Chicago Cybersecurity Conference

Do you know what’s next in your security program? Join Brad Nigh, FRSecure’s Consulting Team Strategist, as he discusses a pragmatic approach to determining what security efforts will give you the most impact. By analyzing your existing program, work completed, and using our categorization—foundational, developing, and mature—you should be able to place yourself and get an idea of what’s next for your security program. This is a session you won’t want to miss and there will probably be some dad humor!

As SaaS applications like O365, Google workspace, Salesforce, Slack, Atlassian, cloud platforms like AWS, Azure, and Gen AI tools like ChatGPT, Copilot dominate modern workflows, they also introduce complex security challenges for CISOs, security leaders, engineers, and practitioners. These include expanding attack surfaces, misconfigured systems, and sensitive data exposures, all of which demand innovative solutions beyond traditional security tools.

In this session, we’ll dive into:

• Emerging risks in SaaS, cloud, and Gen AI environments, including real-world examples of breaches and misconfigurations.

• Actionable strategies to gain full visibility into sensitive data, enforce compliance, and protect against insider and external threats.

• Case studies highlighting successful approaches to securing sensitive data in Gen AI workflows and SaaS platforms.

• Future trends such as Zero Trust principles and AI-driven security automation that will reshape how we protect organizational data.

Designed for CISOs and security practitioners, this talk offers practical takeaways to enhance your data security posture while balancing productivity and compliance in a SaaS-first, AI-driven era.

Regulators and standards bodies are requiring us to evolve cybersecurity governance. This session will help you understand how to make this work in your favor:

1. Understand what NIST and regulators mean by “governance.”
2. Help non-technical executives make informed cybersecurity decisions.
3. Use governance to your advantage.
4. Define a “clear line of acceptable risk” that everyone agrees to.
5. Justify your controls program, even after a breach.

The rise of Generative AI (GenAI) and Large Language Models (LLMs) has transformed how businesses operate, but it also introduces new security risks. Sensitive data can inadvertently leak during interactions with these tools, as seen in high-profile incidents like the Samsung data leak (https://mashable.com/article/samsung-chatgpt-leak-details)

Also, Traditional Data Loss Prevention (DLP) tools are ill-equipped to detect and prevent such leaks in LLM transactions, creating significant security blind spots.

In this session, we will examine few real-world examples of AI-related data exposure, explore why LLM transactions pose unique challenges for existing security frameworks, and discuss practical approaches to mitigating these risks. Attendees will gain insights into evolving their DLP strategies to address the dynamic threats posed by GenAI tools in enterprise environments.

As organizations migrate to the cloud, traditional security operations tools like EDR, SIEM, and XDR often fall short, as they are not designed to address the unique challenges and threats of cloud-native environments. Fragmented data, knowledge gaps, and tools designed for legacy and hybrid rather than cloud-native operations create weak points in threat detection and response. In this session, Stream.Security’s Samuel Galicia, Senior Solutions Architect, will discuss how to bridge these gaps by integrating cloud context into SecOps workflows. Learn how enriching existing tools with cloud context can equip your SOC to effectively combat today’s evolving threats – all while maintaining your security workflow, without the need for extensive retraining.

During this session, you will learn:

• How cloud threats have significantly shifted today’s threat landscape, impacting modern security defenses
• Practical methods to complement your existing security stack with cloud-native context, adapting to the cloud threats
• How to integrate Cloud Detection & Response (CDR) seamlessly into your security workflows