Topic: Information Security

Seminar Topics

[1 CPE] Securing AI: Managing Risk Without Slowing Innovation

  Presented by Tanner Harrison, CISSP, Sr Sales Engineer • Fortinet

Artificial intelligence is changing how organizations work, make decisions, and defend against cyber threats. But as organizations adopt generative AI and increasingly autonomous AI systems, they also introduce new security challenges involving sensitive data, identity and access, prompt injection, third-party risk, and governance.

This panel discussion explores the evolving AI threat landscape through the lens of different perspectives on risk, governance, and innovation, providing practical strategies for securing AI adoption without unnecessarily limiting innovation. Attendees will learn how to identify emerging risks, establish appropriate guardrails, protect data, and apply security principles to AI systems throughout their lifecycle. The discussion will focus on vendor-agnostic strategies, actionable best practices, and the shared responsibility of security, IT, and business leaders in building a more secure AI-enabled organization.

[1 CPE] AI as the Assistant, Not the Decider: Keeping Humans in the Loop in Cybersecurity

  Presented by Mike Hamilton, Emeritus CISO • Datec

The role of a SOC Analyst has changed with the introduction of AI – the Analyst is now more focused on response than investigation. This session examines the appropriate role of AI in enhancing security operations, from analyzing massive volumes of telemetry and alerts to supporting faster, more informed analyst decisions.

The discussion will explore why keeping a human in the loop matters, the distinction between autonomous AI in offensive and defensive environments, and the operational costs that can be overlooked when adopting AI-driven SOC technologies. Attendees will walk away with a more practical way to evaluate AI: not as a replacement for security professionals, but as an assistant that helps them make better decisions at greater speed and scale.

[1 CPE] Making The Case For CTEM

  Presented by Jennifer Carson, Sr Sales Engineer • Zafran Security

What does it really mean to analyze your vulnerabilities in 2026? Drawing on a real-world workflow, Zafran’s West Senior Sales Engineer, Jennifer Carson, will host an interactive session to show why traditional approaches to vulnerability management no longer fit the changing threat landscape.

Making the case for continuous threat exposure management (CTEM) as a discipline, not just a tool.

[1 CPE] 30 Years of Security Assumptions Broke: Rethinking Security Controls in the Age of AI

  Presented by Rob Larsen, Advisor • Silverfort

Frontier AI has quietly retired a three-decade assumption: that defenders have time to react after an attacker moves. Autonomous models now compress full attack chains into minutes, chaining ordinary misconfigurations at machine speed with no hesitation and no fatigue. Detection becomes forensic instead of preventive. Vulnerability management can’t patch fast enough. Periodic access reviews can’t review fast enough.

The answer requires a fundamental shift: from preset admin-time access rules and too-reactive detection to controls placed at the moment it matters most: runtime. Every identity, human, machine, or AI agent, must authenticate to act. That moment is the only control point capable of operating at machine speed, intervening before lateral movement begins.

This session gives security leaders the framework to drive that shift — examining why traditional controls collapse against AI-powered adversaries, what runtime enforcement looks like in practice, and how to elevate identity to a genuine, autonomous enforcement point at the center of a modern security operating model.

[1 CPE] Proving Cyber Resilience: Measuring Outcomes, Not Effort

  Presented by David Pier, Sales Engineer • Horizon3

Most security programs measure effort — not outcomes. Organizations patch thousands of vulnerabilities, deploy dozens of tools, and run annual tabletop exercises… but when an attacker shows up, none of that matters.

What matters is whether they can prove their defenses actually work.

In this talk, Horizon3 shares how leading organizations are using autonomous pentesting to see their environment through the attacker’s eyes — continuously, safely, and at scale. By shifting from assumptions to proof, they’ve learned to:

  • Prioritize what’s exploitable. Focus limited resources on the weaknesses that truly put the business at risk that are known to be abused by threat actors.
  • Quickly fix what matters. Close the loop from find → fix → verify and reduce your exploitable attack surface.
  • Reduce attacker dwell time. Use pentest results to precisely deploy honeyTokens to detect compromise early, and to continuously prove your EDR and SIEM are tuned and working as intended.

Cyber resilience isn’t about being perfect — it’s about getting better over time. And the only perspective that truly matters is the attacker’s.

[1 CPE] The Internet Is Talking to Itself: Bots, AI, and Evolving Security

  Presented by Ashok Naiku, Sr Enterprise Security Architect  • Fastly

The internet is undergoing one of its biggest transformations since the rise of mobile: automated traffic is no longer limited to search engines and simple bots. AI assistants, Large Language Models, and autonomous agents are increasingly discovering, purchasing, and interacting with online services on behalf of people. As the internet begins talking to itself, organizations must rethink how they distinguish beneficial automation from abuse, protect APIs, and define access and trust without blocking innovation. This session explores the evolution of internet automation, emerging security challenges, and how modern approaches to bot management, API security, and responsible AI can help organizations prepare for an increasingly autonomous future.

