Agenda: RMISC 2019

Tuesday PreConference Sessions (PC1-PC6) have a separate fee from the regular conference registation fee. You must register for the full conference to attend a PreConference Workshop. Pre-conference day includes a continental breakfast, lunch and breaks.

Community Day Sessions (CD1-CD2) are free and include access to the Continental Breakfast, Welcome Reception/Job Fair and the Opening Keynote Session with Michelle Dennedy on Tuesday. These sessions DO NOT include access to the rest of the conference.

Tuesday, June 4, 2019
7:30 AM - 8:00 AM	Continental Breakfast Mile High Ballroom Foyer
8:00 AM - 12:00 PM	PC1: Build a Security Awareness Program your Employees will Love Nick Santora - Curricula $189.00 Room 501
8:00 AM - 4:00 PM	CD1: Community Day: DevSecOps Day DJ Schleen - Sonatype Eric Hendricks - Gitlab Prima Virani - Pinterest Aaron Rinehart - Verica.io Chris Martinez - DigitalGlobe Chris Roberts - Nuspire, Boom Supersonic, Hackers Hideaway $0.00 Room 403/404	CD2: Community Day: Rocky Mountain Privacy Forum Alex Wood - Uplight Carlin Dornbusch - American Cyber Security Management David Stauss - Husch Blackwell LLP Gregory Szewczyk - Ballard Spahr Thomas Codevilla - SK&S Law Group Janelle Hsia - American Cyber Security Management Mike Leidesdorff - RISMA Systems USA Peter Yauch - IAPP Preston Bukaty - Consolidated Commercial Services & Support, LLP Shawn McIntire - Velocity Global Lindsey Schultz - Western Union Jason Cronk - Enterprivacy Consulting Group Anke Corbin - Globig Michelle Dennedy - iDennedy Project, Flying Pigs Productions LLC. Chris Achatz - KO Firm Tracy Lechner - Law Offices of Tracy L. Lechner LLC $0.00 Room 405/406/407	PC2: CMD-Ctrl Application Security CTF Lucien Brilliant - Security Innovation $275.00 Room 502	PC3: Cloud Security Training Mohamed Malki - Colorado Governor Office of IT $275.00 Room 503	PC4: Cyber Audit Training Tyler Farrar - Maxar $275.00 Room 505	PC5: Threat Hunting Workshop Kris Merritt - Vector8, Inc. $275.00 Room 506
12:00 PM - 12:45 PM	Tuesday Lunch Mile High Ballroom Foyer
1:00 PM - 4:00 PM	PC6: Cybersecurity Strategy Development Keyaan Williams - CLASS-LLC $189.00 Room 501
4:30 PM - 5:30 PM	Keynote Session with Michelle Dennedy Michelle Dennedy - iDennedy Project, Flying Pigs Productions LLC. Mile High Ballroom 3/4
5:30 PM - 7:00 PM	Welcome Reception and Job Fair in Exhibit Hall Mile High Ballroom 1/2

