Topic

GRC talks at BSides

99 talks tagged GRC from 46 chapters of BSides events worldwide.

Measuring Cybersecurity Maturity with the NIST CSF

BSides Vancouver · 2021

Technical GRC Threat Modeling Case Studies and Incidents Analysis Methodology Talk

Open →2021-06

Anti-Checklist Culture: Building Useful Security Compliance

BSides Seattle · 2020

Technical GRC Talk

Open →2020-12

Lessons Learned While Building a Privacy Operations Center at Headspace Health

BSidesSF · 2023

Policy Technical GRC Privacy Threat Modeling Talk

Open →2023-05

Achieving HITRUST on a Budget

BSidesSF · 2022

Technical GRC Intermediary Case Studies and Incidents Analysis Talk

Open →2022-07

Security Compliance as Code

BSidesSF · 2023

Policy GRC Talk

Open →2023-05

The CISO Is Dead. Long Live The CCSO

Grigorios Fragkos

Career Career & Soft Skills GRC Talk

Open →2024-06

10 Things I Wish Every CISO Knew Before an Incident: A View from the IR Trenches

BSides Knoxville · 2023

Technical DFIR GRC Talk

Open →2023-05

Poliksena Berisha - Governance, Risk and Compliance (GRC) and role of IT Auditing - BSides Prishtina

Poliksena Berisha

BSides Prishtina · 2022

Policy GRC Talk

Open →2022-05

U.S. Cybersecurity Laws and Regulations - An Overview of Key Cybersecurity Legislation

BSides Dallas/Fort Worth · 2024

Policy GRC Intro Talk

Open →2025-01

Planes, Trains, and Risk Assessments — Thinking Like a Security Consultant

Career Community Career & Soft Skills GRC Intro Talk

Open →2021-10

What's the Point of Compliance? Making Paperwork Useful

Rachael Lininger

BSides DC · 2018

Policy GRC Talk

Open →2018-11

Show Me the Money: Building Business Cases for Security at Small Organizations

Career Community Career & Soft Skills GRC Talk

Open →2021-10

What Would the CISO Do (WWCD) — How to Build a Security Strategy

BSides Knoxville · 2021

Career GRC Threat Modeling Talk

Open →2021-05

ABRACADABRA – Make your breach reporting woes disappear!

BSides Augusta · 2018

Policy GRC Talk

Open →2018-10

Risk Management Explained Through Star Wars

BSides SLC · 2025

Technical GRC Intro Talk

Open →2025-06

Show Me the Money: Getting Business Buy-in for Security

BSides Cayman Islands · 2022

Career & Soft Skills GRC Talk

Open →2022-07

Guardians of the Data Galaxy

BSides Berlin · 2023

Technical Cloud IAM GRC Threat Intel Talk

Open →2024-01

Josh Sokol: Measuring Cybersecurity Maturity with the NIST CSF

BSides Calgary · 2021

Technical GRC Threat Modeling Talk

Open →2021-12

Tales from the Audits

Justin M. Leapline

BSides Peru · 2016

War Stories GRC Talk

Open →2016-06

Cloud adoption and PCI DSS compliance: strategies and tools to ensure secure payment data storage

Vaibhav Mahadik Yazad Khandhadia Nitin Bhatnagar Milind Mungale Bharat Panchal

BSides Ahmedabad · 2024

Policy Cloud IAM GRC Privacy Panel

Open →2024-05

BSides Sofia · 2023

Policy GRC Policy Analysis Keynote

Open →2023-03

Bootstrapping Security in the Wild: A Ground Up Guide for Remote-First Teams

BSides Toronto · 2025

Technical Cloud IAM DevSecOps GRC Intro Talk

Open →2025-10

How HIPAA Compliance helps and hinders true patient data security

BSides SLC · 2016

Policy Technical GRC Privacy Talk

Open →2016-05

Emerging Cyber Trends

GRC Threat Intel Threat Modeling Intro Keynote

Open →2023-05

Del CVE al CEO: Cómo Hacer que la Alta Dirección Escuche a los Hackers

BSides CDMX · 2025

Technical GRC Threat Modeling Vulnerability Research Intermediary Methodology Talk

