money. The company uses artificial intelligence and automation to develop a deep clinical understanding of health system workflows, allowing for the proactive detection of policy violations, illegal activity, and other anomalous behaviors that could expose an organization and its patients to risk. Specialties include healthcare compliance, drug diversion, and data analytics.

3

Maryland has long been nationally recognized for producing the largest technology workforce .

Department 13, at the forefront of counter-drone technology with its MESMER® Counter Drone System software, is capable of distinguishing between good drones and malicious drones. MESMER® is a unique, patented, low power, non-jamming, non-line of sight, non-kinetic drone mitigation solution that provides a safe and effective method of protecting personnel and infrastructure from dangerous drones. The key differentiator for MESMER® is its ability to manipulate weaknesses in all digital radio protocols. Counter drone technology includes detection, identification and mitigation for surveillance of airports, prisons, stadiums and other critical infrastructure.

“We moved to Maryland because of the location and the resources. The team here in Maryland has been exceptional to us. The talent pool here in Maryland exceeds far beyond anyone else in the fifty states.”

Headquartered in Bethesda, Lockheed Martin is a global security, innovation, and aerospace company that employs 100,000 people worldwide. The majority of Lockheed Martin’s business is with the U.S. Department of Defense and U.S. federal government agencies. The company’s 25,000-square-foot NexGen Cyber Innovation and Technology Center (NCITE) in Gaithersburg, Maryland, was a new breed of R&D facility, a high-tech laboratory designed to help innovate solutions to proactively thwart cyberattacks from traditional hackers, as well as organized and wellequipped nation states.

Dragos, Inc, located in Hanover, Maryland, is an industrial cybersecurity company focused on some of the community’s hardest problems. The ecosystem the team has built is specifically tailored for industrial environments such as those found in industrial control system (ICS), Supervisory Control and Data Acquisition (SCADA), and Distributed Control System (DCS) environments. The Dragos software platform and services help operators protect infrastructure sites such as power grids, water distribution sites, oil refineries, gas pipelines, manufacturing, and more.

Dragos is partnering with the U.S. Department of Energy to research and develop Neighborhood Keeper, a collaborative threat detection and shared intelligence program that allows users to share threat insights without sharing identifying information or sensitive data.

population in the country. The Merriweather District, part of the larger Downtown Columbia redevelopment, represents the future of Maryland’s tech evolution and is the future home of Tenable’s new headquarters.

Columbia is in the top ten of Niche’s 2019 Best Cities to Live

in America list. It is also ranked

5th best place in America to raise a family and 10th best city in America to buy a house.

—Jonathan Hunter, CEO, Department 13

4

5

Workforce

Most-Educated States Overall Rank

The Washington-Baltimore region is arguably the strongest IT market in the U.S., with a larger base and higher concentration of professionals in IT occupations than Silicon Valley or Boston. The Maryland area has three times more cyber-related programs than the rest of the country combined. Maryland ranks first among the states in the concentration of workers in STEM occupations, and is a top ten state in the ratio of female workers in the tech workforce.

State

Total Score

1

Massachusetts

81.92

1

1

Maryland

76.54

3

2

3

Connecticut

71.90

4

9

4

Vermont

71.14

6

3

5

Colorado

70.17

2

23

6

Virginia

69.37

7

5

WalletHub, 2019’s Most & Least Educated States in America, January 21, 2019

#2 most educated state 17 certified NSA/DHS CAEs 56 accredited two- and four-year colleges and universities

John T. Consoli/University of Maryland

#1 concentration of workers in STEM occupations (9.4%)

and undergraduate programs, professional masters programs, and also non-credit courses through their training centers.

UMBC has more than 14,000 square feet of NSA research space on campus and is the second-largest source of employees for NSA—employing over 1100 UMBC alumni— and is number four in terms of undergraduates and number 31 in terms of PhDs in Information Technology.

University System of Maryland (USM)

#

USM is the nation’s ninth largest university system with an enrollment of over 170,000 students worldwide. USM comprises 12 institutions, two regional higher education centers, a number of major research institutes and 100 learning centers around the world.

The state’s flagship university and one of the nation’s preeminent public research universities, UMCP is a top ranked university in computer science and information systems, offering undergraduate and graduate level degrees in cybersecurity. UMCP is also home to the Maryland Cybersecurity Center (MC2), an academic center with particular strengths in cryptography, programming-language and software security, behavioral aspects of security, empirical security, and cybersecurity economics.

