California Cybersecurity Education Summit 2024 Banner

Overview

Cyber-attacks have increased dramatically over the last few years. The 2024 California Cybersecurity Education Summit provides an opportunity for government technology professionals to learn about the latest efforts to defend, respond and recover from cyber criminals who wish to do harm. The Summit will include cybersecurity leaders from state and local government throughout California.

A message from our Keynote Speaker

The October 2024 California Cybersecurity Education Summit will focus on enhancing security by bringing together public and private sector technology leaders, educators, and other officials to discuss emerging trends, best practices, and collaborative strategies. Join us for this on-site, all-day event hosting some of the nation’s top cybersecurity leaders, solution providers and hundreds of your peers.

– Vitaliy Panych, State Chief Information Security Officer, California Department of Technology

Speakers

Bryan Seely

Bryan Seely

World Famous Cyber Security Expert, Ethical Hacker, Author, Former U.S. Marine 

Bryan Seely is a world-famous hacker, cybersecurity expert, author, international keynote speaker and former U.S. Marine. Seely became one of the most famous hackers in 2014 when he became the only person to ever wiretap the United States Secret Service and FBI. Shockingly he told the 2 agencies before he was caught, and instead of being sent to maximum security prison, the Secret Service called him a hero and praised his courage and integrity.
He has appeared in the New York Times, Wall Street Journal, Washington as well as television appearances on Closing bell on CNBC, CNN, FOX News, ABC, NBC and TMZ with Harvey Levin. Bryan is passionate about fighting for consumers rights, privacy and educating the public about how to stay safe in a constantly changing technology landscape.
Bryan also co-founded the Blackhat MEA Hacking conference in Riyadh in 2021, and currently lives in Seattle where he is a full-time single parent of 2.

More
Tom Bisbee

Tom Bisbee

Systems Engineering Manager – Public Sector West, Nutanix

Tom has spent the past 10 years designing, developing, and managing infrastructure solutions to deliver business and security outcomes across DoD, State Government, Elections and Utilities. Throughout that time, he gained an appreciation for how operational complexity can be an inhibitor when trying to deliver on Risk Management, Compliance and Incident Response objectives. Before coming to Nutanix he was part of a team that built and certified infrastructure that excelled under scrutiny on national and worldwide stages surrounding the 2020 Election. Now in his role as Systems Engineering Manager of Public Sector at Nutanix he provides direction for a team of Engineers focused on delivering operational simplicity with a platform that encourages collaboration between service delivery and security.

More
Chris Cruz

Chris Cruz

Chief Information Officer, Public Sector, Tanium

Chris Cruz is the Chief Information Officer for Public Sector at Tanium with more than 31 years of IT and business experience in the government sector spearheading innovative organizational and cybersecurity change across complex IT environments. In his role, Cruz works directly with sales and technical teams to drive value for customers to achieve their strategic missions.
Prior to joining Tanium, Cruz held several key technology leadership roles across the State of California, including Director and Chief Information Officer (CIO) for the San Joaquin County Information Systems Division, Deputy CIO and Chief Deputy Director for the California Department of Technology, CIO for the California Department of Health Care Services (DHCS), and CIO for the California Department of Food and Agriculture.
Cruz’ leadership has him earned several recognitions, including StateScoop’s 2024 Industry Leader Award, Forbes’ 2023 CIO Next List, StateScoop’s 2020 County Executive of the Year and 2016 Top Government IT Leader awards, and NASCIO’s 2018 State Technology Innovator of the Year award, among other honors.

More
Kathy Cruz

Kathy Cruz LinkedIn

Practice Leader, State, Local and Education Solutions, Mandiant Consulting, Google Public Sector

With more than 30 years of experience in information technology (IT) and cybersecurity, Kathy is a five-time Chief Information Officer (CIO) with a background across all IT and business domains. As a Mandiant Consulting Practice Leader Ms. Cruz helps clients assess, design and build effective security programs focusing on threat intelligence, defensive posture, proactive cyber management, security validation, incident response and incident preparedness.
Ms. Cruz is the recipient of the Silicon Valley YWCA Tribute to Women in Industry (TWIN) Award, is a past Board member of the Gentle Barn Foundation headquartered in Santa Clarita, CA, a past Board Member of the Career Action Center in San Jose, CA, and a former member of Golden Gate University School of Technology and Industry Executive Advisory Board. She previously served as an Ensign in the California State Guard, Cyber Operations Detachment.

