CactusCon

CactusCon13
February 14-15, 2025
Mesa, AZ

CISO Village at CC13

Our Background

From the ground up, the CISO village was designed to be like a 'School Science Fair' where each person is building a volcano. Each volcano is different and unique. Each person built their volcano with a different vision while making sure its meeting the requirements placed on it.

The cybersecurity programs that we support aren't too different from the science fair volcanoes. We each have unique challenges, constraints, and previous technical debt. We might be supporting a smaller or larger organization. We might be supporting a public or a private organization.

Despite these differences, wouldn't it be nice to step into the shoes of another CISO's program to see what things you might be able to improve on yourself? Wouldn't it be nice to better understand what things might be different in a healthcare industry versus a manufacturing industry (besides the regulatory requirements).

Our Approach

There are a lot of conferences where the attendees sit in the audience and learn. However, since many of the members have 10+ years of experience, we feel like having a more roundtable approach where we can all learn from each other would be more engaging. Our approach is not to have presentations. Our approach is to facilitate workshops where we can all learn from each other. We invite you to come learn and grow with us!!

Attending the CISO Village

The CISO Village at CactusCon 13 is separate from the main conference. Registering for the CISO event gets you entry into the CISO Village at CactusCon13 on Saturday, February 15. The village includes a catered hot lunch. This ticket gets you entry into the main conference for both days, February 14th and 15th. You will have access to all of the conference talks, workshops, and villages. Merchandise and electronic badges are available for purchase at the conference for an additional cost.

Registration is separate from the main conference. Click here to register for a CISO Track ticket through Eventbrite.

Schedule

We will start the day with coffee, tea, and other light breakfast snacks as we quickly transition to the main part of the village, which will focus on 6x rotating workshops that every member will be able to attend. A plated lunch will be served (dietary customizations can be accommodated) as well as snacks throughout the day. Below is the tentative schedule of events:

Saturday, February 15th, 2024

  • 8:30 - 9:00am Check-in and coffee/tea reception

  • 9:00 - 9:15am Opening Remarks

  • 9:15 – 11:30am Workshops

  • 11:30 – 12:15pm Keynote

  • 12:15 - 1:15pm Lunch

  • 1:30 – 3:45pm Workshops

  • 3:45 - 4:30pm Panel / Keynote

  • 4:30 - 5:00pm Closing remarks

Workshops

Featured
CISO Village Keynote

Ashley Devoto is the Chief Information Security Officer at Discount Tire, which is a $10 billion retail company operating more than 1,200 stores across the US with nearly 30,000 employees. She is responsible for the company’s enterprise-wide cybersecurity program including governance, risk and compliance, security architecture and engineering, security operations, and overall cyber defense. Prior to joining Discount Tire, Ashley was the CISO at Booz Allen Hamilton, a large defense contractor, where she established, maintained, and led the enterprise cybersecurity vision, strategy, and program.

Read More →
Vendor Reveal Party

Daniel Shuler and Alexander J. Dita

Join us for an engaging and insightful presentation titled “Vendor Reveal Party”, hosted by Daniel, a seasoned Chief Information Security Officer (CISO), and Alexander, an experienced security professional and vendor. This unique event is designed to shed light on the best practices for CISOs and their teams when interacting with vendors and partners.

Read More →
Cybersecurity Leadership Accelerator: Your First 100 Days as CISO

Dina Mathers and Lester Godsey

Stepping into the role of Chief Information Security Officer (CISO) is an exhilarating journey filled with challenges and opportunities. The first 100 days are crucial for laying a strong foundation and shaping your path to success. Join us for "The CISO's Playbook: Thriving in Your First 100 Days" workshop, where we will equip you with the essential strategies and insights needed to thrive during this critical period.

Read More →
CISO Village Panel

Moderator: Andy Jordan

Speakers: Michael Bonner, Ryan Murray, Ian Dawson, Gary Perkins

Read More →
How I quit worrying about an incident and learned to become a CISO

Preston Callos and Andy Jordan

Are you a new Chief Information Security Officer (CISO) facing the daunting task of managing your first security incident? Join us for an empowering workshop designed specifically for new CISOs who are ready to learn the ropes of incident management. In ""How I Quit Worrying About an Incident and Learned to Become a CISO,"" you'll explore three real-world incidents, diving into detailed case studies and learning step-by-step strategies to effectively manage and resolve them. Develop the skills to lead your team confidently during a crisis through interactive learning and hands-on activities.

Read More →
Fortifying the Future: Essential Cyber Insurance Strategies for CISOs

Dara Gibson

In an era where cyber threats are ever-evolving, it's crucial for Chief Information Security Officers (CISOs) to understand the pivotal role of cyber insurance in their risk management strategy. This presentation, "Fortifying the Future: Essential Cyber Insurance Strategies for CISOs," will explore the landscape of cyber insurance, including key coverage options, policy considerations, and emerging trends. Attendees will gain insights into how to evaluate and select the right cyber insurance policy, integrate it with existing security protocols, and effectively communicate its value to stakeholders. By the end of this session, CISOs will be equipped with actionable strategies to enhance their organization’s resilience against cyber threats and ensure comprehensive protection in a digital world.

Read More →
Identifying and Navigating the Risks of Executive Debt

Mark Dallmeier

This workshop will explain key attributes of Executive Debt and will walk attendees through a self-assessment framework and experience. This session will enable attendees to identify, document, and assess the risks associated with Executive Debt, and will explain Executive Debt and Technical Debt dependencies that directly impact the risk posture of an organization.

Read More →
Making it Click - How to Build an Effective Security Strategy

David Richards and Mike Manrod

In this 'choose your own adventure' workshop, you will select an attack flow and go to work on creating a defensive and response strategy to protect your company against the attack. Like building a Lego fortress, elements of an effective security strategy can click together to build your protection brick-by-brick. Participants will take away insights about attack and defense, and how to consider both aspects to create an effective security strategy. 

Read More →