2026 Americas Spring Summit

Fortifying our Trusted Ecosystem

Overview

Join fellow FS-ISAC members from across the Americas for three full days of learning, collaboration, and networking.

Summits are our largest events of the year, packed with insightful presentations, workshops, and panels on topics relevant to the security of the global financial services industry.

Highlights

Relevance
The synthesis of cybersecurity and the financial sector distinguishes FS-ISAC Summits from other large industry events. The Americas Summit is specifically designed for cybersecurity professionals in financial institutions.

Content
Sessions are divided into three tracks – Intelligence, Security, and Resilience – so that you can focus on the most pressing issues in your organization today.

Connection
Collaborating with cybersecurity experts from across the Americas advances your skills and the sector’s security. And by learning from others, you can develop invaluable connections that outlast the Summit.

Exercise
Participating in exercises increases resilience. Take part in our in-person tabletop exercise, "Undersea Cables", on 1 March. This exercise is hosted in conjunction with the 2026 Americas Spring Summit, but registration is separate. Find out more about the exercise here.

Interested in Sponsoring This Event?

We are fully sold out for the 2026 Americas Spring Summit. No sponsorship packages or sponsor passes are available. Email sales@fsisac.com to learn about future events and see upcoming events here.

Platinum

Gold

Tempt the Titans

Silver Solutions

Bronze

Unique

There are no third-party sponsors for this event. FS-ISAC completely runs the CAPS exercises.

1 March
2 March
3 March
4 March

March 1 Sunday
11:30 - 3:00 PM

Undersea Cables Tabletop Exercise

Members Only - Additional Registration Required
11:30 - 3:30 PM

Fraud Workshop

Members Only - Additional Registration Required
3:00 - 6:30 PM

Early Registration
3:30 - 5:00 PM

Womens Reception
5:30 - 6:30 PM

Welcome Reception
March 2 Monday
7:00 - 6:30 PM

Registration
7:00 - 7:45 AM

Breakfast
8:00 - 8:15 AM

Opening Remarks
8:15 - 9:45 AM

TBD
8:45 - 9:15 AM

Board Panel: Moving Into the Future
9:15 - 9:45 AM

Critical Provider Panel
Lisa Lee, Microsoft; Patrick Sullivan, Akamai; Grant Bourzikas, Cloudflare; David Stone, Google
9:45 - 10:15 AM

From Threats to Abuse - Lessons Learned in AI Red Teaming
Platinum

Ram Shankar, Microsoft’s AI Red Team founder, shares key lessons from testing 100+ generative AI tools/apps. Learn best practices, taxonomies, proven safeguards, common findings, how to leverage agents, and necessary policies. This session will highlight patterns, sample test cases, and checklists.
10:15 - 10:45 AM

Beyond Cyber Fusion: Converged Security Operations
Michael Saxton, Booz Allen Platinum

Cyber fusion centers unified SOC operations, but today's threats demand more. Adversaries blend cyber, fraud, physical, & insider attacks simultaneously. Converged Security breaks down silos through unified data platforms & integrated intelligence - delivering executives one view of enterprise risk.
10:45 - 11:15 AM

AM Networking & Snacks
11:15 - 12:00 PM

From Reactive to Proactive: How Cyber and Fraud Unite
Ryan Praskovich, Nationwide Mutual Insurance Company; Wyatt Skirtich, Nationwide Mutual Insurance Company Fusion

As the line between cyberattacks and financial fraud blurs, organizations must evolve from siloed defense to integrated collaboration and intelligence. This session explores how a Cyber and Fraud fusion model enables earlier detection and stronger prevention of fraud events.
11:15 - 12:00 PM

AI Code Generation: Balancing Innovation, Risk, and Security
Ajoy Kumar, Wells Fargo; David Ritenour, Wells Fargo; Christian Adam, Wells Fargo AI Threats

AI tools are writing and testing code and accelerating software development and reshaping engineering workflows. But they are also introducing risks: security, reduced accuracy, and unclear accountability. This panel explores how enterprises can adopt these tools and practices safely.
11:15 - 12:00 PM

Second Line in Practice: Regional Collaboration on Cyber
Russell Derrick, TD Bank; Eduardo Delgado, TD Bank Op Resilience

This panel will share key takeaways from the first regional “Second Line of Defense” working group meeting in Canada. The session will demonstrate how collaboration is strengthening oversight and operational resilience, providing attendees with practical strategies for their own second line program
11:15 - 12:00 PM

Grand Theft No Auto: No Cars, Just Cons
Morgan Campbell, Navy Federal Credit Union; Amber Hamlet, Navy Federal Credit Union Fraud

Learn how OSINT and cross-team collaboration exposed a massive scam defrauding FI members via fake listings of machinery, equipment, and vehicles through wire transfers. Gain OSINT tips, preventative defense tactics, and intelligence-sharing models to fight rising marketplace scams.
11:15 - 12:00 PM

From Awareness to Action: Reframing Strategic CTI
Kenneth Wolf, Citi CTI

This presentation offers strategic CTI practitioners an approach to creating better, customer-defined, intelligence requirements, improving the overall value to their respective organizations and
11:15 - 12:00 PM

Standardization to Fortify the Ecosystem
Michael Habash, State Street GRC

Cybersecurity at financial services firms is largely driven by regulation, audits, and emerging technology. And we are always being held to standards. Standards we usually didn’t have a hand in writing. But we Should! I will cover the structure of the standards community, who is in the room, and why
11:15 - 12:00 PM

Applying Nuclear Power Principles to the Security World
Shannon Rolinger, TD Bank C-Suite

The Nuclear Power Principles were created to ensure pinnacle events - major issues in the nuclear power program - were prevented. This discussion applies those nuclear power principles to a security mindset showing an overlap that leads to operational excellence in both spaces.
12:15 - 1:00 PM

Fusion Forward: Strengthening Cyber Fraud Response
Meaghan Welch, Bank of America Fusion

