2025 Rocky Mountain Cybersecurity Symposium + RMUG

In this session John will share a number of free and highly effective deception techniques you can implement right now to make hackers and pentesters cry. Because their tears make the best wine.  Also, a full cloud-based VM environment will be provided to all attendees so they can play along.

Business and their cybersecurity professionals face an ongoing battle against evolving threats, but what happens when the very tools designed to protect an organization fail, not because of the technology itself, but because of misconfiguration and lack of training.  I will provide a real-world scenario of how a major manufacturing institution suffered a catastrophic ransomware attack despite investing in a cutting-edge endpoint security solution.

Only 20% of companies use DMARC, SPF, and DKIM, global anti-domain-spoofing standards which could significantly cut down on phishing attacks. But even when they are enabled, 81% of phishing attacks still continue to sail right through to the end-user. Come learn why. Attend this presentation to learn how to enable DMARC, SPF, DKIM the right way! Then learn the six reasons why phishing still might get through and what you can do to maximize your defenses.

HECVAT 2025 Updates: Better than Ever - Many updates are routine, but the HECVAT 2025 update isn’t routine! The higher education information security, privacy, IT accessibility, other communities, and the HECVAT working group have collaborated on the biggest HECVAT update yet! Our session will go over the HECVAT 2025 updates, future plans, and ask for your feedback on HECVAT on how it’ll work for smaller campuses. We want to hear your thoughts on what additional documentation is needed and how it could be developed. We’ll also go over other third-party risk management community activities and where we need you to get involved to build more resources for the community and the service providers that support us.