A consolidated keynote address focusing on cyber criminal threats, specifically ransomware, and trends from that ecosystem. I’ll also discuss state-sponsored cyber threats including China, Russia, Iran, and the DPRK. Finally, I’ll speak about mitigation and resources – how to best work with the FBI and how we can collaborate to strengthen America’s cyber defenses.

Modern identity is a fragile web; a compromise in AD can ripple through Entra and Okta, while CIAM failures can impact revenue and trust. Both share a single point of failure: if identity breaks, the business stops. This session will deliver a unified strategy for resilience across AD, Entra, Okta, and CIAM. Learn to isolate compromises, audit configurations, and rapidly restore trust.

Every organization carries technical debt.  Carry too much, and the cybersecurity profile worsens, and the ability of the organization to keep up with the business declines. Introduce AI into the mix, and technical debt is an operational and risk burden that cannot be ignored.

In this session we explore what technical debt is, why it’s difficult to manage and strategies for programmatically managing technical debt.

Participants will take away usable techniques to improve their technical debt management practices.

Ohio’s political subdivisions face growing cyber threats, often without the staff or resources to address them alone. This presentation introduces the Ohio Cyber Reserve, a statewide volunteer force that assists public entities, educates communities, and supports incident response. Attendees will learn how the program began, the impact it is making across Ohio, why its model is attracting attention beyond the state, and how cybersecurity professionals can connect, contribute, and serve.

More tools haven't made us safer — 70% of organizations were breached last year despite a market packed with 3,000+ security vendors, and most teams are stuck doing manual investigation across disconnected tools instead of actually defending.

In this session, we'll talk about what's really getting in the way of faster detection and response, and how a different kind of MDR model — one that plugs into the tech you already own, blends human analysts with AI, and operates as a transparent extension of your team — can help you cut through alert noise, shrink response times, and get more out of the security investments you've already made.

Whether you're an analyst tired of chasing alerts or an exec trying to make sense of your security ROI, you'll walk away with practical ideas for building a more resilient program without ripping and replacing your stack.

Abstract
AI and new digital technologies will continue to shift the cybersecurity landscape in 2026. This session explores how modern tools can enhance detection, response, and decision making while introducing new risks tied to generative systems, data integrity, and fast moving threat innovation. Leaders will gain a clear view of how to adopt emerging technology in a responsible and strategic way that supports resilience and aligns with enterprise risk goals.

Key Takeaways
• How AI and emerging tech are reshaping core security functions
• The new risks created by generative models and evolving attack techniques
• Practical governance steps that support responsible AI use
• Examples of organizations pairing innovation with disciplined risk management

AI is now both a weapon and a shield. TrendAI™ research shows malicious actors using large language models to do reconnaissance, craft convincing phishing lures, automate vulnerability research, and generate malware at scale, lowering the barrier for even less sophisticated threat groups. At the same time, defenders are using AI to correlate signals across massive attack surfaces, surface behavioral anomalies, and respond with a speed and precision that simply wasn't possible before. I'll share what we're seeing in active campaigns and how AI is fundamentally shifting the economics of defense in our favor

Adopting a risk-based mindset significantly enhances cyber resilience by enabling organizations to prioritize resources on protecting high-value assets, mitigate threats more effectively, and adapt dynamically to an evolving landscape. This strategic approach shifts focus from prevention to containment of breach, ensuring a more agile, efficient, and robust cybersecurity posture capable of minimizing the impact of cyberattacks.

As generative AI reshapes how employees work, security teams are racing to govern a rapidly expanding AI attack surface — from sanctioned copilots to shadow AI tools, coding assistants, agentic workflows, and the LLMs that power them. This session introduces Netskope One AI Security, a single solution built on the Netskope One platform to govern the AI ecosystem and protect data without slowing the business down. We'll walk through how organizations gain real-time discovery and visibility into AI app and agent usage, secure the AI pipeline from data sources and custom apps through to the LLM, and protect runtime interactions by understanding user and agent intent and blocking threats like prompt injection and jailbreaking. You'll see how AI Command Center, AI Gateway, NG-SWG, DLP, and Agentic Broker/MCP Server capabilities unify into one workflow-driven experience — discovery and topology, security posture and risk, and policy-driven action — securing users, agents, and data across every state and context: in motion, in use, at rest, managed, shadow, or personal.

Abstract:
As organizations expand their digital ecosystems, risks extend far beyond internal networks. Threat actors are increasingly exploiting supply chains, third-party vendors, and identity gaps to gain access. This session brings together cybersecurity leaders and solution providers to explore how these interwoven risks create a complex attack surface -and how technology can help mitigate them.

Panelists will share real-world examples, lessons from managing large vendor networks, and innovative tools and frameworks for continuous risk assessment. Discussions will highlight strategies for mapping hidden dependencies, enforcing strong identity governance, and strengthening resilience through automation, collaboration, and transparency. Attendees will gain actionable insights on reducing exposure, improving third-party risk visibility, and leveraging technology to secure their extended digital ecosystem.

Key Takeaways:
• Understand how supply chains, vendors, and identities amplify organizational risk.
• Explore practical methods and tools for assessing, monitoring, and mitigating third-party and ecosystem vulnerabilities.
• Learn how to treat identity as a security perimeter using zero trust, access governance, and automated solutions.
• Gain insights from real-world breaches that reveal common gaps in vendor and identity controls.
• Walk away with a technology-informed framework to enhance resilience, secure partnerships, and reduce exposure across your digital ecosystem.

