RSAC

Over the course of the last two years, cybersecurity planning and thought leadership have picked up with a parallel increase in regulation, Congressional action, and government reorganization. The Cyberspace Solarium Commission recommended and got a National Cyber Director and incident reporting legislation through the hard work of the SASC, HASC, and HSGAC, but where do these changes leave us now? Is the National Cyber Director leading the federal government effort, or are government turf battles making leadership in cyber confusing? And what about incident reporting - how many new proposals have we seen, and which are the most critical to understand? Join us for a discussion of all of these issues and what the cybersecurity landscape might look like in a year or five years from now.

Speakers:

Tatyana Bolton, Policy Director, Cybersecurity and Emerging Threats, The R Street Institute

Kacy Zurkus, Content Strategist, RSAC

Integrating security into the development lifecycle can be a challenge, especially for those who don’t understand why security matters to development and operations. What’s the ROI of DevSecOps? What are the key KPIs? Join us for an insightful conversation that explains why DevSecOps is important while shining a spotlight on some DevSecOps bloopers to avoid. Our guests will also expose the cost of bad DevSecOps and offer suggestions for how to measure developers on security.

Speakers:

Keenan Skelly, CEO, Shadowbyte

Stephanie Simpson, Vice President of Product, SCYTHE

Virtual health providers create favorable conditions for the LGBTQ population's access to healthcare, an influx of electronic personal health information, and massive increases in cyber threats. Using software flaws, bad actors increasingly target healthcare systems to steal, monetize, and affect availability of data. This session explores software integrity and DevSecOps approaches to secure highly interconnected digital healthcare systems.

Speakers:

Safi Mojidi, Head of InfoSec, FOLX Health

Kacy Zurkus, Content Strategist, RSA Conference

Massive cloud proliferation has driven huge increases in IT and security complexity, the vast majority of which come from trying to force fit legacy concepts, processes and even tools, into a cloud context. This will cover the most important considerations and requirements facing organizations to adequately understand and affect their new reality – and evolve their security thinking.

Speakers:

Nipun Gupta, Senior Security Leader, Devo

Sounil Yu, CISO and Head of Research, JupiterOne

Kacy Zurkus, Content Strategist, RSAC

Leading and guiding a data-driven security program as a BISO can be challenging. Data is everywhere and owned by many departments. Once a BISO has found that data they need, they must overcome the challenges of data access, storage, normalization and all the other steps required to turn that data into an actionable story. Fortunately, the Cloud can make this easier and faster.

Speakers:

James Binford, Director and Business Information Security Officer, Humana

Ashish Rajan, Host of Cloud Security Podcast & SANS Trainer, Cloud Security

Kacy Zurkus, Content Strategist, RSAC

What does an attacker need to do to exploit a threat? Join us to discuss the TTPs attackers are using to exploit myriad threats in today’s threat landscape. Our guests will look across different sectors to understand new and emerging threats, how those threats can be exploited, and steps organizations can take to avoid being the next victim of a cyberattack.

Speakers:

Jerone Jones, Founder, JustOne Solutions, LLC

Alexiaa Jordan, Cyber Security Consultant, JustOne Solutions

The technology we work to secure is ever evolving, as are the threat actors that are out there trying to exploit those technologies. Hence, the challenge we face today with securing and then defending those advances in technology requires people that are just as excited about learning how to defend that new technology as someone once was about creating it. There is absolutely someone out there that is passionate about hacking their way into that new technological advancement, no matter what it is. Join this podcast to learn what motivates hackers and how to help instill a passion for defending against cyber threats in the members of a security team.

Speakers:

Tiffiny Bryant, Cyber Security Analyst, Crystal Clear Technologies, Inc

Kacy Zurkus, Content Strategist, RSAC

Across the security world, there’s a growing appreciation about the need to better understand our software supply chain. Transparency won’t solve all our problems, but will lay a foundation for greater resilience and more informed decisions. This discussion will review the basics of SBOM, using the recent log4j vulnerability to understand how SBOM can help across the software ecosystem—and also understand its limits. We’ll also delve into the future of SBOM, exploring some of the gaps, where we need to focus to advance the state of the art. Our ultimate goal should be the integration of SBOM into the broader vulnerability and security data ecosystem through automation.

Speakers:

Allan Friedman, Senior Advisor and Strategist, CISA

Kacy Zurkus, Content Strategist, RSA Conference

Furthering the White House Cybersecurity EO, the OMB just released a Zero Trust Architecture Strategy with one of its 5 pillars focused on identity, and requiring implementation of strong, phishing-resistant MFA for agency and citizen access. This session explores the gatekeeper role of identity in ZTA, and the business and technology challenges faced in managing access while passwords persist.

Speakers:

Mario Duarte, Vice President of Security, Snowflake

Tom (TJ) Jermoluk, CEO and Co-Founder, Beyond Identity

Kacy Zurkus, Content Strategist, RSA Conference

In 2021, artificial intelligence emerged as a viable technology, which warranted a conversation about the legal and policy considerations underlying modern society. We’ll look back at the ethical, legal, and policy considerations discussed in May of 2021 and ask where are we now? What more needs to be done in order to maximize a successful implementation and minimize potential risk?

Speakers:

Behnam Dayanim, Partner, Global Chair of Privacy & Cybersecurity Practice and Chair, Advertising & Gaming Practice, Paul Hastings LLP

Kacy Zurkus, Content Strategist, RSAC