Weathering the Storm: How We Can Turn the Tide on Threats (Panel)
Discusses weathering the Storm: how organizations can Turn the Tide on Threats (Panel) and evaluates key implications for security practitioners.
Summary
Panel focus
Weathering the Storm at Hacks and Hops gathers Judy Hatchet (Surescripts CISO), Martin Holste (Trellix cloud CTO), Eric Hansen and Seth Bowling (FRSecure offensive/R&D) to discuss turning the tide on threats.
Program foundations
Panelists debate starting points—budget and outsourcing vs. hiring, policies/standards as governance baseline, SOC readiness, and asset inventory as prerequisites to securing what you own.
Frameworks
Judy notes frameworks (NIST CSF, HITRUST, COBIT) provide guardrails and maturity benchmarking but do not alone measure policy adherence or culture; they complement—not replace—standards work.
Where orgs fail
Discussion shifts to misallocated security dollars, compliance-driven misprioritization, and whether clients should fear zero-days more than absent programs—consensus favors fundamentals over headline O-days alone.
Related talks
Hacks & Hops·40 min
Examines who Can You Trust w/ Evan Francen and Michael Kennedy and evaluates key implications for security practitioners.
CSIT Village·27 min
James Tan
James Tan examines join us as we go behind-the-scenes of threat hunting and investigation.
CSIT Village·13 min
Daniel Siok
Daniel Siok examines what does an air-gapped system really mean in practice.