Wednesday, June 5, 2019
7:00 AM - 8:00 AM	Breakfast in the Exhibit Hall Mile High Ballroom 1/2
8:00 AM - 9:00 AM	Keynote Keynote Session with Kim Zetter Kim Zetter - Mile High Ballroom 3/4
9:00 AM - 9:15 AM	Coffee with Exhibitors Mile High Ballroom 1/2
9:25 AM - 10:25 AM	Escape Room Living Security Escape Room Room 401	App Sec A1. AppSec in a World of Digital Transformation John Dickson - Denim Group, Ltd. Room 503	Incident Response A2. Red/Blue Teaming In Front Of A Live, Studio Audience Hank Leininger - KoreLogic Security Room 501/502	Architecture/How-To A3. Zero Trust: Death of the Traditional Office Network? Eric Sables - Pearson Education Lee Vorthman - Pearson Education Room 504	Emerging Trends A4. Those Old Rules for Password—Gone Hoyt L Kesterson II - Avertium Jacques Lucas - Avertium Room 406/407	Security Management A5. Suspiciously Inconspicuous Greg Foss - Carbon Black Room 405	Audit & Risk Management A6. INgineering the MargINs: Technology, Privacy, & Security and Minors, Minorities & Marginalized Communities Marty Esquibel - Colorado Department of Human Services Room 403/404	Privacy A7. Bootstrapping Privacy Stephen Edmonds - Ping Identity Corporation Room 402	Vendor A8. Bug Bounties and How They Help Jon Clay - Trend Micro Room 505	Vendor A9. Approaches to Digital Risk Management: Securing your Critical Assets from Growing Threats Michael Marriott - Digital Shadows Ben Johnson - Datashield Room 506
10:25 AM - 11:15 AM	Networking Break with Exhibitors Mile High Ballroom 1/2
11:15 AM - 12:15 PM	Escape Room Living Security Escape Room Room 401	App Sec B1. Automating Security in DevOps: Security in the Pipeline DJ Schleen - Sonatype Room 503	Incident Response B2. The Human Target: How Threat Actors Choose Their Mark Sherrod DeGrippo - Proofpoint Room 501/502	Architecture/How-To B3. Identity and Access in a Fractured Environment Jim Gerken - Novacoast, Inc. Room 504	Emerging Trends B4. SSL/TLS Then and Now... Joseph Dietz - CenturyLink Room 406/407	Security Management B5. Bootstrap Security: Cheap and Easy Wins for Early-Stage Companies Fredrick Lee - Gusto Room 405	Audit & Risk Management B6. SOC’ing It to Cybersecurity Threats Lauren Edmonds - Schellman Danny Manimbo - Schellman Room 403/404	Soft Skills B7. Photoshop Can't Fix Poor Ethics: The Impact of Technology on Ethical Behavior Amanda "Jo" Erven - Audit. Consulting. Education. LLC Room 402	Vendor B8. Application Security in an Ever Changing Digital Landscape Stan Wisseman - Micro Focus Room 505	Vendor B9.How Not to do Security! Greg Pepper - Check Point Room 506
12:30 PM - 1:30 PM	Lunch Mile High Ballroom 3/4
1:00 PM - 2:00 PM	Escape Room Living Security Escape Room Room 401
1:30 PM - 2:00 PM	Desserts in Exhibit Hall Mile High Ballroom 1/2
2:00 PM - 3:00 PM	Escape Room Living Security Escape Room Room 401	Architecture/How-To C1. Taking a Company From Owned Weekly to Truly Secure Jeremiah Salzberg - CDW Room 503	Incident Response C2. PCI Alone Won't Save You: Lessons Learned from Credit Card Data Breaches Phillip Kealy - Mandiant, now part of Google Cloud Room 501/502	Architecture/How-To C3. Threat Intelligence: Open Source Lists vs Commercial Lists Nathaniel "Q" Quist - Palo Alto Room 504	Emerging Trends C4. Cloud Security on the Dollar Menu Michael Wylie - Richey, May Technology Solutions Room 406/407	Security Management C5. On Security Strategy: He Said. She Said. Merlin Namuth - City and County of Denver Rock Lambros - RockCyber Matthew Sharp - Logicworks Deborah Blyth - State of Colorado Room 405	Audit & Risk Management C6. Math Is Hard: Compliance to Continuous Risk Management Max Blumenthal - Sandia Labs Christie Gross - Sandia National Labs Room 403/404	Soft Skills C7. Security Lessons from the Woofmutt… Chris Roberts - Nuspire, Boom Supersonic, Hackers Hideaway Room 402	Vendor C8. Security as a Business Asset: How to redefine security in a business context Lisa Love - L2 Cyber Solutions Room 505	Vendor C9.Threat Hunting Quince Rickard - LogRhythm Room 506
3:15 PM - 4:15 PM	Escape Room Living Security Escape Room Room 401	App Sec D1. Look Both Ways… And Then Shift Left! Eric Sables - Pearson Education Lee Vorthman - Pearson Education Room 503	Incident Response D2. Serving in Silence: The Latest in Attacker Techniques and Defensive Mitigations Brady Bloxham - Silent Break Security Room 501/502	Architecture/How-To D3. Threshing Floor: An Intelligence Analyst’s Approach to Transforming Raw Data into Actionable Insight Graham Westbrooke - Living Security Room 504	Emerging Trends D4. Angular for Pentesters Alex Useche - nVisium LLC Room 402	Security Management D5. Analyst View: Info/Cybersecurity Jobs, Skills, Pay Review and Forecast David Foote - Foote Partners, LLC Room 405	Audit & Risk Management D6. A CISO’s Perspective on Cloud Audits Matt Shufeldt - EVOTEK Room 403/404	Soft Skills D7. How to Measure and Communicate the Value of Security Keyaan Williams - CLASS-LLC Room 406/407	Vendor D8. Show and Tell From a Professional Hacker (and how I’d catch* myself) David Parker - Novacoast, Inc. Room 505	Vendor D9. Attackers Prey on Uncertainty: How to Fail at Threat Detection Stephen Frethem - Varonis Systems Inc. Room 506
4:30 PM - 5:15 PM	Keynote The Colorado = Security Podcast LIVE at RMISC Deborah Blyth - State of Colorado Robb Reck - Red Canary Alex Wood - Uplight Mile High Ballroom 3/4

