Rachel Tobac hacks people based on publicly available information. Camille Stewart encourages people to mitigate risk and defend against Rachel’s methods. We’re bringing these two industry leaders together for this one-of-a-kind podcast that will explore social engineering risks and highlight some best practices to help protect users and organizations.

Presenters:
Camille Stewart, Cyber Fellow, Harvard Belfer Center and Head of Security Policy, Google Play & Android, Google
Rachel Tobac, CEO, SocialProof Security, White Hat Hacker
Kacy Zurkus, Content Strategist, RSA Conference

RSA Conference Podcast

Catch a Hacker if You Can: Social Engineering Meets Risk Mitigation

Study after study shows cybersecurity job descriptions lack clarity across most roles and industries — stifling talent recruitment, development and retention efforts. Infosec Institute and Aspen Cybersecurity Workforce Coalition will provide data-backed insights into how organizations are aligning job descriptions and training to tools like the NICE Framework, including what’s working and what’s not.

Speakers:
David Forscey, Senior Policy Analyst, National Governors Association
Megan Sawle, VP of Research & Marketing, Infosec
Kacy Zurkus, Content Strategist, RSA Conference

The Art & Science of Using Cybersecurity Talent Frameworks & Taxonomies

With the increased scale and pace of automated processes along with migrations to the cloud, proper design of security architecture becomes a critical component of your overall IT architecture implementation. Considering this, what should your business prioritize as the ultimate driver for security architecture decisions - and where does risk, privacy and compliance fit into the picture?

Speakers:
Shinesa Cambric, CISSP, CISA, CISM, CDPSE, Principal Program Manager, Microsoft
Aparna Murthy, Aparna Murthy, CA, CPA, Principal Risk and Compliance Consultant
Kacy Zurkus, Content Strategist, RSAC

Who’s Driving Your Security Architecture Bus?

Drawing on original research, the speakers will dive deep into one of the most prominent ransomware strains today: Sodinokibi/REvil. By tracking its operators’ activity in affected organizations, on the dark web, and through the group’s public blog, we will bring our collective insights to the audience, detailing how Sodinokibi operates, its malware uniqueness, and the damage it has inflicted.

Speakers:
Limor Kessem, Executive Security Advisor, IBM Security
Camille Jackson Singleton, Strategic Cyber Threat Lead, IBM
Kacy Zurkus, Content Strategist, RSAC

Hunting Sodinokibi: Insights from Tracking the King of Ransomware

Throughout 2020, ransomware was consistently amongst the most challenging cyber exposures for organizations to manage. The insurance market can provide critical insights on how to understand the evolving ransomware landscape, given the volume of insurance claims being seen and emerging data on loss and exposure trends. This session will bring together experts from across the cyber insurance and breach coach space and give end to end insights on the financial and organizational impact of ransomware, risk implications, and challenges that will be seen in the market.

Speakers:
Marcello Antonucci, Global Cyber & Tech Claims Team Leader, Beazley
Benjamin Di Marco, Cyber Specialist, Willis Towers Watson
Christina Terplan, Founding Partner and President, Atheria Law

This episode is brought to you by Axonius. Axonius helps organizations immediately know what assets they have, and shows which devices, cloud instances, and users adhere to or deviate from security policies. Try it free at axonius.com/rsac

The Ransomware Paradigm Change — Lessons from Insurers and Breach Coaches

The importance of cloud security has, perhaps, never been more critical, following massive shifts to remote workforces and ramped up digital transformation across organizations of all sizes. In this podcast, two members of the Cloud Security & Cloud Sec Ops Program Committee discuss trends observed in their selection process for 2022 RSA Conference and what matters most as organizations look to secure and further mature their multi-cloud and hybrid deployments.

Speakers:
Britta Glade, Senior Director, Content & Curation, RSA Conference
Shawn Harris, Director, Information Security, Starbucks
Rich Mogull, CEO/CISO, Securosis

Cloud Security & Cloud Sec Ops: Trends that Matter Most for 2022

Migrating to public cloud introduces new attack surfaces commonly the exploitation of misconfigured resources. In a cloud landscape that contains millions of resources, how do we detect these threats. This session explores the journey from security policy documentation to scanning and detecting security compliance violations in product infrastructure from the start of the development life cycle.

