10:00am - 10:10am MT | Event Kickoff & Introduction
Mick Douglas, SANS Principal Instructor |
10:10am - 10:45am MT | Beyond the Hype: Making Autonomous Security Operations a Reality
AI is transforming security operations, enhancing speed, scalability, and decision-making like never before. Achieving true autonomy requires more than just data and automation. In this session, we’ll clarify the progression from Level 4 automation to Level 5 AI-driven security, explore how autonomous alert triage and response enhance efficiency, and discuss the role of virtual analysts in augmenting security teams. We’ll also touch on key considerations for deploying AI in real-world SOC environments, balancing automation with human expertise.
If you're working on AI-driven security, this session will provide practical insights into what’s possible today and what’s next on the horizon.
Stephen Morrow, Chief Solution Officer, AirMDR |
10:45am - 11:20am MT | Unlock the Key to Cybersecurity Excellence: AI-Powered Security Operations Solutions from Fortinet
Fortinet's AI-powered security operations solutions unlock cybersecurity excellence by providing organizations with proactive and efficient threat detection and response capabilities. By leveraging artificial intelligence and machine learning, Fortinet's solutions automate threat analysis, identify and prioritize critical threats, and enable rapid response to security incidents. With Fortinet's AI-driven security operations, organizations can enhance their security posture, reduce risk, and protect their valuable assets from evolving cyber threats.
Dan Migliore, Regional Manager, Enhanced Technology, Security Operations Solutions, Fortinet |
11:20am - 11:55am MT | Beyond Security: The CISO’s Role in Responsible AI
AI is transforming the way we do business – but it’s also redefining the responsibilities of CISOs. In this session, we’ll help both CISOs and their team understand how this role and their teams are uniquely positioned to not only address security and privacy, but the broader net of Responsible AI.
You’ll gain insights into why AI security isn’t just about protecting data, but safeguarding justified trust of AI, the role of CISOs in AI ethics, compliance, and transparency, real world case studies where security leaders played a pivotal role in shaping and implementing Responsible AI strategies.
Kristy Hornland, Cybersecurity Director, KPMG US |
11:55am - 12:10pm MT | BREAK - We'll be back in 15 min. |
12:10pm - 12:45pm MT | Scaling GRC with Trust, AI, and Automation
Ever wonder what security leaders across industries are focusing on in the GRC space? What are their top priorities, and how should they shape yours?
Join Vanta’s GRC Subject Matter Expert, Crystal Jackson, and Product Marketing leader, Lauren Wade, for a deep dive on building and scaling GRC programs. Crystal will share her take on the role of trust, AI, and automation in strengthening your foundation and preparing for what’s next.
What to expect:
* Point of view on top of mind issues for GRC leaders
* Role of trust management in scaling GRC
* Where to prioritize AI and automation in GRC
Crystal Jackson, GRC Subject Matter Expert, Vanta
Sammi Reinstein, Senior Product Marketing Manager, Vanta |
12:45pm - 1:20pm MT | Static Analysis + LLMs: How to Cut your Backlog by 20% Overnight
Can LLMs replace static analysis?
The answer to that question (at least today) is a resounding no - but our AI team at Semgrep has found that there is immense power in combining the two. By adding AI post-processing to Semgrep scans, we’ve been able to eliminate a large number of false positives that static analysis tools alone will always flag. These are the false positives that require contextual understanding of code and frameworks to identify, which LLMs are really good at doing when paired with Semgrep’s SAST engine.
In this webinar, you’ll learn:
*Brief introduction of Semgrep
*How Semgrep Assistant catches the false positives that static analysis alone could never, with a 95% human agree rate
*How this reduction in noise equates to an average 20% reduction in findings to triage (imagine cutting your backlog by 20% overnight)
*Why this noise filtering capability finally makes shift left a real possibility for AppSec teams and developers
Join us as we explore how AI + AppSec can deliver a Semgrep Assistant that has evolved from providing insights in 2024 to becoming a more autonomous, agentic solution in 2025 and beyond!
Erik Buchanan, Head of AI Engineering, Semgrep |
1:20pm - 1:30pm MT | Event Recap & Closing Remarks
Mick Douglas, SANS Principal Instructor |
.jpg "SANS - Blog - Securing AI in 2025- A Risk-Based Approach to AI Controls and Governance_340 x 340(1).jpg")
