Salt Lake City

In today’s digital world, enterprises have never been more hyper-connected. And the interconnectedness is only accelerating. Every organization is in the process of some digital transformation or digital modernization. Additionally, the explosion of Artificial Intelligence is stealing the attention, resources, and budgets of cyber teams at the expense of other aspects of their IT environments. This rate and pace of change often draw attention away from ensuring legacy systems keep up with the evolving threat landscape. With approximately 90% of all breaches beginning with an email, email security is a very big rock. In this session, we will discuss the current state of email security, the trends in moving to cloud-based email like Gmail and O365, the additional risks, and why a comprehensive email security strategy doesn’t just include email.

Join us for this executive session designed specifically for CISOs and cybersecurity leaders seeking a more effective, modern approach to data security. You’ll learn why traditional DLP solutions have consistently underdelivered—failing to protect critical business data and demanding constant manual input. We’ll explore how Concentric AI uses powerful, contextual AI to automatically discover, classify, and secure sensitive information—without relying on rules, regex, or training samples.

Through compelling use cases, we’ll demonstrate how semantic understanding of data enables better governance, focused remediation, and smarter protection of business-critical assets like IP, financial data, and strategic plans. Walk away with actionable insights into how context-driven security strategies can reduce risk, simplify compliance, and empower your team to confidently support GenAI adoption across the enterprise. It’s time to rethink data security. 

Join us for a discussion on Agentic AI and its role in hyperautomation. Learn about the differences between Agentic and Generative AI, as well as the benefits and potential risks of AI in cybersecurity. Discover best practices and strategies for implementing AI in the SOC, including threat detection, human-in-the-loop systems, and ensuring data privacy. Explore the strengths and weaknesses of AI and automation. We’ll provide actionable tips for getting started with AI in your SOC and discuss some challenges and things to consider in your journey.

While security teams have invested heavily in “shifting left,” vulnerabilities continue to surface late, teams remain burned out, and security still feels reactive rather than proactive. What if the answer isn’t shifting security earlier, but embedding security by default from the start? In this session, we’ll explore why traditional vulnerability management and never-ending CVE triage fail to address modern software supply chain challenges. Learn how leading organizations are adopting a proactive “start left” strategy using hardened container images, signed artifacts, and automated SBOM generation to build security directly into their software pipelines. Walk away with actionable insights on how your organization can step off the vulnerability treadmill and build resilience from day one.

Key Topics:

• Ransomware, phishing, and advanced persistent threats (APTs).
• Optimizing operations and improving security through Orchestration and Automation.
• Understanding the impact of AI and IoT on security vulnerabilities.

Why It Matters:
Staying informed about the latest threats helps leaders anticipate and prepare for risks that can disrupt operations.

The rise of Generative AI has revolutionized how we create and consume data, but it has also unleashed new challenges for security teams, including the emergence of shadow AI and dark data. This session dives into how data security solutions—such as data loss prevention (DLP), insider risk management (IRM), and data classification—are evolving to address these threats.

First, let me make this clear, I am not a pen tester, but I have been on the receiving end of penetration tests more than 30 times over my career, and I’ve learned a few things along the way. Pen tests can be valuable tools for improving security—if they are done well and if your organization is prepared to make the most of them.

In this presentation, I’ll cover key lessons I’ve learned from managing and responding to pen tests, including:

• How to Prepare for a Pen Test
• Not All Pen Testing is Equal
• What to Expect from a Pen Test
• Tracking IOCs in Real-Time
• Remediating Findings Effectively
•  

Beyond these core topics, I’ll also share insights on working with pen testers, how to challenge weak findings, the importance of retesting, and how to translate results into actionable security improvements for leadership.

By the end of this session, you’ll walk away with a clear strategy for making penetration tests more than just a compliance checkbox—turning them into a meaningful driver for strengthening your security posture.