Click here to view registration types and pricing (PDF)
Conference Agenda
Filter by registration level:
  • session level iconOpen Sessions
  • session level iconConference Pass
  • session level iconSecureWorld Plus
  • session level iconVIP / Exclusive
  • Wednesday, November 4, 2026
    7:30 am
    [PLUS Course] Securing & Enabling AI: Transform Chaos into Competitive Advantage - Part 1
    • session level icon
    speaker photo
    Sr. Cyber Risk Analyst, Cyber Risk Opportunities LLC
    Registration Level:
    • session level iconSecureWorld Plus
    7:30 am - 9:00 am

    Come join this interactive workshop — think hands-on working groups so you are an active participant…this is not 6 hours of being lectured at.

    Learn how to secure AI while accelerating innovation—not blocking it. Transform from AI Firefighter to Strategic Business Enabler, with a 90-day roadmap for secure AI deployment in your organization.

    Why this course? Imagine your CEO just asked about AI security. Do you have an answer?

    While you’re counting vulnerabilities, your competitors are deploying AI at scale.

    Every Monday, another department launches an AI tool. Marketing uses ChatGPT for campaigns. Sales deploys AI Sales Development Reps. Customer service automates with chatbots.

    And your cybersecurity team? Still writing policies nobody reads.

    You’ll master:
    •  The AIR-MAP Methodology™ — Your proven 90-day roadmap from AI chaos to governance
    •  Executive Translation — Turn technical AI risks into boardroom language
    •  NIST AI RMF Implementation — Practical application, not theory
    •  The $12M Question — Secure against deepfake fraud and AI-enabled attacks
    •  Shadow AI Discovery — Find and govern the AI already in your organization
    •  Business-First Security — Protect value, not just systems
    Who should attend:
    Perfect fit:
    •  CISOs facing board questions about AI
    •  Information Security Directors enabling digital transformation
    •  IT VPs without dedicated security teams
    •  Cybersecurity Consultants serving enterprise clients
    •  Risk Managers governing AI initiatives
    •  Aspiring decision makers and those reporting to one
    Wrong course:
    •  Developers wanting to code AI models
    •  Analysts seeking technical certifications
    •  Anyone looking for hands-on hacking labs
    This workshop is NOT about:
    •  Prompt injection techniques
    •  Model architecture security
    •  Technical vulnerability scanning
    •  Writing 200-page policies
    This workshop IS about:
    •  Speaking profit-and-loss to executives
    •  Enabling your AI transformations
    •  Building cybersecurity into AI from day one
    •  Becoming the trusted AI advisor
    You’ll leave with:
    1. The Complete AIR-MAP Toolkit
    •  90-day implementation roadmap
    •  Discovery templates and workflows
    •  Risk scoring calculators
    •  Executive presentation templates
    2. Ready-to-Deploy Policies
    •  AI Acceptable Use Policy (customize in minutes)
    •  Vendor assessment questionnaires
    •  Incident Response playbooks
    3. 30-Minute Strategy Session
    Complementary private consultation to apply AIR-MAP to your specific situation.
    7:30 am
    [PLUS Course] Master the NIST Cybersecurity Framework v2.0 in Just Six Hours - Part 1
    • session level icon
    speaker photo
    vCISO, Cyber Risk Opportunities LLC
    Registration Level:
    • session level iconSecureWorld Plus
    7:30 am - 9:00 am

    This intensive, live workshop is your shortcut to cyber resilience mastery. In just one power-packed day, you’ll walk away with:

    • Complete mastery of NIST CSF 2.0 – Understand every component and why it matters to YOUR business
    • Your personalized Cyber Risk Map – Identify your organization’s exact vulnerabilities and blind spots
    • A step-by-step action plan – No more guessing what to do next
    • Real-world case studies – See how organizations just like yours have successfully implemented the framework
    • Expert-level confidence – Finally speak cybersecurity with authority and clarity

    What makes this different?
    This isn’t another theoretical lecture. You’ll spend most of your time actually BUILDING your organization’s cybersecurity roadmap using the proven Cyber Risk Management Action Plan (CR-MAP) methodology. You’ll leave with tools and know-how you can implement immediately.

    Perfect for:

    • IT Directors and Managers
    • Cybersecurity Professionals
    • Business Leaders responsible for risk management
    • Compliance Officers
    • Anyone tasked with “figuring out cybersecurity”

    Exclusive Bonus: Every attendee receives our comprehensive digital CR-MAP Online Workbook ($197 value), your step-by-step guide to:

    • Getting BUY-IN from your senior decision makers
    • Discovering your top five cyber risks
    • Creating a prioritized risk mitigation plan with implementation roadmap
    • A score card you can use to track progress

    Warning: This live, in-person intensive has limited seating. Don’t let another cyber incident catch your organization unprepared.

    Your organization’s cybersecurity can’t wait. Register now.

    7:00 am
    Registration open
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    7:00 am - 4:30 pm
    Location / Room: Registration Desk / Lobby

    Come to the Registration desk in the lobby to check-in and get your badge. SecureWorld staff will be available throughout the day if you have any questions.

    8:00 am
    Networking Hall open
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    8:00 am - 4:30 pm
    Location / Room: Networking Hall

    Your opportunity to visit our solution vendor partners, whose sponsorship makes SecureWorld possible, as well as association chapters! Booths have staff ready to answer your questions. Look for participating Dash For Prizes sponsors to be entered to win prizes.

    Also, look for “Cyber Connect” discussions on select topics and join the conversation.

    8:00 am
    Advisory Council Roundtable Breakfast (VIP / Invite only)
    • session level icon
    Registration Level:
    • session level iconVIP / Exclusive
    8:00 am - 8:45 am

    Moderated discussion for SecureWorld Advisory Council members. By invite only.

    8:00 am
    Association Chapter Meetings
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    8:00 am - 8:45 am

    Participating professional associations and details to be announced.

    8:45 am
    Networking Break
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    8:45 am - 9:00 am
    Location / Room: Networking Hall

    Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

    9:00 am
    [Opening Keynote] Beyond Post-Quantum: QKD, AI Agents, and the Future of Critical Infrastructure Trust
    • session level icon
    speaker photo
    CISO & Assistant CTO for Security and Infrastructure, City of Seattle
    Registration Level:
    • session level iconOpen Sessions
    9:00 am - 9:45 am
    Location / Room: Keynote Theater

    Critical infrastructure is entering a multi-decade trust transition that no single technology will solve. Post-quantum cryptography is now a mandatory foundation for long-lived systems, software supply chains, identity platforms, and sensitive data protection. Quantum key distribution is also moving from research into selective critical infrastructure pilots and demonstrations, but it comes with real operational limits that security leaders must understand. At the same time, AI agents and machine identities are changing what authentication, authorization, delegation, and provenance mean inside enterprise, operational, and security environments.

    This keynote separates signal from hype and maps where PQC, QKD, AI agents, machine identity, software provenance, and next-generation cyber operations converge, and where they should not be confused. Attendees will leave with a practical trust map for the next five years: what to inventory, what to modernize, what to ask vendors, and how to prepare critical infrastructure for quantum-era and AI-native security risk without chasing science fiction or vendor checklists.

    9:45 am
    Networking Break
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    9:45 am - 10:10 am
    Location / Room: Networking Hall

    Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

    10:10 am
    From Alert Fatigue to Adaptive Defense: Operationalizing AI in the SOC
    • session level icon
    Registration Level:
    • session level iconConference Pass
    10:10 am - 10:45 am

    Session details to come.

    10:10 am
    Building Incident Response Plans for Highly Distributed Workforces
    • session level icon
    Registration Level:
    • session level iconConference Pass
    10:10 am - 10:45 am

    Session details to come.

    10:10 am
    The New Era of Phishing: Defending Against Deepfakes and AI-Driven Deception
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    10:10 am - 10:45 am

    Session details to come.

    10:45 am
    Networking Break
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    10:45 am - 11:10 am
    Location / Room: Networking Hall

    Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

    11:10 am
    API Security: Managing the Fastest-Growing Attack Surface
    • session level icon
    Registration Level:
    • session level iconConference Pass
    11:10 am - 11:45 am

    Session details to come.

    11:10 am
    The Quantum Reckoning: From Policy Mandates to PQC Migration Before Q-Day
    • session level icon
    speaker photo
    VP, Cybersecurity Products, JPMorgan Chase
    Registration Level:
    • session level iconConference Pass
    11:10 am - 11:45 am

    Quantum computing has crossed a critical threshold from a long-term research initiative to an immediate enterprise risk and national security priority. The June 2026 federal executive orders accelerating quantum computing capabilities and directing agencies to adopt post-quantum cryptography (PQC) have fundamentally changed the cybersecurity timeline. Organizations can no longer afford to treat quantum resilience as a future compliance initiative. The threat has already begun.

    Nation-state adversaries are actively conducting “Harvest Now, Decrypt Later” (HNDL) campaigns, collecting encrypted intellectual property, financial records, healthcare data, operational technology communications, and other sensitive information with the expectation that future cryptographically relevant quantum computers will decrypt it. For sectors such as financial services, energy, healthcare, transportation, manufacturing, and critical infrastructure, the risk is not limited to future confidentiality loss it extends to long-term operational resilience, supply chain trust, regulatory exposure, and national security.

