SANS New York City 2027

Cybersecurity Training That Takes Defenders Into Architecture and Leadership

SANS New York City 2027 is a cybersecurity training event running August 9-14 at The Westin New York Grand Central, in-person and online. Courses cover foundational security, incident handling, forensics, penetration testing, automation, ICS security, hybrid and cloud security architecture, and security leadership, most leading to a GIAC certification exam.

Hybrid and Cloud Architecture, Plus Leadership Tracks

Attackers move across identity, network, and cloud boundaries as if they were one environment, and defenses designed one boundary at a time leave gaps between them. This cybersecurity training lineup works on that problem from both ends. Security Essentials, incident handling, forensics, and penetration testing build the hands-on base. Two architecture courses, one on zero trust for the hybrid enterprise and one on the cloud, cover how to design controls that hold together across those boundaries.

Python automation and ICS/SCADA security fill in skills that cut across teams, which matters for organizations that run utilities, transit, or building systems alongside their IT. Two leadership courses, one for new managers and one for strategic planning, mean the person who builds a security program and the person who runs it can attend the same week.

Why Attend New York City 2027

• The people teaching these courses still do the work, so the labs in penetration testing, forensics, and architecture resemble real client environments rather than textbook examples.
• Most courses on this lineup have a matching GIAC certification exam, so what you learn is testable and portable afterward, including in the architecture and ICS tracks.
• New York's security community skews toward financial services, healthcare, media, and the public sector, which makes for varied hallway conversation during the week.
• The Westin New York Grand Central is on East 42nd Street, two blocks from Grand Central Terminal. The Chrysler Building at Lexington Avenue is on the way, and the United Nations headquarters lies in the other direction along 42nd Street.

Why Organizations Send Teams

• Financial regulators here put accountability on leadership. The NYDFS Cybersecurity Regulation (23 NYCRR Part 500) requires senior governing bodies to oversee cyber risk, and SEC rules require public companies to describe board and management oversight in annual reports.
• Design the controls once, across hybrid and cloud. Two architecture courses give a team a shared method for zero trust and cloud design, so identity, network, and data decisions are made together instead of one platform at a time.
• Develop engineers and managers from the same team. Cloud architects and security managers can be slow to hire, and growing them internally is faster and cheaper. A manager and an engineer can attend the same week and come back with a common vocabulary.
• Give leadership a recognized benchmark. GIAC certifications are independently accredited, which lets a leader show an auditor or a client's security review a standard measure for each person on the team.

Course Highlights

• Design zero trust controls for networks that span offices, data centers, and cloud in Defensible Security Architecture and Engineering.
• Design identity, network, and data controls across AWS, Azure, and Google Cloud in Cloud Security Architecture.
• Build your own security tools, including AI agents, in AI-Powered Security Automation: Building Tools with Python, LLMs, and MCP.
• Build the strategic plan and policy framework for a security program in Security Strategic Planning, Policy, and Leadership.