UMBC is one of the few universities in the nation designated both as a Center of Excellence for Information Assurance Education and Information Assurance Research by the National Security Agency and Department of Homeland Security. UMBC offers variety of courses related to cybersecurity in graduate

1

occupational cyberrelated concentrations in Maryland

University of Maryland, College Park (UMCP)

University of Maryland, Baltimore County (UMBC)

6

Quality of Education Rank

2

Maryland is home to 56 accredited institutions of higher learning, including the institutions of the University System of Maryland (USM) and the world-renowned Johns Hopkins University. USM’s flagship campus at College Park is nationally ranked for its business entrepreneurship, engineering and information technology curricula, and is a pioneer in distance learning—part and parcel why Wallet Hub has ranked Maryland as the “second most educated” state behind only Massachusetts.

#1 in percentage of B.S. degrees in computers, mathematics, and statistics

Educational Attainment Rank

UMBC Training Centers With the sudden stand-up of U.S. Cyber Command, and the acute need at Fort Meade to provide soldiers, sailors, airmen and marines being assigned to cybersecurity posts without requisite training UMBC created training centers as a non-profit organization to provide professional and technical training to individuals, businesses, non-profits, and government agencies. In addition to certificate programs in Cyber Foundations, Cybersecurity, Cyber Operations, and Cyber Analyst/ Operator, offerings include training in: • Big Data Analytics, • Cloud and DevOps • SQL Databases • Program Management and Agile Development • Sonography

7

Johns Hopkins Applied Physics Laboratory (JHU APL) The “Nation’s Largest University Affiliated Research Center,” JHU APL is an independent, nonprofit organization that conducts essential research, development and systems engineering to support national security needs. The Laboratory’s 11 mission areas include Cyber Operations, Homeland Security, National Security Space and National Security Analysis.

The Cyber Operations Mission Area is shaping the future of warfare through cyber operations, focusing on assuring critical Department of Defense missions, delivering key solutions to enable intelligence and military operations, and developing the systems that underpin novel operational capabilities in cyberspace and across the electromagnetic spectrum.

University of Maryland Global Campus (UMGC) UMGC serves over 90,000 students worldwide and is one of the largest distance-learning institutions in the world. IT and computer science programs at UMGC are designed with input from today’s top employers to prepare students for career advancement. UMGC offers programs in bioinformatics, biotechnology, cloud computing, computer science, cybersecurity, database systems technology, digital media, information systems, software development and security, software engineering, and more.

Courses are taught by respected and experienced faculty with real-world expertise. Courses that can help you prepare for certification include: • Microsoft Certified IT Professional (MCITP) • Cisco Certified Network Associate (CCNA) • CompTIA (A+, Network+, and Security+)

Maryland Innovation Champion Grants Advanced Degrees

A+

Eighteen percent of people over 25 years old hold an advanced degree.

Tech Workforce

A

Maryland has approximately 51 tech jobs per 1,000 people and reported 1,092 apprenticeship graduates in recent data.

Consumer Technology Association Innovation Scorecard 2020

Maryland’s 17 Designated NSA/DHS National Centers of Academic Excellence in Cyber Defense

DID YOU KNOW? UMGC (formerly known as UMUC) is now designated as a National Center of Academic Excellence in Information Assurance and Cyber Defense Education by the National

CAE-CDE

Capitol Technology University

Security Agency and the Department of

Cecil College

Homeland Security AND as a National Center

College of Southern Maryland

of Digital Forensics Academic Excellence by

Community College of Baltimore County

the Defense Cyber Crime Center Academic

Hagerstown Community College

Cyber Curriculum Alliance.

Harford Community College

• • • • • • • •

Howard Community College John Hopkins University Morgan State University

• •

United States Naval Academy University of Maryland Baltimore County

• • •

University of Maryland College Park University of Maryland Global Campus

8

• •

Prince George’s Community College Towson University

CAE-R

•

Anne Arundel Community College Bowie State University

CAE-2Y

• •

•

CAE-CDE- National Centers of Academic Excellence in Cyber Defense Education CAE-2Y - National Centers of Academic Excellence in Cyber Defense 2-Year Education CAE-R - National Centers of Academic Excellence in Cyber Defense Research

9

Federal Cyber Assets Maryland’s position as a cybersecurity powerhouse is due, in part, to the vast network of academic, military and government resources including federal research centers. The state has 60 federal civilian agencies, 20 military facilities, 74 federal laboratories—more than twice as many as any other state—and 350 federal and academic research centers.

