CMMC 2.0 - What's Next?

Large Language Models (LLMs), a sub-set of the AI tools category, are helping security teams innovate like never before. While AI won’t replace teams in Security Operations Centers (SOCs) anytime soon, it can deliver scale, accelerate response times, and enhance real-time operations when used effectively. At a broader enterprise level, while organizations are eager to harness AI for efficiency and actionable insights, its rapid evolution also introduces new, hard-to-measure risks, requiring a fresh approach to governance and compliance.

Ankur Sheth

Senior Managing Director, Ankura

David Sampson

VP of Cyber Risk & Strategy, Thrive

Joshua Neil

Co-Founder, Alpha Level

Cybersecurity strategies have traditionally centered on protecting IT systems: data, networks, endpoints, and cloud environments. But as industrial systems, critical infrastructure, and production environments grow increasingly digitized, attackers are shifting their focus to operational technology (OT) environments, where the majority of organizations still lack basic protections. Why? OT is fundamentally different from IT: it prioritizes uptime, safety, and continuity, and it wasn’t designed with modern threats in mind. Join Cybolt's Erik Holmes, Vice President, Managed Security Services and Enrique Azuara, Vice President, OT Security, to learn how organizations can secure OT alongside IT, without disrupting operations. They’ll outline practical strategies for building integrated security and compliance programs across both domains.

Erik Holmes

Vice President, Managed Security Services, Cybolt

Enrique Azuara

Vice President, OT Security, Cybolt

For the first time in over a decade, the HIPAA Security Rule is proposing major upgrades, modernizing its largely unchanged healthcare compliance requirements.

Josh Fleming

Senior Manager of Risk Advisory + GRC Services at Echelon Risk & Cyber

Steve Dyson

Senior Manager of Risk Advisory + GRC Services at Echelon Risk & Cyber

What happens when vendor cyber risk turns into your liability? When a third party drops the ball on cybersecurity and compliance, your business could be held accountable.

Tom Brennan

Managing Partner, Proactive RISK

Steven Teppler

Partner and Chief Cybersecurity Legal Officer at Mandelbaum Barrett PC

After years of gestation, the final rule establishing the U.S. Department of Defense CMMC program, which requires government contractors to meet rigorous cybersecurity protocols, went into effect in December.

Carter Schoenberg

Chief Cybersecurity Officer, SoundWay Consulting

As federal regulations surrounding Controlled Unclassified Information (CUI) become more stringent, organizations are facing new challenges in protecting sensitive data — and legal consequences for failing to do so.

Thomas Allen