ISACA Charlotte and ISC2 Charlotte Metro Chapter is pleased to announce our joint event on Thursday, September 24th!
The Casey by Beau Monde
1837 North Tryon Street, Suite 102
Charlotte, NC 28206
Parking: Complimentary
Event Summary:
7:30AM Breakfast
8:00AM-8:30AM Welcome and Opening Remarks
8:30AM-9:15AM AI Won't Simplify GRC
9:15AM-10:00AM From Control to Confidence
10:00AM-10:20AM Morning Break
10:20AM-10:30AM Lightning Talk #1 - Nia F. Luckey, IAIP, GRCA
10:30AM-11:15AM AI Can Act Now. What Does That Mean for Security?
11:15AM-12:00PM Deception Tactics: Extending the Cat-and-Mouse Game
12:00PM-12:40PM Lunch and Technology Partner Education
12:40PM-1:00PM Lightning Talk #2 - ISACA & ISC2 Chapters
1:00PM-1:45PM The AI Governance Gap: What Happens Between Policy and Execution
1:45PM-2:30PM Humanizing Security
2:30PM-2:45PM Afternoon Break
2:45PM-3:00PM Lightning Talk #3 - ISACA Chapter
3:00PM-3:45PM Deepfakes - Seeing is Deceiving
3:45PM-4:30PM The Approval Layer: Turning AI Oversight into Institutional Judgment
4:30PM-5:00PM Closing Remarks and Reception
5:00PM Networking Event
6:00PM Event Ends
_____________________________
8:00AM Welcome and Opening Remarks
8:30AM AI Won't Simplify GRC
Jonah Wisch - To Be Provided
So far, every commercial tool's attempt to "AI" or "automate" your way to a less stressful audit has generally had the opposite effect. That is why nearly 60% of GRC teams still use spreadsheets, repurposed tools, or use no tool at all. The root cause of the problem is more fundamental - develop a mature security program with good controls and the problem solves itself. Otherwise, you are complaining about climbing a mountain with a ship's anchor strapped to your waist while believing that if you just had better shoes, you would be able to get to the top faster. This presentation will focus on how to start with the fundamentals and then use tools and different approaches to simplify and make your security compliance and audit functions more efficient.
9:15AM From Control to Confidence
Shawn Robinson - Area Principal Solutions Architect, AWS
How Organizations that govern AI effectively, don't just reduce risk, they build enterprises that are stronger, faster and harder to break.
10:20AM Lightning Talk #1 - Nia Luckey
10:30AM From Control to Confidence
Dr. Pravi Devineni - AI Can Act Out Now. What Does That Mean For Security
AI risk changes when a model can move from generating an answer to taking an action. In lieu of the Open AI-Hugging Face real-world security incident, this session looks under the hood of agentic systems to trace how goals, context, models, tools, identities, and enterprise systems connect to produce an action. We’ll examine where risk emerges across that execution path, why access does not automatically equal authority, and how familiar security principles can be applied to constrain, observe, and investigate agentic systems.
Key audience takeaways include
- How an agentic system moves from goal to action.
- The difference between capability, access, autonomy, and authority, and why that distinction matters.
- Where risk starts to emerge from connected components.
- How traditional security principles map onto an agentic architecture.
- Six practical questions to interrogate any agentic system.
11:15AM Deception Tactics: Extending the Cat-and-Mouse Game
Daniel Corbett - Principal Product Technology Manager, Fastly’s
Every day, websites face a myriad of attacks. Traditionally, the instinct is to identify and block these threats with standard HTTP error codes. However, this often leads attackers to become more sophisticated in their evasion tactics. Studies show defenders spend 98% of their time identifying attackers and only 2% on response strategies. This talk will delve into the importance of alternative blocking strategies, with a focus on deception, and how it can be effectively used to slow down and frustrate attackers. A live demo will illustrate these concepts in action.
12:00PM Lunch and Technology Partner Updates
12:40PM Lightning Talk #2 - ISACA & ISC2 Chapters
1:00PM The AI Governance Gap: What Happens Between Policy and Execution
Tia Hopkins - Founder and Chief Execution Officer of CTRL+EXEC
Organizations are moving quickly to establish AI policies, controls, risk frameworks, and governance structures. But some of the most consequential AI decisions happen in the space those mechanisms don’t fully address: deciding where AI should be used, what evidence is sufficient to move forward, which risks are acceptable, who has authority to make the call, and when changing conditions should force a decision to be revisited.
This session explores AI governance as a decision and execution discipline. We’ll examine where traditional governance approaches can break down as AI moves from experimentation into business operations, and how leaders can create enough structure to manage risk without slowing responsible adoption to a crawl.
Attendees will leave with a practical way to think about the relationship between AI strategy, governance, cybersecurity, and execution, including the questions organizations should be asking before, during, and after consequential AI decisions.
1:45PM Humanizing Security
Brandon Jefferson - CISO, Sealed Air
TBD
2:45PM Lightning Talk #3 - ISACA Charlotte
3:00PM Deepfakes - Seeing is Deceiving
Brian Willis- LBMC, InfoSec & Compliance Leader
Kyle Hinterberg - LBMC, Senior Manager, PCI QSA Consultant
Advances in synthetic voice and video technology are accelerating the evolution of social engineering attacks. Deepfake-enabled impersonation is increasingly targeting financial approvals, help desk verification processes, and account access workflows using convincing real-time identity spoofing. This session examines deepfakes as an access vector rather than simply a media phenomenon. We will walk through a threat model mapping deepfakes to common business processes including payment approvals, account changes, and support interactions. The session then explores practical defensive measures such as multi-channel verification, approval separation, escalation controls, and training adjustments designed to reduce impersonation risk.
3:45PM The Approval Layer: Turning AI Oversight into Institutional Judgment
Josh Johnson - Field CISO and Senior Solution Architect
“Human-in-the-loop” is in every AI policy and defined in almost none. Here’s how the approval layer actually works, and how it trains your org while it protects it.
4:30PM Closing Comments & Reception
5:00PM Networking Hour
Please check regularly for updates.
Share link with others:
Countdown to the Event
- Days0
- Hours0
- Minutes0
- Seconds0