Thursday, June 6, 2019
7:00 AM - 8:00 AM	Breakfast in the Exhibit Hall Mile High Ballroom 1/2
8:15 AM - 9:15 AM	Keynote Keynote Session with Mikko Hypponen: State of the Net Mikko Hypponen - F-Secure Mile High Ballroom 3/4
9:15 AM - 10:00 AM	Networking Break with Exhibitors Mile High Ballroom 1/2
9:15 AM - 10:15 AM	Escape Room Living Security Escape Room Room 401
10:10 AM - 11:10 AM	Compliance E1. Relationships are Critical Randall Frietzsche - Denver Health Room 504		Incident Response E2. FIN7: A Case Study on Shim Database Persistence Ben Wiley - Mandiant Room 503		Architecture/How-To E3. Open Source Intelligence: What Does the Internet Know About You? Zachary Hunsaker - NCAR Wyoming Supercomputing Center Room 501/502		Emerging Trends E4. A Practical Guide for Securing Kubernetes James Condon - Lacework, Inc. Room 405		Security Management E5. Developing and Implementing an Effective Security Awareness Program Clay Parker - Honeywell Room 406/407		Audit & Risk Management E6. Blockchains for Auditors (Part I of II) Dirk Anderson - TTExec, LLC Joshua McDougall - Kroll Room 403/404		Privacy E7. Maximizing Your Privacy Governance Lucia Milica Stacy - Proofpoint Jeff Reed - Proofpoint Room 402		Vendor E8. Times Have Changed…Why Haven’t We R. Trent Greenwood - Carbon Black Room 505		Vendor E9. At the Intersection of API Security, Cybersecurity and IAM: The Next Wave of Intelligent Identity Solutions Loren Russon - Ping Identity Room 506
10:15 AM - 11:15 AM	Escape Room Living Security Escape Room Room 401
11:15 AM - 12:15 PM	Escape Room Living Security Escape Room Room 401	Compliance F1. Insights on Impact of Cloud on SOC Reports (SSAE 18) & Privacy Controls Ashwin Chaudhary - Accedere Inc Room 504		Incident Response F2. Hunting Mobile Rogue Access Points with Wireless Mesh Implants Todd Cronin - PLEX Solutions Joe Minicucci - Ping Identity Room 503		Architecture/How-To F3. How VMware is Going Password-Less Brad Doctor - VMware Craig Savage - VMware Room 501/502		Emerging Trends F4. Using Vault to Better Protect your Secrets Bryce Verdier - DataSnipper Room 405		Security Management F5. Why CISO's Are Not Working Out At Corporations Todd Bell - GlobalDataLock.com Room 406/407		Audit & Risk Management F6. Auditing Blockchain Systems with the CCSS (Part II of II) Dirk Anderson - TTExec, LLC Joshua McDougall - Kroll Room 403/404		Soft Skills F7. Empower Cyber Security Leadership Through Emotional Intelligence Marci McCarthy - T.E.N. Room 402		Vendor F8. The Growing Need for Privacy in a Cloud First Era Damien Chung - Netskope Room 505	Vendor F9. Cyber Incident Response from the Trenches: The IR checklist that got you here won’t get you out of here! Terrence Lillard - NTT Security Dan Garlick - Hitachi Vantara Room 506