More
Christine Halvorsen

Christine Halvorsen

Chief Technology Officer, Public Sector, Okta

Christine Halvorsen is Okta's Public Sector Chief Technology Office (CTO), helping public sector customers achieve their mission with modern Identity solutions that simplify their processes and secure their IT infrastructure. Chrstine applies her deep industry insight to ensure Okta's industry-leading innovations meet security and compliance requirements while offering an optimal user experience for the company's more than 24 million federal, state, local, education and healthcare users.
Christine has a 20+ year background in government service, where she led teams focused on digital infrastructure modernization, cybersecurity, cyber actors and intrusion investigations, accident reports, counterterrorism and law enforcement. She served as the Assistant Director and Chief Technology Officer and Chief Information Security Officer of the Counterterrorism and Criminal Justice Information and Services Divisions of the FBI. Her private sector experience spans public sector technology and AI-focused leadership positions at AWS and most recently, the role of Managing Director at Protiviti. 
Christine is an adjunct professor at Georgetown University in the areas of cybersecurity and Digital Transformation as well as recently graduated from their MBA program. Christine is a member and frequent contributor to the Forbes Technology Council. 
Christine holds and MBA from Georgetown University, a master's degree in Computer Information Security from Boston University, and a Bachelor of Science degree in Computer Science. 

More
Bob Kalka

Bob Kalka

Global Lead, WW Security Solutions, IBM

Bob has been intimately involved for the past few decades in developing IBM’s overall strategy for its comprehensive security-related investments, and currently leads IBM’s global cybersecurity programs. He has held a number of leadership positions in product management, sales, pre-sales, product development, business development and marketing management.
He is a frequent international speaker on the relationship of business with cybersecurity, risk management, hybrid cloud and Artificial Intelligence, and has had numerous papers and articles published on these topics. He also holds a United States Patent related to secure distributed computing software.
Bob received a Master of Business Administration (MBA) degree in Organizational Change and Development from Syracuse University, and a Bachelor of Science degree in Computer Science from the Rochester Institute of Technology. Bob also holds a certificate in strategic marketing planning from the Indiana University Graduate School of Business.
Bob is Certified in Risk and Information Systems Control (CRISC), as well as a Certified Data Privacy Solutions Engineer (CDPSE) by ISACA and is Certified on the Open FAIR Model for risk quantification from The Open Group.
He has served on the Cybersecurity Advisory Board for Zions Bancorporation in Salt Lake City, Utah, and is an active member of the Industry Advisory Boards for both the Department of Cybersecurity and the School of Performing Arts at the Rochester Institute of Technology in Rochester, New York; the Darwin Deason Institute for Cybersecurity in the Lyle School of Engineering at Southern Methodist University in Dallas, Texas; the Cyber Collaborative at California State Polytechnic University in Pomona, California; and the Committee on Cybersecurity for Executive Education at the Muma College of Business at the University of South Florida in Tampa, Florida.
Bob is also a highly active musician in Austin, Texas, where he fronts several groups, spanning jazz, rock, funk, blues and worship styles.

More
Milan Patel

Milan Patel

Global Head of Managed Security Services, BlueVoyant

Milan Patel is the Global Head of Managed Security Services at BlueVoyant where he oversees all aspects of the global managed security services business. Milan was a founding member of BlueVoyant and he led the creation of the company’s managed security services.
Milan came to BlueVoyant from his role as a Managing Director in the Cyber Defense practice at K2 Intelligence leading consulting and incident response capabilities. Before K2 Intelligence, he was the Chief Technology Officer of the FBI Cyber Division in charge of technology strategy.
While working at FBI HQ in Washington, D.C., Milan organized and co-led the Joint Requirements Team, facilitated by the White House National Security Council to implement Executive Order 13636 4(b). Prior to that, he was one of the FBI’s most senior Special Agents within the Cyber Division where he initiated and led numerous high profile, global cyber investigations, including Silk Road, Anonymous, and Rove Digital. In addition, Milan was a member of the FBI’s elite SWAT team and was the recipient of the Federal Law Enforcement Officer of the Year.
Milan is a highly regarded expert in cybersecurity, contributing commentary to mainstream and cybersecurity media publications, and speaking at industry events.