Open →2025-07

Healthcare Vulnerabilities During COVID-19: Ransomware, Phishing, and Insider Threats

Shea Jackson Anna Skelton

BSides Las Vegas · 2021

Technical GRC Healthcare Security Malware Analysis Social Engineering Intro Blue Case Studies and Incidents Analysis+1

Open →2021-08

Delete Your Data

BSides PDX · 2022

Technical GRC Privacy Intro Talk

Open →2022-10

Exploring Discrepancies In CISO Job Advertisements: An Analysis - Leonhard Kurthen and Daniel Fall

Leonhard Kurthen Daniel Fall

BSides Munich · 2023

Career Research Career & Soft Skills GRC Case Studies and Incidents Analysis Empirical Research Talk

Open →2023-10

I'm a Little Bit (FedRAMP) Country, I'm a Little Bit SOC2 'n Roll

Shea Nangle Wendy Knox Everette

BSides Las Vegas · 2022

Technical GRC Talk

Open →2022-09

Pivot with Purpose: Future-Proofing Your Cybersecurity Career

BSides SLC · 2026

Career Career & Soft Skills GRC Intro Talk

Open →2026-04

Practical Blue Teaming by Peter Jones

Technical Detection Engineering GRC Threat Intel Blue Talk

Open →2023-07

The Security Practitioner's Guide to Going from "No" to "Whoa"

Josh Sokol John Overbaugh

BSides Vancouver · 2022

Career Career & Soft Skills GRC Threat Modeling Talk

Open →2022-07

Fallout from Florida: Oldsmar Water Plant Hack and Critical Infrastructure Security

Jordan Sessler Anthony Hendricks

BSides Knoxville · 2021

Policy Technical GRC Talk

Open →2021-05

How to Prepare for the SEC Cybersecurity Rules Before December 2023

Bsides CT · 2023

Policy GRC Supply Chain Security Talk

Open →2023-10

Fe-fi-fo-FIM, I Smell The Monitoring Of An Elastic Stack!

Brett Calderbank

BSides Manchester · 2019

Technical Detection Engineering GRC Talk

Open →2019-09

The Overlooked Security Risk: 3rd Party Risk Management

BSides Vancouver · 2021

Technical GRC Supply Chain Security Blue Demo Talk

Open →2021-06

$how Me the Money! Getting Buy-In for a Security Program

BSides Charm · 2022

Career Career & Soft Skills GRC Talk

Open →2022-07

You Can "Trust" Me, I'm "Compliant": A Practical Approach to Automating Compliance and Demonstrating Trust

BSides Peru · 2023

Technical GRC Talk

Open →2023-08

Let's Chat About SOC 2s, Baby

Wendy Knox Everette

BSides Las Vegas · 2021

Policy GRC Intro Talk

Open →2021-08

From Chaos To Calm: Mastering InfoSec Audits

BSides London · 2025

Technical GRC Talk

Open →2026-03

The Security Policy Rollout Survival Guide

Maya Kaczorowski

BSides Seattle · 2026

Policy GRC Talk

Open →2026-03

How Living History and Quilting Made Me a Better Cybersecurity Professional

BSides Las Vegas · 2024

Career Career & Soft Skills GRC Talk

Open →2024-09

Building Minimum Viable Security in SMBs

Claus Cramon Houmann

BSides Luxembourg · 2017

Open →2017-10

Don't Panic! A Guide to Proactive Security for Small Businesses

Ryan St. Germain Clarissa Bury

BSides Charm · 2023

Technical GRC Threat Intel Tooling Blue Talk

Open →2023-05

Talking Cyber To The Boardroom: What I Wish I Knew Sooner - Lee Ward

BSides London · 2025

Career Career & Soft Skills GRC Talk

Open →2026-03

Cybersecurity Maturity Model Certification (CMMC), is here. Are you ready?

BSides Tampa · 2025

Policy GRC Supply Chain Security Intermediary Talk

Open →2025-07

Risky Business: The Risk Illiteracy Problem in Security

Sean Juroviesky

BSidesROC · 2025

Technical GRC Threat Modeling Blue Talk

Open →2025-03

Lessons Drawn From Cybersecurity In The Rise of Privacy Tech

Lourdes Turrecha Michelle Dennedy Melanie Ensign

BSides Las Vegas · 2021

GRC Privacy Panel

Open →2021-08

You Detected a Data Breach: Now What?

