The Security Chapter NA

Workshop 1: NIMBUS: Breaking Down Investigative Silos through Unified Case, Evidence, and Risk

Hosted by: Matthew Morin, Black Rainbow 

Modern investigations span multiple teams, systems, and regulatory requirements, yet many organizations still manage them through disconnected processes. This session demonstrates how BlackRainbow’s NIMBUS provides a unified approach to investigation management by combining case management, evidence tracking, workflow automation, quality management, and executive reporting in a single solution. Attendees will learn how organizations are improving collaboration, accelerating investigations, strengthening governance, and maintaining defensible audit trails while reducing operational complexity. Through real-world use cases, participants will discover how NIMBUS delivers the control, transparency, and accountability required to manage today's most complex investigative and risk-management challenges.

Workshop 2: Who Controls Your Technology?

Hosted by: John Caruthers, CVS Health

As cloud adoption accelerates and reliance on a small number of global technology providers deepens, a harder question sits underneath the convenience: when something goes wrong, whose decision is it, and how much of that decision is actually ours? Ownership, control and resilience have moved from operational detail to strategic priority, not because organisations have lost interest in managing them, but because so much of the infrastructure we depend on now sits outside our direct control by design. This discussion explores how security leaders are managing vendor concentration, data sovereignty, supply chain risk and digital resilience, and what "control" realistically looks like when so much of the stack belongs to someone else.

Workshop 3: Securing the Future of AI Agents

Hosted by: Jack Berkowitz, Securiti AI

As organizations rapidly adopt AI agents to automate workflows and decision-making, a new class of security risk is emerging, one that traditional security frameworks weren't built to handle. This session explores the evolving agentic risk landscape, unpacking the unique challenges of securing AI systems and the data they utilize. We'll examine why conventional security approaches fall short and outline the principles of secure agentic framework design, giving security and AI leaders a practical foundation to ensure data remains safe and compliant to scale AI agents with confidence.  

Workshop 4: Security Without Drama: Becoming the Leader Everyone Invites Into the Room

Hosted by: Fred Descloux, NU Skin

How security leaders can become trusted business partners in a world shaped by AI, cloud, identity and rapidly emerging/evolving technology. We'll discuss practical ways to shift from being seen as a control function to becoming an enabler of better business decisions.

Workshop 5: Building a Resilient Software Stack for Protecting Against AI

Hosted by: Gary Hutchins, Chainguard

Cybersecurity risk is evolving. Software supply chain attacks and the rise of frontier models have made cybersecurity a boardroom question. Organizations need to adapt to prevent attacks and build a resilient security posture without consuming engineering resources. Recent AI-assisted supply chain attacks are compromising the open source ecosystem. The tools that you trusted for your operations are now being leveraged to orchestrate attacks. Frontier models like Mythos are unlocking the ability to surface vulnerabilities that have remained dormant for years. This is creating a new paradigm for CISOs and CTOs to understand what an effective supply chain security looks like – across the tools, people, and processes that enable it.

Workshop 7: From Blind Spot to Board Priority: Managing Cryptographic Risk in the Age of AI, Quantum, and Zero Trust.

Hosted by: Troy Stark, Keyfactor

Cryptography secures every identity, transaction, and connection — yet most organizations can’t see all the keys, certificates, and algorithms they rely on. This hidden gap is a growing target for threat actors, especially with AI-driven attacks and post-quantum disruption on the horizon. Learn how to discover and prioritize vulnerabilities, automate cryptographic inventory, and make cryptographic risk a measurable part of your security strategy.

Workshop 8: The Warning Signs Are Already Here, Are You Seeing Them?

Hosted by: Charles Everette, City of Fort Lauderdale

The attacks making headlines in critical infrastructure may feel far removed from your organization — but the warning signs and attack patterns are crossing industry boundaries faster than many security programs are adapting.

In this interactive session, I’ll look at what we’re seeing today through current FBI warnings, recent critical-infrastructure incidents, and a practicing CISO lens — then translate those trends into what they could mean for finance, healthcare, manufacturing, retail, government, and other industries. We’ll separate confirmed activity from emerging patterns, discuss what may be coming next, and focus on the practical actions security leaders should be considering now.

Workshop 9: OT Cyber Threat Scenarios: Interactive Defense Workshop

Hosted by: Tim Cook, Dragos

This interactive workshop translates threat activity into realistic threat scenarios. Using scenario-based cards based on real-world attacks, participants will work through how adversaries operate in industrial environments and evaluate how their own organizations would detect and respond. By stepping through these scenarios, participants will uncover gaps in visibility, detection, and response, and gain a clearer understanding of how real-world threats could impact their operations.

Workshop 11: Resilience Planning for the Next Disruption: Ransomware, natural disasters, workforce disruption

Hosted by: Doral Cook, Dizzion

Resilience Planning for the Next Disruption:  Ransomware, natural disasters, workforce disruption - how organizations build IT environments that can absorb shocks without weeks of recovery. Actions and takeaways will be provided for attendees.