RMISC 2019

**Tuesday PreConference Sessions (PC1-PC6) have a separate fee from the regular conference registation fee. You must register for the full conference to attend a PreConference Workshop. Pre-conference day includes a continental breakfast, lunch and breaks.

Community Day Sessions (CD1-CD2) are free and include access to the Continental Breakfast, Welcome Reception/Job Fair and the Opening Keynote Session with Michelle Dennedy on Tuesday. These sessions DO NOT include access to the rest of the conference.

2 DAY (FULL CONFERENCE) REGISTRATION

	By April 2, 2019	After April 2, 2019	After June 2, 2019
ISSA or ISACA Member	$235	$345	$400
Non-Member	$385	$495	$550
Government Employee*	$315	$425	$475
Full Time Student*	$115	$125	$125

*Two Day (Full Conference) Registration Fees include the following: Community Day Sessions, Opening Keynote and Reception
and two-full days of Education to include additional Keynotes and an offering of over 60 workshops session to choose from,
geared to meet your individual needs. Also included: Two full breakfasts, two full lunches, breaks and reception.

1 DAY (WEDNESDAY OR THURSDAY) REGISTRATION

	By April 2, 2019	After April 2, 2019	After June 2, 2019
ISSA or ISACA Member	$165	$275	$300
Non-Member	$265	$375	$400
Government Employee*	$205	$315	$340
Full Time Student*	$65	$75	$75

*One Day Registration Fees include the following: Keynote(s) on day of attendance and Reception on day of
attendance if applicable and an offering of multiple workshops session to choose from, geared to meet your
individual needs. Also included: Breakfast, Lunch and breaks.

Tuesday, June 4, 2019
7:30 AM - 8:00 AM	Continental Breakfast More Info
8:00 AM - 12:00 PM	PC1: Build a Security Awareness Program your Employees will Love Nick Santora $189.00 More Info
8:00 AM - 4:00 PM	CD1: Community Day: DevSecOps Day Eric Hendricks, Chris Martinez, Aaron Rinehart, Chris Roberts, DJ Schleen, Prima Virani, $0.00 More Info	CD2: Community Day: Rocky Mountain Privacy Forum $0.00 More Info	PC2: CMD-Ctrl Application Security CTF Lucien Brilliant $275.00 More Info	PC3: Cloud Security Training Mohamed Malki $275.00 More Info	PC4: Cyber Audit Training Tyler Farrar $275.00 More Info	PC5: Threat Hunting Workshop Kris Merrit $275.00 More Info
12:00 PM - 12:45 PM	Tuesday Lunch More Info
1:00 PM - 4:00 PM	PC6: Cybersecurity Strategy Development Keyaan Williams $189.00 More Info
4:30 PM - 5:30 PM	Keynote Session with Michelle Dennedy Michelle Dennedy More Info
5:30 PM - 7:00 PM	Welcome Reception and Job Fair in Exhibit Hall More Info

