Like how MITRE ATT&CK has collated attacker tactics and techniques, D3FEND was built to model computers, devices, computer networks, and their associated information flows and subsequent countermeasures vital for defense. D3FEND for OT builds upon the understanding that operational environments have their own unique cybersecurity properties and methods. This session will introduce attendees to the […]

Most GRC teams spend significant time on operational tasks, follow-ups, evidence collection, documentation, and aligning controls to evolving regulations and policies. In this session, we share how PayPal is leveraging engineering, automation, data, and AI to streamline GRC operations. WiCyS is proud to provide members the opportunity to earn CPE/CEU credits for attending WiCyS Webinars […]

Manual threat modeling is a bottleneck: context fragmentation, repetitive data entry, and inconsistent analysis across tools. What if an intelligent agent could think through your threat landscape the way you do? Model Context Protocol (MCP) enables exactly that. Instead of jumping between spreadsheets, wikis, and threat databases, MCP allows agents to understand your system context […]

Join this WiCyS webinar to learn how TikTok's Global Security Organization (GSO) integrates AI into the engineering processes, helping catch security and compliance risks early—before they become expensive, slow, or customer-facing problems. In this session, TikTok will share how GSO's AI-assisted security validation platform, SEVA, uses LLMs to continuously validate security controls across our SDLC, […]

Most DLP programs focus on tools rather than outcomes. In this WiCyS webinar, PayPal shares how they rebuilt DLP into a unified, self-reinforcing system featuring: Policy managed as code AI-driven […]

Traditional detection struggles with authorized actions that trigger no alarms. This WiCyS webinar, featuring AWS, revisits the concept of "repudiation" to examine what it truly means for an action to […]