Open Sessions
Conference Pass
SecureWorld Plus
VIP / Exclusive
- Wednesday, June 17, 20268:30 amNetworking Hall openRegistration Level:
Open Sessions
8:30 am - 3:00 pmYour opportunity to visit our solution vendor partners, whose sponsorship makes SecureWorld possible, as well as association chapters! Booths have staff ready to answer your questions. Look for participating Dash For Prizes sponsors to be entered to win prizes.
Also, look for “Cyber Connect” discussions on select topics and join the conversation.
9:00 am[Opening Keynote] Defend from Cybersecurity Threats by using AI AgentsFocus Areas: AI; Agentic AI; Shadow AI; Cyber ResilienceSr. Product Manager, Google CloudRegistration Level:
Open Sessions
9:00 am - 9:45 amCybercriminals are increasingly weaponizing artificial intelligence, fundamentally altering the cybersecurity landscape. To stay ahead of these evolving risks, organizations must transition to an “Agentic” defense strategy. Discover how to establish the groundwork for AI-driven security agents capable of neutralizing threats at machine speed, and how Google can help you in this mission.
9:45 amNetworking BreakRegistration Level:
Open Sessions
9:45 am - 10:00 amVisit the Networking Hall to network with attendees and connect with our vendor sponsors and association partners.
10:00 amInside the Digital Mind: How Cyberpsychology Shapes Behavior, Risk, and the Cyber LandscapeFocus Areas: Social Engineering, Security Awareness & Culture, Human-Centric Security, Cyber Psychology, Risk ManagementAssociate CISO, St. Luke's University Health NetworkRegistration Level:
Open Sessions
10:00 am - 10:45 amThis session explores how human behavior in digital environments directly shapes modern cyber risk. Drawing from the research of forensic cyberpsychologist and author Mary Aiken, this talk reveals why people think, react, trust, click, overshare, and make decisions differently online — and how attackers exploit those predictable patterns. Participants will learn how digital psychology influences threat exposure, identity compromise, misinformation, social engineering, and organizational security culture. Attendees will walk away with practical, human-centered strategies for building safer digital environments and strengthening security programs by aligning controls with real human behavior.
10:00 amOperationalizing Zero TrustFocus Areas: Application Security, Cloud Security, Encryption, DLP, Endpoint, IoT Security, Identity and Access Management, Network Security, & Zero TrustEnterprise Architect, Washington Technology SolutionsRegistration Level:
Open Sessions
10:00 am - 10:45 amThe presentation outlines how to operationalize Zero Trust by moving from strategy to enforceable architecture using SASE and SSE. It covers Zero Trust principles, alignment with CISA’s maturity model, and modernization of network segmentation and enforcement. It emphasizes replacing legacy VPNs with ZTNA, securing SaaS access, and converging networking and security through SASE. The roadmap includes phased implementation, governance, and measurable KPIs, culminating in a unified, policy-driven architecture that enables continuous verification, reduces risk, and improves enterprise resilience.Zero Trust becomes effective only when operationalized through a phased, measurable architecture; leveraging SASE/SSE and CISA’s maturity model to enable continuous, identity-driven security and reduce enterprise risk.10:45 amNetworking BreakRegistration Level:
Open Sessions
10:45 am - 11:00 amVisit the Networking Hall to network with attendees and connect with our vendor sponsors and association partners.
11:00 amIdentity Security Beyond Login: Continuous Trust Signals in an AI WorldFocus Areas: Identity and Access Management; Machine Identity; Secure API; AIEngineering Manager, Identity, LinkedInRegistration Level:
Open Sessions
11:00 am - 11:45 amWhile many organizations invest in SSO and MFA, attackers increasingly bypass these controls using compromised accounts or synthetic identities. In an AI-accelerated threat landscape, identity security must evolve toward continuous, signal-driven trust. Using lessons from LinkedIn and Oracle Health Sciences, this session outlines how to layer a “trust signals” service on top of existing IAM to continuously evaluate identity actions. This talk breaks down three signal families: authenticity, credibility of roles, and behavioral uniqueness. Attendees will walk away with concrete design patterns and a roadmap for integrating continuous trust scores into access decisions across web apps, APIs, and admin tools without compromising the user experience.
