Agenda:

2:30 - 3:00, Check in and Networking

3:00 – 3:15, Opening Remarks

3:15 – 4:00pm, Speaker 1:  Adrian Sanabria, Founder and Principal Researcher of The Defenders Initiative

4:00  - 4:45, Speaker 2:  Eric Hasty, Managing Director in Kroll’s Cyber & Data Resilience practice

4:45 – 5:00, Closing Comments 

5:00 - 6:00, Networking with ISSA Members & Guests

**Register Today at: https://www.tickettailor.com/events/issachicago/2006047 - Free for ISSA Members and $20-$30 for Non-Members

----

Speaker #1: Adrian Sanabria, Founder and Principal Researcher of The Defenders Initiative (Global BSides Committee Member, BSides Knoxville Organizer, IANS Faculty Member, host of the Enterprise Security Weekly Podcast and the Alice in Supply Chains Podcast. You can see Adrian’s work at: https://www.defendersinitiative.com/

Title of Talk: How Breaches Happen (it's never what we see in the headlines)

Description of Talk: The details of how cybersecurity incidents occur are usually a closely guarded secret. Occasionally, details leak out - they’re shared intentionally, or come out as part of government investigations.

What we’ve learned from them is critical and tells us two key things:

1. We’re likely focused on the wrong things in cybersecurity today.
2. We need more data on failures.

This talk shares details from breaches no one has ever heard of. We share breaches everyone has heard of, but details from them that have never been printed in the press. These breaches reveal patterns that all IT, OT, and security teams should be aware of. Patterns that could help prevent future breaches.

Bio: Adrian Sanabria is the Founder and Principal Researcher at The Defenders Initiative, a firm he founded to feature and support decades of cybersecurity research. His background spans technical, GRC, and leadership roles with a background as a practitioner, incident responder, penetration tester, and PCI QSA.

His current research focuses on improving vulnerability management and breach analysis. The Defenders Initiative is systematically publishing easy-to-consume lessons learned from every breach where we have a deep understanding of how the attack happened. He also maintains “Destroyed by Breach” - a list of all companies that have gone out of business due to a cybersecurity breach or incident. There are currently 26 businesses on the list.

He is the host of the Enterprise Security Weekly Podcast and the Alice in Supply Chains Podcast. As faculty at IANS Research, he advises hundreds of enterprises every year. After helping to deliver 11 successful events, he retired from BSides Knoxville in 2025 but remains a member of the Global BSides committee. He is also a member of several other community groups like the Security Tinkerers and the Cybersecurity Canon.

After 25+ years in the industry, he still sees the glass as half full.

--------

Speaker #2: Eric Hasty, Managing Director in Kroll’s Cyber & Data Resilience practice

Title of Talk: “Takeaways from the front lines - AI Threat Landscape: Frontier AI and Exposure Management.”

Description of Talk:  Frontier AI and Exposure Management – Hear about the types of AI related incidents we’re seeing and come away with the knowledge of how to take back control. Eric will share his perspective on what he’s seeing from both a proactive and reactive perspective with incident readiness.

Bio: Eric Hasty is a Managing Director in Kroll’s Cyber & Data Resilience practice, where he works at the intersection of cyber risk, executive decision‑making, and enterprise value. He advises boards, senior leaders, and investors on the moments where cybersecurity stops being a technical issue and becomes a business‑defining event. Having led and supported organizations before, during, and after high‑impact cyber incidents, Eric understands how small decisions under pressure can cascade into reputational damage, regulatory exposure, and long‑term human impact.

Before Kroll, Eric held senior roles at EY and PwC, guiding complex enterprises and private equity firms through acquisitions, integrations, and crises across highly regulated industries. A CISSP with advanced degrees in information systems, he is known for cutting through cyber theater to focus on what drives resilience. If you want a clear‑eyed view of how cyber risk really materializes—and how strong organizations absorb shock while others fail—Eric is a voice worth hearing.

https://www.kroll.com/en/our-experts/eric-hasty

===================================================================================================