    This session presents a practical, engineering-driven framework for helping enterprises transition from policy awareness to operational readiness. Drawing on experience designing and leading cybersecurity programs across fintech, enterprise environments, and critical infrastructure, the presentation focuses on the organizational, architectural, and governance challenges that determine whether post-quantum migration succeeds.

    11:10 am
    [Panel] Navigating the Evolving Digital Battlefield
    • session level icon
    Focus Areas: Identity-First Security; Attack Surface Management; Supply Chain & Fourth-Party Risk
    Registration Level:
    • session level iconOpen Sessions
    11:10 am - 11:45 am

    As organizational footprints expand across cloud, SaaS, OT/IoT, and dispersed workforces, defenders face a more complex and interconnected digital battlefield. This panel brings together experts to explore how today’s threat actors combine automation, social engineering, identity breaches, and software supply-chain attacks into highly coordinated assaults.

    Panelists will examine the expanding importance of identity in the modern SOC, the emergence of AI-driven threats such as automated reconnaissance and deepfake-assisted breaches, and how fourth-party dependencies are changing risk visibility. The discussion also connects these trends to organizational resilience—showing how teams can improve detection, response, and business continuity across an evolving attack surface. This comprehensive session provides practical insights for any security leader seeking clarity amid converging threats.

    11:45 am
    Networking Break
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    11:45 am - 12:00 pm
    Location / Room: Networking Hall

    Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

    12:00 pm
    [Lunch Keynote] AI-Accelerated Attacks and Defenses: Preparing for Machine-Speed Threats
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    12:00 pm - 12:45 pm
    Location / Room: Keynote Theater

    Session details to come.

    12:00 pm
    Advisory Council Roundtable Lunch (VIP / Invite Only)
    • session level icon
    Registration Level:
    • session level iconVIP / Exclusive
    12:00 pm - 12:45 pm

    Moderated discussion for SecureWorld Advisory Council members. By invite only.

    12:45 pm
    Networking Break
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    12:45 pm - 1:10 pm
    Location / Room: Networking Hall

    Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

    1:10 pm
    BEC Bang! A Business Email Compromise Table-Top Exercise
    • session level icon
    speaker photo
    Principal Investigator, Rexxfield; CEO, Dougherty Intelligence & Investigations
    Registration Level:
    • session level iconConference Pass
    1:10 pm - 1:45 pm
    Location / Room: Keynote Theater

    In this interactive, table-top exercise session, the audience is divided into two or three separate groups and designated as companies or entities doing business together. A BEC incident is introduced, and the group is asked to tabletop how to remedy the BEC incident from different perspectives of financial victims, compromise victims, and affected third parties. A gamification of the participation will show which group would have the better chance at a proper recovery based on prior investigations and incidents.

    1:10 pm
    Burnout in Cybersecurity: Recognizing, Preventing, and Managing Team Fatigue
    • session level icon
    Registration Level:
    • session level iconConference Pass
    1:10 pm - 1:45 pm

    Session details to come.

    1:10 pm
    [Panel] The Double-Edged Sword of AI in Cyber Defense
    • session level icon
    Focus Areas: AI-Powered SecOps; Adversarial AI & Synthetic Media; AI Governance & Assurance
    speaker photo
    Sales Engineer, SecureFlag
    Registration Level:
    • session level iconOpen Sessions
    1:10 pm - 1:45 pm

    AI is revolutionizing cybersecurity at all levels, speeding up detection and enabling automated attacks on an unprecedented scale. This session examines AI’s dual role as both a powerful defensive tool and a new threat vector for attackers. Panelists will discuss how AI copilots enhance analyst workflows, triage, and anomaly detection, while also addressing emerging risks such as LLM data leakage, prompt injection, model poisoning, and hallucinations within high-trust SOC processes.

    The discussion will cover AI governance and assurance frameworks, evolving regulatory expectations, and the impact of synthetic content—including deepfakes, audio spoofing, and hyper-personalized phishing—on social engineering defenses. Attendees will leave with a solid understanding of AI’s potential, the safety measures needed for responsible deployment, and practical steps for preparing teams and pipelines for an AI-driven threat environment.

    1:50 pm
    Networking Break
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    1:50 pm - 2:10 pm
    Location / Room: Networking Hall

    Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

    2:10 pm
    Cybersecurity Resources for Critical Infrastructure Partners
    • session level icon
    speaker photo
    Cybersecurity State Coordinator (WA), DHS CISA
    Registration Level:
    • session level iconConference Pass
    2:10 pm - 2:45 pm

    This session introduces the comprehensive, no-cost cybersecurity services offered by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) to owners and operators of critical infrastructure in both the private sector and the public sector—including state, local, and tribal governments. Participants will gain insight into CISA’s technical and strategic assessments, such as vulnerability scanning, web application scanning, and maturity evaluations, all designed to bolster cyber resilience. The presentation also covers how to access timely threat notifications, utilize exercise packages, engage with protective security advisors, and receive emergency communications support. Attendees will leave with actionable next steps and key points of contact to help them proactively strengthen their cybersecurity posture, all at no cost to their organization.

    2:10 pm
    OT/ICS Security: Bridging the Air Gap and Achieving Visibility in Critical Infrastructure
    • session level icon
    Registration Level:
    • session level iconConference Pass
    2:10 pm - 2:45 pm

    Session details to come.

    2:10 pm
    [Panel] Cloud Security & Multi-Cloud Defense: Securing the Modern Enterprise
    • session level icon
    Focus Areas: Multi-Cloud & SaaS Governance; Workload & Data Protection; Zero Trust & Edge Security
    Registration Level:
    • session level iconOpen Sessions
    2:10 pm - 2:45 pm

    Modern enterprises rely on a complex mix of cloud providers, SaaS platforms, APIs, and distributed identities—offering agility but also creating new control gaps. This panel gathers leaders in CSPM, workload protection, cloud identity, API security, and SaaS governance to explore the challenges of securing multi-cloud environments at scale.

    Panelists will discuss AI-driven misconfigurations, rapid SaaS sprawl, and the persistent risk of API-related breaches, as well as how zero trust principles are applied to cloud entitlements and data flows. The conversation also covers DSPM-led visibility, cross-cloud identity governance, and the convergence of network and cloud security through SASE/SSE. Whether you’re cloud-mature or still early in the journey, this session provides strategies for protecting cloud workloads, identities, and data in environments where every misconfiguration can become a breach.

    2:45 pm
    Networking Break
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    2:45 pm - 3:15 pm
    Location / Room: Networking Hall

    Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

    3:15 pm
    [Closing Keynote] The Strategic Security Debate: Defending the 'Least Bad' Decisions in a Crisis
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    3:15 pm - 4:00 pm
    Location / Room: Keynote Theater
    In the world of enterprise cybersecurity, there are rarely perfect solutions—only difficult trade-offs. Join us for an unscripted, high-energy session where top-tier security leaders face off on the industry’s toughest hypothetical scenarios.
    Moderated in a rapid-fire game show format, our panelists will be presented with difficult “Would You Rather” choices ranging from ransomware negotiation dilemmas and crippling technical debt to extreme budget constraints and the “secure-by-default” friction that can stall business innovation. They won’t just pick a side; they have to defend it against a panel of their peers.
    Attendees will gain a unique window into the strategic minds of seasoned CISOs, understanding how they weigh business continuity against forensic integrity, and rapid digital transformation against long-term risk management. Come ready to vote on who makes the best case for the “least bad” situation in an era where cybersecurity is a fundamental pillar of national and economic resilience.
    4:00 pm
    Happy Hour
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    4:00 pm - 5:00 pm
    Location / Room: Networking Hall

    Join your peers for conversation and complimentary beverages. This is a great opportunity to network with other security professionals from the area and discuss the hot topics from the day.

     

    4:00 pm
    [PLUS Course] Securing & Enabling AI: Transform Chaos into Competitive Advantage - Part 2
    • session level icon
    speaker photo
    Sr. Cyber Risk Analyst, Cyber Risk Opportunities LLC
    Registration Level:
    • session level iconSecureWorld Plus
    4:00 pm - 5:30 pm

    Come join this interactive workshop — think hands-on working groups so you are an active participant…this is not 6 hours of being lectured at.

    Learn how to secure AI while accelerating innovation—not blocking it. Transform from AI Firefighter to Strategic Business Enabler, with a 90-day roadmap for secure AI deployment in your organization.

    Why this course? Imagine your CEO just asked about AI security. Do you have an answer?

    While you’re counting vulnerabilities, your competitors are deploying AI at scale.

    Every Monday, another department launches an AI tool. Marketing uses ChatGPT for campaigns. Sales deploys AI Sales Development Reps. Customer service automates with chatbots.

    And your cybersecurity team? Still writing policies nobody reads.