More
Doug Powers

Doug Powers

Managing Director, Deloitte & Touche LLP

Mr. Powers has led cyber risk services for over 30 years. Based out of our Lake Mary, Florida office, he sells and delivers cyber advise, implement and operate services to clients across Government and Commercial sectors.
Doug also leads our emerging Operational Technology (OT) Cyber capabilities sales & development creating new cyber operate solutions for State, Local and Higher Education (SLHE) and Federal Government clients to help secure our Nation’s Critical Infrastructure.
Doug joined Deloitte in 2015 after more than 25 years on active duty as a US Naval Information Warfare Officer directing our Department of Defense’s most complex cybersecurity and intelligence operations around the world.
Among his time in uniform, Doug served as a Director of Cybersecurity Operations at the National Security Agency (NSA) Cyber Threat Operations Center (NCTOC) and as a Branch Chief within NSA’s Tailored Access Operations and Remote Operations Center. He also played a significant role in standing up the US Cyber Command.
These experiences prepared Doug well for his final assignment as the U.S. Navy’s Cyber Defense Commodore and Commander of Navy Cyber Defense Operations, a 24/7/265 Security Operations Center (SOC) responsible for protecting one of the world’s largest enterprise and mission networks. These experiences have provided him with significant understanding, insights, and empathy to optimally serve our cyber operate clients.
Most recently, Doug stood up our new GPS Detect & Respond (D&R) Market Enablement Team (MET) to support our growing pipeline of clients across all four GPS sectors. Expanding on that role, he became Deloitte’s GPS Detect & Respond (D&R) Market Offering Leader and now serves as Deloitte’s GPS OT & Cyber D&R Go-To-Market (GtM) leader to continue to expand our firm’s client portfolio delivering differentiated value to our current and emerging GPS cyber clients.

More

Agenda

December 17, 2024

8:00 am Pacific

Registration and Morning Refreshments in the Exhibit Area

Magnolia Room, Grand Nave Lobby and 2nd Floor

9:00 am Pacific

Opening Remarks

Camellia/Gardenia

9:30 am Pacific

Keynote – What the H@ck is Going On

Camellia/Gardenia

Hackers and criminals are proving to be increasingly effective at breaching corporate networks and gaining footholds. In 2024, we have already seen an incredible number of breaches / public hacks that are not just the typical ransomware attacks. Even a very large Ransomware gang was hacked themselves. The current climate of global conflicts have brought cyberattacks to the front page and into outer space, in this talk you will find out a lot more about what is going on and what to worry about.

Bryan Seeley, World Famous Cyber Security Expert, Ethical Hacker, Author, Former U.S. Marine

10:30 am Pacific

Networking Break in the Exhibit Area

Magnolia Room, Grand Nave Lobby and 2nd Floor

11:00 am Pacific

Concurrent Sessions

The Double-Edged Sword of AI

Tofanelli 2nd Floor

AI is transforming cybersecurity, offering tools that can both protect and pose risks to organizations. But how do we navigate this double-edged sword? This session delves into the dual nature of AI—how it serves as a powerful force for good, enhancing security operations and fortifying defenses, while also being exploited by cybercriminals to launch sophisticated attacks. Through this dual lens, we'll explore strategies to harness AI's potential for securing your organization while staying vigilant against its misuse. Join us to gain insights into leveraging AI responsibly to create a safer digital world.

Steve Carlson, Senior Field Solutions Engineer, Cloudflare

Collaborative Cyber Crisis Management

Bataglieri 2nd Floor

When a cyber incident occurs, a fragmented response can lead to confusion and inefficiency. This session emphasizes the importance of a unified and integrated crisis management strategy for public sector organizations. By bringing together IT, security, legal, and communications teams, attendees will learn how to build a culture of resilience that ensures swift and effective responses to cyber threats. We’ll discuss how breaking down organizational silos and fostering collaboration can enhance incident response, recovery, and continuity efforts. With insights from experts and real-world scenarios, this session will equip you with the tools to develop a comprehensive, resilient approach to cybersecurity that aligns with best practices and keeps your organization prepared for any crisis.