Learn how Bank of America built its Cyber Fraud Fusion Center to tackle evolving threats. This session shares strategy, structure, and lessons learned to help institutions create their own fusion model for stronger cyber-fraud response and cross-organizational collaboration.
12:15 - 1:00 PM

AI Pressure on SaaS Supply Chains: Stay Secure & Compliant
GRC

SaaS now forms the core of financial infrastructure, with OAuth tokens replacing firewalls as the new perimeter. This keynote unpacks SaaS and AI supply chain risks, modern attack paths, and a control framework aligning with OCC, Fed, and NYDFS expectations for resilient defense.
12:15 - 1:00 PM

Graph vs. Noise: How Intel Becomes Risk Reduction
Dylan DeAnda, Doppel CTI

This session shows how real-time graph intelligence correlates seemingly minor threat signals into a single impersonation campaign. Attendees will learn how this approach enables the dismantling of attacker infrastructure in real-time, reducing risk rather than just reporting it.
12:15 - 1:00 PM

Meta and FS-ISAC: Fighting Fraud Together
Bryonna Burga, FS-ISAC; Troy Wells, FS-ISAC; Raul Burgos, Meta Financial Technologies; Kristin Connors, Meta Financial Technologies Fraud

This panel covers the collaboration between Meta and FS-ISAC combat fraud through Meta’s Fraud and Scam reporting solutions including the FIRE program. Panelists will explain Meta’s F&S approach, the FIRE program, provide case studies, key metrics, and investigative insights.
12:15 - 1:00 PM

The Convergence of Digital-Physical Threat Intelligence
Adam Darrah, ZeroFOX CTI
12:15 - 1:00 PM

AI in the Financial Trenches: Securing Digital Trust
Brent Maynard, Akamai AI Threats

Financial institutions are confronting a new class of AI-enabled attacks, from prompt injection and data poisoning to synthetic identity automation. This talk explores how the financial sector can secure AI adoption, harden data pipelines, and maintain digital trust at machine speed.
12:15 - 1:00 PM

AI & Trust: A CISO’s Playbook to Secure What Matters
Josh Cigna, Yubico C-Suite

AI is transforming the financial sector — accelerating innovation, but also expanding the threat surface. As attackers adopt AI, CISOs must rethink how to defend an increasingly complex and interconnected ecosystem. This session explores the CISO’s role in securing trust across the AI journey.
1:00 - 2:00 PM

Lunch
2:15 - 3:00 PM

From ROT to RAG: Foundational Controls for Responsible AI
Avia Navickas, Varonis; Duncan Molony, Corebridge Financial GRC

As financial institutions adopt AI, the risks of data exposure, model misuse, and unpredictable outputs grow. Understand practical controls that span the full AI lifecycle – from data readiness, to model implementation, to governance – which can be leveraged for a comprehensive controls framework.
2:15 - 3:00 PM

The Trust Trap: How Concentration Risk Threatens Scale
Op Resilience

As the financial sector modernizes, its trusted, interconnected ecosystem faces a new paradox: concentration risk. This session explores how reliance on a few critical tech providers threatens scale and resilience, and how collaboration, transparency, and innovation can rebuild trust.
2:15 - 3:00 PM

Agentic AI Security: From Threats to Active Defense
Agentic AI

Agentic AI is shifting from an assistant to an operational actor, expanding the attack surface. This presentation shares perspectives on securing the use of agents including an overview of the threats, a framework to design/launch/run securely, and introduce an ecosystem of guardrails for visibility
2:15 - 3:00 PM

The Imitation Game: How Deepfakes Are Invading
Attacks

Across every channel, fraud is surging. Pindrop data shows that 1 in 599 calls is fraudulent, 1 in 6 job applicants exhibits signs of identity or credential fraud. Among those, 1 in 343 has direct links to nation-state–affiliated activity
2:15 - 3:00 PM

Tearing Down Departmental Silos
Jeff Korte, FS-ISAC; Tiffany Kiefer, Golden 1 Credit Union; Keith Vandegrift, Corning Credit Union C-Suite

Silos are organizational issues that lead to poor communication, reduced efficiency, and missed opportunities to prevent fraud. We will discuss silos, why we create them, why they don’t work, and show how to dismantle them.
2:15 - 3:00 PM

Chinese ORB Networks and You: A Threat Intel Primer
John TerBush, JPMorgan Chase CTI

ORB networks offer a new way to for adversaries to obfuscate their operations. What are ORB networks, and what kinds are there? How do Chinese nation-state operations use them? How have China-nexus operations changed over the years? How do they increase the difficulty of detection?
2:15 - 3:00 PM

Case Study: Legitimate Numbers, Illegitimate Calls
Casey Hertz, US Bank; Micah Semon, Bank of America; Adrianna Melendez, Wells Fargo Fraud

Case Study: Legitimate Numbers, Illegitimate Calls The Hacked Enterprise PBX Spoofing Problem Join a panel of financial institutions to discuss how multiple FSISAC members have joined forces with cross-industry partners to investigate and resolve several cases of extensive spoofing of official c
3:00 - 3:30 PM

PM Networking & Snacks
3:30 - 4:15 PM

From Intelligence to Advantage: Collaborative Threat Hunting - Collaborating Securely
Kris Schroeder, Replica Cyber; John Denning, FS-ISAC; Tom Creely, Morgan Stanley; Jeremy Molli, Wells Fargo; Guy Pearson, Bank of America CTI

This session provides Member use cases on how leading CTI teams are shifting to isolated, purpose-built environments that enable safe research, controlled collaboration, and audit-ready operations. FS-ISAC Member panelists will share real use cases, best practices, and lessons learned. They will also talk about where they are going and where they need to be to meet leadership goals and objectives given the evolving global operating environment.
3:30 - 4:15 PM

Hidden in Plain Site: How Threats Actors Exploit AI Tools
Jared Skivington, Bank of America; Martin Sutton, Bank of America AI Threats