Maryland’s level of funding for research eclipses all other states including California, and is first among states on a per capita basis.

Fort George G. Meade

Defense Information Systems Agency (DISA)

Fort Meade, located in Anne Arundel County, employs 54,000 people and is home to the National Security Agency and Central Security Agency, the U.S. Cyber Command, 175th Cyberspace Operations Squadron and Defense Information Systems Agency.

A Combat Support Agency, DISA provides, operates, and assures command and control, information sharing capabilities, and a globally accessible enterprise information infrastructure in direct support to joint warfighters, national level leaders, and other mission and coalition partners across the full spectrum of operations.

National Security Agency and Central Security Agency (NSA/CSS) NSA/CSS has two interconnected missions: Signals Intelligence (SIGINT) and Information Assurance (IA).

Through SIGINT, NSA/CSS responds to customer requirements for information relating to the plans, intentions, capabilities, and locations of foreign powers, organizations, terrorist groups, or persons, or their agents, who threaten America’s national security.

U.S. Cyber Command U.S. Cyber Command (USCYBERCOM) is DOD’s warfighting arm in the cyber domain. DoD’s strategy calls for the command to defend DoD networks, systems and information, to defend the homeland against cyberattacks and to provide support to military and contingency operations. The Defense Department has initiated the process to elevate USCYBERCOM to a unified combatant command.

175th Cyberspace Operations Squadron Headquartered at Fort Meade, the 175th Cyberspace Operations Group, is one of only two cyberspace operations units in the National Guard and is the only full spectrum Cyberspace Operations Group in the Air Force. The unit will provide operational and command space for missions involving the state of Maryland, the National Security Agency and U.S. Cyber Command.

10

DC3’s mission is to deliver superior digital forensics and multimedia (D/MM) lab services, cyber technical training, technical solutions development, and cyber analytics for the following DoD mission areas: cybersecurity (CS) and critical infrastructure protection (CIP), law enforcement and counterintelligence (LE/CI), document and media exploitation (DOMEX), and counterterrorism (CT).

IAPRA The Intelligence Advanced Research Projects Activity (IARPA), is an organization within the Office of the Director of National Intelligence responsible for leading research to overcome difficult challenges relevant to the United States Intelligence Community. Its stated mission is: “To envision and lead high-risk, high-payoff research that

delivers innovative technology for future overwhelming intelligence advantage.” IARPA’s quantum computing research was named Science magazine’s Breakthrough of the Year in 2010.

IARPA is involved in high-performance computing and alternative computing methods. In 2015, IARPA was named as one of two foundational research and development agencies in the National Strategic Computing Initiative, with the specific charge of “future computing paradigms offering an alternative to standard semiconductor computing technologies.” One such approach is cryogenic superconducting computing, which seeks to use superconductors such as niobium rather than semiconductors to reduce the energy consumption of future exascale supercomputers.

Economic Engine Maryland’s 12,060 information technology businesses, with a workforce of 120,770, are annually awarded over $12.1 billion in federal contracts and many billions more for classified programs, generating over $45.01 billion in economic activity for the state and Maryland.

National Cybersecurity Center of Excellence The National Cybersecurity Center of Excellence (NCCoE), a part of the National Institute of Standards and Technology (NIST), is a collaborative hub where industry organizations, government agencies, and academic institutions work together to address businesses’ most pressing cybersecurity issues. This public-private partnership enables the creation of practical cybersecurity solutions for specific industries, as well as for broad, cross-sector technology challenges. Through consortia under Cooperative Research and Development Agreements (CRADAs), the NCCoE applies standards and best practices to develop modular, easily adaptable example cybersecurity solutions using commercially available technology.

DoD Cyber Crime Center (DC3) DC3 is a US Department of Defense (DoD) center of excellence for Digital and Multimedia forensics. It is designated as a federal cyber center and Department of Defense center of excellence, and serves as the operational focal point for the Defense Industrial Base Cybersecurity Program. DC3 operates under the executive agency of the Secretary of the Air Force.

11

Incentives and Investments Tax Credits Cybersecurity Investment Incentive (CIITC) Tax Credit CIITC provides a refundable income tax credit to Qualified Investors who invest in Qualified Maryland Cybersecurity Companies (QMCCs). The purpose of this program is to attract investment in Maryland cybersecurity companies in order to help them grow, create jobs, and retain intellectual property in Maryland.