Wednesday, June 5, 2019
9:25 AM - 10:25 AM	Escape Room Living Security Escape Room	App Sec A1. AppSec in a World of Digital Transformation John Dickson - Denim Group, Ltd.	Incident Response A2. Red/Blue Teaming In Front Of A Live, Studio Audience Hank Leininger - KoreLogic Security	Architecture/How-To A3. Zero Trust: Death of the Traditional Office Network? Eric Sables - Pearson Education Lee Vorthman - Pearson Education	Emerging Trends A4. Those Old Rules for Password—Gone Hoyt L Kesterson II - Avertium Jacques Lucas - Avertium	Security Management A5. Suspiciously Inconspicuous Greg Foss - Carbon Black	Audit & Risk Management A6. INgineering the MargINs: Technology, Privacy, & Security and Minors, Minorities & Marginalized Communities Marty Esquibel - Colorado Department of Human Services	Privacy A7. Bootstrapping Privacy Stephen Edmonds - Ping Identity Corporation	Vendor A8. Bug Bounties and How They Help Jon Clay - Trend Micro, Inc.	Vendor A9. Approaches to Digital Risk Management: Securing your Critical Assets from Growing Threats Michael Marriott - Digital Shadows Ben Johnson - Datashield
11:15 AM - 12:15 PM	Escape Room Living Security Escape Room	App Sec B1. Automating Security in DevOps: Security in the Pipeline DJ Schleen - Sonatype	Incident Response B2. The Human Target: How Threat Actors Choose Their Mark Sherrod DeGrippo - Proofpoint	Architecture/How-To B3. Identity and Access in a Fractured Environment Jim Gerken - Novacoast, Inc.	Emerging Trends B4. SSL/TLS Then and Now... Joseph Dietz - CenturyLink	Security Management B5. Bootstrap Security: Cheap and Easy Wins for Early-Stage Companies Fredrick Lee - Gusto	Audit & Risk Management B6. SOC’ing It to Cybersecurity Threats Lauren Edmonds - Schellman Danny Manimbo - Schellman	Soft Skills B7. Photoshop Can't Fix Poor Ethics: The Impact of Technology on Ethical Behavior Amanda "Jo" Erven - Audit. Consulting. Education. LLC	Vendor B8. Application Security in an Ever Changing Digital Landscape Stan Wisseman - Micro Focus	Vendor B9.How Not to do Security! Greg Pepper - Check Point
1:00 PM - 2:00 PM	Escape Room Living Security Escape Room
2:00 PM - 3:00 PM	Escape Room Living Security Escape Room	Architecture/How-To C1. Taking a Company From Owned Weekly to Truly Secure Jeremiah Salzberg - CDW	Incident Response C2. PCI Alone Won't Save You: Lessons Learned from Credit Card Data Breaches Phillip Kealy - Mandiant, now part of Google Cloud	Architecture/How-To C3. Threat Intelligence: Open Source Lists vs Commercial Lists Nathaniel "Q" Quist - Palo Alto	Emerging Trends C4. Cloud Security on the Dollar Menu Michael Wylie - Richey, May Technology Solutions	Security Management C5. On Security Strategy: He Said. She Said. Merlin Namuth - Red Robin Kyriakos Lambros - RockCyber, LLC Matthew Sharp - Logicworks Deborah Blyth - State of Colorado	Audit & Risk Management C6. Math Is Hard: Compliance to Continuous Risk Management Max Blumenthal - Sandia Labs Christie Gross - Sandia National Labs	Soft Skills C7. Security Lessons from the Woofmutt… Chris Roberts - Nuspire, Boom Supersonic, Hackers Hideaway	Vendor C8. Security as a Business Asset: How to redefine security in a business context Lisa Love - L2 Cyber Solutions	Vendor C9.Threat Hunting Quince Rickard - LogRhythm
3:15 PM - 4:15 PM	Escape Room Living Security Escape Room	App Sec D1. Look Both Ways… And Then Shift Left! Eric Sables - Pearson Education Lee Vorthman - Pearson Education	Incident Response D2. Serving in Silence: The Latest in Attacker Techniques and Defensive Mitigations Brady Bloxham - Silent Break Security	Architecture/How-To D3. Threshing Floor: An Intelligence Analyst’s Approach to Transforming Raw Data into Actionable Insight Graham Westbrooke - Living Security	Emerging Trends D4. Angular for Pentesters Alex Useche - nVisium LLC	Security Management D5. Analyst View: Info/Cybersecurity Jobs, Skills, Pay Review and Forecast David Foote - Foote Partners, LLC	Audit & Risk Management D6. A CISO’s Perspective on Cloud Audits Matt Shufeldt - EVOTEK	Soft Skills D7. How to Measure and Communicate the Value of Security Keyaan Williams - CLASS-LLC	Vendor D8. Show and Tell From a Professional Hacker (and how I’d catch* myself) David Parker - Novacoast, Inc.	Vendor D9. Attackers Prey on Uncertainty: How to Fail at Threat Detection Stephen Frethem - Varonis Systems Inc.