    You’ll master:
    •  The AIR-MAP Methodology™ — Your proven 90-day roadmap from AI chaos to governance
    •  Executive Translation — Turn technical AI risks into boardroom language
    •  NIST AI RMF Implementation — Practical application, not theory
    •  The $12M Question — Secure against deepfake fraud and AI-enabled attacks
    •  Shadow AI Discovery — Find and govern the AI already in your organization
    •  Business-First Security — Protect value, not just systems
    Who should attend:
    Perfect fit:
    •  CISOs facing board questions about AI
    •  Information Security Directors enabling digital transformation
    •  IT VPs without dedicated security teams
    •  Cybersecurity Consultants serving enterprise clients
    •  Risk Managers governing AI initiatives
    •  Aspiring decision makers and those reporting to one
    Wrong course:
    •  Developers wanting to code AI models
    •  Analysts seeking technical certifications
    •  Anyone looking for hands-on hacking labs
    This workshop is NOT about:
    •  Prompt injection techniques
    •  Model architecture security
    •  Technical vulnerability scanning
    •  Writing 200-page policies
    This workshop IS about:
    •  Speaking profit-and-loss to executives
    •  Enabling your AI transformations
    •  Building cybersecurity into AI from day one
    •  Becoming the trusted AI advisor
    You’ll leave with:
    1. The Complete AIR-MAP Toolkit
    •  90-day implementation roadmap
    •  Discovery templates and workflows
    •  Risk scoring calculators
    •  Executive presentation templates
    2. Ready-to-Deploy Policies
    •  AI Acceptable Use Policy (customize in minutes)
    •  Vendor assessment questionnaires
    •  Incident Response playbooks
    3. 30-Minute Strategy Session
    Complementary private consultation to apply AIR-MAP to your specific situation.
    4:00 pm
    [PLUS Course] Master the NIST Cybersecurity Framework v2.0 in Just Six Hours - Part 2
    • session level icon
    speaker photo
    vCISO, Cyber Risk Opportunities LLC
    Registration Level:
    • session level iconSecureWorld Plus
    4:00 pm - 5:30 pm

    This intensive, live workshop is your shortcut to cyber resilience mastery. In just one power-packed day, you’ll walk away with:

    • Complete mastery of NIST CSF 2.0 – Understand every component and why it matters to YOUR business
    • Your personalized Cyber Risk Map – Identify your organization’s exact vulnerabilities and blind spots
    • A step-by-step action plan – No more guessing what to do next
    • Real-world case studies – See how organizations just like yours have successfully implemented the framework
    • Expert-level confidence – Finally speak cybersecurity with authority and clarity

    What makes this different?
    This isn’t another theoretical lecture. You’ll spend most of your time actually BUILDING your organization’s cybersecurity roadmap using the proven Cyber Risk Management Action Plan (CR-MAP) methodology. You’ll leave with tools and know-how you can implement immediately.

    Perfect for:

    • IT Directors and Managers
    • Cybersecurity Professionals
    • Business Leaders responsible for risk management
    • Compliance Officers
    • Anyone tasked with “figuring out cybersecurity”

    Exclusive Bonus: Every attendee receives our comprehensive digital CR-MAP Online Workbook ($197 value), your step-by-step guide to:

    • Getting BUY-IN from your senior decision makers
    • Discovering your top five cyber risks
    • Creating a prioritized risk mitigation plan with implementation roadmap
    • A score card you can use to track progress

    Warning: This live, in-person intensive has limited seating. Don’t let another cyber incident catch your organization unprepared.

    Your organization’s cybersecurity can’t wait. Register now.

  • Thursday, November 5, 2026
    7:00 am
    Registration open
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    7:00 am - 4:15 pm
    Location / Room: Registration Desk / Lobby

    Come to the Registration desk in the lobby to check-in and get your badge. SecureWorld staff will be available throughout the day if you have any questions.

    7:30 am
    [PLUS Course] Securing & Enabling AI: Transform Chaos into Competitive Advantage - Part 3
    • session level icon
    speaker photo
    Sr. Cyber Risk Analyst, Cyber Risk Opportunities LLC
    Registration Level:
    • session level iconSecureWorld Plus
    7:30 am - 9:00 am

    Come join this interactive workshop — think hands-on working groups so you are an active participant…this is not 6 hours of being lectured at.

    Learn how to secure AI while accelerating innovation—not blocking it. Transform from AI Firefighter to Strategic Business Enabler, with a 90-day roadmap for secure AI deployment in your organization.

    Why this course? Imagine your CEO just asked about AI security. Do you have an answer?

    While you’re counting vulnerabilities, your competitors are deploying AI at scale.

    Every Monday, another department launches an AI tool. Marketing uses ChatGPT for campaigns. Sales deploys AI Sales Development Reps. Customer service automates with chatbots.

    And your cybersecurity team? Still writing policies nobody reads.

    You’ll master:
    •  The AIR-MAP Methodology™ — Your proven 90-day roadmap from AI chaos to governance
    •  Executive Translation — Turn technical AI risks into boardroom language
    •  NIST AI RMF Implementation — Practical application, not theory
    •  The $12M Question — Secure against deepfake fraud and AI-enabled attacks
    •  Shadow AI Discovery — Find and govern the AI already in your organization
    •  Business-First Security — Protect value, not just systems
    Who should attend:
    Perfect fit:
    •  CISOs facing board questions about AI
    •  Information Security Directors enabling digital transformation
    •  IT VPs without dedicated security teams
    •  Cybersecurity Consultants serving enterprise clients
    •  Risk Managers governing AI initiatives
    •  Aspiring decision makers and those reporting to one
    Wrong course:
    •  Developers wanting to code AI models
    •  Analysts seeking technical certifications
    •  Anyone looking for hands-on hacking labs
    This workshop is NOT about:
    •  Prompt injection techniques
    •  Model architecture security
    •  Technical vulnerability scanning
    •  Writing 200-page policies
    This workshop IS about:
    •  Speaking profit-and-loss to executives
    •  Enabling your AI transformations
    •  Building cybersecurity into AI from day one
    •  Becoming the trusted AI advisor
    You’ll leave with:
    1. The Complete AIR-MAP Toolkit
    •  90-day implementation roadmap
    •  Discovery templates and workflows
    •  Risk scoring calculators
    •  Executive presentation templates
    2. Ready-to-Deploy Policies
    •  AI Acceptable Use Policy (customize in minutes)
    •  Vendor assessment questionnaires
    •  Incident Response playbooks
    3. 30-Minute Strategy Session
    Complementary private consultation to apply AIR-MAP to your specific situation.
    7:30 am
    [PLUS Course] Master the NIST Cybersecurity Framework v2.0 in Just Six Hours - Part 3
    • session level icon
    speaker photo
    vCISO, Cyber Risk Opportunities LLC
    Registration Level:
    • session level iconSecureWorld Plus
    7:30 am - 9:00 am

    This intensive, live workshop is your shortcut to cyber resilience mastery. In just one power-packed day, you’ll walk away with:

    • Complete mastery of NIST CSF 2.0 – Understand every component and why it matters to YOUR business
    • Your personalized Cyber Risk Map – Identify your organization’s exact vulnerabilities and blind spots
    • A step-by-step action plan – No more guessing what to do next
    • Real-world case studies – See how organizations just like yours have successfully implemented the framework
    • Expert-level confidence – Finally speak cybersecurity with authority and clarity

    What makes this different?
    This isn’t another theoretical lecture. You’ll spend most of your time actually BUILDING your organization’s cybersecurity roadmap using the proven Cyber Risk Management Action Plan (CR-MAP) methodology. You’ll leave with tools and know-how you can implement immediately.

    Perfect for:

    • IT Directors and Managers
    • Cybersecurity Professionals
    • Business Leaders responsible for risk management
    • Compliance Officers
    • Anyone tasked with “figuring out cybersecurity”

    Exclusive Bonus: Every attendee receives our comprehensive digital CR-MAP Online Workbook ($197 value), your step-by-step guide to:

    • Getting BUY-IN from your senior decision makers
    • Discovering your top five cyber risks
    • Creating a prioritized risk mitigation plan with implementation roadmap
    • A score card you can use to track progress

    Warning: This live, in-person intensive has limited seating. Don’t let another cyber incident catch your organization unprepared.

    Your organization’s cybersecurity can’t wait. Register now.

    8:00 am
    Networking Hall open
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    8:00 am - 4:45 pm
    Location / Room: Networking Hall

    Your opportunity to visit our solution vendor partners, whose sponsorship makes SecureWorld possible, as well as association chapters! Booths have staff ready to answer your questions. Look for participating Dash For Prizes sponsors to be entered to win prizes.

    Also, look for “Cyber Connect” discussions on select topics and join the conversation.

    8:00 am
    Advisory Council Roundtable Breakfast (VIP / Invite only)
    • session level icon
    Registration Level:
    • session level iconVIP / Exclusive
    8:00 am - 8:45 am

    Moderated discussion for SecureWorld Advisory Council members. By invite only.

    8:00 am
    Association Chapter Meetings
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    8:00 am - 8:45 am

    Participating professional associations and details to be announced.