11:00 amFrom Plant Floor to Boardroom: Governing OT Cyber Risk in Modern ManufacturingFocus Areas: Operational Technology; IIoT; Cyber Risk; Critical InfrastructureVP of IT & Global CISO, Hanesbrands Inc.Registration Level:
Open Sessions
11:00 am - 11:45 am11:00 am[Panel] Navigating the 2026 Identity and AI Threat ConvergenceFocus Areas: Identity; Zero Trust; Threat Intel; Artificial Intelligence; Shadow AIDirector, Industry Solutions, IllumioRegistration Level:
Open Sessions
11:00 am - 11:45 amIn 2026, the cybersecurity landscape has shifted from a race of “breaking in” to a game of “logging in.” As threat actors weaponize AI to execute large-scale social engineering and exploit the “Shadow Agent” crisis, the traditional perimeter has not just dissolved—it has become a liability. This panel brings together industry leaders to dissect the convergence of identity-centric attacks, supply chain vulnerabilities, and the escalating risks of autonomous AI agents.
We will move beyond the hype to discuss the mechanical necessity of Zero Trust Segmentation to stop lateral movement, the role of Cloud-Native AI Security in hardening infrastructure, and the critical need for Unified Observability to cut through the noise of AI-generated alerts. Join us for a candid discussion on why cyber resilience is no longer a “nice-to-have” but the foundational baseline for business continuity in a hyper-connected world.
11:45 amNetworking BreakRegistration Level:
Open Sessions
11:45 am - 12:00 pmVisit the Networking Hall to network with attendees and connect with our vendor sponsors and association partners.
12:00 pmBeyond the Noise: Mastering Code Analysis and Mitigating Alert FatigueFocus Areas: Application Security; DevOps; Secure Coding; SOC; False PositivesFounder, CyberSpeak Labs LLCRegistration Level:
Open Sessions
12:00 pm - 12:45 pmIn the modern Security Operations Center (SOC), the sheer volume of alerts can often obscure genuine threats. One of the primary drivers of this “noise” is the difficulty in distinguishing between truly vulnerable code and persistent false positives. This session explores the critical delta between these two states and examines how a deep understanding of secure coding standards can streamline triage. By aligning SOC operations with robust development practices, security teams can significantly reduce alert fatigue, improve detection accuracy, and foster a more proactive defense posture.
12:00 pmWho Owns Your Breach? Delegation, Disclosure, and the Hidden Operational Risk in Incident ResponseFocus Areas: Application Security, AI, Encryption, Ransomware, Threat IntelligencePartner, CCLO, Mandelbaum Barrett PCRegistration Level:
Open Sessions
12:00 pm - 12:45 pmIn modern breach response, organizations frequently rely on third parties to manage investigation, notification, and regulatory reporting. While outsourcing incident response is often viewed as an efficiency decision, delegating disclosure and reporting authority introduces a distinct and under-examined form of operational risk: loss of visibility and control at the moment when early decisions shape regulatory exposure, litigation posture, and long-term trust.
This presentation examines how third- and fourth-party vendor-led breach notification and regulator reporting can obscure scope, constrain fact development, and reframe responsibility—while leaving the impacted organization fully accountable for outcomes. Drawing from anonymized real-world incidents involving healthcare entities affected by third-party breaches, we compare two response models: one in which disclosure was delegated to a vendor-retained response firm, and another in which the affected organization retained independent control over reporting while expressly disclaiming reliance on vendor representations.
12:45 pmNetworking BreakRegistration Level:12:45 pm - 1:00 pmVisit the Networking Hall to network with attendees and connect with our vendor sponsors and association partners.
1:00 pmBreaking the Firewall: How Women in Cybersecurity Rise from Entry-Level to the C-SuiteFocus Areas: Career Development; Women in LeadershipCISO, OnterrisRegistration Level:
Open Sessions
1:00 pm - 1:45 pmOnly 7% of CISOs are women. That’s not a pipeline problem—it’s a strategy problem. This session delivers a frank, tactics-first roadmap for women in cybersecurity who are mid-career and ready to move up. Covering the mid-career cliff, the negotiation gap, the difference between mentorship and sponsorship, and what it actually takes to reach the C-suite, this is the session most organizations never offer and most professionals never get. Come with your current role. Leave with your next move.