Qualified Investors receive a credit equal to 33% of an eligible investment in a QMCC. There is a limit of $250,000 for the tax credit for a Qualified Investor in a fiscal year. A QMCC may not receive total credits exceeding 15% of the total program appropriation for each fiscal year. Total credits issued during the fiscal year cannot exceed the budget amount and are, therefore, issued on a first-come basis. The credit is refundable to the extent that the amount of the credit exceeds the Qualified Investor’s Maryland income tax liability.

For or additional information about eligibility requirements and how to apply for the ESCC Tax Credit visit: commerce. maryland.gov/ciitc

Buy Maryland Cybersecurity (BMC) Tax Credit The BMC Tax Credit provides an incentive for Qualified Maryland Companies (QMC) to purchase cybersecurity technologies and services from a Qualified Maryland Cybersecurity Seller (QMCS). Qualified Maryland Companies may claim a tax credit for 50% of the net purchase price of cybersecurity technologies and services purchased from a Qualified Maryland Cybersecurity Seller. The tax credit must be claimed for the tax year in which a purchase is made.

The tax credit is awarded on a first-come, first-served basis, and is subject to funding available to the Maryland Department of Commerce. Twenty-five percent of the annual funding amount is earmarked for cybersecurity service purchases, and the remaining 75% is available for cybersecurity technology purchases.

For or additional information about the eligibility requirements and how to apply for the Buy Maryland Cybersecurity Tax Credit visit: commerce.maryland.gov/ buymdcyber

Employer Security Clearances Costs (ESCC) Tax Credit

BMC is making it easier for small businesses to protect themselves.

The ESCC Tax Credit program provides income tax credits for expenses related to federal security clearance costs, construction of Sensitive Compartmented Information Facilities (SCIFs) and first-year leasing costs for small businesses doing security-based contract work.

Being a qualified seller has been a great marketing tool for Penacity, with the cost savings catching the eye of local businesses. Since becoming qualified, Penacity has also reduced its sales cycle.

I’m able to close deals two to three times faster because buyers see the program as not only a cost savings to them, but they identify the company as a trusted provider.

To date, 20 Penacity customers have utilized the tax credit, and customers that use the tax credit, love it.”

For or additional information about eligibility requirements and how to apply for the ESCC Tax Credit visit: commerce. maryland.gov/escc

Seed and Venture Capital Gula Tech Adventures (GTA) GTA works with the next generation of cybersecurity startups assisting with their product roadmaps, participating in their capital raises and helping them build their companies, including Fulton-based RackTop Systems, the pioneer of CyberConverged™ data security, a new market that fuses data storage with advanced security and compliance into a single platform.

GTA’s current portfolio includes: 49 total investments 23 direct investments 6 cyber funds 10 historical exits

Timothy Schilbach, owner of cybersecurity firm Penacity (a Veteran-Owned Small Business)

12

13

Investors are taking note: • Tenable’s IPO raised $251 million • Dragos attracted $37 million • R ackTop Systems closed a $15 million equity round • K EYW acquired by Jacobs Engineering Group for $603 million • P rotenus announced $13 million in new equity funding.

DataTribe DataTribe is a unique startup foundry that takes startup teams focused on Cyber Security and Data Science technologies out of government agencies and defense, technology centers and research labs to co-build fast growing commercial technology companies solving complex business and Global enterprise problems. Co-founded along with Bob Ackerman, Chairman of Allegis Capital in Silicon Valley, Data Tribe launched in 2015, using their oneof-a-kind business strategy, to create three to four startups annually. DataTribe contributes significantly more earlystage capital than traditional investors or incubators, as well as approximately $1M in in-kind services such as free office space, special rates via vetted legal, accounting, IT and other services.

Working closely with DataTribe, the AllegisCyber Capital team leverages its domain expertise, customer, entrepreneur and investor networks to catalyze the start-up process. When the startups are ready for financing, AllegisCyber Capital steps up to the plate and helps build a financing syndicate.

Founded by leading investors, startup veterans and alumni of the U.S. intelligence community, DataTribe commits

capital, in-kind business services and decades of professional expertise to co-build the next generation of cybersecurity, big data and analytics companies. DataTribe is headquartered in Fulton with offices in San Francisco, CA.