    8:45 am
    Networking Break
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    8:45 am - 9:00 am
    Location / Room: Networking Hall

    Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

    9:00 am
    [Opening Keynote] The AI Train Isn't Stopping—What CISOs Do Next
    • session level icon
    speaker photo
    CISO, Pacific Blue Cross & PBC Solutions
    Registration Level:
    • session level iconOpen Sessions
    9:00 am - 9:45 am
    Location / Room: Keynote Theater
    AI isn’t slowing down. It’s writing code. Agents are showing up in tools your team never approved. Whatever hesitation exists in the boardroom about cost or risk, the train keeps moving—fast, and often in directions nobody sees until they’ve already arrived. The question isn’t whether AI keeps accelerating. It’s what we do while it does.
    This opening keynote brings security leaders together for a candid, unscripted conversation about the tensions nobody has fully resolved: Can you argue some jobs shouldn’t be replaced by AI and still stay competitive? What guardrails do we actually need when adoption outpaces governance? How do you enable AI agents—web-based, local, or buried in third-party tools—without losing visibility into your own data? No hype, no vendor spin—just an honest look at a moment of real uncertainty, and the kind of peer conversation that sends everyone home with more clarity than they came in with.
    9:45 am
    Networking Break
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    9:45 am - 10:10 am
    Location / Room: Networking Hall

    Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

    10:10 am
    10 Questions Your Vendor Hopes You Never Ask
    • session level icon
    speaker photo
    Security Specialist, Customer Trust & Third-Party Risk, Figma
    Registration Level:
    • session level iconConference Pass
    10:10 am - 10:45 am

    Nearly every vendor has embedded AI into their product. Most organizations updated their vendor risk questionnaires but are still asking the wrong questions. Industry research shows that 90% of security leaders report AI visibility, yet nearly six in 10 confirm that ungoverned AI systems exist in their environment. This session presents 10 questions your vendor assessments are missing, drawn from published agentic AI threat models and real supply chain breach evidence from 2025 and 2026. For each question, we cover why standard questionnaires skip it and what a defensible risk decision looks like.

    Leave with 10 practitioner-tested questions that expose the gaps between what AI vendors promise and what your current assessment process actually evaluates.

    10:10 am
    Modern Ransomware: Double Extortion, Data Destruction, and Targeted Campaigns
    • session level icon
    Registration Level:
    • session level iconConference Pass
    10:10 am - 10:45 am

    Session details to come.

    10:10 am
    Beyond the Signature: Advanced Endpoint Detection and Hardening
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    10:10 am - 10:45 am

    Session details to come.

    10:45 am
    Networking Break
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    10:45 am - 11:10 am
    Location / Room: Networking Hall

    Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

    11:10 am
    Mentor Speed Dating: Roundtables on the Real-World Security Landscape
    • session level icon
    speaker photo
    Adjunct Professor, City University of Seattle; VP, Puget Sound ISSA Chapter
    Registration Level:
    • session level iconConference Pass
    11:10 am - 11:45 am
    11:10 am
    The Authorization Problem Nobody Solved Before Giving AI Agents the Keys
    • session level icon
    speaker photo
    Sr. Security Engineer, Apple
    Registration Level:
    • session level iconConference Pass
    11:10 am - 11:45 am

    AI agents are being deployed across enterprise environments with the ability to call APIs, read files, execute code, and take actions on behalf of users. They chain tool calls, delegate to other agents, and operate without human review at each step. The authorization controls most organizations have in place were simply not designed for this.

    This session examines what goes wrong when agents inherit human permissions, how privilege escalates through multi-agent workflows, and why existing controls create a false sense of security. It also covers what the industry is building to address the gap—emerging standards for agent identity, authorization APIs, and real-time trust signaling—and what security teams can do today without waiting for broad adoption.

    11:10 am
    [Panel] The Human Layer: Insider Risk, Behavioral Analytics, and the AI Threat Multiplier
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    11:10 am - 11:45 am

    People have always been the most targeted layer in any organization’s security posture—but AI is rewriting the rules of engagement. Sophisticated phishing campaigns now arrive personalized at scale, deepfake audio and video are eroding the credibility of internal communications, and MFA fatigue attacks are turning security controls against the users they were designed to protect. The threat surface hasn’t changed, but the speed, precision, and plausibility of attacks targeting it have.

    At the same time, defenders are gaining new tools. Behavioral analytics and UEBA platforms are surfacing anomalies that static rules would miss, and AI-assisted policy frameworks are helping organizations govern workforce behavior—including how employees interact with AI tools themselves—without sacrificing productivity. This panel brings together practitioners navigating insider risk, identity-based threats, and the governance questions that arise when the line between human error and AI-augmented deception becomes increasingly hard to draw.

    11:45 am
    Networking Break
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    11:45 am - 12:00 pm
    Location / Room: Networking Hall

    Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

    12:00 pm
    [Lunch Keynote] Resilience over Reaction: Securing Critical Functions in an Age of Systemic Risk
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    12:00 pm - 12:45 pm
    Location / Room: Keynote Theater

    Session details to come.

    12:00 pm
    Advisory Council Roundtable Lunch (VIP / Invite Only)
    • session level icon
    Registration Level:
    • session level iconVIP / Exclusive
    12:00 pm - 12:45 pm

    Moderated discussion for SecureWorld Advisory Council members. By invite only.

    12:45 pm
    Networking Break
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    12:45 pm - 1:10 pm
    Location / Room: Networking Hall

    Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

    1:10 pm
    Simple Daily Habits to Strengthen Your Security Posture
    • session level icon
    Registration Level:
    • session level iconConference Pass
    1:10 pm - 1:45 pm

    Session details to come.

    1:10 pm
    Quantifying Security Debt: Communicating Risk and Driving Remediation with the CFO
    • session level icon
    Registration Level:
    • session level iconConference Pass
    1:10 pm - 1:45 pm

    Session details to come.

    1:10 pm
    [Panel] Resilience Engineering: Incident Response, Business Continuity, and Cyber Insurance
    • session level icon
    Focus Areas: Operational Resilience & BCP; Incident Response & Crisis Management; Cyber Insurance & Executive Reporting
    Registration Level:
    • session level iconOpen Sessions
    1:10 pm - 1:45 pm

    Resilience has shifted from a compliance task to a vital business skill. This panel explores how organizations prepare for disruptive cyber incidents involving multi-cloud setups, SaaS dependencies, supply chain issues, and rapid ransomware attacks. With experts in incident response, digital forensics, MDR, insurance, and crisis management, the panel emphasizes developing response playbooks that mirror current operational dependencies.

    Panelists will explore insurer-driven requirements for identity security and MFA, lessons from major SaaS outages, and how to communicate effectively with executives and boards when downtime impacts revenue-critical operations. Attendees will gain a comprehensive understanding of how to engineer resilience—not just respond—and how to align IR, continuity planning, insurance, and business priorities into a unified, enterprise-wide strategy.

    1:45 pm
    Networking Break & Cyber Connect
    • session level icon
    Final Entries for Dash for Prizes and Passport
    Registration Level:
    • session level iconOpen Sessions
    1:45 pm - 2:10 pm
    Location / Room: Networking Hall

    This is your final chance to visit the Networking Hall and get scanned by our participating partners for our Dash for Prizes. You can also turn in your Passport cards at the Registration Desk before we announce our winner!

    2:10 pm
    [Panel] The Great Consolidation: Rationalizing the Security Stack
    • session level icon
    Focus Areas: Security Stack Consolidation; SecOps Efficiency & ROI; Unified Detection & Response (XDR/SIEM Integration)
    speaker photo
    Head of Global Threat Intelligence, Google Cloud
    Registration Level:
    • session level iconConference Pass
    2:10 pm - 2:45 pm

    Security teams are under increasing pressure to reduce tool sprawl, streamline SOC workflows, and demonstrate measurable ROI—fueling a wave of consolidation across the industry. This panel explores the shift toward unified detection and response platforms, integrated identity and data controls, AI-enabled SOC copilots that unify telemetry, and architectural simplification that reduces operational drag.

    Panelists from XDR, SIEM, platform security, and MSSP providers will discuss frameworks for evaluating ROI, navigating contract consolidation, avoiding visibility gaps, and deciding where consolidation strengthens or weakens security posture. Ideal for leaders facing budget constraints or platform migrations, this session offers practical guidance for optimizing spending without sacrificing coverage.

    2:10 pm
    One Request to Rule Them All
    • session level icon
    speaker photo
    Chief Hacking Officer, APIsec University
    Registration Level:
    • session level iconConference Pass
    2:10 pm - 2:45 pm

    One API request, aimed at the right endpoint, can compromise an entire organization. When an API answers without checking who is really asking, a single call can read any record, act as any user, and seize the powers meant for admins alone.

    In this rapid-fire, hands-on workshop, you’ll go from zero to hacking your first API in 35 minutes. You’ll find and exploit the most common REST API vulnerabilities in real time, hands on the keyboard, against a live target. No prior hacking experience required. APIs are one of the best first vectors for learning offensive security, and by the end, you’ll have worked the OWASP API Security Top 10 by breaking an API yourself.

    Built for beginners and practitioners who want quick, practical techniques they can use the next day—with some fun along the way.

    2:10 pm
    Third-Party Risk: Managing Exposure Across Expanding Vendor Ecosystems
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    2:10 pm - 2:45 pm

    Session details to come.

    2:45 pm
    Dash for Prizes
    • session level icon
    Registration Level:
    • session level iconOpen Sessions
    2:45 pm - 3:15 pm
    Location / Room: Networking Hall

    Participating sponsors will announce their Dash for Prizes winners. Must be present to win.

    3:15 pm
    [PLUS Course] Securing & Enabling AI: Transform Chaos into Competitive Advantage - Part 4
    • session level icon
    speaker photo
    Sr. Cyber Risk Analyst, Cyber Risk Opportunities LLC
    Registration Level:
    • session level iconSecureWorld Plus
    3:15 pm - 4:45 pm

    Come join this interactive workshop — think hands-on working groups so you are an active participant…this is not 6 hours of being lectured at.