1:00 pmCyber Intel DebriefFocus Areas: Threat Intelligence; Resilience; Supply Chain; GeopoliticalCNN Military Analyst; U.S. Air Force (Ret.); Founder & President, Cedric Leighton Associates, LLCFounding Partner, CYFORIX (Former CISO & Sr. Executive at Keurig Dr Pepper, Comcast, HD Supply, and GE)Registration Level:
Open Sessions
1:00 pm - 1:45 pmEnterprise security is no longer just a technical discipline; it is the primary battlefield of modern conflict. This session connects the dots between global geopolitical volatility and the immediate risks to organizational integrity, supply chain continuity, and stakeholder trust. We will examine how shifting alliances and conflicts involving major global powers are reshaping the cyber threat landscape—specifically targeting critical infrastructure, distributed cloud dependencies, and the global software supply chain.
The discussion will pivot to the “internal” evolution of the enterprise, analyzing the rapid integration of Generative AI into core business logic and automated decision-making systems, and the resulting regulatory and privacy minefield. From state-aligned actors seeking to destabilize national interests to sophisticated ransomware syndicates targeting high-availability environments, we will profile the adversaries threatening the modern digital order.
Join us for a 2026 outlook that moves beyond mere framework compliance, offering a battle-tested roadmap for maintaining operational resilience and data sovereignty in the face of unprecedented global instability.
1:45 pmNetworking BreakRegistration Level:
Open Sessions
1:45 pm - 2:00 pmVisit the Networking Hall to network with attendees and connect with our vendor sponsors and association partners.
2:00 pmCLOSING KEYNOTERegistration Level:
Open Sessions
2:00 pm - 2:45 pm
- Google Cloud SecurityBooth: N/A
Google Cloud Security provides organizations with leading infrastructure, platform capabilities and industry solutions to help them solve their most critical business problems. Google Cloud Security helps customers protect their global operations with solutions such as zero trust security, application and data protection, fraud prevention, and threat detection and response.
- IllumioBooth: N/A
Illumio is the leader in ransomware and breach containment, redefining how organizations contain cyberattacks and enable operational resilience. Powered by an AI security graph, our breach containment platform identifies and contains threats across hybrid multi-cloud environments–stopping the spread of attacks before they become disasters.
Recognized as a Leader in the Forrester Wave™ for Microsegmentation, Illumio enables Zero Trust, strengthening cyber resilience for the infrastructure, systems, and organizations that keep the world running.
- InfobloxBooth: N/A
Infoblox unites networking and security to deliver unmatched performance and protection for a world that never stops. By providing real-time visibility and control over who and what connects to the network, we use intelligent DNS and user context to stop threats other solutions will miss, enabling organizations to build safer, more resilient environments. We’re continually supporting more than 13,000 customers—including 92 of Fortune 100 companies, as well as emerging innovators—by building the brightest, most diverse teams and by thoughtfully engineering intelligent networking and security solutions for an increasingly distributed world.
- Sumo LogicBooth: N/A
Sumo Logic was founded in 2010 by experts in log management, scalable systems, big data, and security. Today, our purpose-built, cloud-native service analyzes more than 100 petabytes of data, more than 16 million searches, and delivers 10s of millions of insights daily – positioning Sumo among the most powerful machine data analytics services in the world.
Sukeerth ReddySr. Product Manager, Google CloudSukeerth Reddy is a Senior Product Manager at Google Cloud, where he is responsible for platform modernization for Google Security Operations Product. Specializing in Security infrastructure strategy, identity and access management, Sukeerth bridges complex security infrastructure requirements with large-scale GTM execution to empower Security Operations Centers (SOCs) globally.
Sukeerth holds an MBA from IIM Calcutta and Bachelor’s degree in Computer Science from IIT Kharagpur. Outside of work, he enjoys gardening and cooking—often applying product management principles to tomatoes and curries with mixed success.
Krista ArndtAssociate CISO, St. Luke's University Health NetworkKrista Arndt is the Associate CISO at SLUHN. As the Associate CISO, Krista is responsible for managing the security program's day to day operational effectiveness. Krista has been working in information security in various capacities for more than 15 years. In her previous roles, Krista assisted with developing and leading security programs in national healthcare, crypto, finance, and the Department of Defense. She currently holds her CISM and CRISC certifications and NHRA competition driver's license.
