7:30 AM - 8:30 AM
 
Studio Theatre
Breakfast
 
8:45 AM - 9:00 AM
 
Studio Theatre
Kick-Off
 
9:00 AM - 9:50 AM
Keynote
Studio Theatre
Build a Cyber Resilient Organization!
Cornelius Spillane, Pillar Technology Partners, LLC
10:00 AM - 10:50 AM
Auditing
Meeting Room B
Master the Art of Managing Multiple Audits
Nisha Ellis, Schellman Compliance, LLC.
Matt Crane, Schellman Compliance, LLC.
GRC-P
Terrace Room B
The Rise of GenAI: Redefining Human-Machine Interactions and the Need for a New GRC Paradigms
Maria Schwenger, International Business Machine (IBM)
Information Security
Terrace Room A
AppSec wins with Agile Penetration Testing
Rahul Raghavan, Kroll
Let's Figure It Out Together
Meeting Room C
Software Supply Chain Risk Management - Design Compliance Team
 
Workshop
Terrace Room C
How to start a BCDR program from the ground up!
Bryan Blaustein, Compass Real Estate
10:50 AM - 11:00 AM
 
3rd Floor Foyer
Coffee Break
 
11:00 AM - 11:50 AM
Auditing
Meeting Room B
The CMMC Rule is Here: What Organizations Should Expect - Tom Tollerton
Tom Tollerton, FORVIS, LLP
GRC-P
Terrace Room A
The Bricoleur Security Leader
James W. Baird, GOTO FOODS
Information Security
Terrace Room A
A Comedy in Compliance
Scott Needling, Needling Worldwide, LLC
Paige Needling, Needling Worldwide, LLC
Jeff Combs, J. Combs Search Advisors
Let's Figure It Out Together
Meeting Room C
Securing the IoT - Design Compliance Team
 
Workshop
Terrace Room C
The Cyber Attack Lifecycle: Staying One Step Ahead of Adversaries
Pamela Beck, BlueVoyant
12:00 PM - 1:00 PM
 
Studio Theatre
Lunch
 
1:00 PM - 1:50 PM
Auditing
Meeting Room B
Preparing for PCI DSS v4.0 Assessments: A Roadmap to Compliance
Brandon Breslin, CompliancePoint, Inc.
GRC-P
Terrace Room B
Designing for the Cloud (what IS unique about it anyway?)
Larry Holt, ISSA
Information Security
Terrace Room A
The Human Element Is Not Your Punching bag
Ryan Basden, Bishop Fox
Let's Figure It Out Together
Meeting Room C
SOC 2 TSC Updates - Design Compliance Team
 
Workshop
Terrace Room C
Integrated Risk Management
Ian Burnett, RGP.com
2:00 PM - 2:50 PM
Auditing
Meeting Room B
Building and auditing IT compliance programs, the human element, using SOC 2 and ISO 27001
Jason Lannen, TurnKey IT Solutions, LLC
GRC-P
Terrace Room B
Societal Change: Using Steganalysis and Other Cybersecurity Practices for the Greater Good
Chris Yadon, Saprea
Keyaan Williams, CLASS-LLC
Information Security
Terrace Room A
DevSecOps – Application Security in Software Development
Nihat Guven, PurpleBox
Let's Figure It Out Together
Meeting Room C
How to get your Board on Board/Management Buy In - Design Compliance Team
 
3:00 PM - 3:15 PM
 
3rd Floor Foyer
Break
 
3:30 PM - 4:20 PM
Auditing
Meeting Room B
Audit Positive - How to Get Colleagues to WANT an Audit
Ezra Flom, ScribeAmerica
GRC-P
Terrace Room B
Digesting the Privacy Letters Soup
Almir Rocha⁶, TCS - Tata Consultancy Services
Information Security
Terrace Room A
The Velveteen Rabbit: Can AI Create Viable Resiliency plans?
Kevin Finch, Sayers
Let's Figure It Out Together
Meeting Room C
Don't Be Phish Food - Design Compliance Team
 