Arlene Mordeno, Managing Director, Security for Public Sector, Accenture LLP

Aligning Procurement and Funding with the NIST 2.0 Framework

Bondi 2nd Floor

In an era of increasing cyber threats, California’s public sector must innovate its budget decisions to ensure a secure digital future for all residents. How can IT leaders identify, prioritize, and justify budget proposals that align with the latest cybersecurity standards? This session explores the integration of the NIST Cybersecurity Framework 2.0 into risk-informed budget planning, offering practical insights on leveraging service requests, grants, and creative funding. Learn how to build a strong ROI and justification for your projects while effectively managing third-party risks and service level agreements. Join us to gain actionable insights that will empower you to make informed, risk-based budget decisions that safeguard the digital future of California’s residents.

Exercising Beyond Security: Collaborating Across the Enterprise

Beavis 2nd Floor

This session is designed to spark interest and raise awareness about the importance of conducting exercises within your organization. The panel features key participants from California’s Statewide Cyberstorm, part of the most recent CISA global exercise. These experts successfully tested various aspects of their Incident Response (IR), Disaster Recovery (DR), Business Continuity Plans (BCP), and Communication Plans.

In this session, we will explore:

• How to secure buy-in from executive leadership

• Strategies for engaging operational business units

• The essential steps to building a comprehensive exercise

Join us to gain insights from seasoned professionals and enhance your organization’s readiness.

Tom Bisbee, Systems Engineering Manager – Public Sector West, Nutanix

Kathy Cruz, Consulting Practice Leader, State, Local and Education Solutions – West, Google Cloud

Navigating Identity and Privacy in a Connected World

Compagno 2nd Floor

In an increasingly digital world, managing identities is crucial to maintaining both security and privacy within an organization. This session will explore how effective identity management practices can help mitigate risks, including insider threats, while protecting sensitive information and respecting privacy. Attendees will learn about the importance of balancing access control with the need to safeguard against internal and external threats, as well as the role privacy plays in building trust across the organization. Whether you’re a technical expert or a business leader, this session will provide valuable insights into the strategies that can help your organization navigate these complex challenges.

Christine Halvorsen, Chief Technology Officer, Public Sector, Okta

Bob Kalka, Global Lead, WW Security Solutions, IBM

Unlocking the Cyber Lexicon

Carr 2nd Floor

Effective communication is essential to ensure that cybersecurity is prioritized across all levels of an organization, yet translating complex cyber concepts into clear, impactful messages can be challenging. This session is designed to help cybersecurity professionals convey the importance of security initiatives in a way that resonates with all stakeholders. We’ll explore strategies for framing cybersecurity as a vital part of the organization’s overall mission, emphasizing the role of a CISO as not just a technical expert, but a key business leader and steward. Learn how to effectively prioritize your time, communicate the value of cybersecurity investments, and position yourself as an integral part of the organization's success. Join us to discover how to build a culture of understanding that bridges the gap between cybersecurity and broader organizational goals.

12:00 pm Pacific

Lunch

Camellia/Gardenia

1:00 pm Pacific

Bits & Bytes

Camellia/Gardenia

1:20 pm Pacific

Short Break

Please proceed to the concurrent sessions.

1:30 pm Pacific

Concurrent Sessions

Guarding the Golden State’s Supply Chains

Tofanelli 2nd Floor

In an increasingly interconnected world, the resilience of supply chains is vital to California's public sector. How can we ensure that disruptions are minimized, and risks are effectively managed? This session will delve into proven strategies for fortifying supply chains, emphasizing risk management practices tailored to the needs of public sector technology leaders. Attendees will explore real-world examples and gain actionable insights to enhance the security and resilience of supply chains critical to the welfare of Californians. Join us to learn how to safeguard essential services and maintain the trust of the residents you serve.

