What happens when the systems designed to protect our children fall short? In this powerful and deeply personal keynote, a Wyoming mother shares her family’s real-life experience navigating a year-long stalking and harassment campaign targeting her teenage daughter and another minor—carried out not by a peer, but by an adult. Through anonymous texts, impersonation, and psychological intimidation, the case exposes how modern stalking operates in a digital world—and how difficult it can be to stop.
Wednesday June 17, 2026 8:10am - 9:00am MDT MU 105
Get ready once again for RMCS’s TWO CTF challenges, this year with a major revamp on the cyber-awareness side!
Compete for prizes and bragging rights, to see who has the most skills in cyber knowledge and awareness!
Both challenges run from 9:00AM on Wednesday, June 17th 2026 to 3:00PM on Thursday, June 18th, 2026 (will be inaccessible outside of the conference time)
Think you know everything there is to know about the Family Educational Rights and Privacy Act (FERPA)? The U.S. Department of Education’s Privacy Technical Assistance Center (PTAC) is issuing a challenge to all attendees to apply their knowledge to the test! In this session, we will explore a variety of real-world scenarios that concern student privacy and ask you, the audience, to help us work through them. This session provides an excellent forum for discussion of complex issues regarding FERPA and a great space to have your questions answered. Do you think you have what it takes? To that we say, “It depends!”
Wednesday June 17, 2026 9:30am - 10:10am MDT GW 222
Most breaches still start with abused credentials and over-permissioned access - yet many organizations are stuck with manual, siloed identity processes. In this session, you’ll learn how to use the Horizons maturity model to quickly baseline where your identity program is today, identify the “next horizon” capabilities that matter most. Designed for RMCS’s Technical audience (but approachable for security leaders), we’ll walk through real-world patterns like: cleaning up birthright access, tightening joiner/mover/leaver workflows, making access reviews less painful (and more meaningful), and extending governance beyond humans to machine identities and AI-era access. We’ll close with a lightweight checklist you can take back to your environment and use immediately.
Principal Solution Consultant at SailPoint. With 20+ years of experience in Identity and Access Management, Cullen specializes in Identity Security and has extensive experience in implementing as well as positioning Identity Security solutions. Prior to joining SailPoint Cullen worked... Read More →
Wednesday June 17, 2026 9:30am - 10:10am MDT GW 225
Drawing from real-world cases, this session explores how digital forensic methodologies have become a critical investigative tool beyond traditional silos, supporting investigations across multiple enterprise functions such as law enforcement, human resources (HR), internal audit, and legal counsel. Bill Hunkapillar and Clifford Stokes Florida State University
Wednesday June 17, 2026 10:12am - 11:00am MDT GW 225
Explore how higher education institutions can operationalize Third-Party Risk Management (TPRM) using the Higher Education Community Vendor Assessment Toolkit (HECVAT) as a practical, scalable foundation.
Wednesday June 17, 2026 10:12am - 11:00am MDT GW 222
Drawing from prevention work with youth and communities across Wyoming, this session explores how offenders exploit digital environments to manipulate, coerce, and financially exploit victims. This session will help cybersecurity professionals better understand the human element of cybercrime and how awareness, prevention, and early intervention can reduce harm.
Wednesday June 17, 2026 10:12am - 11:00am MDT GW 223
Education agencies and schools are a favorite target of cyber criminals. This session provides tips to help teachers and education staff increase cybersecurity readiness, cyber-awareness, and to recognize and defeat cyber threats and protect the privacy of students and other school staff. Attendees will come away with strategies for spotting social engineering techniques, safe browsing strategies, and resources to learn more.
Wednesday June 17, 2026 11:10am - 12:00pm MDT GW 222
Each year, the AARP Fraud Watch Network Helpline takes 100,000 calls from across the country reporting scams, fraud and financial exploitation. Learn about the top scams trends for 2026 and what technologies scammers are using to target their victims.
