Session:
Date: Thursday, September 24th
Time: 3:30 PM - 7:30 PM
Location: Akamai, 145 Broadway, Cambridge, MA 02142
Agenda:
3:30 - 4:00pm - Member check-in
4:00 - 4:45pm - Speaker #1 - Julianna Testa 7AI
4:45 - 5:30pm - Speaker #2 - Evan Stos OnSpring
5:30 - 6:00pm - Bio break and Networking
6:00 - 7:00pm - Panel Discussion
7:00pm and beyond - Networking
Speakers
Julianna Testa 7AI
A network of ordinary Chrome extensions — color pickers, ad blockers — has been quietly running attacker-controlled code inside employees' browsers, invisible to the security tools most enterprises already trust. 7AI's Juliana Testa walks through how her team uncovered it, currently distributed by the Chrome Web Store carrying Google's own "Featured" badge, and what it means for how leaders govern a vendor-risk category almost nobody reviews today.
|
|
|
Juliana is a Senior AI Security Engineer and threat researcher at 7AI, where she conducts threat research and drives quality assurance for AI-generated security investigations. She develops evaluation methods that improve the consistency, accuracy, and reliability of AI-driven security products. Previously, at The MITRE Corporation, Juliana led security accreditation, auditing, and remediation efforts for mission-critical U.S. Air Force networks. She also trained Security Operations Center personnel responsible for defending those environments. As a blue-team threat hunter, she contributed to the 2024 MITRE ATT&CK Enterprise Evaluations, supporting the program’s first assessment of macOS detection and protection capabilities. Her applied mathematics research examines the efficiency and resilience of transportation, communications, and critical-infrastructure networks using graph clustering, minimum spanning trees, vectorized traffic-flow analysis, and network-density measures. Julianaholds a Master of Engineering from Johns Hopkins University.
|
Evan Stos OnSpring
Currently, most GRC teams are chasing AI hype. It's reshaping GRC by automating routine work and surfacing patterns faster. Success, however, requires clear data governance and realistic expectations about what Agentic AI can and cannot replace. The winning teams use it to automate busywork, allowing humans to focus on judgment calls—but this requires admitting what's broken first. If they don't, AI will only expose those issues more quickly.
Evan is a seasoned tech start-up executive who has worked in a wide variety of roles in the enterprise GRC B2B SaaS space for nearly 20 years. He is currently the Vice President of Product at Onspring. In this role, he is responsible for the overall leadership, strategic direction and management of the Product Management and Product Operations teams. He oversees the creation of sophisticated, market-leading products that demonstrate how the Onspring platform solves various GRC challenges. Previously, he worked as a GRC consultant for over 12 years, implementing a wide variety of processes on many platforms.
Panel Discussion
Amy Conte, Sr. Manager of InfoSec Compliance, Akamai
Evan Stos VP of Client Services, OnSpring
Julianna Testa Sr. AI Security Engineer, 7AI
Parking
Public parking.
CPEs
3
Payment
Non-Member Pre-Pay: $10
Non-Member Pay at the door: $20
ISC2 Eastern MA Paid Member: Free
Thanks to our Sponsor for this Event:
Food and Beverages will be served