Maryland Technology Development Corporation (TEDCO) TEDCO provides a framework of mentoring, funding, and networking to support an entrepreneurial community that nurtures researchers, entrepreneurs, start-ups, and early stage companies engaged in bringing innovative ideas to market. TEDCO’s investment programs foster the growth and scaling of strong companies in Maryland and provide economic and financial returns to the state.

Seed Investment Fund—$100K-$500K per company.

TEDCO works alongside entrepreneurs as partners to drive the next wave of startups.

Business Support Maryland has a robust network of partnerships and resources from tech councils and associations supporting an innovation ecosystem that nurtures researchers, entrepreneurs, startups, and early stage companies engaged in bringing innovative ideas to market. More than 30 incubators offer early stage companies business assistance, shared resources and access to equipment and facilities.

Entrepreneurship

• Right off of I-95; 10 min from Baltimore City •A bout 15 min from Ft. Meade, the National Security Agency and U.S. Cyber Command

Maryland Venture Fund—$500K-$1.5M per company.

TEDCO invests in early stage companies to grow the next generation of outstanding businesses in Maryland.

iCyberCenter International Cybersecurity Center The iCyberCenter is located in the Cyber Incubator within the bwtech@UMBC Research & Technology Park and leverages its vibrant cyber support eco-system and strategic location.

Maryland Defense Cybersecurity Assistance Program (DCAP) The Maryland Defense Cybersecurity Assistance Program provides funding and assistance for defense contractors to comply with the DFARS and NIST 800-171 Standards for cybersecurity. The program, which provides funding and resources for companies to comply with the cybersecurity standards, is funded by the Department of Defense’s Office of Economic Adjustment through the Maryland Department of Commerce and is being coordinated by the Maryland Manufacturing Extension Partnership. In FY19, the Maryland Commerce DCAP provided cybersecurity assessments or cybersecurity technical assistance to 38 companies.

bwtech@UMBC Research & Technology Park With more than 130 companies on site, bwtech@UMBC is one of the largest research parks and incubation programs in Maryland. The bwtech@UMBC Cyber Incubator includes the Northrop Grumman-supported CYNC Program and the iCyberCenter@bwtech international cybersecurity center.

Cyber Incubator

Attila Security landed $2.5 million in funding from DataTribe, TEDCO’s Seed Investment Fund, and Bull City Venture Partners. Based in Columbia, Attila helps governments and enterprises protect their data from advanced cyber attacks, zero-day threats, and personal identity theft.

• 5 minutes from BWI International Airport

The bwtech@UMBC Cyber Incubator is an innovative business incubation program that delivers business and technical support to start-up and early-stage cybersecurity/IT products and services companies. The incubator provides customized business support, as well as high-quality and competitively priced office space on a dedicated, shared or drop in basis.

iCyberCenter@bwtech’s unique dedicated 12-month U.S. Market Entry Incubator Program is designed to provide international cyber entreprenerurs with support and mentorship to facilitate entry into the U.S. cyber market.

The CEO-level Executive Training Program for overseas cyber entrepreneurs provides direct help to international cyber business leaders in order to accelerate their understanding of the U.S. cyber market, develop the most effective US market entry business strategies, and to make critical introductions to potential buyers.

Offered multiple times per year the program offers briefings, high-level industry connections and hands-on workshops delivered by leading subject matter experts.

Cyber Incubator Highlights: • 45+ early stage and emerging cyber companies • Class A office & co-working space • Strategic partnership with Northrop Grumman Corp.

• International cybersecurity program • Proximity to UMBC, a NSA/DHS Academic Center of Excellence for Cybersecurity

14

15

workforce and professional development programs that ensured that every organization, from startup to enterprise, had access to the talent and resources required to not only grow, but innovate and get to the next level.

Select Maryland Technology Councils Statewide

UBI Global World Rankings 19/20 Report ranked Baltimore’s Emerging Technology Centers in the World’s Top Five Public Business Incubators. The ranking is based on 21 indicators including: job creation, businesses graduated, investment attracted, and services offered.

Consumer Technology Association

Maryland Tech Council 240-243-4026 www.mdtechcouncil.com Develops linkages among tech industry public sector partners; strengthens area’s tech workforce; encourages entrepreneurship; advocates for a “tech-friendly” business environment and public awareness of tech significance.

Regional/County

Additional Business Supports Cync Program The Northrop Grumman and bwtech@UMBC Cync Program is an elite scholarship program that sponsors startup and early-stage companies with promising cybersecurity product ideas. Designed for small U.S. and international businesses in all phases of the technology development cycle. The overall intent of the program is to expedite the commercialization of innovative cybersecurity technologies and ideas. The highly competitive program’s focus areas include situational threat awareness, threat intelligence, visualization technologies, intrusion detection, risk analysis and secure communications.