As people begin to rely on prompts over searches, threat actors have begun to target AI tools to compromise both customer and company. This presentation will delve into current threat actor trends in AI targeting, as well as provide insight into how to monitor for and mitigate such threats.
3:30 - 4:15 PM

Wall St. to São Paulo: AI Cyberattacks Across the Americas
Ashley Salisbury, BNP Paribas; Danica Reardon, BNP Paribas Attacks

AI is rapidly changing the threat landscape. From public-private collaborations to LLM weaponization by threat actors, it is essential to track the global cyber impact of AI. This presentation explores how governments and business across the Americas are affected by and adapting to changing threats.
3:30 - 4:15 PM

Architecting an Exercise Program to Build Resilience
Jean-Pascal Deillon, Sumitomo Mitsui Financial Group; Vu Cap, Sumitomo Mitsui Financial Group Op Resilience

An interactive session on how financial institutions can design, mature, and sustain an exercise program that strengthens operational resilience. Learn proven practices, discover common pitfalls, and share your own experiences across governance, strategy, execution, and continuous improvement.
3:30 - 4:15 PM

Beyond Third-Party Risk: The Invisible Threat in Your Supply
Grant Bourzikas, Cloudflare; Rohit Chenna Reddy, Cloudflare GRC

Annual vendor reviews capture snapshots while SaaS supply chains evolve daily. New sub-processors appear between assessments, creating months of exposure. Learn how visibility across 20% of the Internet enables continuous Nth-party monitoring that individual institutions can't achieve alone.
3:30 - 4:15 PM

Dialing Up Disruption - Stop Phone-based Scams & AI Threats
Ryan Woodley, Netcraft; Kaleb Beasley, Fifth Third Bancorp; Kris Reed, Square Fraud

From major banks to fintech innovators, Bank of America, Square, Fifth Third Bank, and Netcraft explore how phone-based scams and other emerging threats are reshaping brand protection. Learn how leading institutions are adapting defenses and scaling disruption to protect customers and brand trust.
3:30 - 4:15 PM

Your Security Testing has an Identity Crisis
Justin Kohler, SpecterOps; Marcus Sailler, MUFG Bank C-Suite

Security teams face confusion across testing types—Exposure/Vulnerability Management, Continuous Pen Testing, Red Teaming, and Attack Path Management. This session from SpecterOps and MUFG clarifies how each aligns to reduce risk, validate defenses, and strengthen collaboration in modern programs.
4:30 - 5:30 PM

Winning the AI Cyber Arms Race in Financial Services
Vince Stoffer, Corelight Silver Solutions Showcase

AI is transforming cybersecurity, fueling a high-stakes arms race in financial services. Attackers use it for new threats—but AI is also the defense. Corelight delivers multi-layered AI detection, AI-powered SOC workflows, and AI-ready data to help security leaders stay ahead.
4:30 - 5:30 PM

Beyond Compliance: Device Posture as Defense
Tal Kollender, Remedio Silver Solutions Showcase

As financial institutions face increasing regulatory pressure, proactive device posture management is redefining compliance. Learn how automation and safe remediation help detect, fix, and validate misconfigurations in real time - turning compliance into continuous defense.
4:30 - 5:30 PM

DSPM for Financials: Securing Data from Endpoint to Cloud
Tony Kelly, Fortra Silver Solutions Showcase

Financial institutions face relentless data sprawl across cloud environments, SaaS platforms, and collaboration tools—making risk harder than ever to manage. The question isn’t if sensitive data is exposed, but finding where it resides and how quickly you can secure it.
4:30 - 5:30 PM

Managing Cryptographic Risk in the Age of Quantum & AI
Vladimir Soukharev, Keyfactor Silver Solutions Showcase

Disruptors like quantum and AI have moved cryptography from an invisible safeguard to a board priority. Learn how to discover hidden keys, certificates, algorithms, and libraries, and automate cryptographic visibility, compliance, and resilience across your enterprise’s cryptographic ecosystem.
4:30 - 5:30 PM

Mobile EDR: Securing the Human Layer of Finance
Andy Olpin, Lookout Inc. Silver Solutions Showcase

Financial institutions face new risks from people, not infrastructure. AI-driven smishing, deepfakes, and social engineering exploit mobile devices. Learn how banks use Lookout Mobile EDR to detect, contain, and report adaptive threats—protecting people, data, and compliance.
4:30 - 5:30 PM

Beyond DPRK: Detecting Fraudulent Employee Identities
Donovan Stevens, SpyCloud Silver Solutions Showcase

Fraudulent identities exploit gaps between HR, security, & identity teams that traditional tools can't see. Learn how criminals weaponize stolen credentials & malware-exfiltrated data to build convincing personas in the underground, and investigative methods that expose them before system access.
4:30 - 5:30 PM

Preemptive Cyber Defense: Stopping Threats Before Impact
Maulik Limbachiya, Silent Push; Noah Plotkin, Silent Push Silver Solutions Showcase

Silent Push demonstrates how to uncover pre-weaponized infrastructure targeting the financial sector and take active defense measures. Learn how early detection allows institutions to anticipate, disrupt, and prevent threats before they impact operations.
5:30 - 6:30 PM

Booth Crawl Reception
March 3 Tuesday
7:00 - 8:00 AM

Breakfast
7:00 - 6:15 PM

Registration
8:15 - 8:30 AM

Opening Remarks
8:15 - 9:00 AM

Keynote
Keynote
9:00 - 9:30 AM

Secure Innovation Through Identity & AI Transformation
Jim Routh, Saviynt; Ariel Weintraub, Aon PLC; Laura Deaner, DTCC; Kristina Dorville, Northern Trust Platinum

As generative AI reshapes work, security leaders must balance innovation and risk. How are organizations governing AI, protecting data, and defining accountability? Join Saviynt’s Chief Trust Officer, Jim Routh, to explore 2025 AI security trends and how identity enables responsible innovation.
9:30 - 10:00 AM

