Topic: Information Security

Seminar Topics

[1 CPE] Cybersecurity and Compliance For 2026

  Presented by Structured

This session examines how organizations can align cybersecurity, privacy, and compliance programs with the realities of 2026. The presentation reviews current threat trends, executive accountability requirements, and the expanding impact of artificial intelligence on risk management. It then connects federal, state, and industry obligations, including NIST CSF 2.0, HIPAA, CJIS, PCI DSS 4.0, CMMC, and emerging privacy laws to practical security program design. Attendees will leave with a clear framework for building a complete security program that integrates governance, segmentation, risk management, Zero Trust principles, and penetration testing to reduce risk and support regulatory readiness.

[1 CPE] Proving Cyber Resilience: Measuring Outcomes, Not Effort

  Presented by Andy Rezabek, Sales Engineer • Horizon3.ai

Most security programs measure effort — not outcomes. Organizations patch thousands of vulnerabilities, deploy dozens of tools, and run annual tabletop exercises… but when an attacker shows up, none of that matters.

What matters is whether they can prove their defenses actually work.

In this talk, Horizon3.ai shares how leading organizations are using autonomous pentesting to see their environment through the attacker’s eyes — continuously, safely, and at scale. By shifting from assumptions to proof, they’ve learned to:

  • Prioritize what’s exploitable. Focus limited resources on the weaknesses that truly put the business at risk that are known to be abused by threat actors.
  • Quickly fix what matters. Close the loop from find → fix → verify and reduce your exploitable attack surface.
  • Reduce attacker dwell time. Use pentest results to precisely deploy honeyTokens to detect compromise early, and to continuously prove your EDR and SIEM are tuned and working as intended.

Cyber resilience isn’t about being perfect — it’s about getting better over time. And the only perspective that truly matters is the attacker’s.

[1 CPE] 30 Years of Security Assumptions Broke: Rethinking Security Controls in the Age of AI

  Presented by Pete Petersen, Sales Engineer • Silverfort

Frontier AI has quietly retired a three-decade assumption: that defenders have time to react after an attacker moves. Autonomous models now compress full attack chains into minutes, chaining ordinary misconfigurations at machine speed with no hesitation and no fatigue. Detection becomes forensic instead of preventive. Vulnerability management can’t patch fast enough. Periodic access reviews can’t review fast enough.

The answer requires a fundamental shift: from preset admin-time access rules and too-reactive detection to controls placed at the moment it matters most: runtime. Every identity, human, machine, or AI agent, must authenticate to act. That moment is the only control point capable of operating at machine speed, intervening before lateral movement begins.

This session gives security leaders the framework to drive that shift — examining why traditional controls collapse against AI-powered adversaries, what runtime enforcement looks like in practice, and how to elevate identity to a genuine, autonomous enforcement point at the center of a modern security operating model.

[1 CPE] Proving Cyber Resilience: Measuring Outcomes, Not Effort

  Presented by Joe Nay, Solutions Architect • Horizon3.ai

Most security programs measure effort — not outcomes. Organizations patch thousands of vulnerabilities, deploy dozens of tools, and run annual tabletop exercises… but when an attacker shows up, none of that matters.

What matters is whether they can prove their defenses actually work.

In this talk, Horizon3.ai shares how leading organizations are using autonomous pentesting to see their environment through the attacker’s eyes — continuously, safely, and at scale. By shifting from assumptions to proof, they’ve learned to:

  • Prioritize what’s exploitable. Focus limited resources on the weaknesses that truly put the business at risk that are known to be abused by threat actors.
  • Quickly fix what matters. Close the loop from find → fix → verify and reduce your exploitable attack surface.
  • Reduce attacker dwell time. Use pentest results to precisely deploy honeyTokens to detect compromise early, and to continuously prove your EDR and SIEM are tuned and working as intended.

Cyber resilience isn’t about being perfect — it’s about getting better over time. And the only perspective that truly matters is the attacker’s.

[1 CPE] The 2026 AI SOC Leadership Report: What Security Leaders Really Want

  Presented by Torq

Torq surveyed 450 SOC leaders globally to find out what AI is actually doing inside the SOC. The findings challenged some assumptions — and confirmed others.