    Learn how to secure AI while accelerating innovation—not blocking it. Transform from AI Firefighter to Strategic Business Enabler, with a 90-day roadmap for secure AI deployment in your organization.

    Why this course? Imagine your CEO just asked about AI security. Do you have an answer?

    While you’re counting vulnerabilities, your competitors are deploying AI at scale.

    Every Monday, another department launches an AI tool. Marketing uses ChatGPT for campaigns. Sales deploys AI Sales Development Reps. Customer service automates with chatbots.

    And your cybersecurity team? Still writing policies nobody reads.

    You’ll master:
    •  The AIR-MAP Methodology™ — Your proven 90-day roadmap from AI chaos to governance
    •  Executive Translation — Turn technical AI risks into boardroom language
    •  NIST AI RMF Implementation — Practical application, not theory
    •  The $12M Question — Secure against deepfake fraud and AI-enabled attacks
    •  Shadow AI Discovery — Find and govern the AI already in your organization
    •  Business-First Security — Protect value, not just systems
    Who should attend:
    Perfect fit:
    •  CISOs facing board questions about AI
    •  Information Security Directors enabling digital transformation
    •  IT VPs without dedicated security teams
    •  Cybersecurity Consultants serving enterprise clients
    •  Risk Managers governing AI initiatives
    •  Aspiring decision makers and those reporting to one
    Wrong course:
    •  Developers wanting to code AI models
    •  Analysts seeking technical certifications
    •  Anyone looking for hands-on hacking labs
    This workshop is NOT about:
    •  Prompt injection techniques
    •  Model architecture security
    •  Technical vulnerability scanning
    •  Writing 200-page policies
    This workshop IS about:
    •  Speaking profit-and-loss to executives
    •  Enabling your AI transformations
    •  Building cybersecurity into AI from day one
    •  Becoming the trusted AI advisor
    You’ll leave with:
    1. The Complete AIR-MAP Toolkit
    •  90-day implementation roadmap
    •  Discovery templates and workflows
    •  Risk scoring calculators
    •  Executive presentation templates
    2. Ready-to-Deploy Policies
    •  AI Acceptable Use Policy (customize in minutes)
    •  Vendor assessment questionnaires
    •  Incident Response playbooks
    3. 30-Minute Strategy Session
    Complementary private consultation to apply AIR-MAP to your specific situation.
    3:15 pm
    [PLUS Course] Master the NIST Cybersecurity Framework v2.0 in Just Six Hours - Part 4
    • session level icon
    speaker photo
    vCISO, Cyber Risk Opportunities LLC
    Registration Level:
    • session level iconSecureWorld Plus
    3:15 pm - 4:45 pm

    This intensive, live workshop is your shortcut to cyber resilience mastery. In just one power-packed day, you’ll walk away with:

    • Complete mastery of NIST CSF 2.0 – Understand every component and why it matters to YOUR business
    • Your personalized Cyber Risk Map – Identify your organization’s exact vulnerabilities and blind spots
    • A step-by-step action plan – No more guessing what to do next
    • Real-world case studies – See how organizations just like yours have successfully implemented the framework
    • Expert-level confidence – Finally speak cybersecurity with authority and clarity

    What makes this different?
    This isn’t another theoretical lecture. You’ll spend most of your time actually BUILDING your organization’s cybersecurity roadmap using the proven Cyber Risk Management Action Plan (CR-MAP) methodology. You’ll leave with tools and know-how you can implement immediately.

    Perfect for:

    • IT Directors and Managers
    • Cybersecurity Professionals
    • Business Leaders responsible for risk management
    • Compliance Officers
    • Anyone tasked with “figuring out cybersecurity”

    Exclusive Bonus: Every attendee receives our comprehensive digital CR-MAP Online Workbook ($197 value), your step-by-step guide to:

    • Getting BUY-IN from your senior decision makers
    • Discovering your top five cyber risks
    • Creating a prioritized risk mitigation plan with implementation roadmap
    • A score card you can use to track progress

    Warning: This live, in-person intensive has limited seating. Don’t let another cyber incident catch your organization unprepared.

    Your organization’s cybersecurity can’t wait. Register now.

Exhibitors
  • APIsec University
    Booth: TBD

    APIsec University was founded with a simple yet powerful mission: to make world-class API security education accessible to everyone, regardless of their background or financial situation.

    As APIs have become the backbone of modern applications, the need for skilled security professionals has never been greater. We recognized that traditional education paths weren’t keeping pace with the rapidly evolving API landscape.

    Today, we’re proud to serve over 135,000 students worldwide, offering comprehensive, free courses that cover everything from API security fundamentals to advanced penetration testing techniques. Our community includes developers, security professionals, and anyone passionate about building more secure digital experiences.

  • C1
    Booth: TBD

    C1’s Cybersecurity Solutions deliver advanced protection across networks, users, applications, endpoints, and cloud environments. Designed to ease the burden on IT teams, our services simplify security management, enhance efficiency, and proactively defend against emerging threats, ensuring your enterprise remains resilient and secure. C1 collaborates with most of the Fortune 100 companies along with other key global industry partners to deliver solutions with a total lifecycle approach. C1 holds more than 5,600 technical certifications across thousands of engineers throughout North America, including three Customer Success Centers.

  • Canary Trap
    Booth: TBD

    Canary Trap is a recognized industry leader in offensive security, security advisory and assessment services. Founded by ethical hackers and certified security experts who share in the common goal of protecting organizations from becoming a victim of the next cyber-attack.

    Canary Trap combines human expertise with sophisticated tools and, where appropriate, threat intelligence to ensure a thorough, in-depth approach to all security testing and assessments.

  • Censys
    Booth: TBD

    Censys is the one place to understand everything on the internet. We have built and operate the world’s largest internet scanning infrastructure and we empower organizations, individuals and security researchers by providing unparalleled visibility into the global internet landscape. We see more of the internet than anyone else, which gives us the most comprehensive internet visibility in the world. Our two main use cases are attack surface management and threat hunting with so many more on the horizon. Through our comprehensive internet data, we strive to enhance cybersecurity, facilitate data-driven decision-making, and reduce internet exposures for commercial and government organizations across the globe.

  • Cohesity, Inc
    Booth: TBD

    We believe that simplicity is the foundation of modern data management. Our mission is to radically simplify how organizations manage their data and unlock limitless value. The company develops software that allows IT professionals to backup, manage, and gain insights from their data across multiple systems or cloud providers.

  • Concentric AI
    Booth: TBD

    Concentric AI is intelligent data security made easy. Its Semantic Intelligence™ platform uses context-aware AI to discover sensitive data, monitor risks, automate remediation, simplify compliance, and accelerate investigations. It delivers smart, targeted protection by understanding how data is used, shared, and exposed. Concentric AI also offers managed services to keep security programs lean, scalable, and effective. This end-to-end platform protects data at rest, data in motion, and all the GenAI tools users interact with—so organizations can stay compliant, reduce exposure, and safeguard critical information wherever it lives and however it travels.

  • Cyberhaven
    Booth: TBD

    When the DLP market first emerged 20 years ago, the goal was to protect confidential information in on-premises databases, file servers, application servers, other data repositories, and endpoints. Today millions of sensitive documents, files, and other data are being exfiltrated in violation of corporate data policies every day because DLP is completely ineffective in the era of cloud-first applications and Zero Trust security. These data breaches result in stolen IP, damaged brands, and significant financial penalties. Let’s face it, DLP in its current form is nothing more than a compliance checkbox. Cyberhaven is transforming the DLP market and helping organizations secure all of the high-value data they must protect in order to compete and thrive in the digital economy. It’s a big hairy problem, and we are up to the challenge.

  • DHS Cybersecurity and Infrastructure Security Agency (CISA), Region 10
    Booth: TBD

    Through CISA’s efforts to understand and advise on cyber and physical risks to the Nation’s critical infrastructure, we help partners strengthen their own capabilities. We connect our stakeholders in industry and government to each other and to resources, analyses, and tools to help them build their own cyber, physical and communications security, and, in turn, strengthen national resilience.

    Led by Regional Director Patrick J. Massey, based in Seattle, Washington, CISA’s Region 10 staff provides cybersecurity, physical infrastructure security, chemical security, and sector outreach services to 271 Tribal Nations and the following states: Alaska, Idaho, Oregon, and Washington.

    Region 10 personnel carry out CISA’s five priorities:

    • Improve supply chain security against cyber threats from malicious actors and the rollout of 5G technologies;
    • Harden federal networks (the civilian .gov domain);
    • Reduce risk at soft targets;
    • Enhance election security; and
    • Protect critical infrastructure that includes industrial control systems and the processes that provide vital services in critical infrastructure.
  • Dropzone AI
    Booth: TBD

    Dropzone AI weaponizes LLMs for cyber defenders, delivering the Agentic SOC: AI agents that collaborate 24/7 to beat attackers at scale. Dropzone is ready to go on Day 1 and integrates into your existing tools. AI agents start work immediately to investigate alerts, respond to emerging threats, and proactively hunt attackers. Autonomously and infinitely scalable, with no hidden humans in the critical path. Dropzone works with enterprises and MSSPs including ECS, Avalara, UiPath, and Zapier, and is actively protecting over 300 companies. Learn more at www.dropzone.ai.

  • DTEX
    Booth: TBD

    DTEX is the leader in risk-adaptive security, unifying human, data, and AI risk through a behavioral intelligence platform built for enterprise scale to detect threats early and prevent breaches.