The Measurement of Trust
Platinum

Trust is the most vital yet least measured asset in the financial system. It is often treated as intangible and assumed rather than demonstrated. Richard Seiersen explores how institutions can decompose trust into measurable components — transparency, control, and resilience.
10:00 - 10:30 AM

AM Networking & Snacks
10:30 - 11:15 AM

Managing & Protecting APIs in the Age of Autonomous Agents
Shira Sagiv, Radware API Security

The Internet of Agents is reshaping FSIs with new API-like protocols such as MCP and A2A. API threats also evolve, making discovery, runtime protection, and posture management more critical than ever. Learn about these latest trends, best practices and AI-powered strategies for resilience.
10:30 - 11:15 AM

Solving Mysteries with the Cyber Fraud Prevention Framework
Adam Perino, Regions Financial; Allison Glenn, Bank of America; Leigh Williams, Zelis; Ryan Praskovich, Nationwide Mutual Insurance Company Fraud

Cyber-fraud threat actors steal from our clients in novel ways, and our Cyber and Fraud teams must work together to mitigate them. Bring your questions to our roundtable discussion as we apply FS-ISAC’s Cyber Fraud Prevention Framework (CFPF) to map attack paths and recommend effective controls.
10:30 - 11:15 AM

Using Agentic AI to Build a BISO Program
Alex Foley, Truist Agentic AI

Learn how to use a LLM, MCP server, and FS-ISAC best practices to build a fully documented, effective BISO program in just 12 months. Leave equipped with a BISO program-in-a-box with 25 deliverables, 5 guides, and an implementation plan ready to tailor to your organization.
10:30 - 11:15 AM

Building an Effective Data Exposure Response Program
Samuel Strohm, PNC; Anthony Marmo, PNC; Matthew Dragovich, PNC SOC

It is not a matter of if, but when your institution experiences a cyber incident. More specifically, this program will speak about data exposure events. As the financial sector continues to advance technologically and integrate complex digital infrastructures, companies will face increasing risks.
10:30 - 11:15 AM

Inside Out: How T-Mobile Tackles Insider Risk
Jim Keene, T-Mobile; Olivia LePlastrierRay, T-Mobile Insider Threat

T-Mobile’s Insider Threat and CTI teams unite to detect, disrupt, and refer cybercriminals to law enforcement. This session outlines strategic program elements, real-world cases, undercover engagement tactics, and blockchain wallet tracing for effective attribution and investigation.
10:30 - 11:15 AM

How to Fail at Cyber Threat Intelligence
Tony Drake, ICE CTI

Everyone has a Cyber Threat Intelligence Program. Therefore we need to have a Cyber Threat Intelligence Program. The boss says "Go build it".So what do you do now? Based on a couple of decades of experience and observation of programs, I walk through what happens when you try to start a program.
10:30 - 11:15 AM

Autonomy, Resilience & the Human Force Multiplier
Marina Kaganovich, Google; Sasha Spalding, First Citizens Bank; Liza Russell, Barclays; John Rogers, AI GRC

The core risk landscape in financial services is fundamentally changing. As the industry moves from simple automation to deploying autonomous AI agents, the security model of "Trust but Verify" has become obsolete, requiring enterprises to pivot to a new mandate: Govern by Design. This talk explores
11:30 - 12:15 PM

AI Browsers: The Trojan Horse for Cyber-Fraud Fusion
AI Threats

AI browsers are reshaping digital identity as agentic AI blends user and machine behavior. Fraudsters now exploit AI emulators to bypass IAM. Learn how this shift forces convergence of fraud, risk, and identity—and how to build fusion‑ready systems that preserve trust.
11:30 - 12:15 PM

Saving Your First 10,000 Hours with Security Automation
SOC

Enhancing SOAR capabilities and value in the Agentic AI era targeting process efficiencies, trust through transparency, data integration, and cost optimization. A walk through of real world use cases to leverage SOAR more broadly across the cybersecurity program.
11:30 - 12:15 PM

AI Risks, Roles, and Recommendations for the Enterprise
Donavon Swinney, Whatcom Educational Credit Union; Sara Thom, Whatcom Educational Credit Union; Pamela Simpson, TD Bank; Melissa Burchell-Dogra, Hy Cite AI GRC

Learn how financial institutions can secure AI initiatives through strong data governance and clear roles. This session covers lifecycle controls, stakeholder engagement, and scalable frameworks to ensure accountability, compliance, and resilience.
11:30 - 12:15 PM

Stop the Silent Invasion Before It Escalates
Rachael Conover, Mastercard; Donna Mattingly, Mastercard Insider Threat

In an era where remote work is the norm, fraudsters are infiltrating IT teams, compromising security, draining resources, and eroding trust. We can no longer afford to be reactive—it's time to safeguard the industry's backbone with proactive measures. Stop this silent invasion with a Fusion Center.
11:30 - 12:15 PM

From Threat Intel to Validated Defenses
Volkan Erturk, Picus Security CTI

As adversaries rapidly evolve with new tools and TTPs, defenders must keep pace. This session explores how CTI, Blue, and other teams can accelerate the mobilization of threat intel with AI, leveraging reasoning, semantic mapping, and validation workflows to find and fix gaps and ensure readiness.
11:30 - 12:15 PM

The Silent Heist: When Bad Bots Weaponize APIs
API Security

When bad bots weaponize APIs, data theft becomes silent and scalable. We’ll expose how automated threats evade traditional security to harvest customer PII and intellectual property directly through the APIs you rely on every day and share how you can mitigate this new risk.
11:30 - 12:15 PM

Effective Fraud Incident Response Through Collaboration
Amanda McCracken, PNC; Matthew Dragovich, PNC; Ryan Knight, PNC; Thenu Radhakrishnan, PNC Fraud

