Topic: Artificial Intelligence

Seminar Topics

[1 CPE] What We’ve Learned Bringing AI Projects to Life

  Presented by Zach Feingold, Director of AI and Engineering, & Hayden Busic, Data & AI Product Manager • Cerium Networks

AI is helping people work more efficiently, but what does it take to put AI to work where it can make a meaningful difference for your team?

In this session, we’ll take you behind the scenes of three AI projects we’ve taken from planning to live deployment. We’ll explore the business challenge each project tackled, how we built it, and the results it delivered. Along the way, we’ll share lessons from turning those plans into working solutions, why identifying the right business needs is important, and how to encourage user adoption.

You’ll leave this session with a practical look at AI in action and lessons you can apply to your own projects.

[1 CPE] Defending Non-Human Identities Against Machine-Speed AI Attacks

  Presented by Nate McQueen, Director, Global Agentic Technologists • SailPoint

In the age of autonomous AI, the most dangerous adversary may already hold the keys. Non-human identities (API keys, service accounts, tokens and agentic AI) have eclipsed phishing as the leading attack vector. AI agents, acquisitive by design, harvest and share credentials without hesitation. A single unsecured identity can unravel an entire enterprise. This session charts a disciplined four-phase path from chaos to control: scope, discover, contextualize, and govern. Learn to prioritize by severity and ownership, close critical breach paths within 90 days, and secure the machine workforce before attackers turn it against you. Leave with a clear, actionable roadmap.

[1 CPE] The 2026 AI SOC Leadership Report: What Security Leaders Really Want

  Presented by Matthew Michaels, Account Executive • Torq

Torq surveyed 450 SOC leaders globally to find out what AI is actually doing inside the SOC. The findings challenged some assumptions — and confirmed others.

We’ll dig into insights including:

  • Why 97% of security leaders are confident AI can handle triage, but only 35% are using it there
  • What’s behind the trust barrier that 92% of leaders say is holding AI back
  • What 85% of leaders mean when they say they want a “unified platform”
  • Where teams plan to expand AI over the next 12 months — and what’s standing in their way

[1 CPE] The Internet Is Talking to Itself: Bots, AI, and Evolving Security

  Presented by Ashok Naiku, Sr Enterprise Security Architect  • Fastly

The internet is undergoing one of its biggest transformations since the rise of mobile: automated traffic is no longer limited to search engines and simple bots. AI assistants, Large Language Models, and autonomous agents are increasingly discovering, purchasing, and interacting with online services on behalf of people. As the internet begins talking to itself, organizations must rethink how they distinguish beneficial automation from abuse, protect APIs, and define access and trust without blocking innovation. This session explores the evolution of internet automation, emerging security challenges, and how modern approaches to bot management, API security, and responsible AI can help organizations prepare for an increasingly autonomous future.

[1 CPE] Building Trust for What’s Next: PKI Modernization & Quantum Readiness

  Presented by Jared Menninger, Sr Solutions Engineer • DigiCert

Certificate lifetimes are shrinking. Browser requirements are evolving. Machine identities are growing exponentially. At the same time, organizations are beginning to plan for post-quantum cryptography while supporting new AI-driven systems that depend on trusted digital interactions.

These changes are transforming PKI from a traditional security function into the operational trust layer for modern business.

This session provides a practical roadmap for modernizing PKI, improving visibility into machine identities, automating certificate lifecycle management, and building crypto-agility for future cryptographic transitions. Attendees will leave with actionable steps to reduce operational risk today while preparing for post-quantum security and the next generation of digital trust.

[1 CPE] Is AI Alive? Understanding What We’re Trusting and What’s at Risk

  Presented by Anthony Thomas, Enterprise Architect • C1

AI does not need to be alive to create real organizational risk. As employees adopt AI and organizations connect it to data and systems, leaders need to understand what they are trusting and where human accountability must remain. This session explores how to enable useful AI adoption while protecting sensitive information, maintaining oversight, and managing risk.

Key topics:

  • Shadow AI: Employees using AI tools without organizational review and entering sensitive information.
  • Data exposure: Understanding what information AI can access, retain, and share.
  • Unreliable outputs: Preventing inaccurate answers from becoming operational decisions.
  • Security threats: AI-enabled impersonation, phishing, and attacks that manipulate AI applications.
  • Excessive access: Managing the risks when AI assistants can retrieve confidential documents, send messages, or change systems.
  • Practical governance: Establishing approved tools, clear ownership, staff training, human review, and incident response procedures.