  • Flare
    Booth: TBD

    Flare Systems enables financial institutions to prevent financial crime. Using AI and over 10 years of criminology research, it extracts actionable intelligence from millions of data points from the dark, deep and clear web in real time.

  • Fortinet
    Booth: TBD

    Fortinet (NASDAQ: FTNT) secures the largest enterprise, service provider, and government organizations around the world. Fortinet empowers its customers with intelligent, seamless protection across the expanding attack surface and the power to take on ever-increasing performance requirements of the borderless network—today and into the future. Only the Fortinet Security Fabric architecture can deliver security without compromise to address the most critical security challenges, whether in networked, application, cloud, or mobile environments. Fortinet ranks number one in the most security appliances shipped worldwide and more than 500,000 customers trust Fortinet to protect their businesses.

  • Gambit Security
    Booth: TBD

    Gambit’s Balens is the AI native resilience platform that ensures digital continuity never expires.

    Designed to bridge the fragmented nature of recovery operations, Gambit provides a unified governance and control plane across cloud, backups, security tools, and Infrastructure as Code (IaC) to reconcile intent with live reality.

    By mapping applications, identifying resilience gaps, and validating recovery paths in real-time, Gambit turns resilience assumptions into business certainty—before an incident ever occurs.

    Already trusted by global enterprises to minimize disruption and automate compliance, Gambit enables organizations to stay ahead of ransomware attacks, innovate at speed while proving their recoverability on demand.

  • Google Cloud Security
    Booth: TBD

    Google Cloud Security provides organizations with leading infrastructure, platform capabilities and industry solutions to help them solve their most critical business problems. Google Cloud Security helps customers protect their global operations with solutions such as zero trust security, application and data protection, fraud prevention, and threat detection and response.

  • Harness
    Booth: TBD

    Harness is a rapidly growing startup that is disrupting the software delivery market. The Harness Software Delivery Platform includes product modules for every aspect of software delivery, including: Continuous Integration, Continuous Delivery, Feature Flags, Cloud Cost Management, Service Reliability Management, Security Testing Orchestration, Chaos Engineering, Software Engineering Insights, Continuous Error Tracking, Code Repository, Internal Developer Portal, Software Supply Chain Assurance, Infrastructure as Code Management and AI/ML infused throughout with AI Development Assistant (AIDA). The platform is designed to help companies accelerate their cloud initiatives as well as their adoption of containers and orchestration tools like Kubernetes and Amazon ECS and make software delivery easier, giving devs their nights and weekends back.

  • Washington State InfraGard
    Booth: TBD

    InfraGard is a partnership of individuals representing businesses, academic institutions, state and local law enforcement agencies, and communities who are dedicated to collaborating and sharing information to prevent hostile acts against the United States.

    The Evergreen InfraGard Members Alliance area of operation is Washington State and over 600 members. As part of the Western Region, we work closely with the IMAs in Los Angeles, San Diego, Oregon, and Idaho. Our chapter’s mission is, “To protect Washington State’s Infrastructure and critical services by providing a secure platform and trusted community to share experiences and information.”

  • ISACA Puget Sound Chapter
    Booth: TBD

    The aim of the Chapter is to sponsor local educational seminars and workshops, conducts regular chapter meetings, and help to further promote and elevate the visibility of the IS audit, control and security profession throughout the area.

    The association is one of individual members who are practitioners of information systems auditing, security, risk, and/or governance in his or her organization. The membership of the ISACA reflects a multiplicity of backgrounds and skills that make our profession challenging and dynamic.

    This chapter is run by volunteers who are ISACA members nominated and elected through an established process. Please contact us if you are interested in serving on the board.

  • ISC2 Seattle Chapter
    Booth: TBD

    Bringing like-minded professionals together in the Greater Puget Sound region to discuss current tactics, techniques, and procedures within cybersecurity.

  • ISSA Puget Sound Chapter
    Booth: TBD

    ISSA is the community of choice for international cybersecurity professionals dedicated to advancing individual growth, managing technology risk and protecting critical information and infrastructure.

    The Information Systems Security Association (ISSA)® is a not-for-profit, international organization of information security professionals and practitioners. It provides educational forums, publications, and peer interaction opportunities that enhance the knowledge, skill, and professional growth of its members. Join today.

  • Ivanti
    Booth: TBD

    Ivanti Supply Chain helps organizations leverage modern technology in the warehouse and across the supply chain to improve delivery without modifying backend systems. The company also unifies IT and Security Operations to better manage and secure the digital workplace. From PCs to mobile devices, VDI and the data center, Ivanti discovers IT assets on-premises and in the cloud, improves IT service delivery, and reduces risk with insights and automation. Ivanti is headquartered in Salt Lake City, Utah and has offices all over the world.

  • National Cybersecurity Alliance
    Booth: TBD

    Our alliance stands for the safe and secure use of all technology. We encourage everyone to do their part to prevent digital wrongdoing of any kind. We build strong partnerships, educate and inspire all to take action to protect ourselves, our families, organizations and nations. Only together can we realize a more secure, interconnected world.

  • Novacoast
    Booth: TBD

    A uniquely positioned IT services and solutions company, Novacoast is less defined by our broad range of expertise and services than by a perspective rooted in our cooperative environment of adaptable problem solving.

    Beyond security specialists, software developers or network engineers, we are guides, allies, and problem solvers.

    From implementation services, license fulfillment and technical training to software development, staffing services and custom or emerging solutions, Novacoast is an experienced and comprehensive IT business resource empowered on every level by our flexible and fearless perspective.

  • Rapid7
    Booth: TBD

    Rapid7 transforms data into insight, empowering IT and security professionals to progress and protect their organizations. How? Our solutions are powered by advanced analytics and an unmatched understanding of the attacker mindset. This makes it easy to collect data, transform it into prioritized and actionable insight, and get it to the people who can act on it—all in an instant.

  • Reach Security
    Booth: TBD

    Reach is defining AI-Native Exposure Management by bridging the gap between knowing where you’re exposed and taking action to fix it. We help organizations reduce risk by making better use of the tools they already have delivering clarity, prioritization, and automation to turn understanding into results.

  • Robert Half
    Booth: TBD

    Robert Half, the world’s first and largest specialized talent solutions firm, connects opportunities at great companies with highly skilled job seekers. We offer contract, temporary and permanent placement solutions for roles in finance and accounting, technology, marketing and creative, legal, and administrative and customer support. Named to Fortune’s World’s Most Admired Companies and 100 Best Companies to Work For® lists and a Forbes Best Employer for Diversity, Robert Half is the parent company of Protiviti®. Robert Half is traded on the New York Stock Exchange (symbol: RHI) and is a member of the S&P 500 index.

  • Rubrik
    Booth: TBD

    Rubrik, the Zero Trust Data Security Company, delivers data security and operational resilience for enterprises. Rubrik’s big idea is to provide data security and data protection on a single platform, including Zero Trust Data Protection, ransomware investigation, incident containment, sensitive data discovery and orchestrated application recovery. This means data is ready at all times so you can recover the data you need and avoid paying a ransom. Because when you secure your data, you secure your applications, and you secure your business.

  • SecureFlag
    Booth: TBD

    SecureFlag is a Secure Coding Training platform for Developers and DevOps engineers to learn secure coding through hands-on exercises.

    Forget boring slideshows and ineffective quizzes that “teach” developers to just take tests–and are forgotten faster than they can say “security breach.”

    Enterprises can effectively augment their Secure Coding Training program with SecureFlag’s on-demand, 100% practical training. Through our platform, developers learn how to identify and remediate real security issues using familiar tools and technologies, in an authentic development environment accessed through the web browser.

    SecureFlag delivers on-demand “Adaptive AppSec Learning” through individualized learning paths, real-time feedback, and content tailored to the needs of each learner. Our metrics dashboard highlights areas of improvement at individual, team, and organizational levels to clarify competency, risks, and remedial actions.

  • Semperis
    Booth: TBD

    For security teams charged with defending hybrid and multi-cloud environments, Semperis ensures the integrity and availability of critical enterprise directory services at every step in the cyber kill chain and cuts recovery time by 90%. Purpose-built for securing hybrid Active Directory environments, Semperis’ patented technology protects more than 50 million identities from cyberattacks, data breaches, and operational errors. The world’s leading organizations trust Semperis to spot directory vulnerabilities, intercept cyberattacks in progress, and quickly recover from ransomware and other data integrity emergencies.

    As part of its mission is to be a force for good, Semperis offers a variety of cyber community resources, including the award-winning Hybrid Identity Protection (HIP) ConferenceHIP Podcast and free identity security tools Purple Knight and Forest Druid.

  • Snyk
    Booth: TBD

    Snyk is a developer-first security company that helps organizations use open source and stay secure. Snyk is the only solution that seamlessly and proactively finds and fixes vulnerabilities and license violations in open source dependencies and container images. Founded in 2015, Snyk is based in London, England.

  • Splunk, a Cisco Company
    Booth: TBD

    Splunk helps build a safer and more resilient digital world. Organizations trust Splunk to prevent security, infrastructure and application incidents from becoming major issues, absorb shocks from digital disruptions and accelerate digital transformation.

