Sessions Agenda: RMISC 2018

Tuesday, May 8, 2018
8:00 AM - 12:00 PM																PC1. Atomic Red Team Framework Training Casey Smith - Red Canary Tony Lambert - Red Canary $189.00
8:00 AM - 4:00 PM																PC4. Practical Dev(Sec)Ops DJ Schleen - Sonatype $275.00																												PC2. Auditing Cybersecurity and Data Analytics in Audit Michael Kostanecki - Protiviti $275.00																												PC3. Cryptocurrencies, Security and You Jared Nishikawa - SecureSet $275.00
1:00 PM - 4:00 PM																PC5. CISO Leadership Forum James Carder - LogRhythm Julie Chickillo - Beeline Robb Reck - Red Canary Alex Wood - Uplight $189.00																																										PC6. Cloud Security Training Mohamed Malki - Colorado Governor Office of IT $189.00

Wednesday, May 9, 2018
7:00 AM - 8:00 AM																Breakfast in the Exhibit Hall
8:00 AM - 9:15 AM																Keynote Keynote Session with Lain Hensley
9:25 AM - 10:25 AM																Vendor A7. Probability in Security											Leadership A9. Leadership at the Speed of Life										Audit, Risk & Compliance A6. Maturing Third-Party Risk Management										Architecture/How-To A3. PIE - An Active Defense PowerShell Framework for Phishing Defense										Emerging Trends A4. Introducing the Colorado Threat Information Sharing (CTIS) Initiative										App Sec A1. Token Binding: Foundation for a More Secure Web										Incident Response A2. There Now, That Wasn’t So Bad (How to Make Cyber Incidents Hurt Less)										Security Stories A5. Doing More With Less -- By Doing…Less?
10:25 AM - 11:15 AM																Networking Break in Exhibit Hall
11:15 AM - 12:15 PM																Security Management B2. Colorado CISO Panel											App Sec B1. Measuring Software Security Programs using BSIMM										Audit, Risk & Compliance B6. Combating Vulnerabilities as a Team										Security Stories B5. Lessons Learned from the Legal Trenches - What Happens When Law and Technology Collide										Vendor B8. Identity-Driven Security										Architecture/How-To B3. Analyzing the Kill Chain: How to Load Your Gun When You Can’t Buy a Silver Bullet										Emerging Trends B4. Hunting for Cyber Threats Using Threat Modeling and Frameworks										Vendor B7. Deception - Lure, Detect, Defend
12:30 PM - 1:30 PM																Lunch
1:30 PM - 2:00 PM																Desserts in Exhibit Hall
2:00 PM - 3:00 PM																Audit, Risk & Compliance C6. Math is Hard: Compliance to Continuous Risk Management											Vendor C8.Security, Visibility, Automation for your Cloud & Network Infrastructure										App Sec C1. Building Patterns for Secure Microservices, an Approach and Pattern Zero Candidate										Architecture/How-To C3. GreatSCT: Gotta Catch 'Em AWL (Application Whitelisting)										Security Stories C5. Chasing LEAD, a Japanese APT Story										Emerging Trends C4. Container Native Application Protection in a Cloud Native World										Security Management C2. Women in Security Panel: Trailblazers and Torchbearers										Vendor C7. Investigate and Mitigate Potential Insider Threats
3:15 PM - 4:15 PM																App Sec D1. Detection as Code: Apply the Software Development Lifecycle to Your Blue Team											Emerging Trends D4. The Myth of IoT Security										Vendor D8. Change is Simply an Act of Survival										Architecture/How-To D3. Pen Test Data Science: Vulns, Metrics, Lions, Tigers, and Bears, Oh My										Audit, Risk & Compliance D6. Taking Compliance to the Cloud (Tools and Techniques Using ISO Standards)										Incident Response D2. This Way to the Dark Metaverse: Threatcasting Tomorrow’s Threats										Security Stories D5. Ransomware Recovery: How One City Got Through It										Vendor D7. End The Dark Endpoint Epidemic With Absolute
4:30 PM - 5:15 PM																Keynote Keynote Session with Dan Burns

Thursday, May 10, 2018
7:00 AM - 8:00 AM																Breakfast in the Exhibit Hall
8:15 AM - 9:15 AM																Keynote Keynote Session with Daniel Miessler
9:15 AM - 10:00 AM																Networking Break in Exhibit Hall
10:10 AM - 11:10 AM																Incident Response E2. "I" Before "R" Except After "IOC"											Audit, Risk & Compliance E6. GDPR . . . Separating Fact from Fiction										Soft Skills E5. Managing Your Identity: Are You Limited, Limiting or Limitless?										Emerging Trends E4. Oil and Water DO Mix: Implementing Compliant Change Management in a CICD Environment										Architecture/How-To E3. AWS Security Best Practices										Vendor E8. Digital Identity Authorities - the Key to Enterprise Cloud Transformation										App Sec E1. Security in the Automated Pipeline; A Story of Fear, Perseverance and Triumph										Vendor E7. Minimizing the Detection to Recovery Timeframe
11:15 AM - 12:15 PM																App Sec F1. From Rogue One to Rebel Alliance: Building Developers into Security Champions											Soft Skills F5. Human Hacking: The Psychology Behind Cybersecurity										Audit, Risk & Compliance F6. GDPR Impacts on Incident Response										Emerging Trends F4. The Secure Metamorphosis - Streaming Logs with Kafka and TLS										Incident Response F2. 0 To Hero in 60 Weeks: How to Build a World Class IR Team										Architecture/How-To F3. A Proven Method for Finding Targeted Attacks with Free and Open Source Tools										Vendor F7. The “Zero Trust” Model for Cyber Security										Vendor F8. Incident Response Preparedness for Executives
12:30 PM - 1:30 PM																Lunch
1:30 PM - 2:00 PM																Desserts in Exhibit Hall
2:00 PM - 3:00 PM																Escape Room Living Security Escape Room											Security Management G5. Persuasion Techniques for Selling Security – No Really										Audit, Risk & Compliance G6. SecDevOps: Auditing Security at Scale										Vendor G7. Turtles, Trust and The Future of Cybersecurity										App Sec G1. Rock Your Next Web Application Penetration Test										Audit, Risk & Compliance G3. Realistic Cyber Security Practices – Conducting Cyber Security Assessments										Emerging Trends G4. The Evolution of a Hack for Financial Gain: CryptoJacking, CryptoCurrencies, and Blockchains										Vendor G8. Yes, You Can Get Burned When Its Cloudy
3:15 PM - 4:15 PM																Architecture/How-To H3. Blowing up the 16-Digit Gold Mine											Vendor H7. Cybercriminal Operations Revealed										App Sec H1. Would You Like to Play a (Security) Game?										Security Management H2. Inside Cyber Balance Sheets: Communicating Cyber Risks to Your Executives										Audit, Risk & Compliance H6. SOC 2, COSO, and ISO 27001 Walked Into a Bar – What Happened?										Emerging Trends H4. Business Ramifications of Proposed State and Federal Cybersecurity Legislation										Security Stories H5. Evolving Pentesting to Create Measurable Defensive Improvements										Vendor H8. How Targeted Attacks Such as Phishing and Ransomware Break Through Traditional E-mail Security
4:15 PM - 5:15 PM																Keynote Keynote Session with Phil Palisoul
5:15 PM - 5:45 PM																Lite Reception & Prize Drawings