SOCs as Practice

Bataglieri 2nd Floor

A Security Operations Center (SOC) isn’t just a physical place—it’s an integrated system of people, processes, and technology working together to secure your organization. Whether or not you have a physically defined SOC, you’re likely already performing SOC functions. This session will clarify the real role of a SOC, focusing on the holistic approach to security operations. We’ll discuss how SOCs operate, the essential components of continuous monitoring and incident response, and why every agency, regardless of size, needs to understand and implement SOC principles. Discover how to effectively manage and mature your SOC to protect Californians and maintain the trust of the residents you serve.

Milan Patel, Global Head of Managed Security Services, BlueVoyant

Doug Powers, Managing Director, Deloitte & Touche LLP

Jeffrey Wheat, Chief Technology Officer, Lumu Technologies

ISO Speed Mentoring: Unlocking California’s Genius

Bondi 2nd Floor

Are you ready to fast-track your cybersecurity expertise? Join California’s top public sector security leaders for an ISO Speed Mentoring session designed to provide you with rapid, actionable insights. In this dynamic format, you’ll engage with industry veterans, gaining firsthand knowledge on how to tackle the most pressing security challenges in the public sector. Whether you’re seeking career advice, technical tips, or strategic guidance, this session offers a rare opportunity to connect with the state’s leading security minds. Elevate your understanding and leave equipped with the tools you need to protect Californians in today’s digital landscape.

2024 Update: California's Cybersecurity Education and Workforce Development

Beavis 2nd Floor

As we move into 2024, California continues to make strides in cybersecurity education and workforce development. This session will explore the latest collaborations between key stakeholders in K-12 and Higher Education, examining how these partnerships are driving the evolution of career education pipelines. We’ll delve into the current landscape of degree programs, certificates, and digital badging, highlighting what’s new and what’s working. Additionally, the session will showcase innovative approaches like apprenticeships and other hands-on models that are proving effective in building a skilled cybersecurity workforce. Join us for an up-to-date overview of how California is preparing the next generation of cyber professionals, ensuring the state remains at the forefront of cybersecurity innovation and resilience.

Whole-of-Government Strategies for Cybersecurity

Compagno 2nd Floor

In today’s digital landscape, cyber threats demand a unified and coordinated response. This session explores how California is advancing a whole-of-government approach to cybersecurity, uniting federal, state, and local efforts to build a robust defense. Featuring insights from CISA and other key leaders, the discussion will highlight how strong intergovernmental relationships play a crucial role in bridging gaps between agencies and ensuring cohesive policies, procedures, and data strategies. By leveraging existing resources and fostering collaboration, California’s federated approach not only enhances its cybersecurity posture but also underscores the power of partnerships in protecting all Californians. Join us to learn how these combined efforts are shaping a more secure and resilient future.

Chris Cruz, Chief Information Officer, Public Sector, Tanium

2:30 pm Pacific

Networking Break in the Exhibit Area

Magnolia Room, Grand Nave Lobby and 2nd Floor

3:00 pm Pacific

General Session

Camellia/Gardenia

4:00 pm Pacific

Networking Reception in the Exhibit Area

Magnolia Room, Grand Nave Lobby and 2nd Floor

4:30 pm Pacific

End of Conference

Conference times, agenda, and speakers are subject to change.

Sheraton Grand Sacramento

1230 J Street
Sacramento, CA 95814
(916) 447-1700

Get Directions To
Sheraton Grand Sacramento

Advisory Board

Government Representatives

Andrew Bell
Information Security Officer
Military Department
State of California

Brenda Bridges Cruz
Deputy Director, Special Projects
Department of Technology
State of California

Tonya D. Digiorno
Director of Information Technology
County of El Dorado

Faith DeuPree
Information Security Officer
Department of Finance
State of California

Adam Dondro
Agency Information Officer
Health & Human Services Agency
State of California

Jeremy Espiritu
Cybersecurity Training Coordinator
Office of Emergency Services
State of California

Ryan Fogleman
Information Security Officer
Department of Technology
State of California

Mario Garcia
Supervisory Cybersecurity Advisor
Cybersecurity and Infrastructure Security Agency
Department of Homeland Security

Adam German
Chief Information Security Officer
Health and Human Services
State of California

Ruth Green
Chief Information Security Officer
Judicial Council of California
State of California