  • Sublime Security
    Booth: TBD

    Sublime is the new standard for email security. Not just another black box, our AI-powered detection engine detects and prevents email attacks, so security teams can spend less time on email-originated incidents.

  • Sumo Logic
    Booth: TBD

    Sumo Logic was founded in 2010 by experts in log management, scalable systems, big data, and security. Today, our purpose-built, cloud-native service analyzes more than 100 petabytes of data, more than 16 million searches, and delivers 10s of millions of insights daily – positioning Sumo among the most powerful machine data analytics services in the world.

  • Tevora
    Booth: TBD

    Tevora is an enterprise consulting firm specializing in information assurance, governance and compliance services and solutions. We work with some of the world’s leading companies, institutions and governments to ensure the safety of their information and their compliance with applicable regulations. With a distinctive combination of proven products and services, Tevora aids enterprises in protecting their most important assets from external and internal threats. For more information visit https://www.tevora.com.com/.

  • ThreatLocker
    Booth: TBD

    ThreatLocker® is a global cybersecurity leader, providing enterprise-level cybersecurity tools to improve the security of servers and endpoints. ThreatLocker’s combined Application Whitelisting, Ringfencing™, Storage Control, and Privileged Access Management solutions are leading the cybersecurity market towards a more secure approach of blocking unknown application vulnerabilities. To learn more about ThreatLocker visit: www.threatlocker.com

  • Torq
    Booth: TBD

    Torq is your security product’s favorite security product. Torq Hyperautomation unifies and automates the entire security infrastructure to deliver unparalleled protection and productivity.

  • WiCyS Western Washington Affiliate
    Booth: TBD
Return to Agenda
Keynote Speakers
Speakers
  • speaker photo
    Bonnie Viteri, Instructor
    Sr. Cyber Risk Analyst, Cyber Risk Opportunities LLC

    Building security programs and devising simple solutions to complex problems is what I do. I didn't travel the traditional path into cyber, and I don't plan to conform now.

    A behavioral psychologist at heart who is always watching and actively listening when everyone else is waiting to respond, paired with an M.S. in Criminology, makes me the ideal social engineer.

    My first success was merging Yahoo and AOL security programs into a thriving, single-security culture through global psychological and behavioral change management techniques, specializing in human risk and designing programs to address it. Understanding what motivates developers and building solid relationships one conversation at a time, focusing on people, programs and processes lended to 98% global security adoption at Yahoo. Bridging the gap between developers and non-technical colleagues made me invaluable.

  • speaker photo
    Kip Boyle, Instructor
    vCISO, Cyber Risk Opportunities LLC

    Kip Boyle is the Virtual Chief Information Security Officer of Cyber Risk Opportunities, whose mission is to help executives become more proficient cyber risk managers. He has over 24 years of cybersecurity experience serving as Chief Information Security Officer (CISO) and in other IT risk management roles for organizations in the financial services, technology, telecom, military, civil engineering, and logistics industries.

  • speaker photo
    Jake Hammock
    CISO & Assistant CTO for Security and Infrastructure, City of Seattle

    Jake Hammock is the Chief Information Security Officer, Assistant Chief Technology Officer and Security & Infrastructure Director at the City of Seattle, where he leads the Security & Infrastructure Division delivering citywide cybersecurity, enterprise infrastructure, cloud operations, IT service management, telecom and radio systems, fiber, and network services. He directs programs for incident response, identity and governance, enterprise architecture, and system and network operations, aligning investments to resilience, public safety, and civic administrative priorities across the nation’s 17th largest municipality through This Is Your City programs.

    Jake’s career spans executive roles in government and industry. He served as Director of Trust and Vice President of Information Security at NICE inContact, leading board-level cybersecurity and privacy programs during a period of accelerated high growth. He was the Chief Technology Officer for a top 10 global fintech by peak market cap, patenting and deploying technologies used in production today, and later CTO for an energy-sector solutions provider, where he architected AI-driven cybersecurity platforms and advised enterprise energy and public-sector clients. A former U.S. Army Military Intelligence and Cyber Warfare Officer, he commanded Cyber National Mission Force units and served in national security leadership assignments within the Intelligence Community. He is a combat veteran, holds an M.Sc. in Cybersecurity Technology and patents spanning telecommunications, environmental platforms, and decentralized technologies, and he remains active in advancing secure AI, quantum-resilient encryption, data governance, and critical infrastructure protection.

  • speaker photo
    Neha Srivastava
    VP, Cybersecurity Products, JPMorgan Chase

    Neha is a seasoned cybersecurity leader with a global track record of driving innovation at the intersection of security, emerging tech, and financial services. As VP of Cybersecurity Products at J.P. Morgan Chase, she leads the development of next-generation data protection solutions that secure the foundation of modern financial technology at scale and with impact.

    Neha’s career spans strategic and technical leadership roles across Fortune 500 firms and global consultancies, including Deloitte, EY, Accenture, Flagstar Bank, NVIDIA and Bank of America. Her work has taken her across North America, Europe, and Asia, giving her a uniquely global perspective on regulatory landscapes, threat intelligence, and enterprise-scale security architecture. At the core of her leadership is a commitment to innovation, especially in advancing privacy-enhancing technologies, secure AI adoption, and zero-trust frameworks. Neha bridges deep technical acumen with strategic foresight, enabling organizations to not only defend against today's threats but also prepare for the next wave of disruption.

    Beyond the enterprise, Neha is an active advisor to early-stage startups and venture firms, where she helps founders navigate the complex intersection of cybersecurity, compliance, and product-market fit. She is passionate about ensuring that innovation in security is not just cutting-edge but also responsible, resilient, and built for real-world impact. Neha also contributes to industry working groups focused on standards development and ethical tech adoption. From securing today’s digital economy to enabling the next generation of secure platforms, Neha brings a visionary yet grounded approach to cybersecurity, one that’s deeply technical, future-focused, and driven by purpose.

  • speaker photo
    Panel Discussion
  • speaker photo
    Stephen Dougherty
    Principal Investigator, Rexxfield; CEO, Dougherty Intelligence & Investigations

    Stephen is an accomplished U.S. Secret Service investigator with 9-plus years of experience leading complex cybercrime, financial fraud, and international cybercrime investigations. He is recognized for pioneering the U.S. Secret Service’s Business Email Compromise Mission Desk, resulting in the recovery of nearly $500 million in victim funds. He was awarded two U.S. Secret Service Director’s Impact Awards, 2021 U.S. Secret Service Employee of the Year Award, and two DHS Secretary’s Gold Medals of Excellence for outstanding leadership, innovation, and impact. Stephen is an experienced public speaker and instructor, having delivered more than 50 global keynotes to executives, policymakers, and law enforcement on topics including cyber-enabled financial crime, digital forensics, and public-private collaboration. He is dedicated to bridging the gap between law enforcement, government, and the private sector to combat the world’s most sophisticated digital threats through intelligence-driven investigations, rapid response, and cross-border partnerships.

  • speaker photo
    Lewis Foggie
    Sales Engineer, SecureFlag

    Having achieved an M.Sci in Astrophysics from Glasgow University in Scotland, Lewis went on to spend three years working for UK Defence, developing radar systems for naval vessels and fighter jets. Looking to take advantage of his communication skills combined with his technical skills, he went on to work as a solutions engineer in FinTech SaaS, before finding a passion for cybersecurity (namely by watching too many documentaries about ransomware) and moving on to SecureFlag.

  • speaker photo
    Panel Discussion
  • speaker photo
    RJ Niesen
    Cybersecurity State Coordinator (WA), DHS CISA

    RJ Niesen serves as the Washington Cybersecurity State Coordinator (CSC) for the Cybersecurity and Infrastructure Security Agency (CISA). As the CSC, he assists state, local, and tribal government stakeholders in enhancing the security and resiliency of critical infrastructure facilities across Washington.

    Before joining CISA in November 2024, RJ served for twenty years in the US Army, holding leadership roles across several career management fields, including threat intelligence, protective security, information technology, and cybersecurity. In his previous role with the US Army, he directed Information Technology (IT) and Cybersecurity for the Army's first Multi-Domain Task Force (1st MDTF) upon its establishment in 2020. RJ led a team of twelve IT and four cybersecurity professionals, advising on all matters pertaining to both disciplines as the 1st MDTF expanded from 40 to 2,200 employees within three years. RJ deployed four times during the Global War on Terrorism: Iraq in 2004 and 2009, and Afghanistan in 2007 and 2012. During his service, he earned the Bronze Star and is a Purple Heart recipient.

    RJ holds CISSP and PMP certifications and earned an MA in Information Technology Management from Webster University. He enjoys giving back to his community by volunteering as a youth sports coach and serving as an Outreach Coordinator with Reboot Recovery, a non-profit organization that empowers combat veterans to manage trauma and embrace a brighter future. RJ is passionate about his wife of nineteen years, Marisa, their three sons, supporting his local veteran community, and serving the American people!

  • speaker photo
    Panel Discussion
  • speaker photo
    Happy Hour
  • speaker photo
    Bonnie Viteri, Instructor
    Sr. Cyber Risk Analyst, Cyber Risk Opportunities LLC

    Building security programs and devising simple solutions to complex problems is what I do. I didn't travel the traditional path into cyber, and I don't plan to conform now.

    A behavioral psychologist at heart who is always watching and actively listening when everyone else is waiting to respond, paired with an M.S. in Criminology, makes me the ideal social engineer.