Joe McCrea, Cloud Security DevOps Engineer, SAP
Mariam Triki, DevSecOps Engineer, SAP
Kacy Zurkus, Content Strategist, RSAC

Shift-left! Scanning for Security Compliance from Day Zero

How much responsibility should people really bear in the big data realm? Does informed consent equate to waiving rights? Is it realistic that they understand how data travels and is there an incorrect underlying assumption that data is their priority when they are consenting to its collection or use? In this podcast, we will examine the reasons people sign consent forms (to access care or information), the limited ability of informed consent to protect people from hacking and cybersecurity breaches, and its irrelevance to compensating people whose data is aggregated, sold, and resold. We will explore the limitations of informed consent in governing data collection and use in the healthcare arena.

Speakers:
Anne Zimmerman, Founder, Modern Bioethics
Kacy Zurkus, Content Strategist, RSAC

Informed Consent in the Age of Big Data

Protecting Data & the Supply Chain so deeply intertwined with everything from software to identity. Join Program Committee members Edna Conway and Diana Kelley as they discuss the challenges that folks are struggling with right now and some potential mitigation strategies. We'll explore what’s happening with Log4j and other vulnerabilities as well as the need for a software Bill of Materials (SBOM).

Speakers:
Edna Conway, Vice President, Security & Risk Officer, Azure, VP, Chief Security & Risk Officer, Azure Microsoft
Diana Kelley, CTO and Co-Founder, SecurityCurve
Kacy Zurkus, Content Strategist, RSAC

What’s Trending in Protecting Data & the Supply Chain

What does an attacker need to do to exploit a threat? Join us to discuss the TTPs attackers are using to exploit myriad threats in today’s threat landscape. Our guests will look across different sectors to understand new and emerging threats, how those threats can be exploited, and steps organizations can take to avoid being the next victim of a cyberattack.

Speakers:
Jerone Jones, Founder, JustOne Solutions, LLC
Alexiaa Jordan, Cyber Security Consultant, JustOne Solutions

How Threats in Today’s Landscape Can Be Exploited (And Avoided)

Tribes are modernizing their Tribal General Council elections using cutting-edge technology. From traditional in-person voting to mobile platforms & blockchain-based systems, we discuss the security measures in place to ensure election integrity. Learn how Tribes are collaborating with MS-ISAC and EI-ISAC to prevent cyber threats, while also addressing challenges unique to Tribal elections.

Speakers:
Mackenzie Quick, Cybersecurity Analyst, Suquamish Tribe
Tatyana Sanchez, Content & Program Coordinator, RSA Conference
Kacy Zurkus, Senior Content Manager, RSA Conference

Securing Sovereignty: How Technology is Strengthening Tribal GC Elections

As AI rapidly integrates into our lives, it presents both immense opportunities and significant risks. This podcast explores the urgent need for robust governance frameworks to ensure AI is used responsibly. We will delve into ethical guardrails, risk mitigation strategies, and best practices inspired by academic AI principles. Join us to discover how to harness AI's power while upholding your organization's values.

Speakers:
Brian Warshawsky, Director, Research Ethics and Compliance, University of California, Berkeley
Tatyana Sanchez, Content & Program Coordinator, RSAC
Kacy Zurkus, Senior Content Manager, RSAC

Governing AI Innovation: Balancing Ethics and Compliance

SMEs often face significant hurdles in protecting their data due to limited resources and expertise. This podcast explores practical strategies to help SMEs strengthen their cybersecurity posture. Attendees will learn how to implement scalable solutions, leverage training and mentorship programs, and stay informed about emerging threats. By enhancing their cyber resilience, SMEs can improve compliance, build trust with customers, and ultimately drive business growth.

Speakers:
Praise Ayodele, Graduate Researcher, University of Central Missouri
Tatyana Sanchez, Content & Program Coordinator, RSAC
Kacy Zurkus, Senior Content Manager, RSAC

Cyber Resilience for SMEs: Practical Data Privacy and Security Strategies

As the holidays approach, many are well into their shopping sprees. It's an exciting time to prepare for the holiday season and spend time with loved ones. However, with cyberattacks on the rise, we can expect a significant increase in cyberattacks during this season. Join this podcast to explore safety and security tips for online shoppers, learn about current cyberthreats, and discover actionable steps to protect yourself from becoming a victim of cybercrime.

