Podcast
Root Causes 389: 2024 RSA Conference Wrap Up


Hosted by
Tim Callan
Chief Compliance Officer
Jason Soroko
Fellow
Original broadcast date
May 28, 2024
Jason and Tim do their annual RSA wrap-up. Trending segments include AI, Trust Centers, MFA, PQC, and more.
Podcast Transcript
Lightly edited for flow and brevity.
So buzzwords - we know what the obvious buzzword was.
So, in fact, so here's my conference schedule. So how many of the official sessions, speeches, do you think were about AI? This is unfair.
Trust centers. Trust centers, and regulatory platforms are all over. Like, this is a booming industry. Lots of new companies, lots of existing companies pivoting who are kind of in the space, who all of the sudden, maybe they didn't have a GRC offering, but they were close enough now they do. Or maybe they had a GRC, but they didn't have a Trust Center and now they do. Just everywhere. People I'd never heard of, and I actually follow this space because I care. Because I'm in charge of compliance. And it's just blowing up. And it makes sense, because two years ago, nobody in the world had a Trust Center. One year ago, it was real forward thinkers. And now it's like, if, if you're not getting one of these things, you're in for trouble. And so if you want to talk about a market that's just blossomed so fast with all of this focus on supply chain, auditing, and all of this focus on security questionnaires, and all of the stuff that I can't help getting on here and ranting about, then, it's not surprising to me to see a lot of industry action behind this particular category.
And this is what CSF 2.0 is really calling for and this is a piece of it. So to me, it's interesting how nobody called for it. There was no formality but it's coming together. That’s a positive thing.
Another one that I saw a lot more of than I'm used to seeing is security training and awareness. Which it's not a new problem. We all understand that the big pile of cells that sits in front of the keyboard is always the weak link. We all know that. And it still is. But it feels to me like we're seeing more effort on commercializing security training than we have in the past.
So now success is measured in a different way. Success isn't measured in terms of 100% of employees sat through 17 minutes and answered three questions correctly.
Number six. Another thing, again, I feel like there's more of is specific focus on visibility, dashboards, analytics, visibility products that were not a dashboard - - Like you get a lot of, I do something for you and I'm going to give you a dashboard and reporting. But these are almost like the security equivalent of Domo. Like, I'm going to give you a BI tool for security.
This year, I didn't talk about that. I talked about shortening certificate lifespans, so I wasn't on the list. but even without that, there were a total of nine speeches. On the topic of quantum. There are a lot of vendors on the floor. I think most of the vendors that are on the floor were there last year, but they all came back and there were one or two more that I was familiar with that were players in the space that are were booths now. Wherein previously they haven't been.