Kelcey Patrick-Ferree

BSides Iowa · 2017

Policy GRC Privacy Keynote

Open →2017-04

Staying Compliant in the Age of AI

BSides Tampa · 2026

Policy AI Security GRC Intro Blue Case Studies and Incidents Analysis Policy Analysis Talk

Open →2026-03

RAG Against the Machine: Using Retrieval-Augmented Generation & MCP to Fortify Cybersecurity Defense

BSides Las Vegas · 2025

Technical AI Security Detection Engineering GRC Talk

Open →2025-12

Your Board Deck Sucks!: Why you can't get buy-in for your security program

BSides KC · 2023

Career Career & Soft Skills GRC Intermediary Talk

Open →2023-10

Cyber Risk Management for Florida's Critical Infrastructure by Dan Holland of Arete Solutions

BSides Tampa · 2023

Technical GRC Threat Modeling Talk

Open →2023-08

CIMA Statement of Guidance and You: How to Navigate New Regulations

BSides Cayman Islands · 2022

Policy GRC Intro Talk

Open →2022-11

Cybersecurity Maturity Model Certification (CMMC)

Mark Funderburk

BSides Greenville · 2021

Policy GRC Supply Chain Security Talk

Open →2021-10

Secure IT Operations: How to Shoehorn Security into a Small/Medium Business

BSides Las Vegas · 2022

Career Technical GRC Talk

Open →2022-09

FedRAMP 20x Explained: Faster, Cheaper, Better Compliance

BSides SLC · 2026

Policy GRC Talk

Open →2026-04

When the Breach Hits the Fan: Understanding Cyber Insurance

BSides Las Vegas · 2025

Policy GRC Talk

Open →2025-12

CISO Leadership Panel – Real-World Strategies from Security Executives

Bryce Kunz John Bullough Brent Dillon Adam Marre Josh Pugmire

BSides SLC · 2025

Career Career & Soft Skills GRC Panel

Open →2025-06

Compliance meets SIEM automation

BSides Newcastle · 2020

Technical Active Directory Detection Engineering GRC Talk

Open →2020-11

In Scope, Out Of Sight: Why NIS-2 Isn't Landing In German SMEs

Younes Ahmadzei

BSides Munich · 2025

Policy Research GRC Case Studies and Incidents Analysis Empirical Research Talk

Open →2026-02

Breaking In, Standing Tall: A Rookie’s Guide To Confidence In GRC - Funke Omolere

BSides London · 2025

Career Career & Soft Skills GRC Intro Talk

Open →2026-03

Data You Don't Store Cannot Be Hacked

Michael Spurgeon

BSides Delaware · 2015

Technical GRC Privacy Talk

Open →2016-07

IATC - Difficult Conversations

Andrea M. Matwyshyn

BSides Las Vegas

Policy GRC Keynote

Open →2024-09

Don't Run Six Checklists: A Sane Guide to AI + Healthcare GRC

BSides Seattle · 2026

Technical AI Security GRC Talk

Open →2026-03

Cyber Risk Categorization for Unmanned Vehicle Systems

BSides Augusta · 2022

Technical GRC IoT Threat Modeling Intermediary Blue Case Studies and Incidents Analysis Technical Deep-dives+1

Open →2022-10

Target Rich Cyber Poor

Don Benack Tom Millar

BSides Las Vegas · 2022

Community Policy GRC Threat Modeling Talk

Open →2022-09

The Vulnerability Deluge: How to Dig In

Nivedita Murthy

BSides NoVa · 2021

Technical Detection Engineering GRC Vulnerability Research Talk

Open →2021-06

What You Need to Know About Bill C-26: Eric Jensen

BSides Edmonton · 2023

Policy GRC Talk

Open →2023-11

PCI DSS 4.0: What's Changed and What It Means

Justin Leapline

Technical GRC Talk

Open →2022-09

Policy as [versioned] code – you're doing it wrong

BSides Cayman Islands · 2023

Technical DevSecOps GRC Supply Chain Security Purple Talk

Open →2023-05

Extortion, Chaos and Needless Busywork: Vendor Risk Management

BSides Charm · 2022

Policy GRC Talk

Open →2022-07

Liability Landmines: How Security Failures Create Legal Exposure

BSides Knoxville

Policy GRC Threat Modeling Talk

Open →2025-07

Gen-Z Critique on SOC 2

BSides Las Vegas · 2024

Policy GRC Intro Talk

Open →2024-09

Andrea M. Matwyshyn

BSides Las Vegas · 2024

Policy GRC Policy Analysis Keynote

Open →2024-09

Conducting Security Assessments: Lessons for those being assessed and those wanting to do it