Learn how PNC builds a resilient fraud incident response framework through cross-functional collaboration and analytics. Discover strategies for rapid detection, containment, and mitigation of fraud incidents, plus lessons learned from implementing proactive countermeasures.
12:15 - 1:15 PM

Lunch
1:15 - 2:30 PM

Tempt the Titans
Karen Correa, FIS Global; Rajneel Dhotre, TIAA; Kevin Morrison, Unum Group; Marvin Randash, Huntington Bank
1:30 - 2:30 PM

Deepfake-Resistant Security for the Auditory & Visual Layers
Jim Brennan, GetReal Security Tempt the Titans

GenAI has shattered digital trust. GetReal Security’s Digital Trust and Authenticity Platform restores it with deepfake-resistant, real-time identity protection that detects audio and video manipulation, tracks users’ biometric consistency over time, and automates policy-driven response to identity violations.
1:30 - 2:30 PM

Ending the False Choice: Secure AND Seamless Authentication
Tempt the Titans

Banks have been forced to choose: secure or seamless. This false choice costs billions in fraud and abandoned transactions. Glide Identity proves you can have both with passwordless cryptography rooted in the SIM. Safe and seamless for humans and their agents.
1:30 - 2:30 PM

Operationalizing 3rd Party Resilience: a 48-Hour Head Start
Kevin Sherry, Darkweb IQ Tempt the Titans

Most ransomware attacks start with third parties. Current tools flag CVEs or send irrelevant alerts after the damage is done. DWIQ collaborates with law enforcement to infiltrate the access broker ecosystem, identify impending attacks, and give teams time to act before attacks spread.
3:00 - 3:45 PM

Purchase Scams: Sourcing Indicators for Early Detection
Fraud

Purchase scams abuse cardholder-authorized transactions to blunt the efficacy of traditional authentication and authorization controls. To combat this, financial institutions can source and validate purchase scam indicators for earlier preventative action.
3:00 - 3:45 PM

Applying Lessons from Applied Intelligence
Amanda Lerner, CME Group; Sarah Baker, CME Group; Bilal Rahmani, CME Group CTI

Beyond tactical and strategic, the phrase “Applied CTI” can mean different things to different people. This panel will define what Applied CTI is, what gaps it can help fill, and the lessons learned at CME Group from implementing Applied CTI as a third threat intelligence domain.
3:00 - 3:45 PM

The Results Are In: Human Risk Benchmark Survey
Diana Fashjian, FM; Betsy Balgooyen Keller, Bank of America; Amber Buening, Huntington Bank; Charles Sapp, Raymond James & Associates Insider Threat

The importance of quantifiable data in human risk to evaluate programs, benchmark against peer organizations, & make informed decisions to improve/mature your program is undisputable. The Training & Awareness WG launched the first human risk benchmark survey Oct 2025. Join us to talk results!
3:00 - 3:45 PM

How Mobile Devices Became a Threat Hiding in Plain Sight
Danny Rogers, iVerify Attacks

Mobile devices have evolved from security afterthought to a critical threat vector. This talk examines the myths about mobile security, traces adversary tactics from early exploitation to current sophisticated attacks, and demonstrates why ubiquitous mobile use forces a shift in security mindset.
3:00 - 3:45 PM

Fortifying Third-Party Trust in the Era of AI
Pat McMahon, TIAA; Nathan Rodgers, JPMorgan Chase; Eric Grindstaff, JPMorgan Chase; Joseph Traietta, Capital One AI GRC

Your security is only as strong as your weakest supplier. As reliance on 3rd parties grows and AI empowers adversaries, traditional TPRM approaches fail. Discover how leading institutions use AI, continuous control validation, SBOMs, AIBOMs, and attack surface monitoring to fortify defenses.
3:00 - 3:45 PM

Topology-Driven Cryptographic Inventory for Quantum Security
Peter Bordow, Wells Fargo; Dawn Elliott, Wells Fargo; Jeff Stapleton, Wells Fargo Cryptography

As quantum computing advances, traditional cryptographic systems face unprecedented risks, necessitating proactive remediation strategies across enterprise environments. This presentation introduces a scalable approach to building an enterprise topology model designed to support comprehensive crypto
3:00 - 3:45 PM

Securing MCP in the Enterprise
Daryan Dehghanpisheh, Palo Alto Networks Agentic AI

Securing Model Context Protocol (MCP) : As vital components in agent workflow deployment, these assets present new threat surfaces and necessitate updated security and internal governance methods. We will explore real-world vulnerabilities, exploits, and techniques.
3:45 - 4:15 PM

PM Networking & Snacks
4:15 - 5:00 PM

Quantum-Ready Enterprise Cryptography: Strategy & Challenges
Rich Bush, State Farm Cryptography

We’ll share how we’re modernizing enterprise cryptography for quantum threats—covering timelines, trusted crypto inventories, abstraction to ease migrations, sunsetting vulnerable algorithms, automating compliance evidence, key challenges faced, and strategies to overcome them.
4:15 - 5:00 PM

Practical AI Risk Management for Financial Services
Angela Patel, Cyber Risk Institute AI GRC

Explore the FS AI RMF, a practical framework for managing AI risk in financial services. Learn to assess AI initiatives, integrate controls into governance, benchmark practices, and promote responsible AI deployment while enhancing resilience and regulatory alignment.
4:15 - 5:00 PM

Living Off the Web: How Trusted Services Deliver Malware
Attacks

Attackers increasingly “live off the web,” abusing trusted services and standard browser workflows as the delivery surface. Using Fake Captcha at internet scale, this talk provides an internet-wide view of modern lures and why the most familiar pages can hide multiple, distinct delivery paths.
4:15 - 5:00 PM

Innovating Fearlessly with Secure Agentic AI
DJ Sampath, Splunk, a Cisco Company Agentic AI

Agentic AI is transforming finance—from fraud prevention to workflow automation. But with new power comes new risk. This session explores how to secure every stage of the agentic AI lifecycle while scaling adoption and innovation with confidence.
4:15 - 5:00 PM