We’ll dig into insights including:

  • Why 97% of security leaders are confident AI can handle triage, but only 35% are using it there
  • What’s behind the trust barrier that 92% of leaders say is holding AI back
  • What 85% of leaders mean when they say they want a “unified platform”
  • Where teams plan to expand AI over the next 12 months — and what’s standing in their way

[1 CPE] Phishing You Never See: Combat Lessons for the AI Era

  Presented by Dan Zaffino, Sr Solutions Engineer • Yubico

Senior Solutions Engineer and Marine Corps veteran Dan Zaffino draws on lessons from combat patrols in Iraq. This session reframes AI-driven phishing through a hard truth: the threat was the road itself. You didn’t get to shoot back, and survival came down to how you were postured before contact. The IED is the phish you never see forming.

Most other talks on AI will leave you with another threat to dodge. This one is armor.

Phishing is the #1 way attackers get in. AI didn’t invent it. AI weaponized it. Perfect grammar, infinite scale, cloned voices, and deepfakes have erased every tell you trained people to catch.

We’ll look honestly at why most MFA isn’t armor. Push, OTP, and SMS all fail against AI-grade phishing, but one approach doesn’t just reduce the threat, it takes it off the table. Vendor-agnostic, practical, and built for what you can do Monday morning.

Fear kills action, but action cures fear.

You’re already in the fight. Come learn how to present a hard target.

[1 CPE] AI: Cybersecurity’s Double-Edged Sword

  Presented by Daniel Navarro, Sales Engineer • ESET

This session explores how artificial intelligence is reshaping the modern cyber threat landscape by empowering both attackers and defenders. It examines how adversaries use AI to scale attacks, evade detection, and increase their effectiveness. The presentation also highlights how organizations can leverage AI to build proactive, adaptive defenses that detect and respond to threats more efficiently. Finally, it showcases how ESET applies AI-driven technologies to protect against evolving cyber-attacks and strengthen overall security resilience.

[1 CPE] New Era of Deception: AI and Deepfakes

  Presented by Morgan Trust, Associate Penetration Tester, Offensive Services • FRSecure

Artificial Intelligence (Al) is significantly transforming social engineering tactics. Join Morgan Trust as he discusses the evolution of Al as a threat factor and how, by leveraging Al, attackers can automate and enhance phishing schemes, creating highly personalized and convincing messages that are more accurate and effective.

[1 CPE] Bridging Zero Trust and SASE: A Unified Approach to Modern Cybersecurity

  Presented by Fortinet

This will be a panel discussion on how organizations can effectively bridge Zero Trust and SASE to create a unified, adaptive cybersecurity architecture that meets the demands of today’s hybrid workforce and threat landscape.

Key Takeaways:

  • Understand the core principles of Zero Trust and SASE, and how they complement each other.
  • Learn practical strategies for implementing a unified approach without adding complexity or disrupting operations.
  • Gain insights into real-world use cases and lessons learned from organizations successfully integrating these frameworks.

Moderator: Michael Lippman, Regional Channel Systems Engineer, Fortinet

Panelists:

  • Pete Lujan, Sr Director, Systems Engineering, Fortinet
  • Kevin Walter, Systems Engineer, Fortinet
  • Seth Barnum, Systems Engineer, Fortinet
  • Norm Williams, Sr Solutions Engineer, CompuNet

[1 CPE] Has Mythos Forever Broken Cybersecurity?

  Presented by Christer Swartz, Director, Industry Solutions  • Illumio

Mythos is a wake-up call to the exposure which everyone has to cybercrime. No target is too small and 100% of us will eventually be breached. Segmentation is the foundation of isolating the inevitable breach, preventing a small problem from escalating to putting you in the news as the latest victim. Learn how to discover and enforce all breaches, securing your environment from both known and unknown threats.

Christer Swartz is Director of Industry Solutions for Illumio. He has spent many years in the Cyber industry, beginning with a small startup called Cisco. He was part of Netflix’s design of Internet video-streaming, without breaking the Internet, then with Palo Alto Networks. He focuses on the details of cybersecurity to specific industries, and how platforms integrate across the broader security industry, from Cloud-managed Kubernetes to Data Center mainframes.