Sessions Agenda: RMISC 2018

Tuesday, May 8, 2018
8:00 AM - 12:00 PM																PC1. Atomic Red Team Framework Training Casey Smith - Red Canary Tony Lambert - Red Canary $189.00
8:00 AM - 4:00 PM																PC3. Cryptocurrencies, Security and You Jared Nishikawa - SecureSet $275.00																												PC2. Auditing Cybersecurity and Data Analytics in Audit Michael Kostanecki - Protiviti $275.00																												PC4. Practical Dev(Sec)Ops DJ Schleen - Sonatype $275.00
1:00 PM - 4:00 PM																PC6. Cloud Security Training Mohamed Malki - Colorado Governor Office of IT $189.00																																										PC5. CISO Leadership Forum James Carder - LogRhythm Julie Chickillo - Beeline Robb Reck - Ping Identity Alex Wood - ISSA - Denver Chapter $189.00

Wednesday, May 9, 2018
7:00 AM - 8:00 AM																Breakfast in the Exhibit Hall
8:00 AM - 9:15 AM																Keynote Keynote Session with Lain Hensley
9:25 AM - 10:25 AM																App Sec A1. Token Binding: Foundation for a More Secure Web											Vendor A7. Probability in Security										Security Stories A5. Doing More With Less -- By Doing…Less?										Leadership A9. Leadership at the Speed of Life										Incident Response A2. There Now, That Wasn’t So Bad (How to Make Cyber Incidents Hurt Less)										Audit, Risk & Compliance A6. Maturing Third-Party Risk Management										Emerging Trends A4. Introducing the Colorado Threat Information Sharing (CTIS) Initiative										Architecture/How-To A3. PIE - An Active Defense PowerShell Framework for Phishing Defense
10:25 AM - 11:15 AM																Networking Break in Exhibit Hall
11:15 AM - 12:15 PM																Security Stories B5. Lessons Learned from the Legal Trenches - What Happens When Law and Technology Collide											Vendor B7. Deception - Lure, Detect, Defend										Emerging Trends B4. Hunting for Cyber Threats Using Threat Modeling and Frameworks										Architecture/How-To B3. Analyzing the Kill Chain: How to Load Your Gun When You Can’t Buy a Silver Bullet										Vendor B8. Identity-Driven Security										Security Management B2. Colorado CISO Panel										Audit, Risk & Compliance B6. Combating Vulnerabilities as a Team										App Sec B1. Measuring Software Security Programs using BSIMM
12:30 PM - 1:30 PM																Lunch
1:30 PM - 2:00 PM																Desserts in Exhibit Hall
2:00 PM - 3:00 PM																Audit, Risk & Compliance C6. Math is Hard: Compliance to Continuous Risk Management											Security Management C2. Women in Security Panel: Trailblazers and Torchbearers										App Sec C1. Building Patterns for Secure Microservices, an Approach and Pattern Zero Candidate										Architecture/How-To C3. GreatSCT: Gotta Catch 'Em AWL (Application Whitelisting)										Emerging Trends C4. Container Native Application Protection in a Cloud Native World										Vendor C7. Investigate and Mitigate Potential Insider Threats										Vendor C8.Security, Visibility, Automation for your Cloud & Network Infrastructure										Security Stories C5. Chasing LEAD, a Japanese APT Story
3:15 PM - 4:15 PM																Architecture/How-To D3. Pen Test Data Science: Vulns, Metrics, Lions, Tigers, and Bears, Oh My											Security Stories D5. Ransomware Recovery: How One City Got Through It										App Sec D1. Detection as Code: Apply the Software Development Lifecycle to Your Blue Team										Emerging Trends D4. The Myth of IoT Security										Incident Response D2. This Way to the Dark Metaverse: Threatcasting Tomorrow’s Threats										Audit, Risk & Compliance D6. Taking Compliance to the Cloud (Tools and Techniques Using ISO Standards)										Vendor D7. End The Dark Endpoint Epidemic With Absolute										Vendor D8. Change is Simply an Act of Survival
4:30 PM - 5:15 PM																Keynote Keynote Session with Dan Burns

Thursday, May 10, 2018
7:00 AM - 8:00 AM																Breakfast in the Exhibit Hall
8:15 AM - 9:15 AM																Keynote Keynote Session with Daniel Miessler
9:15 AM - 10:00 AM																Networking Break in Exhibit Hall
10:10 AM - 11:10 AM																Audit, Risk & Compliance E6. GDPR . . . Separating Fact from Fiction											Incident Response E2. "I" Before "R" Except After "IOC"										App Sec E1. Security in the Automated Pipeline; A Story of Fear, Perseverance and Triumph										Soft Skills E5. Managing Your Identity: Are You Limited, Limiting or Limitless?										Vendor E8. Digital Identity Authorities - the Key to Enterprise Cloud Transformation										Emerging Trends E4. Oil and Water DO Mix: Implementing Compliant Change Management in a CICD Environment										Architecture/How-To E3. AWS Security Best Practices										Vendor E7. Minimizing the Detection to Recovery Timeframe
11:15 AM - 12:15 PM																App Sec F1. From Rogue One to Rebel Alliance: Building Developers into Security Champions											Vendor F7. The “Zero Trust” Model for Cyber Security										Architecture/How-To F3. A Proven Method for Finding Targeted Attacks with Free and Open Source Tools										Incident Response F2. 0 To Hero in 60 Weeks: How to Build a World Class IR Team										Emerging Trends F4. The Secure Metamorphosis - Streaming Logs with Kafka and TLS										Audit, Risk & Compliance F6. GDPR Impacts on Incident Response										Soft Skills F5. Human Hacking: The Psychology Behind Cybersecurity										Vendor F8. Incident Response Preparedness for Executives
12:30 PM - 1:30 PM																Lunch
1:30 PM - 2:00 PM																Desserts in Exhibit Hall
2:00 PM - 3:00 PM																Emerging Trends G4. The Evolution of a Hack for Financial Gain: CryptoJacking, CryptoCurrencies, and Blockchains											Vendor G7. Turtles, Trust and The Future of Cybersecurity										Audit, Risk & Compliance G3. Realistic Cyber Security Practices – Conducting Cyber Security Assessments										Audit, Risk & Compliance G6. SecDevOps: Auditing Security at Scale										App Sec G1. Rock Your Next Web Application Penetration Test										Vendor G8. Yes, You Can Get Burned When Its Cloudy										Escape Room Living Security Escape Room										Security Management G5. Persuasion Techniques for Selling Security – No Really
3:15 PM - 4:15 PM																Architecture/How-To H3. Blowing up the 16-Digit Gold Mine											Audit, Risk & Compliance H6. SOC 2, COSO, and ISO 27001 Walked Into a Bar – What Happened?										Security Stories H5. Evolving Pentesting to Create Measurable Defensive Improvements										App Sec H1. Would You Like to Play a (Security) Game?										Emerging Trends H4. Business Ramifications of Proposed State and Federal Cybersecurity Legislation										Vendor H7. Cybercriminal Operations Revealed										Security Management H2. Inside Cyber Balance Sheets: Communicating Cyber Risks to Your Executives										Vendor H8. How Targeted Attacks Such as Phishing and Ransomware Break Through Traditional E-mail Security
4:15 PM - 5:15 PM																Keynote Keynote Session with Phil Palisoul
5:15 PM - 5:45 PM																Lite Reception & Prize Drawings