[1 CPE] The 2026 AI SOC Leadership Report: What Security Leaders Really Want

  Presented by Matthew Michaels, Account Executive • Torq

Torq surveyed 450 SOC leaders globally to find out what AI is actually doing inside the SOC. The findings challenged some assumptions — and confirmed others.

We’ll dig into insights including:

  • Why 97% of security leaders are confident AI can handle triage, but only 35% are using it there
  • What’s behind the trust barrier that 92% of leaders say is holding AI back
  • What 85% of leaders mean when they say they want a “unified platform”
  • Where teams plan to expand AI over the next 12 months — and what’s standing in their way

[1 CPE] Presentation Details Soon

  Presented by DevRev

The details of this presentation will be available soon. Please check back for updates!

The only enterprise AI platform with Native Shared Memory. Computer reasons across live product, support, and sales data – more efficiently, and more precisely.

[1 CPE] Preparing for AI-Era Security Risks: A Practical Framework for SMB Protection

  Presented by Sajeel Akram, Director of Microsoft Services • C1st Technologies

Cybercriminals increasingly target small and mid-sized businesses because they often lack enterprise-level defenses. This session examines current threat trends and provides practical guidance for protecting identities, endpoints, cloud applications, and sensitive data. Attendees will leave with actionable strategies to strengthen security posture, reduce business risk, and prepare for emerging AI-related security challenges.

Key Takeaways:

  • Why SMBs are prime targets for cybercriminals.
  • How identity attacks, phishing, ransomware, and insider risks impact businesses.
  • Security best practices for protecting users, devices, and data.
  • The role of automation and AI in modern cybersecurity operations.
  • Steps organizations can take immediately to improve resilience and compliance.

Sajeel Akram is Director of Microsoft Services at C1st Technologies and specializes in Microsoft cloud, security, identity, compliance, and AI solutions. Sajeel works with organizations across multiple industries to modernize IT operations, strengthen cybersecurity posture, and safely adopt AI technologies. With extensive experience in Microsoft 365, Azure, security operations, governance, and compliance, Sajeel helps businesses implement practical security strategies that balance protection, productivity, and regulatory requirements.

[1 CPE] Data Resilience in the Age of Attack: Protect What Matters

  Presented by Landra Pierce, Product Strategy Technologist • Veeam

Cyberattacks are no longer a distant threat; they are a reality every IT team must be prepared for. When an attack occurs, your data becomes both the primary target and the key to recovery. Many organizations still rely on backup strategies that are designed for hardware failures or accidental deletions, rather than today’s threats, like ransomware, insider risk, and automated attacks. This disconnect creates vulnerabilities, especially when backups become an overlooked entry point in your security strategy. In this session, we will address these challenges to help you better protect your organization.

This session is ideal for IT professionals who want greater confidence in safeguarding their data and peace of mind. We will examine the most common oversights that leave organizations, including those in government, education, healthcare, and other sectors, exposed to cyberthreats. You’ll discover how teams are advancing beyond basic backup to adopt a cyber-ready approach, including topics like immutability, threat awareness, rapid recovery, and intelligent automation.

Our focus will be practical and grounded in real-world scenarios, and what truly works when pressure is high and time is limited. Because when every minute counts and trust is at stake, data resilience means more than surviving an attack. It’s about protecting what matters most and emerging even stronger.

[1 CPE] 30 Years of Security Assumptions Broke: Rethinking Security Controls in the Age of AI

  Presented by Rob Larsen, Advisor • Silverfort

Frontier AI has quietly retired a three-decade assumption: that defenders have time to react after an attacker moves. Autonomous models now compress full attack chains into minutes, chaining ordinary misconfigurations at machine speed with no hesitation and no fatigue. Detection becomes forensic instead of preventive. Vulnerability management can’t patch fast enough. Periodic access reviews can’t review fast enough.

The answer requires a fundamental shift: from preset admin-time access rules and too-reactive detection to controls placed at the moment it matters most: runtime. Every identity, human, machine, or AI agent, must authenticate to act. That moment is the only control point capable of operating at machine speed, intervening before lateral movement begins.

This session gives security leaders the framework to drive that shift — examining why traditional controls collapse against AI-powered adversaries, what runtime enforcement looks like in practice, and how to elevate identity to a genuine, autonomous enforcement point at the center of a modern security operating model.

[1 CPE] Risk in the AI Age: Understanding What Matters & Actions That Count

  Presented by Jennifer Toren • Director of Information Security GRC, Alaska Airlines

How do we make sound cybersecurity decisions when technology, threats, and business expectations keep changing, and when moving too slowly to embrace AI carries risks of its own?

Drawing on her experience leading cybersecurity risk programs at Alaska Airlines, Jennifer Toren brings an aviation perspective to understanding, communicating, and addressing risk in the AI age. In an industry shaped by thin margins, complex operations, and human safety, cybersecurity priorities must connect directly to business realities.

Through practical insights and thought-provoking predictions, Jennifer will explore how AI could reshape risk appetite, compliance, and expectations for incident readiness, and what those shifts mean for cybersecurity professionals. Attendees will leave with a clearer approach to identifying what matters, communicating this in terms that support business decisions, and taking purposeful action amid uncertainty.

