In a world where clicking the wrong link can unleash digital chaos, and Kevin, the quiet kid from Computer Science, is about to accidentally deploy a massive ransomware payload before heading home for summer break, schools need a game plan. Join us for a mildly alarming but entirely practical crash course in cyber incident response. NOTE: THIS SESSION IS INCLUDED THE COST OF THE MAIN CONFERENCE
Most breaches still start with abused credentials and over-permissioned access - yet many organizations are stuck with manual, siloed identity processes. In this session, you’ll learn how to use the Horizons maturity model to quickly baseline where your identity program is today, identify the “next horizon” capabilities that matter most. Designed for RMCS’s Technical audience (but approachable for security leaders), we’ll walk through real-world patterns like: cleaning up birthright access, tightening joiner/mover/leaver workflows, making access reviews less painful (and more meaningful), and extending governance beyond humans to machine identities and AI-era access. We’ll close with a lightweight checklist you can take back to your environment and use immediately.
Principal Solution Consultant at SailPoint. With 20+ years of experience in Identity and Access Management, Cullen specializes in Identity Security and has extensive experience in implementing as well as positioning Identity Security solutions. Prior to joining SailPoint Cullen worked... Read More →
Wednesday June 17, 2026 9:30am - 10:10am MDT GW 225
Drawing from real-world cases, this session explores how digital forensic methodologies have become a critical investigative tool beyond traditional silos, supporting investigations across multiple enterprise functions such as law enforcement, human resources (HR), internal audit, and legal counsel. Bill Hunkapillar and Clifford Stokes Florida State University
Wednesday June 17, 2026 10:12am - 11:00am MDT GW 225
Most successful social engineering is not the mass-sent phishing emails you get in your inbox, where the hacker hopes to trick the victim into clicking on a link. The most successful phishing attacks involve more sophisticated attacks designed to gain your trust and are able to fool even the most careful individuals. They may even target your personal email account, hobbies, and family members. They may even feign a romantic interest. Even though these more sophisticated attacks make up less than 0.5% of all email attacks, they make up 66% of all successful attacks. One attack method is responsible for two-thirds of all successful attacks! Are you or your users prepared to confront such calculated attacks? Join us for this presentation where Roger A. Grimes, CISO Advisor at KnowBe4, walks you through the ins and outs of long-game social engineering advanced techniques.
Wednesday June 17, 2026 12:00pm - 1:00pm MDT GW 225
Last year, we had over 48,000 publicly announced vulnerabilities. That’s over 132 a day, day after-day, and each year the number of vulnerabilities just keeps going up. AI is going to cause the number of vulnerabilities found and exploited to soar, for more reasons than just Mythos! AI will find more vulnerabilities. AI will cause more vulnerabilities. Your time to patch will be minutes…and that’s even if a patch is available. Attend this session to learn: • How AI will impact vulnerabilities • The reality of hackbots • How you will need to update your patch management strategy
Wednesday June 17, 2026 1:30pm - 2:20pm MDT GW 225
Every day, millions of data points about YOU, regardless of your intent or awareness and whether public, leaked, scraped, or sold, are quietly feeding into an ecosystem (largely legal) of personal information. Threat actors, now often trivially, use AI tools to weaponize that personal information at scale against both individuals and their organizations. What once required a non-trivial skillset in OSINT and social engineering can now be executed by anyone with a prompt and a profile or scraped data set – or worse, a team of AI agents.
Wednesday June 17, 2026 2:30pm - 3:20pm MDT GW 225
AI and quantum are two of the biggest paradigm shifts in decades and they will dramatically make many more, but not all, attacks more successful. Attend this session to learn what AI and quantum will and will not impact, not in general terms, but specifically as used in every type of cyber attack and against your specific defenses. It will cover attacks BY those technologies and attacks TO those technologies. If you're tired of generalizations and hype, this is the session for you. Walk away with actionable information you can put to use right away in preparing for these new technologies, all in one place. The session will include learning: • What is and isn't AI • What is quantum • Threats FROM AI and Quantum • Threats TO your AI and Quantum • How to defend against AI and Quantum Threats.
When cyber exploitation occurs, the consequences quickly extend beyond the digital world, impacting victims, families, investigators, and community support systems. Addressing these crimes requires collaboration between professional sectors and community members. This panel discussion brings together experts from multiple disciplines to examine how cyber exploitation cases unfold, from the moment a crime is discovered through investigation, victim support, and prevention efforts. Through perspectives from a parent advocate, law enforcement, child advocacy professionals, and prevention educators, participants will gain insight into the real-world impacts of cyber-enabled crimes and how collaborative responses can improve outcomes for victims. The session highlights how cybersecurity awareness intersects with victim services, investigations, and community prevention efforts.
Founder and Media Personality, PrairieWifeInHeels.com
Cathy Holman (Prairie Wife) is a city girl turned country, all for the love of a Wyoming cowboy. She launched PrairieWifeInHeels.com in 2013 to share her message of living with grit and grace, and has spent the last 13 years building a community around honest storytelling, humor... Read More →
After this interactive talk, you will never see images the same way again. This enlightening session explores the dynamic realm of GEOINT (Geospatial Intelligence), a captivating subset of OSINT (Open Source Intelligence) that unlocks a wealth of hidden insights within images and videos. From identifying objects, landscapes, and aircraft to interpreting symbols, shadows, and reflections, we'll go deep into the art of imagery analysis. Learn how to decode the language of trees, signs, text and logos, and uncover the strategic implications behind seemingly mundane details using common browser tools. This talk promises to equip you with mind-blowing skills that you can easily learn as I take you through multiple demos.
Thursday June 18, 2026 11:50am - 12:05pm MDT GW 225
Explore how Shadow AI emerges inside real-world organizations, why traditional security programs struggle to detect it, and how businesses can respond without stifling innovation.
Change of Process fraud continues to be one of the most effective and costly forms of cyber-enabled financial crime impacting organizations of all sizes. Criminals increasingly combine social engineering, business email compromise, impersonation, and fraudulent payment requests to manipulate established business processes and redirect funds without ever breaching a network.
Join moderator Tim Walsh of the Cybersecurity and Infrastructure Security Agency (CISA) for a panel discussion featuring Donielle Williams (Casper College), Matt Kull (CEO, Simple Injection), and Kate Swistowicz (Fremont25.org). Drawing from experiences in higher education, business, workforce development, and cybersecurity, the panel will examine how change of process scams unfold, why trusted procedures are often exploited, and what organizations can do to strengthen controls and reduce risk.
Attendees will gain practical insights into recognizing warning signs, verifying process changes, improving internal communication, and building a culture that helps prevent financial fraud before it occurs.
Brian Clark, Network Coordinator, and Nick Mescher, IT Systems Security Analyst, will showcase the Google Workspace Dashboard developed by their team with AI assistance. This customized tool is specifically designed to improve environmental security. They will also discuss how their strategy on proactive email security has flipped the workflow from pulling emails from inboxes to releasing emails from quarantine.