Reimagine Cyber Defense: The Rise of AI-Driven Cyber Fusion
Sachin Jade, Cyware CTI

Cyber threats are no longer isolated incidents, they’re coordinated campaigns powered by varied threat actors including adversarial AI. Traditional CTI / SOCs struggle to keep pace and enterprises need a new kind of defense: AI & agentic powered, intelligent, adaptive, and collaborative.
4:15 - 5:00 PM

Check Fraud: Observations from the FDIC
Lloyd McIntyre, FDIC Fraud

This presentation covers current check fraud vectors and how check fraud is impacting the financial industry. The presentation will also focus on the mitigating solutions that institutions are implementing to create a multi-layered defense against this fraud.
4:15 - 5:00 PM

Deepfake Defense: Protecting ID & Auth in the Age of Gen AI
John Carlson, American Bankers Association; Jeremy Grant, ; Paul Khuri, VISA Insider Threat

This expert panel will discuss 10 current and emerging attack types, mitigation strategies and ways the US government can help in the fight against Gen AI attacks on identity and authentication systems. The panel will discuss the work of a public-private sector collaboration launched in early 2024.
5:15 - 6:00 PM

Exploit Intelligence for Vulnerability Prioritization
Ash Mathew, Silver Solutions Showcase

Learn how to apply the Cyber Threat Intelligence Capability Maturity Model to align CTI programs with organizational maturity, strengthen collaboration across teams, and reduce risk from rapidly exploited vulnerabilities through measurable, outcome-based intelligence-driven defense.
5:15 - 6:00 PM

Mapping the Invisible Thread
Chris Block, Graphika Technologies; Thomas Lederer, Graphika Technologies Silver Solutions Showcase

Stop wasting budget and analyst time battling fraud reactively. Graphika maps the “Invisible Thread,” exposing cross-platform scam networks behind fake ads and accounts. Our technology accelerates takedowns and supports legal action against organized fraud targeting your customers.
5:15 - 6:00 PM

Scaling Application Risk Governance in the Age of AI
Idan Plotnik, Apiiro Silver Solutions Showcase

With thousands of apps and distributed teams, maintaining governance at scale is challenging. CEO Idan Plotnik explore how to improve SDLC visibility, identify key governance metrics, and strengthen AppSec–engineering collaboration without slowing delivery.
5:15 - 6:00 PM

Your Next Breach Won’t Come From a File, but From a Plug-In
Idan Dardikman, Koi Security Silver Solutions Showcase

From Chrome extensions to npm and model hubs, attackers now publish straight into the tools your teams use daily. This talk breaks down how that pipeline gets hijacked, and shows how Koi maps what’s really running, exposes risky permissions, and locks down marketplace software without slowing anyone
5:15 - 6:00 PM

Scattered Spider: The $1B Threat to Financial Systems
Austin Gadient, Silver Solutions Showcase

Scattered Spider’s attacks on U.S. banks have highlighted how vulnerable the virtualization layer is. See how Vali Cyber stops Scattered Spider preemptively—blocking MFA bypass, lateral movement, and ESXi encryption—to protect uptime, your environment, and customer trust.
5:15 - 6:00 PM

Uncover & Quantify Identity Risk
Deena Thomchick, Axiad Silver Solutions Showcase

Experience next-gen identity risk intelligence with Axiad Mesh. See and quantify risk across human and non-human identities managed or not. Prioritize resource allocation and mitigation actions, measure with integrated FAIR analysis, and streamline compliance in one seamlessly integrated solution.
5:15 - 6:00 PM

Live Demo: KnowBe4's Complete Security Platform
David Miller, KnowBe4 Silver Solutions Showcase

Interactive demonstration of KnowBe4's complete security platform in action. Witness how threat detection, phishing simulations, and access management collaborate to protect financial institutions. Learn practical strategies to reduce human risk and strengthen your security posture.
6:30 - 11:30 PM

Signature Dinner Event
March 4 Wednesday
7:00 - 7:45 AM

Breakfast
7:00 - 3:45 PM

Registration
8:00 - 8:15 AM

Opening Remarks
8:30 - 9:00 AM

Keynote
Keynote
9:00 - 9:30 AM

Intel Panel
9:30 - 10:00 AM

Losing Your Company in 24 Hours-The Board Experience
Aurobindo Sundaram, RELX Group General Session

Imagine being a Board member or senior executive when the news comes in - your systems are unavailable, your backups are corrupted, your partners are calling, so too is the attacker offering to bring your systems back for a price, and your revenue has run dry.
10:30 - 11:15 AM

AI-Enhanced Malware Reverse Engineering
Dan Dumitrescu, Northern Trust; Michael Toczycki, Northern Trust; Aimee Moriarty, Northern Trust Attacks

We review several AI-assisted malware reverse engineering workflows in order to give the audience a starting point in reverse engineering malware using AI tools.
10:30 - 11:15 AM

The Case of the Missing Data
Jeff Jackson, NASB; Nate Aguilar, Metro Credit Union (NE); Vincent Dattilo, TD Bank; Jeff Korte, FS-ISAC Data Security

Bank facilities contain large volumes of documents with strategic and financial data, PII, and access to information systems. Following an incident, will you have all the data needed to solve the mystery? Put on your detective cap as we show you how to solve the mystery of the missing data.
10:30 - 11:15 AM

Redefining Resilience: Minimum Viable Business
John Murphy, Rubrik Op Resilience

Learn how financial institutions can define, evolve, and continuously test their Minimum Viable Business, the core operations that must keep running and deliver essential services despite external factors such as cyber threats, AI-driven changes, regulatory shifts, or partner dependencies.
10:30 - 11:15 AM

Protecting the Vulnerable: Elder Financial Fraud Defense
Olga Zlatkova-Georgiev, Patelco CU; James Hogan II, JPMorgan Chase; Tiffany Kiefer, Golden 1 Credit Union Fraud