Wednesday June 17, 2026 11:10am - 12:00pm MDT GW 223
Most successful social engineering is not the mass-sent phishing emails you get in your inbox, where the hacker hopes to trick the victim into clicking on a link. The most successful phishing attacks involve more sophisticated attacks designed to gain your trust and are able to fool even the most careful individuals. They may even target your personal email account, hobbies, and family members. They may even feign a romantic interest. Even though these more sophisticated attacks make up less than 0.5% of all email attacks, they make up 66% of all successful attacks. One attack method is responsible for two-thirds of all successful attacks! Are you or your users prepared to confront such calculated attacks? Join us for this presentation where Roger A. Grimes, CISO Advisor at KnowBe4, walks you through the ins and outs of long-game social engineering advanced techniques.
Wednesday June 17, 2026 12:00pm - 1:00pm MDT GW 225
Book Signing Hour, Vendor Visits & One on One Vender Time Mishaal Kahn - The Phantom CISO: Time to step out of the shadow Peter Warmka - Confessions of a CIA Spy: The Art of Human Hacking Roger Grimes - How AI and Quantum impact Cyber Threats and Defenses. Josh Mason- Security with a Business Accent Peter Warmka - WHY ARE YOU MESSING WITH ME?: Senior Survival Guide on Fraud, Privacy, and Security Ben Halpert The Savvy Cyber Kids at Home - Three Book Collection - https://amzn.to/4fJwQ2V Ben Halpert & Allie Hunter - Mothers Against Cyber Crime Ben Halpert & Allie Hunter - Digital Parenting by the Ages
Last year, we had over 48,000 publicly announced vulnerabilities. That’s over 132 a day, day after-day, and each year the number of vulnerabilities just keeps going up. AI is going to cause the number of vulnerabilities found and exploited to soar, for more reasons than just Mythos! AI will find more vulnerabilities. AI will cause more vulnerabilities. Your time to patch will be minutes…and that’s even if a patch is available. Attend this session to learn: • How AI will impact vulnerabilities • The reality of hackbots • How you will need to update your patch management strategy
Wednesday June 17, 2026 1:30pm - 2:20pm MDT GW 225
For the last three years, identity theft has been the most common victim report to the AARP Fraud Watch Network Helpline. Learn practical ways to protect your identity by safeguarding your personal and financial information.
Wednesday June 17, 2026 1:30pm - 2:20pm MDT GW 223
A hands-on workshop where attendees practice reframing their security priorities into business language — live. We'll work through real scenarios: pitching a security initiative to a CFO, explaining abreach to a board, and turning a risk register into something anon-technical leader can act on. Attendees leave with a repeatable framework they can use the next time they need to make security make sense to the rest of the business.
Wednesday June 17, 2026 1:30pm - 4:20pm MDT GW 222
Every day, millions of data points about YOU, regardless of your intent or awareness and whether public, leaked, scraped, or sold, are quietly feeding into an ecosystem (largely legal) of personal information. Threat actors, now often trivially, use AI tools to weaponize that personal information at scale against both individuals and their organizations. What once required a non-trivial skillset in OSINT and social engineering can now be executed by anyone with a prompt and a profile or scraped data set – or worse, a team of AI agents.
Wednesday June 17, 2026 2:30pm - 3:20pm MDT GW 225
Today’s youth are growing up in a world that encourages a deep involvement with technology. Yet these same children are oftentimes unsupervised and unprepared to play safely on the digital playground—where they can very easily make bad and potentially dangerous decisions. The adults in young people’s lives have a responsibility to guide young people, who are spending a large part of their lives immersed in the digital realm, with a comprehensive cyber safety and cyber ethics education. At this session, just for parents, Ben Halpert gives parents the tools to educate their children with the “modern street smarts” that are required for digital safety—showing parents how to engage with their children on what they are experiencing and how to empower their children to be safe by making appropriate decisions in the online world. At home, parents can further emphasize the need for privacy and the principles of Cyber Ethics, including the need to thoughtfully maintain a positive online persona and apply appropriateness and empathy to virtual decision-making.
Wednesday June 17, 2026 3:30pm - 4:20pm MDT GW 223
