RSA 2020: Three Takeaways from the Halls of the Moscone Center

Security Curve CTO Diana Kelley on communicating cybersecurity ROI through a business-profitability lens, building application security programs, and improving inclusivity in the security industry.

Risk Neutral CEO Jeff Sauntry on the Chief Risk Officer role's evolution, the five enterprise risk categories, and how security leaders can translate technical risk into board-level language.

A 30-year security veteran shares lessons for CISOs: simple misconfigurations often beat advanced skills, and new senior leaders should focus on understanding the business before spending on tools.

Former CIA CISO Robert Bigman recounts building the agency's CISO role from scratch, why governance and policy work were core duties, and how to recover from mistakes in high-stakes environments.

What good cyber crisis management actually looks like: the behaviors, structures and decision rights that carry an organization through the first hours of a real incident when plans meet pressure.

Why cyber crisis plans fail: the industry measures document presence instead of decision effectiveness — organizations need clarity on priorities and authority, not more playbooks.