2025 Rocky Mountain Cybersecurity Symposium + RMUG: Full Schedule

Welcome to the 2025 Rocky Mountain Cybersecurity Symposium + RMUG

You can now build your schedule!

Preconference sessions are pre-populated for those who registered for those two days and cannot be removed or adjusted. These have a snowflake in the selection circle.

Pinned sessions are ones that we don’t want you to miss.

8:00am MDT

RMCS Conference Welcome and Event Logistics

Wednesday June 18, 2025 8:00am - 8:10am MDT

LH Gym

Wednesday June 18, 2025 8:00am - 8:10am MDT
LH Gym

Welcome

8:10am MDT

GeoINT Mastery: A pixel is worth a thousand words

Wednesday June 18, 2025 8:10am - 9:00am MDT

LH Gym

After this interactive talk, you will never see images the same way again. This enlightening session explores the dynamic realm of GEOINT (Geospatial Intelligence), a captivating subset of OSINT (Open Source Intelligence) that unlocks a wealth of hidden insights within images and videos. From identifying objects, landscapes, and aircraft to interpreting symbols, shadows, and reflections, we'll go deep into the art of imagery analysis. Learn how to decode the language of trees, signs, text and logos, and uncover the strategic implications behind seemingly mundane details using common browser tools. This talk promises to equip you with mind-blowing skills that you can easily learn as I take you through multiple demos.

Speakers

Mishaal Khan

Wednesday June 18, 2025 8:10am - 9:00am MDT
LH Gym

RMCS - Technical Track

9:10am MDT

The Fraud Crisis in the US

Wednesday June 18, 2025 9:10am - 9:50am MDT

LH Gym

In this session, learn about the scope and evolving nature of fraud, and its impact on older adults. You will hear about transnational organized crime rings behind these crimes, the technological revolution that generative artificial intelligence has presented to the criminals, and you will learn about some of the most concerning types of scams targeting Americans. You will also walk away with concrete actions each of us can take to shore up our defenses against fraud criminals.

Speakers

Kathy Stokes

Director, Fraud Prevention Programs, AARP Fraud Watch Network

Kathy Stokes is a nationally recognized leader in the fraud arena. As Director of Fraud Prevention Programs with the AARP Fraud Watch Network, Kathy leads AARP’s social mission work to educate older adults on the risks that fraud represents to their financial security. Since 2019... Read More →

Wednesday June 18, 2025 9:10am - 9:50am MDT
LH Gym

RMCS

10:00am MDT

Quantum Reckoning: The Coming Day When Quantum Computers Break Cryptography

Wednesday June 18, 2025 10:00am - 10:55am MDT

LH Gym

Quantum computing is getting ready to break all traditional public key crypto, like RSA and Diffie-Hellman, and every secret it protects. This means that digital certificates, PKI, TLS, VPNs, Wi-Fi networks, and even most crypto-currencies are left unprotected in an instant. The only question is when it will happen. Many experts think it’s sooner than you think.

Speakers

Roger Grimes

Data-Driven Defense Evangelist, KnowBe4

Roger Grimes is KnowBe4’s Data-Driven Defense Evangelist, is a 36+-year computer security consultant, instructor, holder of dozens of computer certifications and an award-winning author of 15 books and over 1,500 magazine articles on computer security. He now serves as the Data-Driven... Read More →

Wednesday June 18, 2025 10:00am - 10:55am MDT
LH Gym

RMCS

11:10am MDT

Revolutionizing Decision-Making: Empowering Critical Thinking in World of Manipulation

Wednesday June 18, 2025 11:10am - 12:00pm MDT

LH Gym

In today’s hyper-connected world, we are constantly bombarded with persuasive messages — emails, texts, social media posts, phone calls, even face-to-face conversations — each designed to tap into our instincts and vulnerabilities. Fraudsters, scammers, and malicious actors are masters at using psychological tactics like authority, fear, likeability, scarcity, and reciprocity to manipulate our decisions, often leading to identity theft, financial loss, and privacy breaches.
This keynote dives deep into the need for a fundamental shift in how we approach decision-making. Peter Warmka will guide attendees through real-world examples and expert insights, teaching how to recognize manipulation tactics, strengthen critical thinking skills, and adopt a "verify, then trust" mindset. Attendees will leave empowered with practical strategies to safeguard themselves and their organizations from deception — turning heightened awareness into everyday action.

