Cloud Security Alliance Announces Speakers for CSA Summit at RSA Conference 2020

Security experts and thought-leaders from Goldman Sachs, National Security Agency, In-Q-Tel and Intuit Information Security will share their insight and expertise

SEATTLE –Dec. 17, 2019 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications and best practices to help ensure a secure cloud computing environment, today announced its headlining speakers for the 11^th annual CSA Summit at RSA Conference 2020 (Feb. 24, San Francisco). Phil Venables, Board Director and Senior Advisor (Risk and Cybersecurity) for Goldman Sachs, will be joining National Security Agency and Central Security Service General Counsel Glenn Gerstell, In-Q-Tel Chief Information Security Officer and industry legend Dan Geer, and Intuit Information Security’s Directory of Adversary Management and Threat Intelligence Shannon Lietz as top speakers for the event.

“2019 has been a milestone year for cloud computing in every respect. Massive expansion in cloud adoption and breakthroughs in cloud security solutions have been tempered by record cloud data breaches and punitive fines for privacy regulation violations. The good news is that there is an extensive body of knowledge to successfully navigate the security and privacy challenges for the decade ahead. For the forthcoming CSA Summit 2020, we have doubled down on the number of sessions presented by enterprise end users and CISOs as they are truly the stewards of our industry. The speakers we have assembled are among the most admired leaders within cybersecurity, and we are very fortunate to have them all in one room on this special day. This event will set the tone for 2020 and provide a roadmap for where we intend to lead the industry in the years ahead,” said CSA Co-founder and CEO Jim Reavis.

Venables will share his expertise and insight gleaned from his years of leading Goldman Sachs’ Information Security, Technology Risk, Technology Governance and Business Continuity programs.

As a senior advisor, he supports the firm’s executive leadership and client franchise on cybersecurity, technology risk, digital business risk, and operational resilience. Additionally, he spearheads the firm’s work with industry associations and initiatives to reduce systemic risk and serves as a member of the Firmwide Enterprise Risk Committee, Firmwide Technology Risk Committee, and Global Business Resilience Committee.

Attendees also will learn from thought leaders from multi-national enterprises, government, cloud providers and the information security industry, who will share best practices in cloud privacy and security. Among them will be some of the cloud industry’s most prominent enterprise leaders and experts:

• Dan Geer, CISO of In-Q-Tel. Geer is the creator of the Index of Cyber Security and the Cyber Security Decision Maker, as well as a co-founder of SecurityMetrics.Org. His 1998 speech, "Risk Management Is Where the Money Is," changed the focus of security, and he was the first to call for the eclipse of authentication by accountability in 2002. Geer is a widely noted author in scientific journals and a co-author of several books on risk management and information security, including "Cyberinsecurity: The Cost of Monopoly," "Economics & Strategies of Data Security," and "Cybersecurity & National Policy.”
• Glenn Gerstell, General Counsel, National Security Agency (NSA) and Central Security Service. Gerstell was appointed in August 2015 as the General Counsel of the National Security Agency and Central Security Service. Prior to joining NSA, Gerstell practiced law for almost 40 years at Milbank, Tweed, Hadley & McCloy LLP, where he served as the managing partner of the firm's Washington, D.C., Singapore, and Hong Kong offices. Earlier in his career, he was an Adjunct Law Professor at the Georgetown University School of Law and New York Law School. He has served on the President's National Infrastructure Advisory Council, which reports to the President and the Secretary of Homeland Security on security threats to the nation's infrastructure, as well as on the District of Columbia Homeland Security Commission.
• Shannon Lietz, Director Adversary Management and Threat Intelligence for Intuit Information Security. Lietz is an award-winning innovator with more than 20 years of experience pursuing advanced security defenses and next-generation security solutions. She is currently the DevSecOps Leader for Intuit, where she is responsible for setting and driving the company’s security engineering strategy and cloud security support for product innovation. She is passionate about leading the charge for security transformation and change management in large environments, leveraging Agile and Rugged principles.

Panels and presentations will focus on privacy and information security with an eye to artificial intelligence, quantum supremacy, blockchain, and fog computing.

Rich Mogull, CCSK Authorized Instructor and a prominent industry analyst and sought-after speaker, will be teaching the Certificate of Cloud Security Knowledge (CCSK) Plus training course on Feb. 23-24. The class will provide students* a comprehensive review of cloud security fundamentals, prepare them to take the CCSK v4 certificate exam and guide them through six hands-on labs that tie cloud security best practices to real world applications. Learn more or register now.

Registration for the Summit will open in January and is complimentary to those registered for the RSA Conference. Members of the media and analyst community interested in attending the event should contact Kari Walker for more information, to receive press credentials and to schedule pre-event or onsite interviews with CSA leadership, working group chairs and conference speakers.