In this session, moderated by Doug Barbin, cybersecurity industry leaders from Zscaler and CrowdStrike will explore the practical application of a "Test Once, Certify Many" or as Zscaler refers to it, Collect Once Certify All (COCA) approach to cybersecurity assessments. We will delve into strategies for consolidating audit and compliance processes across frameworks, reducing redundancies, and enhancing efficiency in the ever-evolving cybersecurity landscape. Through real-world examples, attendees will gain actionable knowledge on streamlining their security assessments to meet multiple regulatory and customer requirements while maintaining robust protection and transparency.

Topic: Consolidated Compliance

Presenters

Doug Barbin

National Managing Principal

Schellman

Meet Doug

Kumar Selvaraj

Vice President of Global Security Compliance

Zscaler

Algirde Pipikaite

Head of Governance, Risk, and Compliance

Crowdstrike

Meet Algirde

GMS will showcase our expertise in DevOps, DevSecOps, and AI-driven security solutions to help organizations build and maintain compliant, secure, and automated cloud environments. We will present our AI Security Application, which enhances risk management and compliance by identifying vulnerabilities, automating remediation in AWS, and generating detailed compliance reports for 30 different industry standards, including FedRAMP, SOC 2, HIPAA, and ISO 27001. Our approach ensures confidential data is not exposed to AI models, maintaining strict security policies while leveraging AI for knowledge transfer and infrastructure guardrails. Additionally, we will demonstrate our capabilities in automated deployment of compliant infrastructure, ensuring organizations meet regulatory requirements without manual overhead. Our AI-powered agent facilitates seamless infrastructure knowledge transfer, reducing dependency on individual engineers and ensuring consistency across deployments. Through advanced security automation, we empower businesses to stay ahead of evolving threats while optimizing cloud operations. Attendees will learn how GMS’s innovative solutions bridge the gap between automation, compliance, and security, enabling enterprises to scale securely and efficiently in AWS.

Topic: Enhancing Cloud Security and Compliance with AI-Driven Automation

Presenter

Deep Patel

Director

Global Mobility Services

Meet Deep

Kevin Patel

Data Scientist & Software Developer

Global Mobility Services

Meet Kevin

As organizations effort to demonstrate their compliance to satisfy requirements, win business, or address security concerns, a critical area of risk management is through their supply chain. However, understanding your vendors' compliance and security profiles can unfortunately become a 'check the box' scenario. This session answers important questions related to strengthening your vendor risk management programs and specifically answering questions such as 'What does vendor compliance actually mean for your business?' and ' Does management understand the report you are looking at?'

Topic: Understanding and Levraging Your Vendor's Compliance Report

Presenter

Ryan Buckner

Chief Knowledge Officer

Schellman

Meet Ryan

Investing in experts and building a team of cross-trained professionals to support your growing compliance program. This session will focus on how to leverage training and professional certifications to build a team of security, privacy, and compliance professionals that can leverage frameworks to create unified control catalogues, gain efficiencies from both an internal and external audit perspective, reduce audit fatigue on your teams, and decrease audit and consulting expenses.

Topic: Musical Certs

Presenter

Lauren Edmonds

Managing Director

Schellman

Meet Lauren

Beyond the deliverable, organizational decision-makers need to understand what the report provides, what it means in their organizational context, different services and how to scope them to get the most value from your engagement.

Topic: Penetration Testing

Presenter

Josh Tomkiel

Managing Director

Schellman

Meet Josh

o This presentation will show how to manage a compliant cloud environment efficiently and effectively by leveraging compliance requirements, organizational structure, and identity and access management

Topic: "Identity Linkin' Logs - Build Compliant Cloud Environments Like it's Child's Play"

Presenters

Aaron Rea

Principal Consultant

ScaleSec

Meet Aaron

Greg Peterson

Principal Consultant

ScaleSec

Meet Greg

There are various risk management, control, and compliance-based frameworks that often do not require an independent assessment in the marketplace and/or do not have an attestation or certification option available from the relevant standard-setting body, but many organizations elect to have an objective, independent assessment executed over such standards. Join us to learn why some organizations elect independent assessments when not required and hear some use cases as to how this decision has created a competitive advantage and helped organizations to increase trust, transparency, and efficiencies.

Topic: CSF/SSDF/ZTMM/Cyber Rule/ 3DS+PSD2/ HITRUST"

Presenters

Sully Perella

Senior Training Services Manager

Schellman

Meet Sully

Mark Allers

VP of Business Development

Cimcor

Meet Mark

Jason Ford

CEO of Patriot Partners

Steel Patriot Partners

Meet Jason

This session covers three core components: the shared responsibility model, security implementation, and compliance acceleration. We explain how security responsibilities are divided between AWS and customers, using real-world examples to illustrate effective practices; address current security challenges and introduce the AWS Global Security & Compliance Acceleration program, which helps organizations fast-track their compliance goals. Participants will learn practical steps to secure their cloud infrastructure and maintain regulatory compliance using AWS tools and resources.

Topic: Navigating the AWS Shared Responsibility Model: A Comprehensive Approach to Security & Compliance

Presenters

Greg Carpenter

Sr. Security Partner Strategist

AWS

Meet Greg

Traditional compliance frameworks often rely on static checklists that fail to capture the dynamic and evolving nature of cyber threats. Cyber risk quantification offers a data-driven approach that goes beyond mere regulatory adherence, enabling organizations to assess, prioritize, and mitigate risks more effectively. This presentation explores how integrating quantitative risk assessment into compliance strategies enhances decision-making, improves resource allocation, and ensures a proactive security posture. By bridging the gap between compliance obligations and real-world cyber threats, organizations can move from a reactive to a resilience-driven approach, strengthening both security and regulatory alignment.

Beyond Checklists: How Cyber Risk Quantification Strengthens Compliance

Presenters

Jonathan Trull

CISO & SVP Customer Solutions Strategy

Qualys

Meet Jonathan