12:30 PM - 1:30 PM	Networking Lunch Mile High Ballroom 3/4
1:30 PM - 2:00 PM	Desserts in Exhibit Hall Mile High Ballroom 1/2
2:00 PM - 3:00 PM	Escape Room Living Security Escape Room Room 401	Compliance G1. Be Ready for NIST SP 800-171 Matthew Titcombe - Peak InfoSec LLC Room 504		Incident Response G2. Murky Waters: Analyzing Phish Kits Kyle Eaton - Proofpoint Room 503		Architecture/How-To G3. Crypto Hygiene 101: How I Learned to Stop Hoping for Security and Love Cryptography Alex Rabke - Unbound Tech Allan Konar - Unbound Tech Room 501/502		Emerging Trends G4. A DevSecOps approach to SOX Compliance Eric Alexander - The Trade Desk Room 405		Security Management G5. CISO Panel Robb Reck - Red Canary Alex Wood - Uplight Desiree Robinson - SurveyGizmo Artie Wilkowsky - Dish Network Nancy Phillips - Centura Health Room 406/407		Audit & Risk Management G6. Cyberlaw Year in Review Steve Black - Texas Tech University School of Law Room 403/404		Soft Skills G7. What I learned about Leading, Following, and Getting Out of My Own Way by Studying Improv Debi Caldwell - GLP Room 402		Vendor G8. Vulnerability Management 2.0 & Attaining Top-Level Security Without the Complexity. Doug Clifford - Tenable Network Security Steve Ballard - Thycotic Software Room 505	Vendor G9. Manage Third-Party Risk with Visibility, Insight and Action! Nicholas Friedman - Templar Shield Patrick Potter - RSA Room 506
3:15 PM - 4:15 PM	Escape Room Living Security Escape Room Room 401	Compliance H1. Secure Cloud Automation: A New Approach to FedRAMP Certification Chris Krueger - Coalfire Room 504		Incident Response H2. Stopping Malware in Its Tracks Using Windows Device Guard and Code Integrity Policies Larry Stein - Novacoast Room 503		Architecture/How-To H3. Container Security Deep Dive Yashvier Kosaraju - Sendbird Room 501/502		Emerging Trends H4. Are Your Cloud Servers Under Attack? Brian Hileman - Digital Guardian Room 405		Security Management H5. Management Oriented Security Chris Nickerson - Lares Room 406/407		Audit & Risk Management H6. IT Security Audits: The Good, Bad, and Ugly Tim Weil - Alcohol Monitoring Systems Matthew Santilli - L2 Cyber Solutions Robert Sears - NOAA Lisa Love - L2 Cyber Solutions Room 403/404		Soft Skills H7. How CISOs Gain Trust in the Boardroom John Hellickson - Kudelski Security Room 402		Vendor H8. The Evolving Risk Landscape Chris Hammer - ANM Patrick Osewalt - F5 Room 505	Vendor H9. M-Trends 2019: Trends Behind Today’s Most Impactful Cyber Breaches and Cyber Attacks Dustin Nowak - FireEye Room 506
4:15 PM - 5:15 PM	Keynote Closing Comedy Keynote Session with Nancy Norton Nancy Norton - Mile High Ballroom 3/4
5:15 PM - 5:45 PM	Lite Reception & Prize Drawings Mile High Ballroom 3/4

Tuesday Agenda

Wednesday Agenda

Thursday Agenda