Interactive scenario: An employee uploads a confidential document into an AI tool to prepare an executive summary. What should have been in place before that happened—and what happens next?

[1 CPE] Risk in the AI Age: Understanding What Matters & Actions That Count

  Presented by Jennifer Toren • Director of Information Security GRC, Alaska Airlines

How do we make sound cybersecurity decisions when technology, threats, and business expectations keep changing, and when moving too slowly to embrace AI carries risks of its own?

Drawing on her experience leading cybersecurity risk programs at Alaska Airlines, Jennifer Toren brings an aviation perspective to understanding, communicating, and addressing risk in the AI age. In an industry shaped by thin margins, complex operations, and human safety, cybersecurity priorities must connect directly to business realities.

Through practical insights and thought-provoking predictions, Jennifer will explore how AI could reshape risk appetite, compliance, and expectations for incident readiness, and what those shifts mean for cybersecurity professionals. Attendees will leave with a clearer approach to identifying what matters, communicating this in terms that support business decisions, and taking purposeful action amid uncertainty.

Jennifer Toren is Director of Cybersecurity Governance, Risk and Compliance at Alaska Airlines, where she leads programs spanning enterprise cyber risk, regulatory compliance, vulnerability management, AI governance, and aircraft cybersecurity. Her experience spans financial services, technology, and aviation, including developing the security program at a tech startup. She brings an international perspective shaped by living and working in Canada, India and the United States. Jennifer takes a practical, business-focused approach to understanding, communicating and addressing risk, connecting cybersecurity decisions to the operational realities and strategic goals of the business.

[1 CPE] Harm Is the Product: What AI Governance Misses About Autonomous Offensive Agents

  Presented by Greg Anderson, Head of Solutions Engineering • Sprocket Security

Every autonomous pentest vendor now ships agents that run reconnaissance, exploitation, and validation against live environments. Almost none can tell a buyer what those agents are forbidden to do. The AI governance most organizations already hold does not help, because it rests on an assumption that all harm should be avoided. For a penetration testing agent, controlled, authorized harm is the product. A framework built to stop all harm cannot say how to authorize the right harm, in the right proportion, against the right target.

This session reframes the safety question for the people who buy autonomous offensive security rather than build it. It separates controls that merely instruct an agent to behave from controls that make misbehavior structurally impossible, the difference between “probably will not” and “cannot”. Attendees leave with a scorecard they can run against any vendor, including the one presenting, scored on evidence rather than assurances.

[1 CPE] Securing AI: Managing Risk Without Slowing Innovation

  Presented by Tanner Harrison, CISSP, Sr Sales Engineer • Fortinet

Artificial intelligence is changing how organizations work, make decisions, and defend against cyber threats. But as organizations adopt generative AI and increasingly autonomous AI systems, they also introduce new security challenges involving sensitive data, identity and access, prompt injection, third-party risk, and governance.

This panel discussion explores the evolving AI threat landscape through the lens of different perspectives on risk, governance, and innovation, providing practical strategies for securing AI adoption without unnecessarily limiting innovation. Attendees will learn how to identify emerging risks, establish appropriate guardrails, protect data, and apply security principles to AI systems throughout their lifecycle. The discussion will focus on vendor-agnostic strategies, actionable best practices, and the shared responsibility of security, IT, and business leaders in building a more secure AI-enabled organization.

[1 CPE] 30 Years of Security Assumptions Broke: Rethinking Security Controls in the Age of AI

  Presented by Rob Larsen, Advisor • Silverfort

Frontier AI has quietly retired a three-decade assumption: that defenders have time to react after an attacker moves. Autonomous models now compress full attack chains into minutes, chaining ordinary misconfigurations at machine speed with no hesitation and no fatigue. Detection becomes forensic instead of preventive. Vulnerability management can’t patch fast enough. Periodic access reviews can’t review fast enough.

The answer requires a fundamental shift: from preset admin-time access rules and too-reactive detection to controls placed at the moment it matters most: runtime. Every identity, human, machine, or AI agent, must authenticate to act. That moment is the only control point capable of operating at machine speed, intervening before lateral movement begins.

This session gives security leaders the framework to drive that shift — examining why traditional controls collapse against AI-powered adversaries, what runtime enforcement looks like in practice, and how to elevate identity to a genuine, autonomous enforcement point at the center of a modern security operating model.