Talks·50 min
John Behen
Presents a six-domain framework for building an enterprise vulnerability management program from a large shipbuilder's experience.
vulnerabilitiesriskframework+2
Talks RVAsec 10
Richmond, VA, USA · 2021 · 12 talks
Talks from RVAsec 10 (2021).
1–12 of 12 talks
Talks·34 min
Caleb Mattingly
Shows how to build security checks into infrastructure-as-code pipelines using misconfiguration scanners and secrets handling.
cloudinfrastructureautomation+2
Talks·39 min
Jeff Tehovnik
Explains infrastructure as code concepts, object-oriented patterns, and the path from scripts to CI/CD and DevOps practice.
infrastructureclouddevops+2
Talks·51 min
Josh Wallace
Argues that application security tooling should fit the developer's local inner loop to shift left effectively.
appsecdevopsdeveloper+2
Talks·44 min
Karl Jankowski
Examines how network assessments get misused as quick fixes and outlines governance basics small businesses can follow instead.
riskmanagementframework+2
Talks·48 min
Thor Draper Jr
Explains how career changers can find, approach and manage three kinds of mentors through virtual networking.
learninglessons-learnedinterview+1
Talks·40 min
Chris Tignor
Argues that security leaders must protect their teams, communities, careers and health to keep moving fast.
managementteamlessons-learned+1
Talks·38 min
Richard Thayer
Maps application and cloud security across developer pipelines, cloud-native workloads, and governance, risk and compliance.
appsecclouddevops+2
Talks·48 min
Maggie MacAlpine
Traces how ransomware gangs operate and how policy and layered defenses could change the fight against them.
ransomwareriskdefensive-security+2
Talks·25 min
Anthony Switzer
Questions whether purple teams are a real separate team and argues for better red and blue communication instead.
teammanagementdefensive-security+2
Talks·50 min
Steve Holliday
Explains the CMMC maturity levels and domains, and how organizations can use the model to plan cyber risk controls.
riskmanagementframework+2
Talks·51 min
Evan Johnson
Walks through how one company moved its workforce from VPN perimeter access to zero trust identity-aware access.
trustidentitydevice+2