4:30 PM - 6:30 PM
 
Studio Theatre Lobby
Reception/Happy Hour and Exhibits Open
 
7:00 AM - 8:00 AM
 
Studio Theatre
Breakfast and Visit with Exhbitors
 
8:15 AM - 8:30 AM
 
Studio Theatre
Kick-Off
 
8:30 AM - 9:20 AM
Keynote
Studio Theatre
The Human Element: Riddles, Puzzles, and Mysteries in and outside the workplace
Phillip Mahan, Confidential
9:30 AM - 10:20 AM
Auditing
Meeting Room B
Utilizing SOC 2+ Examinations for Consolidated Compliance Reporting
Gary Nelson, Schellman & Company, LLC
GRC-P
Terrace Room B
Tips & Tricks with Operationalizing Privacy by Design (PbD)
Kevin Morgan, Bakkt Holdings, Inc.
Information Security
Terrace Room A
Cyber Resilience and the Human Factor
Roberto Zegarra, TBD
Let's Figure It Out Together
Meeting Room C
Risks of AI & Cybersecurity - Design Compliance Team
 
10:20 AM - 10:30 AM
 
3rd Floor Foyer
Coffee Break
 
10:30 AM - 11:20 AM
Auditing
Meeting Room B
How to Identify a Rotten SOC 1/2/3/4 Report with No Sense of Smell
David Schroth, Design Compliance and Security, LLC
GRC-P
Terrace Room B
Next-Gen Governance, Risk Management, and Compliance (GRC) in the Era of Digital Transformation
BRIGITTE COLLIER, Truist
Information Security
Terrace Room A
All Quiet on the Threat Front? Building a Cyber Threat Assessment
Annamaria Colon Ortiz, Truist
Let's Figure It Out Together
Meeting Room C
Succession Planning - Design Compliance Team
 
Workshop
Terrace Room C
Navigating the AI Audit Landscape
Jin Chang, Fieldguide
11:30 AM - 12:15 PM
 
Studio Theatre
Lunch
 
12:15 PM - 12:45 PM
 
Studio Theatre Lobby
Dessert Break with Exhibitors
 
1:00 PM - 1:50 PM
Auditing
Meeting Room B
Using Lean Practices for Sustainable Processes and Improved Controls
Sherry Naleszkiewicz, GE Vernova
GRC-P
Terrace Room B
Demand for Data Governance Programs in the Age of AI
Gregg Wishna, Protiviti Inc.
Information Security
Terrace Room A
GenAI Technology and Fraud Campaigns - Still, Don't Click on Sh*t
Taylor Miller, ADP
Let's Figure It Out Together
Meeting Room C
Vendor Risk Assessments - Design Compliance Team
 
Workshop
Terrace Room C
Breaking the Double Glass Ceiling: Race, GenderCelebrating Women's History Month
Cassandra Dacus, Cyversity
Jacqueline Crawley, ISACA Atlanta
Tamika Bass, Gannett Fleming
Nicole Dove, Riot Games
Susan Lam, Bakkt
2:00 PM - 2:50 PM
Auditing
Meeting Room B
Data Analytics in Audit - An Organization Framework
Damien Berahzer, The Intercontinental Exchange
GRC-P
Terrace Room B
AI Governance
Sallie Wright, Info-Tech Research Group
Information Security
Terrace Room A
Rewiring How We Respond to Insider Threat Events
Clea Ostendorf, Code42
Let's Figure It Out Together
Meeting Room C
Passphrase vs. Password vs. Passwordless - Design Compliance Team
 
Workshop
Terrace Room C
No Win Scenarios - The Kobayashi Maru Table Top
Phillip Lee, ISACA Atlanta
Joshua Sorenson, Rausch Advisory Services
2:50 PM - 3:20 PM
 