Speakers:
Bailey Marshall, Customer Engineer, Security, Google
Tatyana Sanchez, Content & Program Coordinator, RSAC
Kacy Zurkus, Senior Content Manager, RSAC

Jingle All the Way to Safety: Cyber Security Tips for the Holidays

Richard Bird and Xavier Bird are father and son. Richard has spent 3 decades in technology and cybersecurity. Xavier, like most of Gen Z, is a digital native. He also happens to be a doctoral candidate in psychology who has focused his attention on adolescent counseling and the impact digital experiences have on the development of self-image among children consuming a steady diet of feeds and streams from video games to influencers. From the pitfalls of “algorithmic parenting” to the ripple effects of social media culture on identity formation. Tune in to this podcast as this father and son duo unpack the nuanced interplay of privacy, security, and mental health in the digital age.

Speakers:
Richard Bird, Senior Fellow, Executive Member, CyberTheory Zero Trust Institute, CyberEd.io.
Xavier Bird, Psychology Doctorate (PsyD) Candidate, University of Denver
Tatyana Sanchez, Content & Program Coordinator, RSAC
Kacy Zurkus, Director, Content, RSAC


Father and Son, CISO and Psychologist: Navigating the Digital Age

In this Podcast, we're joined by the Critical Infrastructure Program Committees to discuss the exciting submissions they've received for RSAC 2025. We'll delve into the key trends they observed, what submissions stood out to them, and what they're most looking forward to experiencing at Conference. Tune in to hear valuable insights and reflections from these industry experts.

Speakers:
Dawn Cappelli, Director, OT-CERT, Dragos
Patrick Miller, CEO,  Ampyx Cyber
John Johnson, CISO, Docent Institute, & Founder/CEO, Aligned Security
Tatyana Sanchez, Content & Program Coordinator, RSAC
Kacy Zurkus, Director, Content, RSAC

Unpacking the Critical Infrastructure Track: A Committee Perspective

This Podcast explores the essential skills needed to effectively influence leadership during a crisis. It begins by exploring different roles of crisis management and attendees will learn the importance of understanding what motivates the stakeholders and how aligning with these priorities enhances influence and explores the importance of building trust and credibility long before a crisis hits.

Speakers:
Nas Hajia, Seucrity Architect, Director, Okta
Tatyana Sanchez, Content & Program Coordinator, RSAC
Kacy Zurkus, Director, Content, RSAC

Guiding the Guide: Influence in Crisis Mode

Planning to submit a session proposal for the RSAC™ 2026 Conference? This podcast offers essential guidance on navigating the Call for Speakers (CFS) process. Join us as we speak with a Program Committee Member who will provide valuable tips and insights on crafting a compelling and innovative submission. Learn how to make your proposal stand out before the CFS opens later this month.

Speakers:
John Elliott, Principal Consultant, Withoutfire and Pluralsight Author
Tatyana Sanchez, Content & Program Coordinator, RSAC
Kacy Zurkus, Director, Content, RSAC

Call for Speakers: Tips & Strategies

Every vulnerability announcement comes with a score. We’ve all seen them. We’ve all panicked when they are high. But where did that score come from, how was it calculated, and what is up with that string of random letters next to it? Those answers and more in this intro to where Common Vulnerability Scoring System (CVSS) scores come from, what's new in version 4, and the parts you aren't doing.

Speakers: Chris Taylor, Principal Consultant, Taksati Consulting, Kacy Zurkus, Director of Content, RSAC, and Tatyana Sanchez, Content & Programming Coordinator, RSAC

Common Vulnerability Scoring System: Unpacking What's New in Version Four

The RSAC™ 2026 Call for Submissions is now open! Wondering what will WOW the reviewers? We asked our Program Committee members what’s front of mind for them, and they want to read about everything from industry challenges in the SOC to the art of threat intelligence to where AI is having the most impact. Join us to learn how to make your RSAC 2026 Conference submission stand out.