Alex. Brown Center for Entrepreneurship UMBC established the Alex. Brown Center for Entrepreneurship through a generous gift of $1 million from The Alex. Brown Foundation.

UMBC has worked closely with the Baltimore business community and UMBC faculty and staff with one vision in mind—to create a leading center for university entrepreneurism. Through the Center, students can gain targeted expertise through internships, test their skills through competitions, accelerate a business concept through the Idea Lab, attend courses and lectures tailored to spark their entrepreneurial spirit ,and obtain assistance and mentoring from Entrepreneurs-inResidence and a wide variety of entrepreneurs and business leaders.

16

Maryland Cybersecurity Council The Maryland Cybersecurity Council was created by the Maryland General Assembly in 2015 and is charged with reviewing the state’s cyber readiness and developing a comprehensive plan to respond to and recover from attacks.

The group facilitates coordination between federal and state cyber-protection efforts and is tasked with making sure that Maryland has fully identified risks to critical infrastructure and gaps in state law.

Cybersecurity Association of Maryland (CAMI) CAMI is a statewide, nonprofit organization that identifies Maryland’s cybersecurity product and service companies and facilitates the introduction of those companies to businesses, government entities, nonprofit organizations and academic institutions seeking cybersecurity solutions.

CAMI hosts a statewide online directory of hundreds of cybersecurity providers along with a searchable online directory of businesses and organizations providing support and resources to Maryland’s cybersecurity industry.

Betamore Betamore is an incubator, coworking space, and campus for technology and innovation. With a mission to make Baltimore a global destination for entrepreneurship and innovation, Betamore supports startup companies through incubation, education, and community development efforts. From the start, the focus was on developing

Carroll Technology Council 443-244-1262 www.carrolltechcouncil.org Works to advance technology growth in Carroll County.

Charles County Technology Council 877-282-5734 www.meetup.com/thetechcouncil Acts as a cooperative alliance to advance people, technology and ideas in Charles County.

Howard County Technology Council 410-313-7243 www.howardtechcouncil.org Forum for networking and collaboration between tech companies in Howard County and the surrounding region.

Northeastern Maryland Technology Council 410-638-4466 www.nmtc.org Regional partnership to advance technology environment and understanding of impact for economy in Harford and Cecil counties.

TechFire Southern Maryland 301-645-6637 www.techfirenetwork.com Charles County cyber, defense and technology start-ups.

International Cyber Partnerships Maryland has signed Memorandum of Understanding (MOU) agreements with four countries, designed to strengthen the relationships with each, while promoting economic development, attracting investments, providing research opportunities and other assistance to cybersecurity companies around the globe.

Netherlands Maryland Commerce signed an MOU with two economic development agencies in the Netherlands to launch the Maryland-Netherlands Cyber and Security Technologies Soft Landing Platform. The agreement, the first program of its kind in Maryland, was signed with The Hague Security Delta and Innovation Quarter, the regional economic development agency for the Dutch province of ZuidHolland. It establishes a ‘soft-landing’ program where Maryland cybersecurity companies can explore the Dutch market, and Dutch cybersecurity companies can set up operations in Maryland on a trial basis. In the first year of the program, Commerce welcomed five Netherlands-based cyber companies to Maryland, using the bwtech@UMBC Research and Technology Park as a base of operations for the U.S. market.

The U.S. attracts most of the $3.5B invested annually in cybersecurity ventures globally.

United Kingdom Maryland Commerce signed MOUs with the Midlands region, a premier cybersecurity cluster in the United Kingdom and Northern Ireland, an official cybersecurity cluster in the U.K. As part of the agreements, an exchange program is being developed, by which U.K. and Northern Irish cyber companies will each visit Maryland to explore the U.S. market and to establish or increase a presence in the U.S., and Maryland cyber companies will visit the Midlands region and Northern Ireland for similar purposes.

South Australia Maryland Commerce signed an MOU to strengthen the relationship between Maryland and the State of South Australia which is home to one of the cyber security centers in Australia. The MOU is designed to promote economic development, spur joint research, attract investments and assist cybersecurity companies in Maryland and South Australia.

17

Visit Open.Maryland.gov/cybersecurity for more information about cybersecurity in Maryland.

18