SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals

As critical infrastructure becomes increasingly digitized, the convergence of regulatory mandates and modern technology standards is reshaping how organizations protect essential services and, ultimately, the citizens who depend on them. Standards such as CIP-015, alongside evolving virtualization and cloud security standards, are driving a fundamental shift from reactive compliance to proactive, resilient security architectures.
This session explores how these standards are elevating security across energy, utilities, and other critical sectors by establishing stronger controls around data protection, system integrity, and operational visibility. CIP-015 sets a new benchmark for detection and visibility within critical networks, while virtualization and cloud standards will allow for the introduction of new approaches and new technologies to aid entities in ensuring reliability.
Attendees will gain insight into how organizations are:
By examining real-world approaches and emerging best practices, this session offers solutions on meeting regulatory expectations but also enhancing organizational ability to protect critical infrastructure in an era of constant cyber risk.
Virtual
The EU AI Act’s high-risk enforcement deadline of August 2, 2026 is no longer on the horizon—it’s here, bringing penalties of up to €35 million or 7% of global turnover. But this is only one piece of a rapidly expanding global regulatory landscape, where AI frameworks increasingly intersect with cybercrime laws, data protection mandates, and digital governance requirements.
This session moves beyond checkbox compliance to explore how leading organizations are building AI strategies around five core principles: transparency, accountability, privacy and security, human oversight, and societal benefit. Attendees will leave with practical insight into aligning with multiple regulatory regimes, identifying high-risk AI use cases, and operationalizing compliance in ways that drive both innovation and trust.
Organizations that act now won’t just meet mandates—they’ll lead. Those that wait risk being left behind.
Virtual
Discover how today’s leading CISOs and security teams are translating evolving cybersecurity directives into strategic, actionable plans. According to the 2026 SANS | GIAC Workforce Report, these directives are now impacting 95% of the global cyber workforce.
Learn how organizations are:
Walk away with real-world insights and practical approaches from organizations already navigating these challenges—so you can remain compliant and stay ahead of the curve.
Virtual
Organizations are overwhelmed by a constant stream of new regulations, frameworks, and audit demands, often responding with reactive, fragmented compliance efforts. This session introduces a practical GRC Roadmap that reframes compliance as a structured, repeatable process aligned to how cybersecurity programs are actually managed. Attendees will learn how to shift from chasing individual requirements to selecting, implementing, and validating safeguards that meet multiple obligations simultaneously. The result is a more efficient, defensible, and scalable approach to compliance that reduces operational chaos while improving overall program maturity.
Virtual
As cybersecurity regulations and directives continue to evolve, technical professionals are increasingly being called upon to brief executive leadership and boards. This session equips practitioners with the skills needed to communicate effectively in these high-stakes environments.
Attendees will learn how to align cybersecurity messaging with business objectives, translate technical concepts into clear, actionable insights, and focus on the issues that matter most to executives. Topics include engaging the C-suite and board, enabling the business through cybersecurity, prioritizing mission-critical discussions, and presenting cyber risk in business terms.
Virtual