Krista is an active member of ISACA, serves as InfraGard Philadelphia Chapter’s Healthcare Sector Chief, serves on Neumann University's Business Advisory Council, and is Marketing Committee Chair for Women in CyberSecurity (WiCyS) Delaware Valley Affiliate. Through this service, Krista's mission is to give back to her community by providing mentorship and support for aspiring cybersecurity professionals, especially for women who wish to enter the field.
When off the clock, Krista takes her affinity for overcoming challenges to the garage and the race track, where she enjoys building and improving her own race car, competing as a driver in national drag racing events with her family, and using her racing as a forum to advocate for neurodiversity awareness and inclusion.
Mike CostelloEnterprise Architect, Washington Technology SolutionsMikel Costello is an enterprise architect and former IT executive with 25+ years of experience in digital transformation, cybersecurity, and cloud strategy across government and military sectors. At Washington Technology Solutions, he leads statewide IT strategy, designs secure multi-cloud environments, and develops governance frameworks to enhance cybersecurity and reduce technical debt. A Zero Trust and SASE thought leader, he authored Washington’s Zero Trust White Paper. His career includes managing large technology portfolios, modernizing infrastructure, and delivering cost-efficient, resilient, and mission-aligned IT solutions across multi-agency environments.
Shubham AnandaniEngineering Manager, Identity, LinkedInShubham Anandani is an Engineering Manager at LinkedIn, where he leads teams focused on AI and professional identity platforms. Previously, at Oracle Health Sciences, he architected pioneering SaaS infrastructure for clinical trial randomization, serving Tier-1 pharmaceutical companies and ensuring FDA 21 CFR Part 11 compliance.
He holds a Master’s in Software Engineering from Carnegie Mellon University and is a Senior Member of IEEE. Shubham combines deep expertise in distributed systems with a focus on responsible AI to solve complex security and identity challenges.
John Opala, PhDVP of IT & Global CISO, Hanesbrands Inc.Dr. Omondi John Opala is a seasoned executive with expertise in cybersecurity, IT governance, and leading technology teams, backed by over 20 years of experience. His professional career reflects a steadfast commitment to enhancing digital security, ethical responses to complex cybersecurity challenges, and advancing the application of AI and emerging technologies globally.
Currently serving as the Vice President of IT and Global Chief Information Security Officer (CISO) for Hanesbrands Inc., Dr. Opala leads efforts to strengthen the company’s cybersecurity posture against evolving threats. Prior to this role, he was Vice President of IT and Global Chief Information Security Officer (CISO) at McCormick, where he transformed cybersecurity risk remediation and response strategies to enhance network security globally.
In addition to his corporate achievements, Dr. Opala is deeply engaged in academia. As an adjunct professor, he has taught a variety of cybersecurity and business risk-related courses, including certified ethical hacking, information security risk management, digital forensics, and business ethics. He is currently developing program curricula focused on responsive AI usage. His dedication to education is further exemplified by his numerous publications on topics such as cloud architecture, cybersecurity risk governance, and the impact of cyber warfare on enterprise networks. His work has been featured in respected journals like the International Journal of Computer Networks and Communications and presented at IEEE conferences, among others.
Dr. Opala earned a Ph.D. in Information Technology with a specialization in Information Security Assurance & Governance from Capella University. Continuously striving for excellence, he is currently pursuing further education in Business Management at Harvard University Extension School.
Driven by a passion for innovation and knowledge, Dr. Opala focuses his research on information security, cloud computing, enterprise architecture, data analytics, big data and now AI. His exploratory analyses on the influence of information security on cloud adoption and the governance of cybersecurity risks have garnered widespread recognition.
Through his leadership, scholarship, and teaching, Dr. Omondi John Opala has become a prominent figure in the fields of cybersecurity and information technology, inspiring both industry professionals and aspiring technologists.
Christer SwartzDirector, Industry Solutions, IllumioChrister Swartz is Director of Industry Solutions for Illumio. He has spent many years in the Cyber industry, beginning with a small startup called Cisco. He was part of Netflix’s design of internet video-streaming, without breaking the internet, then with Palo Alto Networks. He focuses on the details of cybersecurity to specific industries, and how platforms integrate across the broader security industry, from Cloud-managed Kubernetes to Data Center mainframes.
Panel Discussion
Reanna SchultzFounder, CyberSpeak Labs LLCReanna Schultz, from Kansas City, MO, holds both a Bachelor’s and Master’s degree in Cybersecurity. With over six years of professional experience, Reanna has contributed to various corporate environments, leveraging her expertise to strengthen cybersecurity practices.