Michael R. Brown

BSides Tampa · 2023

Technical GRC Talk

Open →2023-08

Cyber Security's New Silver Bullets - Privacy and Insurance

Chinmayee Paunikar Ken Rayner Alan McDermott

BSides Toronto · 2022

Policy GRC Privacy Panel

Open →2022-11

Cybersecurity Maturity Model Certification: Insights from a C3PAO

BSides Peru · 2023

Policy GRC Talk

Open →2023-08

BSides Tampa · 2023

Career Career & Soft Skills GRC Supply Chain Security Blue Panel

Open →2023-03

GRC: The Swiss Army Knife

BSides Peru · 2022

Career GRC Talk

Open →2022-09

Cybersecurity & The Board: Choosing success over the Sarlacc Pit

BSides Barcelona · 2021

Policy GRC Threat Intel Talk

Open →2022-01

From Pods to PCI: Translating Kubernetes Security for Security Audit & Compliance

BSides Philly · 2025

Technical Container Security GRC Threat Modeling Talk

Open →2026-02

Leveraging RMF for CMMC Success Strategy, Structure, and Solutions for Defense Vendors

BSides Tampa · 2026

Policy GRC Talk

Open →2026-02

Communications Authority of Kenya

BSides Nairobi · 2022

Policy GRC Threat Intel Policy Analysis Talk

Open →2022-12

Waking Up to AI: An Adventure in Governance

BSides Seattle 2026

Policy AI Security GRC Supply Chain Security Intro Case Studies and Incidents Analysis Talk

Open →2026-04

Your Board's Perspective On Cyber

Jessica Figueras

BSides London · 2025

Policy GRC Intro Talk

Open →2026-03

Shadow AI Is Your New Data Exfiltration Channel

BSides Exeter · 2026

Technical AI Security Detection Engineering GRC Talk

Open →2026-05

Bring Your Own Breach? Managing BYOAI Risk in the Cloud

Meletius Igbokwe

BSides Bournemouth · 2025

Technical AI Security Cloud IAM GRC Talk

Open →2025-09

BSides Nairobi · 2022

Policy Career & Soft Skills GRC Threat Intel Intro Policy Analysis Talk

Open →2022-12

Career GRC Talk

Open →2022-12

The Ballad Of Alex Pedersen: A Journey Of Compliance As A Techie

BSides Cambridge · 2024

Career GRC Talk

Open →2024-01

Don't Be a Data Dummy

BSides Newcastle · 2025

Technical GRC Threat Modeling Intro Talk

Open →2024-01

Everybody's Got Something To Hide, Except For Me And My Incident Response Plan by David Cook

BSides Liverpool

Policy GRC Threat Intel Talk

Open →2022-01

Cyber Civil Defense: Volunteers to the Rescue

BSides Las Vegas · 2025

Community Policy Career & Soft Skills GRC Talk

Open →2025-12

Getting Smarter About Data Privacy

Technical GRC Privacy Intro Blue Talk

Open →2022-12

Cybersecurity & The Board: Choosing Success Over the Sarlacc Pit

BSides Islamabad · 2021

Career Career & Soft Skills GRC Talk

Open →2022-05

Reasonable Rapid Recognition and Response to Rogues

BSides Charm · 2019

Technical Detection Engineering GRC Network Security Blue Technical Deep-dives Talk

Open →2021-05

Compliance to the Rescue: Transforming Compliance from Burden to Benefit

BSides St. John's · 2025

Technical GRC Talk

Open →2025-05

FAA, FTC, FCC — How Three Federal Agencies Are Shaping Information Security

Elizabeth Wharton

BSides Las Vegas · 2015

Policy GRC Talk

Open →2016-12