Speakers

Peter Warmka

Founder, Counterintelligence Institute

Peter Warmka is a former Senior Intelligence Officer with the CIA having over 20 years of experience in breaching the security of target organizations overseas. He is an Adjunct Professor at Webster University's Masters in Cybersecurity Program, Founder of Orlando, Florida-based firm... Read More →

Wednesday June 18, 2025 11:10am - 12:00pm MDT
LH Gym

RMCS

1:15pm MDT

Book Signing Hour, Vendor Visits, and One-on-One Vendor Time

Wednesday June 18, 2025 1:15pm - 2:00pm MDT

LH Gym

Sponsered by Mark Peterson

Technical
Mishaal Kahn - The Phantom CISO: Time to step out of the shadow
Peter Warmka - Confessions of a CIA Spy: The Art of Human Hacking
Roger Grimes - Taming the Hacking Storm: A Framework for Defeating Hackers and Malware
Roger Grimes - Fighting Phishing: Everything You Can Do to Fight Social Engineering and Phishing

Awareness
Peter Warmka - WHY ARE YOU MESSING WITH ME?: Senior Survival Guide on Fraud, Privacy, and Security
Ben Halpert The Savvy Cyber Kids at Home - Three Book Collection - https://amzn.to/4fJwQ2V
Ben Halpert & Jennifer Dylan - Mothers Against Cyber Crime
Ben Halpert & Jennifer Dylan - Digital Parenting by the Ages

Speakers

Ben Halpert

Savvy Cyber Kids

Ben Halpert is a man on a mission: to educate and empower today’s digital citizens in the workplace, at schools, and at home.By day, he is a Fractional CISO and Cybersecurity Advisor for multiple companies building, running, and optimizing cybersecurity programs. By night, he champions... Read More →

Roger Grimes

Data-Driven Defense Evangelist, KnowBe4

Peter Warmka

Founder, Counterintelligence Institute

Mishaal Khan

Wednesday June 18, 2025 1:15pm - 2:00pm MDT
LH Gym

RMCS

2:00pm MDT

Designing Resilient Open-Source Storage Architectures for Security-Conscious Organizations

Wednesday June 18, 2025 2:00pm - 4:50pm MDT

LH Gym

The session will explore best practices for building on-premises data infrastructure using open-source components—including Ceph, ZFS, and 45Drives' Storinator and Houston Command Center software. Hall will provide a deep dive into how these systems can serve as the backbone for cybersecurity-conscious enterprises, government agencies, and educational institutions seeking to reduce attack surfaces, avoid vendor lock-in, and retain full data sovereignty.

Speakers

Dallen Griffith

Enterprise Data Coordinator, Casper College

Mitch Hall

Chief Architect, 45Drives Ltd

Wednesday June 18, 2025 2:00pm - 4:50pm MDT
LH Gym

RMCS - Technical Track

8:30am MDT

Digital Native or Digital Naïve? Raising a Savvy Cyber Generation

Thursday June 19, 2025 8:30am - 9:20am MDT

LH Gym

Today’s youth are growing up in a world that encourages a deep involvement with technology. Yet these same children are oftentimes unsupervised and unprepared to play safely on the digital playground—where they can very easily make bad and potentially dangerous decisions. The adults in young people’s lives have a responsibility to guide young people, who are spending a large part of their lives immersed in the digital realm, with a comprehensive cyber safety and cyber ethics education. Learn what you can do as an educator, parent, grandparent, and member of the community to drive generational change as we work to reduce the harms with giving children unfettered online access.

Speakers

Ben Halpert

Savvy Cyber Kids

Thursday June 19, 2025 8:30am - 9:20am MDT
LH Gym

RMCS

9:30am MDT

Interesting Ways I Can Hack You Using Email

Thursday June 19, 2025 9:30am - 10:20am MDT

LH Gym

Everyone knows email is one of the most common methods for hackers to compromise users and environments. This presentation covers multiple interesting methods of how it can be done, beyond the regular attacks (e.g. phishing, file attachments, etc.) that most people know about. It includes several video demos, including one by world famous hacker Kevin Mitnick. Attendees will be surprised and wowed by the innovative attacks and just how easy they are to accomplish.

Speakers

Roger Grimes

Data-Driven Defense Evangelist, KnowBe4

Thursday June 19, 2025 9:30am - 10:20am MDT
LH Gym

RMCS - Technical Track

11:00am MDT

Truth Over Comfort: Enforcing Risk Tolerance in a Cyber-Aware Organization

Thursday June 19, 2025 11:00am - 11:45am MDT

LH Gym

In cybersecurity leadership, there’s a constant temptation to downplay risk in favor of comfort, consensus, or optics. But pretending something is “handled” doesn’t make it safe. In this candid session, Bill Hunkapiller explores how Florida State University is shifting toward a culture where risk is acknowledged, owned, and addressed head-on. Learn how to enforce risk tolerance at an institutional level, how to communicate hard truths to executive stakeholders, and why security maturity demands more than compliance checkboxes. If you’re ready to challenge the culture of “cyber-as-it-looks-good-on-paper,” this session is for you.