Throughout her career, Reanna has worn many hats, including roles in Endpoint Security Engineering, Detection Engineering, and leading a Security Operations Center (SOC) team. In addition to her primary responsibilities, Reanna serves as an adjunct professor at the University of Central Missouri (UCM) and is also an entrepreneur.
Reanna is the founder of CyberSpeak Labs, a platform dedicated to fostering community engagement through collaboration. She hosts the podcast Defenders in Lab Coats, where she delves into cyber threats and occasionally invites passionate guests to share their insights.
Driven by her passion for cybersecurity, Reanna frequently travels to speak at events, sharing her industry knowledge and empowering others to improve their organizations' cybersecurity practices.
Steven TepplerPartner, CCLO, Mandelbaum Barrett PCSteven is Mandelbaum Barrett’s Chief Cybersecurity/Legal Officer. An ISACA Certified Data Privacy Solutions Engineer, Steven’s client-facing practice focus is on cybersecurity and privacy, risk assessments and data breach response, AI risk, and regulatory compliance. He regularly publishes on cybersecurity law, privacy, and emerging technology risk, advises organizations on aligning technical security programs with legal and regulatory obligations, and teaches Cybersecurity Law at Nova Southeastern University Law School.
Roberta AndersonCISO, OnterrisRoberta Anderson is a 25-year cybersecurity veteran, Air Force veteran, and published author whose career spans the DoD, Fortune 500, healthcare, and government. She served as the City of Colorado Springs' first CISO, where she built the city's information security program from scratch, and today serves as CISO at Onterris and co-founder of TrustDossier, a security attestation platform built for software vendors navigating enterprise procurement. Her credentials—CISSP, CRISC, CDPSE, Security+, Network+—represent the full arc of a GRC and risk management career. She holds an M.S. in Cybersecurity and Information Assurance from National University and a B.S. in Cybercrime Investigation from Colorado Technical University. She is the author of "Breaking the Firewall: How Women in Cybersecurity Rise from Entry-Level to the C-Suite" (2026) and "AI for Beginners in the Digital Age" (2025). For more than two decades, she has mentored women in cybersecurity—resume by resume, negotiation by negotiation, promotion by promotion. She is a member of WiCyS, ISC2, ISACA, and ISSA.
Col. Cedric LeightonCNN Military Analyst; U.S. Air Force (Ret.); Founder & President, Cedric Leighton Associates, LLCCedric Leighton is a CNN Military Analyst and a retired United States Air Force Colonel. On CNN, he has provided incisive commentaries on the Israel-Hamas War, the War in Ukraine, the U.S. withdrawal from Afghanistan, and numerous other conflicts around the world. His analysis has been seen by millions of viewers around the world and provided much needed context to some of the most pressing national security issues of our time. As a U.S. Air Force officer, Colonel Leighton served at U.S. Special Operations Command, the Joint Staff, and the National Security Agency, where he helped train the nation's cyber warriors. A Middle East combat veteran, he is the recipient of numerous military awards, including the Defense Superior Service Medal and the Bronze Star. After serving 26 years as a U.S. Air Force Intelligence Officer, Col. Leighton founded a strategic risk consultancy and became the co-founder of CYFORIX, where he advises multinational businesses on developing better cyber strategies designed to reduce risk and unpredictability.
VJ ViswanathanFounding Partner, CYFORIX (Former CISO & Sr. Executive at Keurig Dr Pepper, Comcast, HD Supply, and GE)VJ Viswanathan is a global technology and security executive with more than 25 years of experience spanning AI, cloud and enterprise platforms, cybersecurity, privacy, and technology risk. He has held senior executive roles at large enterprises, including Keurig Dr Pepper, Comcast, HD Supply, and GE, where he led technology, cybersecurity, privacy, and risk programs across highly complex and distributed environments.
Today, VJ works with boards and executive teams on the security challenges created by AI, automation, and digital sprawl—helping leaders understand where traditional security models fall short and how to adapt. He currently serves as Founding Partner of CYFORIX and CEO of TORQE, focused on strategic defense and enterprise transformation.
Learn insights and best practices from trusted cybersecurity leaders and solution providers. Sign up for free!