CIOs and CISOs are increasingly accountable for execution, risk reduction, and budget justification — yet most are operating with limited visibility into how their cyber and IT workforce actually functions. Org charts, job titles, and headcount reports fail to show how work is really performed across FTEs, contractors, consultants, and MSPs, creating blind spots that lead to burnout, stalled strategy, and unquantified risk.

In this session, Deidre Diamond, Founder & CEO of CyberSN, introduces Workforce Intelligence as a new operational lens for cyber and IT leadership. Drawing on real-world engagements with enterprise security and IT teams, this talk explores how leaders can gain clear and ongoing visibility into workforce utilization, capability gaps, and execution risk — without adding operational burden to already stretched teams.

Attendees will learn how workforce blind spots directly impact retention, strategy execution, and budget outcomes, why workforce risk is now a board-level concern, and how leading CIOs and CISOs are using workforce intelligence to move from reactive firefighting to intentional workforce design.

This session is designed for leaders who want to align people, skills, and spend to strategy — and confidently explain workforce risk and investment decisions to executives and boards.

Artificial intelligence is accelerating how organizations operate—but it is also amplifying risk. As AI adoption expands, the speed, scale, and potential blast radius of data-related incidents are increasing at an unprecedented rate. This quick presentation will highlight 5 risk pitfalls and tips on how to avoid them so that you can keep resilience, security and more aligned to power your business.  This is the cornerstone of Veeam’s approach to achieving Data and AI Trust, enabling organizations to confidently embrace AI innovation while maintaining security, compliance, and operational continuity.

Traditional GRC relies on subjective "High/Medium/Low" heatmaps rather than defensible data. The presentation bridges this gap by transforming static compliance metrics into precise, math-ready inputs for probabilistic models like Monte Carlo simulations. By integrating the Cloud Controls Matrix with the FAIR Controls Analytics Model, risk quantifiers can evaluate true control efficacy based on variance management and underlying dependencies. This framework allows professionals to measure actual systemic resistance rather than relying on assumed compliance. Ultimately, it enables security leaders to provide the leadership with clear financial impact analysis. Practitioners can definitively demonstrate how specific control improvements reduce overall exposure to financial loss.

Most security leaders understand the potential of AI. Far fewer have seen what it takes to operationalize AI in real-world security operations. Drawing on lessons learned from deploying agentic AI at scale, Jayme Johnston explores why many initiatives fail to move beyond pilots and where organizations commonly get stuck. He will examine how AI is reshaping detection, investigation, and response workflows, along with the governance and oversight challenges that emerge as security teams adopt agent-driven operations. Attendees will gain a practical perspective on what separates experimentation from production and why human judgment remains essential to building trustworthy security outcomes.

Cybersecurity challenges are complex, and solving them requires teams with diverse perspectives, skills, and experiences. This panel explores how diversity drives better problem-solving, innovation, and threat detection in security organizations.

Panelists will share strategies for attracting and retaining talent from varied backgrounds, leveraging unique thinking styles, and applying different experiences to uncover blind spots in risk management. Attendees will gain actionable insights for building teams that are not only technically skilled but more adaptive, creative, and resilient in the face of evolving cyber threats.

Key Takeaways:

• Understand how diversity strengthens problem-solving, innovation, and threat response.
• Learn approaches to recruit and retain talent from non-traditional backgrounds.
• Explore how different perspectives and thinking styles reveal hidden risks.
• Gain strategies to create teams that are adaptable, collaborative, and resilient.
• Walk away with practical ideas for integrating diversity into cybersecurity team design and strategy.

Most security programs measure effort, not outcomes. CISOs patch thousands of vulnerabilities and deploy countless tools, yet real resilience depends on proving defenses actually work. Organizations are shifting from assumptions to evidence by using autonomous pentesting to view environments through an attacker’s lens.  Join this session to walk away with insights on: Prioritizing real attack paths and exploitable vulnerabilities Closing the find, fix, verify loop with measurable improvement Reducing attacker dwell time with offense‑informed detection  Cyber resilience isn’t about being perfect, it’s about getting better over time. And the only perspective that truly matters is the attacker’s.

Ransomware attacks have become more sophisticated than ever. 66% of organizations have experienced at least one attack in the past two years, and 96% of those target backup data. So, when—not if—a breach happens, and your business, reputation, and career are on the line, immutable backup storage is your best and last line of defense.  However, if ‘immutable’ data can be overwritten by a backup or storage admin, a vendor, or an attacker, then it cannot be considered a storage solution with Absolute Immutability. In this presentation, learn how to make your backup data ransomware-proof with Absolute Immutability.

An agent doesn't wait for your scan window, and an ungoverned agent identity is really an ungoverned path to sensitive data. Finding it is the easier half. Ben Meyers, VP of Strategic Solutions at PKWARE, covers why classification is what lets you match remediation to the business need instead of applying one blunt fix to everything, and how that simplifies your audit as you already have the evidence.  

What attendees will learn;

• Why identity governance and data governance are the same problem wearing two badges
• Why one remediation tactic applied to everything either breaks the business or leaves data exposed 
• What an audit trail must contain to work as evidence instead of an explanation