[1 CPE] Building Trust for What’s Next: PKI Modernization & Quantum Readiness

  Presented by Jared Menninger, Sr Solutions Engineer • DigiCert

Certificate lifetimes are shrinking. Browser requirements are evolving. Machine identities are growing exponentially. At the same time, organizations are beginning to plan for post-quantum cryptography while supporting new AI-driven systems that depend on trusted digital interactions.

These changes are transforming PKI from a traditional security function into the operational trust layer for modern business.

This session provides a practical roadmap for modernizing PKI, improving visibility into machine identities, automating certificate lifecycle management, and building crypto-agility for future cryptographic transitions. Attendees will leave with actionable steps to reduce operational risk today while preparing for post-quantum security and the next generation of digital trust.

[1 CPE] How to Protect Your Company From Your [Non-Malicious] Employees

  Presented by Howard Globus, Cybersecurity • IT On Demand

Business leaders like to believe that company technology stays strictly for business. It doesn’t. Even your most trusted employees use company hardware in ways you never anticipated – personal browsing, random downloads, and content that has nothing to do with their job description. That is not a character flaw. It is a security problem, and it is one of the most consistent and least discussed vectors for data breaches, ransomware incidents, and regulatory violations.

Unlike targeted attacks, non-malicious insider risk doesn’t look dangerous until something has already gone wrong. Policies don’t stop it. Locked-down environments slow it down but rarely prevent it. And the “it won’t happen here” mindset is statistically the riskiest position an organization can hold.

In this session, Howard Globus addresses the human side of cybersecurity directly – with candor, real-world stories, and a clear-eyed look at what actually works. Drawing on three decades of experience working with individuals, mid-sized businesses, and Fortune 100 companies, Howard walks IT and security professionals through the true dynamics of employee behavior, the real limits of technical controls, and a practical spectrum of defensive measures – from budget-conscious fundamentals to more comprehensive approaches – so attendees can make the right choices for their organization’s reality, now and in the future.

Attendees will leave with:

  • A clear-eyed view of how non-malicious employee behavior creates measurable cyber exposure – and why conventional controls miss it
  • An honest assessment of where acceptable use policies and technical safeguards fall short
  • A decision framework for evaluating defensive measures that fits their organization’s size, budget, and risk tolerance
  • A practical model for building a culture of digital responsibility without damaging team trust or productivity
  • Specific, implementable steps they can bring back to their organizations the same day

[1 CPE] Risk in the AI Age: Understanding What Matters & Actions That Count

  Presented by Jennifer Toren • Director of Information Security GRC, Alaska Airlines

How do we make sound cybersecurity decisions when technology, threats, and business expectations keep changing, and when moving too slowly to embrace AI carries risks of its own?

Drawing on her experience leading cybersecurity risk programs at Alaska Airlines, Jennifer Toren brings an aviation perspective to understanding, communicating, and addressing risk in the AI age. In an industry shaped by thin margins, complex operations, and human safety, cybersecurity priorities must connect directly to business realities.

Through practical insights and thought-provoking predictions, Jennifer will explore how AI could reshape risk appetite, compliance, and expectations for incident readiness, and what those shifts mean for cybersecurity professionals. Attendees will leave with a clearer approach to identifying what matters, communicating this in terms that support business decisions, and taking purposeful action amid uncertainty.

Jennifer Toren is Director of Cybersecurity Governance, Risk and Compliance at Alaska Airlines, where she leads programs spanning enterprise cyber risk, regulatory compliance, vulnerability management, AI governance, and aircraft cybersecurity. Her experience spans financial services, technology, and aviation, including developing the security program at a tech startup. She brings an international perspective shaped by living and working in Canada, India and the United States. Jennifer takes a practical, business-focused approach to understanding, communicating and addressing risk, connecting cybersecurity decisions to the operational realities and strategic goals of the business.

[1 CPE] Data Resilience in the Age of Attack: Protect What Matters

  Presented by Landra Pierce, Product Strategy Technologist • Veeam

Cyberattacks are no longer a distant threat; they are a reality every IT team must be prepared for. When an attack occurs, your data becomes both the primary target and the key to recovery. Many organizations still rely on backup strategies that are designed for hardware failures or accidental deletions, rather than today’s threats, like ransomware, insider risk, and automated attacks. This disconnect creates vulnerabilities, especially when backups become an overlooked entry point in your security strategy. In this session, we will address these challenges to help you better protect your organization.

This session is ideal for IT professionals who want greater confidence in safeguarding their data and peace of mind. We will examine the most common oversights that leave organizations, including those in government, education, healthcare, and other sectors, exposed to cyberthreats. You’ll discover how teams are advancing beyond basic backup to adopt a cyber-ready approach, including topics like immutability, threat awareness, rapid recovery, and intelligent automation.

Our focus will be practical and grounded in real-world scenarios, and what truly works when pressure is high and time is limited. Because when every minute counts and trust is at stake, data resilience means more than surviving an attack. It’s about protecting what matters most and emerging even stronger.