Jennifer Toren is Director of Cybersecurity Governance, Risk and Compliance at Alaska Airlines, where she leads programs spanning enterprise cyber risk, regulatory compliance, vulnerability management, AI governance, and aircraft cybersecurity. Her experience spans financial services, technology, and aviation, including developing the security program at a tech startup. She brings an international perspective shaped by living and working in Canada, India and the United States. Jennifer takes a practical, business-focused approach to understanding, communicating and addressing risk, connecting cybersecurity decisions to the operational realities and strategic goals of the business.

[1 CPE] When Breach Response Becomes Business Strategy: Incident Response Services

  Presented by Miles Walker, Channel Development Leader, Kaseya & Brian Miller, CEO & Founder • FusionTek

When an incident hits, the difference between a bad day and a business-ending event is often decided before the attacker ever gets in. It is often decided by the response plan, the retained IR partner (or in-house capability), and the insurance policy sitting in a drawer.

This vendor-neutral session walks through the modern incident response landscape: what IR services should deliver across the engagement lifecycle, how to evaluate providers or build internal response capability for 2027, and why cyber insurers now dictate, not just reimburse, your response strategy. We’ll examine how threat actors have shifted their playbook toward identity-based attacks, supply chain compromise, and double/triple extortion, then discuss a practical, plain-language guide to reducing your attack surface. Attendees will leave with an evaluation checklist for IR providers, a list of the questions insurers are asking in 2027, and a prioritized set of defensive actions any organization can start this quarter.

Miles Walker is a Vancouver based cybersecurity evangelist, award winning speaker, and Channel Development leader at Kaseya with over 15 years of international experience across London, Toronto, and North America. He is a regular Global News contributor and a sought after speaker at global cybersecurity and tech events, known for turning complex cyber threats into clear, business focused insights. Combining high energy storytelling, real world cyber examples, and practical advice, he helps organizations strengthen security, simplify IT, and build resilient, growth focused, security first strategies.

[1 CPE] AI as the Assistant, Not the Decider: Keeping Humans in the Loop in Cybersecurity

  Presented by Mike Hamilton, Emeritus CISO • Datec

The role of a SOC Analyst has changed with the introduction of AI – the Analyst is now more focused on response than investigation. This session examines the appropriate role of AI in enhancing security operations, from analyzing massive volumes of telemetry and alerts to supporting faster, more informed analyst decisions.

The discussion will explore why keeping a human in the loop matters, the distinction between autonomous AI in offensive and defensive environments, and the operational costs that can be overlooked when adopting AI-driven SOC technologies. Attendees will walk away with a more practical way to evaluate AI: not as a replacement for security professionals, but as an assistant that helps them make better decisions at greater speed and scale.

Advisory Council Roundtables

Join us during the lunch hour for Advisory Council Roundtables, an interactive opportunity to connect with council members and peers on a variety of timely industry topics. Move freely between tables, share your perspective, and gather practical insights you can take back to your organization. These conversations are informal, high-value, and designed to spark ideas and connection.

Topics:

  • Data Protection in the Age of AI
  • Ensuring Security and Compliance with 3rd Parties
  • IT Staffing: Onboarding for Success
  • Get More Out of Your IT Spending
  • Managing Infosec for the Small/Medium Business
  • Security Approach in Public Sector
  • Security Awareness: What Methods Work to “Secure the Human”
  • Zero Trust Strategy: Challenges & Lessons Learned

[1 CPE] How to Protect Your Company From Your [Non-Malicious] Employees

  Presented by Howard Globus, Cybersecurity • IT On Demand

Business leaders like to believe that company technology stays strictly for business. It doesn’t. Even your most trusted employees use company hardware in ways you never anticipated – personal browsing, random downloads, and content that has nothing to do with their job description. That is not a character flaw. It is a security problem, and it is one of the most consistent and least discussed vectors for data breaches, ransomware incidents, and regulatory violations.

Unlike targeted attacks, non-malicious insider risk doesn’t look dangerous until something has already gone wrong. Policies don’t stop it. Locked-down environments slow it down but rarely prevent it. And the “it won’t happen here” mindset is statistically the riskiest position an organization can hold.

In this session, Howard Globus addresses the human side of cybersecurity directly – with candor, real-world stories, and a clear-eyed look at what actually works. Drawing on three decades of experience working with individuals, mid-sized businesses, and Fortune 100 companies, Howard walks IT and security professionals through the true dynamics of employee behavior, the real limits of technical controls, and a practical spectrum of defensive measures – from budget-conscious fundamentals to more comprehensive approaches – so attendees can make the right choices for their organization’s reality, now and in the future.

Attendees will leave with:

  • A clear-eyed view of how non-malicious employee behavior creates measurable cyber exposure – and why conventional controls miss it
  • An honest assessment of where acceptable use policies and technical safeguards fall short
  • A decision framework for evaluating defensive measures that fits their organization’s size, budget, and risk tolerance
  • A practical model for building a culture of digital responsibility without damaging team trust or productivity
  • Specific, implementable steps they can bring back to their organizations the same day