Speakers

Bill Hunkapiller

CISO, Florida State University

Thursday June 19, 2025 11:00am - 11:45am MDT
LH Gym

RMCS - Technical Track

1:00pm MDT

Attack Surface At The Door: Why Access Control is a Cybersecurity Concern

Thursday June 19, 2025 1:00pm - 1:50pm MDT

LH Gym

Physical access is often treated as a facilities issue—but in today’s threat landscape, it’s also a cybersecurity imperative. This session explores how doors, locks, badges, and building access systems can expand your attack surface if not managed as part of a broader cyber risk strategy. Learn how access control systems can be exploited, where integration with IT systems can create vulnerabilities, and what steps you should take to better secure the physical perimeter of your organization. Whether you're managing a campus, a critical facility, or a remote office, understanding physical access as a cyber issue is no longer optional.

Speakers

Jeremy Fromm

Mercury Security Evangelist, Mercury Security Mercury Security - part of HID Global

Jeremy Fromm is a seasoned leader in the physical security industry, currently serving as the Evangelist for Mercury Security at HID Global. With nearly two decades of experience spanning product management, technical support, and enterprise business development, Jeremy brings a deep... Read More →

Constantine Tremouliaris

Manager, Alliances and Standards - Access Control, Assa Abloy Group

Manager, Alliances and Standards - Access ControlASSA ABLOY Group, where he collaborates closely with regional sales teams to deliver comprehensive security solutions. With a strong background in access control and physical security, Constantine has been recognized for his innovative... Read More →

Thursday June 19, 2025 1:00pm - 1:50pm MDT
LH Gym

RMCS - Technical Track

8:15am MDT

Deception For Fun and Profit.... But Mostly Fun

Friday June 20, 2025 8:15am - 9:00am MDT

LH Gym

In this session John will share a number of free and highly effective deception techniques you can implement right now to make hackers and pentesters cry. Because their tears make the best wine. Also, a full cloud-based VM environment will be provided to all attendees so they can play along.

Speakers

John Strand

Owner & Security Analyst, Black Hills Information Security

Friday June 20, 2025 8:15am - 9:00am MDT
LH Gym

RMCS - Technical Track

9:00am MDT

Guarding the Gates Wrong: A Real-World Tale of Ransomware and Human Error

Friday June 20, 2025 9:00am - 9:45am MDT

LH Gym

Business and their cybersecurity professionals face an ongoing battle against evolving threats, but what happens when the very tools designed to protect an organization fail, not because of the technology itself, but because of misconfiguration and lack of training. I will provide a real-world scenario of how a major manufacturing institution suffered a catastrophic ransomware attack despite investing in a cutting-edge endpoint security solution.

Speakers

Noelle Keller

Palo Alto Networks

Noelle Keller has a well-rounded background in tech, from hands-on work racking and networking servers in data centers to diving into devops and specializing in endpoint security. She earned her bachelor's degree in Computer Science from the University of Wyoming and has multiple... Read More →

Friday June 20, 2025 9:00am - 9:45am MDT
LH Gym

RMCS - Technical Track

10:00am MDT

How To Prevent Phishing With DMARC, SPF, and DKIM

Friday June 20, 2025 10:00am - 10:45am MDT

LH Gym

Only 20% of companies use DMARC, SPF, and DKIM, global anti-domain-spoofing standards which could significantly cut down on phishing attacks. But even when they are enabled, 81% of phishing attacks still continue to sail right through to the end-user. Come learn why. Attend this presentation to learn how to enable DMARC, SPF, DKIM the right way! Then learn the six reasons why phishing still might get through and what you can do to maximize your defenses.

Speakers

Roger Grimes

Data-Driven Defense Evangelist, KnowBe4

Friday June 20, 2025 10:00am - 10:45am MDT
LH Gym

RMCS - Technical Track

10:45am MDT

HECVAT 2025 Updates: Better than Ever

Friday June 20, 2025 10:45am - 11:30am MDT

LH Gym

HECVAT 2025 Updates: Better than Ever - Many updates are routine, but the HECVAT 2025 update isn’t routine! The higher education information security, privacy, IT accessibility, other communities, and the HECVAT working group have collaborated on the biggest HECVAT update yet! Our session will go over the HECVAT 2025 updates, future plans, and ask for your feedback on HECVAT on how it’ll work for smaller campuses. We want to hear your thoughts on what additional documentation is needed and how it could be developed. We’ll also go over other third-party risk management community activities and where we need you to get involved to build more resources for the community and the service providers that support us.

Speakers

Nick Lewis

Internet2 Program Manager, Internet2

Nick Lewis (CISSP) is a Program Manager for Security and Identity. Nick has held positions at Michigan State University, the University of Michigan, Children’s Hospital Boston, and was ISO at Saint Louis University. Nick holds an MS in Information Assurance from Norwich and Telecommunications... Read More →

Friday June 20, 2025 10:45am - 11:30am MDT
LH Gym

RMCS - Technical Track

8:00am MDT

8:10am MDT

9:10am MDT

10:00am MDT

11:10am MDT

1:15pm MDT

2:00pm MDT

8:30am MDT

9:30am MDT

11:00am MDT

1:00pm MDT

8:15am MDT

9:00am MDT

10:00am MDT

10:45am MDT

Get help with the event