Speakers:
Etay Maor, Chief Security Strategist, Cato Networks
Pamela Fusco, Chairman & Founder, CBG and ZuluTails
Tatyana Sanchez, Content & Programming Coordinator, RSAC
Kacy Zurkus, Director of Content, RSAC

Start with Story: What the RSAC Program Committee Wants to Hear About Today’s SOC Challenges

Learn how to design and maintain resilient, high-availability systems that scale. This session dives into real-world outage scenarios and the engineering strategies that enabled rapid recovery. Discover proven techniques like graceful degradation, fallback logic, and fault isolation, plus practical guidance on scaling cloud-native services. We’ll explore how to balance cost vs. availability, apply reliability patterns, and build systems that withstand failures helping your organization deliver reliable, scalable services even under stress.

Ravi Teja Thutari, Senior SOftware Engineer, Hopper
Tatyana Sanchez, Content & Program Coordinator, RSAC
Kacy Zurkus, Director, Content, RSAC

Building Resilient Systems at Scale

Forbes recently reported that 81% of organizations cite AI agents as a top or high priority compared to other AI initiatives, with 51% of organizations already deploying AI agents. Building AI agents can be both rewarding and challenging, and if not built correctly, they can create major security risks. How can organization safely build agents? Tune into this podcast to get a security blueprint when building agents.

Manish Kumar Yadav, Principal Security Architect, SAP
Jim Rotan, VP, Head of Application Security & Automation, SAP
Tatyana Sanchez, Content and Programming Coordinator, RSAC
Kacy Zurkus, Director, Content, RSAC

Intro to Building a Security Blueprint for Agents: Where to Start

Organizations often spend a lot of time ensuring they're complying with cybersecurity standards and regulations, but often, accessibility standards are overlooked. Accessibility, in a sense, starts with compliance as well. However, cybersecurity vendors, platforms, and programs often don't know these standards exist, don't know the legal ramifications of not adhering to them, and don't know how to even begin to make the necessary changes. Tune into this podcast to learn how to bridge the gap between accessibility and cybersecurity.

Florian Beijers, Accessibility Expert, Dexxit
Tatyana Sanchez, Content & Program Coordinator, RSAC
Kacy Zurkus, Director, Content, RSAC

Bridging the Gap: Cybersecurity and Accessibility

It's officially Cybersecurity Awareness Month with the theme being ‘Stay Safe Online’ this year. It’s an important month as it helps organizations and people build awareness and serves as a reminder to follow best practices to ensure digital safety. Tune into this podcast as RSAC is joined by the National Cybersecurity Alliance team who will delve into the history and transformation of Cybersecurity Awareness Month to help boost your security awareness. 

Lisa Plaggemier, Executive Director, National Cybersecurity Alliance
Cliff Steinhauer, Director, Information Security & Engagement National Cybersecurity Alliance
Tatyana Sanchez, Content & Program Coordinator, RSAC
Kacy Zurkus, Director, Content, RSAC

Cybersecurity Awareness Month: Staying Safe Online

Organizations invest heavily in securing systems but often overlook protecting the people using those systems. Security teams need to shift from blame and bureacuracy to connecting with users and developers to understand the workflows and the reoccuring mistakes. Tune into this podcast to learn how security teams can become champions of solutions that are not just technically sound but human-friendly and sustainable.

Dwayne McDaniel, Developer Advocate, GitGuardian 
Tatyana Sanchez, Content & Program Coordinator, RSAC
Kacy Zurkus, Director, Content, RSAC

Championing Sustainable and Human-Friendly Security

According to recent research, the average age within cybercrime is 19 years old. This trend highlights the urgent concern over the rise of youth cybercrime. The pathway into youth cybercrime has dramatically widened, fueled by platforms like gaming communities, online forums, new communication tools, and the growing accessibility of AI tools. This podcast will take you inside the evolving world of young cyber offenders. We’ll explore the evolution of youth cybercrime, examining how the youth are initially drawn into these activities, the tactics they employ, and the solutions to intervene.

Zino Haro, Co-Founder, Youth for Privacy
Tatyana Sanchez, Content & Program Coordinator, RSAC
Kacy Zurkus, Director, Content, RSAC

The Evolution of Youth Cybercrime

A strong incident response (IR) program isn’t just about processes—it’s about mindset. In this episode, Lincare Holdings’ Head of Information Security, Prentis Brooks, joins RSAC Executive Chairman Dr. Hugh Thompson to unpack what true IR maturity looks like. From building agile teams to aligning strategy and technology, they reveal how leading organizations stay prepared for the threats ahead.