John Hanafee
Advisory Services Program Chief
Department of Technology
State of California

Glenn Herdrich
Information Security Manager
County of Sacramento

Payam Hojjat
State of California Cyber Risk & Governance Chief
Department of Technology
State of California

Crystal Holcomb
Deputy Director
Department of Technology
State of California

Justyn Howard
Deputy Secretary
Fiscal Policy and Administration
State of California

Lloyd Indig
Chief Information Security Officer
Office of General Counsel, Department of Justice
State of California

Marcie Kahbody
Agency Chief Information Officer
Transportation Agency
State of California

Ken Kojima
Agency Information Security Officer
Department of Corrections & Rehabilitation
State of California

Nithya Krishna
Agency Information Security Officer
Labor & Workforce Development Agency
State of California

Albert Lam
Cyber Defense Advisor
Health & Human Services Agency
State of California

Gerard Laygui
Cyber Operations Branch Chief
Governor's Office of Emergency Services
State of California

Maria Lipana
Cyber Threat Intelligence Branch Chief
Cybersecurity Integration Center, Homeland Security Division
California Governor's Office of Emergency Services

Chris Lopez
Chief Technology Officer
State Lottery
State of California

Mikael Magnuson
Cyber Security Manager
Army National Guard
State of California

Joseph Maio
Information Security Officer
Natural Resources Agency
State of California

Robert Mayorga
Chief Security Officer
Franchise Tax Board
State of California

Mitchell Navarette
Cybersecurity Training Coordinator
Office of Emergency Services
State of California

Eric Nehls
Cyber Policy and Strategy Planner
Office of Emergency Services
State of California

Matt Nicholls
Cybersecurity Risk Officer
State Transportation Agency
State of California

Douglas Novak
Mission Support Branch Chief
Cyber Security Integration Center
State of California

Vitaliy Panych
State Chief Information Security Officer
Department of Technology
State of California

Sandra Peterson
Cal-CSIC Project Manager
Office of Emergency Services
State of California

Aman Prasad
Partner integration Planner
Cal-CSIC
State of California

Jesse Ravera
Assistant IT Director
City of Roseville
State of California

Ravi Sharma
Agency Information Security Officer
Department of Environmental Protection
State of California

Vivian Yan
Deputy Chief Security Officer
Franchise Tax Board
State of California

Industry Representatives

Carlos Amaya
Principal
Deloitte

Beau Broker
Security Lead
AHEAD

Ryan Chambers
Regional Sales Manager
Okta

Chris Cruz
Chief Information Officer, SLED
Tanium

Derek Hess
Senior Sales Executive
Entrust

James Hicks
Unified Storage Specialist
Nutanix

Katherine Kennedy Gottfried
District Sales Manager
Palo Alto Networks

Bruce Kuska
Cybersecurity Specialist
Cisco

Arlene Mordeno
Health & Public Services Security Lead
Accenture

Shelley Silvas
Client Executive
BlueVoyant

Chris Sodergren
Associate Partner
Cybersecurity Services
IBM

Bret Waugh
Public Sector Account Manager
Google LLC

Made Possible by Our Corporate Sponsors

Registration Information / Contact Us

Event Date: December 17, 2024

Open to Public Sector only.

Registration - Free

If you represent a Private Sector organization and are interested in Sponsorship Opportunities, please contact Heather Earney.

Contact Information

For registration and general assistance contact:

Tabbie Pegoda
Government Technology
Phone: (916) 932-1411
E-mail: tpegoda@erepublic.com

For assistance or questions concerning Sponsor Logos or Logistics please contact:

Mireya Gaton
Government Technology
Phone: (916) 296-2617
E-Mail: mgaton@govtech.com

Sponsorship opportunities are available. For more information, contact:

Heather Earney
Government Technology
Phone: (916) 932-1339
E-mail: heather.earney@erepublic.com

Venue

Sheraton Grand Sacramento

1230 J Street
Sacramento, CA 95814
(916) 447-1700

Show More

Parking

The Sheraton offers overnight and drive-in valet parking for $45/daily

 

Accommodations

There is no room block set up for this event. There are a variety of hotel options near the event venue.