    My first success was merging Yahoo and AOL security programs into a thriving, single-security culture through global psychological and behavioral change management techniques, specializing in human risk and designing programs to address it. Understanding what motivates developers and building solid relationships one conversation at a time, focusing on people, programs and processes lended to 98% global security adoption at Yahoo. Bridging the gap between developers and non-technical colleagues made me invaluable.

  • speaker photo
    Kip Boyle, Instructor
    vCISO, Cyber Risk Opportunities LLC

    Kip Boyle is the Virtual Chief Information Security Officer of Cyber Risk Opportunities, whose mission is to help executives become more proficient cyber risk managers. He has over 24 years of cybersecurity experience serving as Chief Information Security Officer (CISO) and in other IT risk management roles for organizations in the financial services, technology, telecom, military, civil engineering, and logistics industries.

  • speaker photo
    Bonnie Viteri, Instructor
    Sr. Cyber Risk Analyst, Cyber Risk Opportunities LLC

    Building security programs and devising simple solutions to complex problems is what I do. I didn't travel the traditional path into cyber, and I don't plan to conform now.

    A behavioral psychologist at heart who is always watching and actively listening when everyone else is waiting to respond, paired with an M.S. in Criminology, makes me the ideal social engineer.

    My first success was merging Yahoo and AOL security programs into a thriving, single-security culture through global psychological and behavioral change management techniques, specializing in human risk and designing programs to address it. Understanding what motivates developers and building solid relationships one conversation at a time, focusing on people, programs and processes lended to 98% global security adoption at Yahoo. Bridging the gap between developers and non-technical colleagues made me invaluable.

  • speaker photo
    Kip Boyle, Instructor
    vCISO, Cyber Risk Opportunities LLC

    Kip Boyle is the Virtual Chief Information Security Officer of Cyber Risk Opportunities, whose mission is to help executives become more proficient cyber risk managers. He has over 24 years of cybersecurity experience serving as Chief Information Security Officer (CISO) and in other IT risk management roles for organizations in the financial services, technology, telecom, military, civil engineering, and logistics industries.

  • speaker photo
    Rob Davidson
    CISO, Pacific Blue Cross & PBC Solutions

    Rob Davidson brings many years of experience to his role as Chief Information Security Officer at Pacific Blue Cross and Pacific Blue Cross Solutions. His career started with Dell Canada and has progressed though several senior strategic and leadership positions at industry-defining organizations such as Microsoft and Hootsuite. Prior to his recent return to Vancouver, Rob worked through an extended tenure at Microsoft, from the original basics of networking through the launch of the Global Azure Cloud services.

    Rob holds an Executive MBA and maintains his original CISSP certification. He enjoys the opportunity to share with and learn from others who are like-minded in his passion for the Security of People, Information, and Technology.

    In addition to his core work, you will also find him engaged in Board of Directors (and Board advisory) positions, volunteer opportunities, and working to mentor and assist the next generation of security professionals.

  • speaker photo
    Tushar Badlani
    Security Specialist, Customer Trust & Third-Party Risk, Figma

    Tushar Badlani is a Security Specialist focused on Customer Trust and Third-Party Risk at Figma. With 10+ years in security, he previously served as Global Customer Audit Manager at Okta, leading audit programs across North America, EMEA, and APJ. His background spans consulting at EY in Technology Risk and Third-Party Risk, advisory roles with security tooling companies, and co-authoring published research on third-party cyber risk. He holds CRISC, CISA, CCAK, and CCSK certifications, as well as an MS in Information Security Management from Syracuse University.

  • speaker photo
    Ann Robinson, Moderator
    Adjunct Professor, City University of Seattle; VP, Puget Sound ISSA Chapter
  • speaker photo
    Vatsal Gupta
    Sr. Security Engineer, Apple

    Vatsal Gupta is a Senior Security Engineer at Apple with 13 years in identity, access management, and cybersecurity. His current focus is authorization architecture for agentic AI systems and policy-based access control. He contributes to the OpenID Foundation AuthZEN Working Group, the CSA IAM Working Group, and OWASP AISVS. He has spoken at Identiverse 2026, ISC2 Security Congress, and multiple IEEE conferences. He serves on the CyCon NATO CCDCOE Academic Review Committee and the ISSA Journal Editorial Advisory Board. IEEE Senior Member.

  • speaker photo
    Panel Discussion
  • speaker photo
    Alex Di Giacomo, Moderator
    CISO, Sound Transit

    Mr. Di Giacomo is an award-winning, veteran cybersecurity executive with over 26 years of experience leading security strategy and governance across critical infrastructure and corporate environments, both domestically and internationally. His expertise encompasses IT and OT security, security governance, cloud security, disaster recovery, risk and compliance management across multiple industry frameworks, and data privacy. In his current role as Chief Information Security Officer at Sound Transit, he built a nationally recognized, security program from the ground up based on the ISO 27001 international standard, achieving top-tier maturity ratings, confirmed by independent audits. Mr. Di Giacomo holds multiple rigorous, industry-relevant certifications including C|CISO, CISSP, CISM, CISA, CRISC, CDPSE and HISP, and is a frequent speaker, lecturer, and advisor on cybersecurity, risk, and resilience. Mr. Di Giacomo holds both a B.S. in Electronic Engineering degree, as well as a Master of Engineering and Technology Management, Summa Cum Laude.

    A strategic visionary and hands-on leader, Mr. Di Giacomo is deeply committed to advancing cybersecurity maturity and resilience. He currently serves on the Washington State Technology Services Board Security Subcommittee and contributes to multiple professional associations including ISACA, ISC2 and ISSA and the IEEE, where he has achieved Senior Member status. Fluent in English, Spanish, and Italian, Mr. Di Giacomo brings a global perspective with a business and mission centric focus to today’s cybersecurity challenges and solutions.

  • speaker photo
    Panel Discussion
  • speaker photo
    Tim Gallo
    Head of Global Threat Intelligence, Google Cloud

    Tim Gallo is the Head of Global Threat Intelligence at Google Cloud, he specializes in Cyber Threat Intelligence and Risk everything from Intelligence Operations and Cyber Threat Profile development to risk based analytic approaches to Security Operations. He Joined Google Cloud through the acquisition of Mandiant by Google in 2022, he had spent 5 years at Mandiant prior to the acquisition in a variety of field facing roles covering the aforementioned topics. Before joining Mandiant, Tim leveraged his over 20 years’ experience in information security and intelligence operations to aid in the development and deployment of a number of solutions. Including building client and organizational expertise in Intelligence Led Security and Business Operations. This included the development and product management of some of the first cyber intelligence solutions ever brought to market. These solutions have included threat and vulnerability management tools, IOC prediction algorithms, intelligence services, and strategic intelligence consulting. Today he spends his days helping clients understand the importance of Intelligence as a guiding principle for building out effective security processes and operations and helping clients and vendors find ways to leverage technologies responsibly to build their cyber defense centers and security operations practices. Every once in a while he can be found out in the desert, sometimes on his Harley with a flamethrower, sometimes with just a flamethrower

  • speaker photo
    Panel Discussion
  • speaker photo
    Corey Ball
    Chief Hacking Officer, APIsec University

    Corey Ball is an offensive security consultant who breaks APIs, agentic systems, cloud, and the networks that connect them, and builds application security tests at scale. He authored "Hacking APIs" (No Starch Press) and founded APIsec University, a free educational platform that has trained more than 150,000 students in application security. He has more than 15 years in IT and cybersecurity across aerospace, agribusiness, energy, financial technology, government services, and healthcare, with more than a 1,000 penetration tests behind him. He holds a bachelor's degree in English and philosophy from Sacramento State University, along with the OSCP, CCISO, CISSP, and several other industry certifications.

  • speaker photo
    Bonnie Viteri, Instructor
    Sr. Cyber Risk Analyst, Cyber Risk Opportunities LLC

    Building security programs and devising simple solutions to complex problems is what I do. I didn't travel the traditional path into cyber, and I don't plan to conform now.

    A behavioral psychologist at heart who is always watching and actively listening when everyone else is waiting to respond, paired with an M.S. in Criminology, makes me the ideal social engineer.

    My first success was merging Yahoo and AOL security programs into a thriving, single-security culture through global psychological and behavioral change management techniques, specializing in human risk and designing programs to address it. Understanding what motivates developers and building solid relationships one conversation at a time, focusing on people, programs and processes lended to 98% global security adoption at Yahoo. Bridging the gap between developers and non-technical colleagues made me invaluable.

  • speaker photo
    Kip Boyle, Instructor
    vCISO, Cyber Risk Opportunities LLC

    Kip Boyle is the Virtual Chief Information Security Officer of Cyber Risk Opportunities, whose mission is to help executives become more proficient cyber risk managers. He has over 24 years of cybersecurity experience serving as Chief Information Security Officer (CISO) and in other IT risk management roles for organizations in the financial services, technology, telecom, military, civil engineering, and logistics industries.

Conference Microsite!
Registration is quick and easy. Once you get started, use a browser on your phone or tablet to:

• Create a personalized agenda
• View maps of the venue and Exhibit Hall
• Use secure messaging to network with attendees
• View speaker slides after the conference
• Play CyberHunt, the app game, and compete for prizes
Propel your cyber career at SecureWorld!

Hone your skills and connect with your regional peers in InfoSec.