Cyber at the Top: Defining Strength─Building a Resilient Incident Response Capability

Not surprisingly, the Human Element was a theme that everyone could relate to RSAC 2020. And it’s a conversation that’s just beginning. In this podcast, Britta Glade and Hugh Thompson talk to behavior expert Alexander Stein, PhD, and Auto Club Group CISO Gopal Padinjaruveetil about the symbiotic relationship between humans and technology—and what it portends for the future of cybersecurity.

Humans and technology. A complicated—and fascinating—pair.

Across all sectors, security teams are dealing with an increased number of incidents. In our latest podcast, Tim Bandos, Vice President, Cybersecurity at Digital Guardian and Jennifer Ayers, VP, OverWatch and Security Response at CrowdStrike discuss what you can do right now to improve incident response, specifically when working remotely.

Incident Response Analysis vs. Automation: What Matters Most Right Now

Supply chains are disrupted across all industries, which makes for back-ordered webcams and many other products being unavailable. But what happens when mission-critical services completely go down? What are the cybersecurity challenges that organizations have been faced with because of the impact of the global pandemic, and how can security teams deal with these challenges?

How to Deal with the Security Challenges of Disruptions in Supply Chain

Security vendors come to the rescue with AI and automation to save the day. But even smart technology can only go so far, and while it can definitely help lessen the noise, it can never replace the intuition, inventiveness and insight of a human.Technology can’t replace humanity in security defense because endpoint lockdowns don’t work, and repetitive scenarios don’t advance anything but boredom. Rather, we need to give users the tools to be skeptical, aware and intuitive. Analysts need to find patterns in the process, not just the results. Security teams need to work together and across an environment to find what can be fixed, not just what individuals can break, and technology needs to assist, amplify and augment human behavior, not lead.

“Robot Downsizing”—How the Ultimate Solution to Security is Human

Having a communications person as part of the security organization ensures that the enterprise communicates security not only through awareness programs but also across silos. A security communications lead plays a critical role in developing and executing incident response plans as well as other security policies that impact the business.  In order to effectively create a security aware culture, your security organization needs to be able to communicate the risks, the strategies to mitigate risks and the policies that must be followed in the event of a security incident. People need to understand their roles and responsibilities, which need to be clearly communicated. In this podcast, we will hear from industry experts who will help you understand the value of and implement good, clear security communications.

Why Your Security Organization Needs a Communications Lead

Networking has many advantages and has the potential to open doors of opportunity, but how do you identify the right people to network with? What do you bring to the table and what are you looking for from others? Join us for an engaging exchange with two industry leaders who will share their perspectives on the value of education, experience and relationship building. They’ll share advice on how to meet security practitioners, motivate other, be a well-rounded worker and an industry influencer.

Networking with the Right People

Though concerns over election security did not begin with the 2016 Presidential election, new and emerging threats coupled with an expanding attack surface have exacerbated what were already major security concerns for municipalities, states and the federal government. So what is the current risk environment and what has changed in CISA and the FBI’s cyber missions? We’ll answer these questions and offer tips on how the tech community and citizens can get involved in this can’t miss podcast.

Election Security Concerns, Expectations and How You Can Get Involved

TikTok and Huawei are probably two of the most notable Chinese technology companies that are enveloped in policy debates. The US government's most recent actions against TikTok could be an indication of future actions that could be taken against Chinese technology companies. Join us for the important discussion about how geopolitical motivations impact technology regulations and international interference operations. We'll look at how Western businesses are changing their technology development, operations and staffing strategies in Greater China and much more.

Gabo Alvarado, Managing Director, Pointe Bello
Katherine Koleski, Program Analyst, Defense Innovation Unit
Aaron Turner, President and Chief Security Officer, HighSide
Kacy Zurkus, Content Strategist, RSAC

The Geopolitics of Cyber (In)security

RSAC™ is a premier global cybersecurity event and community brand dedicated to empowering professionals at every level. We bring together industry experts to share insights, tackle emerging threats, and showcase cutting-edge innovations. Beyond the Conference, we offer continuous resources, educational programs, and networking opportunities to foster collaboration and resilience in an ever-evolving field, all while staying true to our mission of creating a safer, more connected future.

RSAC

Pinned to spotlight

Popular tracks