A panel of fraud prevention and security leaders from financial institutions will explore the growing threat of elder financial exploitation. The session will highlight institutional vulnerabilities, detection strategies, and collaborative solutions across fraud, compliance, and member services.
10:30 - 11:15 AM

TIC Talk: Uncloaked and Unscripted
Amanda Misko, Citi; Elizabeth Wanic, Morgan Stanley; Adam Perino, Regions Financial; Monica Maher, Vanguard CTI

FS-ISAC's Threat Intelligence Committee (TIC) is driven by members for members. Join elected NA TIC Executive Committee representatives for an interactive discussion about what the NA TIC does for the FS-ISAC community and share your ideas to help drive 2026 priorities.
10:30 - 11:15 AM

Compliant and Lightweight DevSecOp for Legacy Systems
Jeffrey Wiley, Third Coast Bank People

Mid-sized banks can’t drop everything for DevSecOps. Learn how a $5B bank built a lightweight, regulator-friendly SDLC for legacy apps—aligned to NIST, FFIEC, and GLBA—without drowning devs. Includes templates, Navex IRM tips, and practical onboarding tactics.
11:00 - 11:30 AM

AM Networking & Snacks
11:30 - 12:15 PM

Clop Till You Drop: Lessons Learned from 7 Campaigns
Eli Woodward, Team Cymru; Will Baxter, Team Cymru Attacks

This session analyzes six years of campaigns from Clop ransomware reviewing infrastructure trends, 0days utilized, and the history of the group. This session will also evaluate the architectural failures of MFTs and what changes can be made to mitigate the risks of future campaigns.
11:30 - 12:15 PM

Cross-Sector Resilience at the National-Level
Kristin Royster, BITS | Bank Policy Institute; Benjamin Flatgard, JPMorgan Chase; Michele Guido, Op Resilience

Over the past several years, financial institutions have placed significant emphasis on their individual resilience. But resilience is about more than any one company’s ability to withstand an event. National resilience requires cooperation not only within entire sectors, but across sectors.
11:30 - 12:15 PM

The Next Frontier of Network Defense
Data Security

As banks adopt AI, cloud, and hybrid systems, attackers are moving below the OS—targeting firmware and hardware to evade detection. Learn how one global financial institution built an enterprise-scale firmware security program to detect, remediate, and stay compliant with FFIEC and NYDFS.
11:30 - 12:15 PM

Response Intelligence
CTI

Incident response is a goldmine of security intelligence, but most of it is lost when the ticket closes. This talk introduces "Response Intelligence," a practical framework for transforming post-incident data into a predictive, strategic asset.
11:30 - 12:15 PM

From Bait to Great: One Year. Big Wins. Banned Phish Mascot
Matt Hinman, M&T Bank; Alaina McEvoy, M&T Bank People

From Bait to Great: One Year. Big Wins. Stronger Security. And a banned Phish Mascot. See how one year of creative strategies, real-time learning, and Ace the Phish Detective transformed phishing awareness into a culture of security and engagement.
11:30 - 12:15 PM

If We Were to Build a Cyberfraud Intel Team
Guy Pearson, Bank of America; Kaleb Beasley, Fifth Third Bancorp; Joe Lavelle, PNC; Daniel Stiving, JPMorgan Chase Fraud

Our industry’s priority is defending against complex, fast-paced threats to our infrastructure, industry and supply chains. However, countering industrialized cybercrime requires intel support. This session will share insights on how to shift from "defend the network" to "defend the consumer."
12:30 - 1:15 PM

Operationalizing Threat Intel for Financial Resilience
Samuel Hassine, Filigran; Julie Smith, Tokio Marine Holdings; Keith OSullivan, Tokio Marine Holdings Op Resilience

Tokio Marine and Filigran share how financial institutions can turn threat intelligence into operational resilience. Attendees will learn how structured data, open tooling, and collaborative processes transform intelligence into measurable readiness and response capabilities.
12:30 - 1:15 PM

Establishing a Vishing Assessment Program
Jeremiah Olver, JPMorgan Chase; Marianna Havkin, JPMorgan Chase People

This presentation explores the design and implementation of a vishing assessment program to improve employee awareness of and response to vishing attacks. The presentation shares best practices, challenges, and recommendations for building strong defenses against vishing.
12:30 - 1:15 PM

SaaS: Call to Action
JW Merrow, Huntington Bank; Jeremy Mann, Northern Trust Op Resilience

SaaS dominates enterprise delivery, but trusting providers for security challenges zero-trust principles. SSPM helps, but visibility is limited by vendor APIs. This talk explores vendor limitations and how we can challenge them to help us improve SaaS security posture.
12:30 - 1:15 PM

Deep and Dark Web Collections and Downstream Investigations
Sean Kowalski, TD Bank; Eric Huber, TD Bank CTI

The presentation will cover underground (Deep and Dark Web) collection efforts to thwart cyber fraud impact and how the collections can be utilized for fraud investigations to support downstream teams.
12:30 - 1:15 PM

Untangling the Web of Fluffy Spider Attacks
Fraud

Fluffy Spider is a large collection of cyber fraud threat actors that use telecom-based attacks to conduct account takeover attacks on commercial clients. We named them; we attributed their activity; and we mitigated them. Learn how you can too.
12:30 - 1:15 PM

The Art of Deception - Implementing Active Defense Technique
Param Patel, TIAA; Chris Pitts, TIAA; Adam Zamora, TIAA; Jill Dahlem, TIAA Attacks

Learn how TIAA deployed deception technology to outsmart sophisticated attackers. Discover practical tactics to detect threats early, reduce dwell time, and expose attacker methods—plus anecdotes, lessons learned, and steps to start today.
1:15 - 2:30 PM