Thursday, June 6, 2019
7:00 AM - 8:00 AM	Breakfast in the Exhibit Hall
8:15 AM - 9:15 AM	Keynote Keynote Session with Mikko Hypponen: State of the Net
9:15 AM - 10:00 AM	Networking Break with Exhibitors
9:15 AM - 10:15 AM	Escape Room Living Security Escape Room
10:10 AM - 11:10 AM	Compliance E1. Relationships are Critical		Incident Response E2. FIN7: A Case Study on Shim Database Persistence		Architecture/How-To E3. Open Source Intelligence: What Does the Internet Know About You?		Emerging Trends E4. A Practical Guide for Securing Kubernetes		Security Management E5. Developing and Implementing an Effective Security Awareness Program		Audit & Risk Management E6. Blockchains for Auditors (Part I of II)		Privacy E7. Maximizing Your Privacy Governance		Vendor E8. Times Have Changed…Why Haven’t We		Vendor E9. At the Intersection of API Security, Cybersecurity and IAM: The Next Wave of Intelligent Identity Solutions
10:15 AM - 11:15 AM	Escape Room Living Security Escape Room
11:15 AM - 12:15 PM	Escape Room Living Security Escape Room	Compliance F1. Insights on Impact of Cloud on SOC Reports (SSAE 18) & Privacy Controls		Incident Response F2. Hunting Mobile Rogue Access Points with Wireless Mesh Implants		Architecture/How-To F3. How VMware is Going Password-Less		Emerging Trends F4. Using Vault to Better Protect your Secrets		Security Management F5. Why CISO's Are Not Working Out At Corporations		Audit & Risk Management F6. Auditing Blockchain Systems with the CCSS (Part II of II)		Soft Skills F7. Empower Cyber Security Leadership Through Emotional Intelligence		Vendor F8. The Growing Need for Privacy in a Cloud First Era	Vendor F9. Cyber Incident Response from the Trenches: The IR checklist that got you here won’t get you out of here!
12:30 PM - 1:30 PM	Networking Lunch
1:30 PM - 2:00 PM	Desserts in Exhibit Hall
2:00 PM - 3:00 PM	Escape Room Living Security Escape Room	Compliance G1. Be Ready for NIST SP 800-171		Incident Response G2. Murky Waters: Analyzing Phish Kits		Architecture/How-To G3. Crypto Hygiene 101: How I Learned to Stop Hoping for Security and Love Cryptography		Emerging Trends G4. A DevSecOps approach to SOX Compliance		Security Management G5. CISO Panel		Audit & Risk Management G6. Cyberlaw Year in Review		Soft Skills G7. What I learned about Leading, Following, and Getting Out of My Own Way by Studying Improv		Vendor G8. Vulnerability Management 2.0 & Attaining Top-Level Security Without the Complexity.	Vendor G9. Manage Third-Party Risk with Visibility, Insight and Action!
3:15 PM - 4:15 PM	Escape Room Living Security Escape Room	Compliance H1. Secure Cloud Automation: A New Approach to FedRAMP Certification		Incident Response H2. Stopping Malware in Its Tracks Using Windows Device Guard and Code Integrity Policies		Architecture/How-To H3. Container Security Deep Dive		Emerging Trends H4. Are Your Cloud Servers Under Attack?		Security Management H5. Management Oriented Security		Audit & Risk Management H6. IT Security Audits: The Good, Bad, and Ugly		Soft Skills H7. How CISOs Gain Trust in the Boardroom		Vendor H8. The Evolving Risk Landscape	Vendor H9. M-Trends 2019: Trends Behind Today’s Most Impactful Cyber Breaches and Cyber Attacks
4:15 PM - 5:15 PM	Keynote Closing Comedy Keynote Session with Nancy Norton
5:15 PM - 5:45 PM	Lite Reception & Prize Drawings

Registration Fees

CPE Credits

AGENDA (Subject to Change)