Studio Theatre Lobby
Afternoon Break with Exhibitors
 
3:30 PM - 4:20 PM
Auditing
Meeting Room B
Less Engineering, More Social: Strategies For More Humane Assessment Interviews
Shea Nangle, Independent Consultant
GRC-P
Terrace Room B
Multi-Framework Harmonization: How to Save Your Company Millions By Consolidating SOC 2, ISO 27001, and More
Christian Hyatt, risk3sixty
Information Security
Terrace Room A
Various SOC (Security Operations Center) models and SOC's role in managing security risks
Chayan Chakravarti, Equifax
Let's Figure It Out Together
Meeting Room C
Pros and cons of manual vs. automated penetration testing -Design Compliance Team
 
Workshop
Terrace Room C
Cloud Security Demystified
Dale Rodriguez, Sysdig
4:30 PM - 5:20 PM
Auditing
Meeting Room B
Navigating the Use of Compliance Automation Tools - An Auditor's Perspective
Dale Crump, AssurancePoint
GRC-P
Terrace Room B
Bridging Beliefs, Bytes, and Bills: An introduction to privacy engineering practice.
Brice Dobson, The Coca-Cola Company
Information Security
Terrace Room A
Encryption: Past, Present, Future
Alpesh Patel, AT&T
Let's Figure It Out Together
Meeting Room C
What do Cybersecurity & GRC Best Practices Design Look Like In Practice - Design Compliance Team
 
Workshop
Terrace Room C
"Not Your Ideal Candidate": Human-Centered Cybersecurity Boot Camps for Transitioning Professionals
Jeanette Copeland, TBD
7:30 AM - 8:15 AM
 
Studio Theatre
Breakfast
 
8:15 AM - 8:30 AM
 
Studio Theatre
Kick-Off
 
8:30 AM - 9:20 AM
Keynote
Studio Theatre
Foundational *AST tools will not save you from the SSCS Storm
Andy Lewis, ReversingLabs
9:30 AM - 10:20 AM
Auditing
Meeting Room B
Opening the Black Box - An Introduction to Auditing Linux
Joshua Sorenson, Rausch Advisory Services
GRC-P
Terrace Room B
Overcoming Today’s Biggest Privacy Challenges
Matt Dumiak, CompliancePoint
Information Security
Terrace Room A
A CISO's Hiring Playbook: Proven Strategies for Building Great Teams
Jeff Combs, J. Combs Search Advisors
Let's Figure It Out Together
Meeting Room C
Building an Incident Response Plan - Design Compliance Team
 
Workshop
Terrace Room C
Eramba - Open IT GRC Software that Doesn't Break The Bank (Demonstration)
David Schroth, Design Compliance and Security, LLC
10:30 AM - 10:50 AM
 
Studio Theatre Lobby
Morning Break with Exhibitors
 
11:00 AM - 11:50 AM
GRC-P
Terrace Room B
How to build and maintain a successful Privacy Program
rachel drucker, unemployed
Information Security
Terrace Room A
Cyber Threats in Youth-Oriented Digital Spaces: Awareness and Prevention
Mat Mathews, Boys & Girls Clubs of America
Let's Figure It Out Together
Meeting Room C
Building a Business Continuity Plan - Design Compliance Team
 
Workshop
Terrace Room C
The Long and Winding Alley: Social Engineering Parables
Chris Silvers, CG Silvers Consulting
11:55 AM - 12:45 PM
Auditing
Meeting Room B
We NIST the Point: Finally Toppling Legacy Password Guidance with NIST SP 800-63
Chris Silvers, CG Silvers Consulting
GRC-P
Terrace Room B
Freeing the Human: Automating your security program in the cloud - Stuart Smith
Stuart Smith, Delta Air Lines, Inc.
Information Security
Terrace Room A
DevSecOps from the CISO Perspective
Erik Boemanns, Mirability, LLC
Let's Figure It Out Together
Meeting Room C
Getting the Most from a BIA - Design Compliance Team
 
Workshop
Terrace Room C
Optimizing Your Vendor's SOC Report
Gary Nelson, Schellman & Company, LLC
1:00 PM - 1:45 PM
 
Studio Theatre
Lunch
 
1:45 PM - 2:15 PM
 
Studio Theatre
Closing & Awards