Threat modeling is a process that is essential for organizations to use to combat threats, and for mitigating risks. Threat intelligence is a component that can be applied as a method for use with threat modeling to ensure that all risks and vulnerabilities are being properly assessed and techniques are used to protect assets. In this podcast, we'll discuss threat modeling and implementing threat intelligence to identify threat behavior and eliminate risks.

Speakers:
Tanisha L. Turner, Senior Security QA Engineer, Security Engineering Productivity, Elastic
Kacy Zurkus, Senior Content Manager, RSAC

RSA Conference Podcast

Threat Modeling - Using the DIPP Method (Detect, Identify, Protect, Prevent)

Planning to submit a session proposal for the RSAC™ 2026 Conference? This podcast offers essential guidance on navigating the Call for Speakers (CFS) process. Join us as we speak with a Program Committee Member who will provide valuable tips and insights on crafting a compelling and innovative submission. Learn how to make your proposal stand out before the CFS opens later this month.

Speakers:
John Elliott, Principal Consultant, Withoutfire and Pluralsight Author
Tatyana Sanchez, Content & Program Coordinator, RSAC
Kacy Zurkus, Director, Content, RSAC

Call for Speakers: Tips & Strategies

Every vulnerability announcement comes with a score. We’ve all seen them. We’ve all panicked when they are high. But where did that score come from, how was it calculated, and what is up with that string of random letters next to it? Those answers and more in this intro to where Common Vulnerability Scoring System (CVSS) scores come from, what's new in version 4, and the parts you aren't doing.

Speakers: Chris Taylor, Principal Consultant, Taksati Consulting, Kacy Zurkus, Director of Content, RSAC, and Tatyana Sanchez, Content & Programming Coordinator, RSAC

Common Vulnerability Scoring System: Unpacking What's New in Version Four

The RSAC™ 2026 Call for Submissions is now open! Wondering what will WOW the reviewers? We asked our Program Committee members what’s front of mind for them, and they want to read about everything from industry challenges in the SOC to the art of threat intelligence to where AI is having the most impact. Join us to learn how to make your RSAC 2026 Conference submission stand out.

Speakers:
Etay Maor, Chief Security Strategist, Cato Networks
Pamela Fusco, Chairman & Founder, CBG and ZuluTails
Tatyana Sanchez, Content & Programming Coordinator, RSAC
Kacy Zurkus, Director of Content, RSAC

Start with Story: What the RSAC Program Committee Wants to Hear About Today’s SOC Challenges

Learn how to design and maintain resilient, high-availability systems that scale. This session dives into real-world outage scenarios and the engineering strategies that enabled rapid recovery. Discover proven techniques like graceful degradation, fallback logic, and fault isolation, plus practical guidance on scaling cloud-native services. We’ll explore how to balance cost vs. availability, apply reliability patterns, and build systems that withstand failures helping your organization deliver reliable, scalable services even under stress.

Ravi Teja Thutari, Senior SOftware Engineer, Hopper
Tatyana Sanchez, Content & Program Coordinator, RSAC
Kacy Zurkus, Director, Content, RSAC

Building Resilient Systems at Scale

Forbes recently reported that 81% of organizations cite AI agents as a top or high priority compared to other AI initiatives, with 51% of organizations already deploying AI agents. Building AI agents can be both rewarding and challenging, and if not built correctly, they can create major security risks. How can organization safely build agents? Tune into this podcast to get a security blueprint when building agents.

Manish Kumar Yadav, Principal Security Architect, SAP
Jim Rotan, VP, Head of Application Security & Automation, SAP
Tatyana Sanchez, Content and Programming Coordinator, RSAC
Kacy Zurkus, Director, Content, RSAC

Intro to Building a Security Blueprint for Agents: Where to Start

Organizations often spend a lot of time ensuring they're complying with cybersecurity standards and regulations, but often, accessibility standards are overlooked. Accessibility, in a sense, starts with compliance as well. However, cybersecurity vendors, platforms, and programs often don't know these standards exist, don't know the legal ramifications of not adhering to them, and don't know how to even begin to make the necessary changes. Tune into this podcast to learn how to bridge the gap between accessibility and cybersecurity.

Florian Beijers, Accessibility Expert, Dexxit
Tatyana Sanchez, Content & Program Coordinator, RSAC
Kacy Zurkus, Director, Content, RSAC

Bridging the Gap: Cybersecurity and Accessibility

It's officially Cybersecurity Awareness Month with the theme being ‘Stay Safe Online’ this year. It’s an important month as it helps organizations and people build awareness and serves as a reminder to follow best practices to ensure digital safety. Tune into this podcast as RSAC is joined by the National Cybersecurity Alliance team who will delve into the history and transformation of Cybersecurity Awareness Month to help boost your security awareness. 

Lisa Plaggemier, Executive Director, National Cybersecurity Alliance
Cliff Steinhauer, Director, Information Security & Engagement National Cybersecurity Alliance
Tatyana Sanchez, Content & Program Coordinator, RSAC
Kacy Zurkus, Director, Content, RSAC

Cybersecurity Awareness Month: Staying Safe Online

Organizations invest heavily in securing systems but often overlook protecting the people using those systems. Security teams need to shift from blame and bureacuracy to connecting with users and developers to understand the workflows and the reoccuring mistakes. Tune into this podcast to learn how security teams can become champions of solutions that are not just technically sound but human-friendly and sustainable.

Dwayne McDaniel, Developer Advocate, GitGuardian 
Tatyana Sanchez, Content & Program Coordinator, RSAC
Kacy Zurkus, Director, Content, RSAC

Championing Sustainable and Human-Friendly Security

According to recent research, the average age within cybercrime is 19 years old. This trend highlights the urgent concern over the rise of youth cybercrime. The pathway into youth cybercrime has dramatically widened, fueled by platforms like gaming communities, online forums, new communication tools, and the growing accessibility of AI tools. This podcast will take you inside the evolving world of young cyber offenders. We’ll explore the evolution of youth cybercrime, examining how the youth are initially drawn into these activities, the tactics they employ, and the solutions to intervene.

Zino Haro, Co-Founder, Youth for Privacy
Tatyana Sanchez, Content & Program Coordinator, RSAC
Kacy Zurkus, Director, Content, RSAC

The Evolution of Youth Cybercrime

A strong incident response (IR) program isn’t just about processes—it’s about mindset. In this episode, Lincare Holdings’ Head of Information Security, Prentis Brooks, joins RSAC Executive Chairman Dr. Hugh Thompson to unpack what true IR maturity looks like. From building agile teams to aligning strategy and technology, they reveal how leading organizations stay prepared for the threats ahead.

Cyber at the Top: Defining Strength─Building a Resilient Incident Response Capability

RSAC™ is a premier global cybersecurity event and community brand dedicated to empowering professionals at every level. We bring together industry experts to share insights, tackle emerging threats, and showcase cutting-edge innovations. Beyond the Conference, we offer continuous resources, educational programs, and networking opportunities to foster collaboration and resilience in an ever-evolving field, all while staying true to our mission of creating a safer, more connected future.