Lunch
2:45 - 3:30 PM

Hook, Line, & Sinker: Using GenAI to Catch Phishing Campaigns
Courtney Jacobs, Capital One; Rebecca Kern, Capital One Members Only

Sophisticated phishing attacks, which impersonate brands with pixel-perfect accuracy, erode customer trust and are increasingly difficult to combat with manual monitoring. This talk will show how Vision Language Models can identify phishing sites from screenshots, enabling faster responses.
2:45 - 3:30 PM

Smart or Risky? AI for CTI Teams
Monica Maher, Vanguard; Troy Wells, FS-ISAC Members Only

Feeling left behind? AI promises to transform the way CTI teams collect and analyze, but is it just hype? We’ll explore realistic use cases for AI across the CTI lifecycle while avoiding pitfalls like hallucinations and overreliance. Learn where AI adds the most value—and where caution is critical.
2:45 - 3:30 PM

The SIM Box Ecosystem: From Grey Markets to Global Scams
Aric Ward, T-Mobile; Jeff Smith, T-Mobile Members Only

SIM boxes don’t just enable fraud—they power a global ecosystem of scams, spoofing, and anonymous threats. This session traces how actors weaponize mobile infrastructure and evade detection, with a case study on transnational bank fraud and practical disruption strategies.
2:45 - 3:30 PM

Threat Hunting with Anomalous Indicators
William Miskimen, Fannie Mae; Allissa Hooley, Fannie Mae Members Only

In today’s dynamic threat landscape, reactive security is no longer enough. This session explores how our team transformed our approach to threat detection by leveraging anomalous indicators within our Endpoint Detection and Response (EDR) and other tooling.
3:45 - 4:30 PM

Turning Cybercrime Operations Purple
Heather Scheetz, TransUnion; Chris Plaisance, TransUnion Members Only

This presentation discusses a model that TransUnion has developed to facilitate interdepartmental collaboration between various fraud, information security, and business technology departments for the purpose of engaging in purple team exercises to better mitigate real-world cyber fraud threats.
3:45 - 4:30 PM

From Fragile to Agile: Building Resilient Detections
Trent Liffick, Fifth Third Bancorp Members Only

Detection Engineering is an iterative process of designing, implementing, testing, and maintaining your organizations ability to detect bad in your environment. This talk will walk you through a mindset shift, to focus on building high fidelity detections that last longer than a single campaign
3:45 - 4:30 PM

Smarter Threats, Smarter Shields: The Role of AI
Gabrielle Reyes, Morgan Stanley; Zoe Metzger, Morgan Stanley Members Only

Artificial intelligence is accelerating both cyber threats and defenses. This session highlights the surge in AI-driven attacks, including those leveraging deepfakes, and the rapid evolution of detection and response strategies shaping the future of cybersecurity.
3:45 - 4:30 PM

Maturing Vulnerability and Configuration Management
Steven Lodin, Sallie Mae Members Only

Sallie Mae’s exposure management program uses risk-based prioritization, automation, and improved reporting to reduce vulnerability noise by 90%, accelerate remediation, and strengthen compliance and trust across the enterprise.
4:30 - 5:30 PM

Closing Reception

Fortifying our Trusted Ecosystem

Sponsors

Sponsors

Platinum

Gold

Tempt the Titans

Silver Solutions

Bronze

Unique

11:30 - 3:00 PM

Undersea Cables Tabletop Exercise

11:30 - 3:30 PM

Fraud Workshop

3:00 - 6:30 PM

Early Registration

3:30 - 5:00 PM

Womens Reception

5:30 - 6:30 PM

Welcome Reception

7:00 - 6:30 PM

Registration

7:00 - 7:45 AM

Breakfast

8:00 - 8:15 AM

Opening Remarks

8:15 - 9:45 AM

TBD

8:45 - 9:15 AM

Board Panel: Moving Into the Future

9:15 - 9:45 AM

Critical Provider Panel

9:45 - 10:15 AM

From Threats to Abuse - Lessons Learned in AI Red Teaming

10:15 - 10:45 AM

Beyond Cyber Fusion: Converged Security Operations

10:45 - 11:15 AM

AM Networking & Snacks

11:15 - 12:00 PM

From Reactive to Proactive: How Cyber and Fraud Unite

11:15 - 12:00 PM

AI Code Generation: Balancing Innovation, Risk, and Security

11:15 - 12:00 PM

Second Line in Practice: Regional Collaboration on Cyber

11:15 - 12:00 PM

Grand Theft No Auto: No Cars, Just Cons

11:15 - 12:00 PM

From Awareness to Action: Reframing Strategic CTI

11:15 - 12:00 PM

Standardization to Fortify the Ecosystem

11:15 - 12:00 PM

Applying Nuclear Power Principles to the Security World

12:15 - 1:00 PM

Fusion Forward: Strengthening Cyber Fraud Response

12:15 - 1:00 PM

AI Pressure on SaaS Supply Chains: Stay Secure & Compliant

12:15 - 1:00 PM

Graph vs. Noise: How Intel Becomes Risk Reduction

12:15 - 1:00 PM

Meta and FS-ISAC: Fighting Fraud Together

12:15 - 1:00 PM

The Convergence of Digital-Physical Threat Intelligence

12:15 - 1:00 PM

AI in the Financial Trenches: Securing Digital Trust

12:15 - 1:00 PM

AI & Trust: A CISO’s Playbook to Secure What Matters

1:00 - 2:00 PM

Lunch

2:15 - 3:00 PM

From ROT to RAG: Foundational Controls for Responsible AI

2:15 - 3:00 PM

The Trust Trap: How Concentration Risk Threatens Scale

2:15 - 3:00 PM

Agentic AI Security: From Threats to Active Defense

2:15 - 3:00 PM

The Imitation Game: How Deepfakes Are Invading

2:15 - 3:00 PM

Tearing Down Departmental Silos

2:15 - 3:00 PM

Chinese ORB Networks and You: A Threat Intel Primer

2:15 - 3:00 PM