Some professionals in infosec are so effective, accomplish so much, and achieve such a high level of success that the term "Rock Star" is entirely accurate. What sets them apart is a core set of skills that go well beyond technical expertise. What are these critical skills? How can we develop them to be more successful, get more done, and increase our overall effectiveness? Through research, surveys, interviews, and time spent working alongside highly successful infosec professionals, those often referred to as true "Rock Stars," Ted Demopoulos has distilled five critical professional, and sometimes even life, skills. This talk explores each of these five skills and provides practical, actionable advice for applying them.

SEC529: Quantum Security Readiness for Executives - A 1-day intermediate level cybersecurity course offering 6 CPEs. This is a beta course focusing on quantum security readiness for executives. The training includes immersive online cybersecurity training with practical insights from real-world practitioners, real-time support from certified teacher assistants, hands-on labs, comprehensive courseware, GIAC certification alignment, CPE credits, and 4 months of access to recorded lectures. Includes complimentary access to NetWars Tournament.

A keynote presentation about facing the challenge of AI in cybersecurity careers, using the metaphor of Paul Bunyan and the steam-powered saw. The presentation explores how cybersecurity professionals can adapt to and leverage AI technology rather than compete against it. Focuses on finding your place in the new AI-driven cybersecurity landscape and using AI as a tool to secure the digital frontier.

The 2026 Cybersecurity Toolkit Refresh brings a major set of free, practical updates to two widely adopted resources in the community: the SANS Policy Templates and the Cybersecurity Risk Foundation (CRF) frameworks. This session focuses on what's new in the spring 2026 releases--updated SANS policies, refreshed CRF safeguards, expanded threat and governance models, and new supporting tools designed to help teams mature faster without adding complexity. Whether you're already using these resources or discovering them for the first time, the emphasis is simple: everything discussed in this talk is freely available, ready to download, and put into practice as soon as you get home from this event. Building on the theme of 'cybersecurity without the chaos,' we'll walk through how these updated resources align to the CRF GRC Roadmap, providing a clear, step-by-step structure for implementing policies, selecting safeguards, validating controls, and communicating progress across the organization. Attendees will leave with immediate next steps, actionable examples for each phase of the roadmap, and direct links to all updated templates and frameworks. The goal is to help you cut through noise, adopt what works, and bring more order, clarity, and consistency to your cybersecurity program--using resources that are ready for you to put into practice today.

Ever wondered how the SANS Internet Storm Center will help you protect your network? For over 20 years, the SANS ISC has provided up-to-date threat intel and tools to make this threat intel actionable. Sources from volunteer contributors and practitioners, the ISC offers what you need to know to protect your network today. This talk will not use PowerPoint but instead offer an engaging walk-through of recent events, how they manifested themselves in the ISC's data, how our different data feeds work, and more. A talk not just for packet connoisseurs but for everybody interested in a good story.

13th annual SANS Security Awareness & Culture Summit. Learn, connect, and share with thousands of fellow security awareness, behavior, and culture professionals from around the world. Summit: Aug 27-28 | Training: Aug 19-26 | In-Person Summit CPE Credits: 12. Available both in-person and virtual. Includes talks, presentations, workshops, networking opportunities, evening receptions, and access to exhibit hall.