GovSec Summit: Hosted by GovInfoSecurity
May 5, 2026 | 8:30 AM ET - 5:30 PM ET
Hosted by BankInfoSecurity
Event Overview
The 2026 GovSec Summit: Hosted by GovInfoSecurity brings together federal and public-sector CISOs to examine how cyber leadership is evolving as disruption becomes the steady state, not the exception. By 2026, agencies are no longer responding to isolated cyber threats and incidents. Instead, they are governing cyber risk amid continuous policy change, persistent adversarial pressure, expanding supply-chain exposure, rapid AI adoption, and sustained workforce strain.
This summit moves beyond diagnosing the problem. It focuses on how agencies are adapting their operating models, authorities, acquisition strategies, and risk tolerance to function effectively in a permanently contested environment. Discussions center on practical governance: how cybersecurity leaders are making decisions at speed, aligning compliance with mission outcomes, clarifying accountability across complex ecosystems, and institutionalizing risk-informed tradeoffs at scale.
Rather than fragmented conversations about tools or controls, the event emphasizes cyber risk as an enterprise governance challenge — one that intersects with mission delivery, budget realities, interagency coordination, and public trust. Attendees will engage with peers and senior leaders who are redefining what “good” looks like as cybersecurity plays a pivotal role in upholding the Nation’s resilience.



Dr. Meghan Hollis-Peel
Greg Tatum
Jessica Bolton
Danielle Jablanski
Shuchi Agrawal
Todd Pauley
Bryce Carter
Everett Bates
Zechariah Akinpelu
Ravikumar Mukkamala
David Ginn
Joseph Berglund
2025 Speakers
Thought Leaders Leading Deep-Dive Discussions on Stage
ISMG Summits bring the foremost thought leaders and educators in the security space to the stage at interactive workshops and networking events. Learn from the who’s who in the cybersecurity industry, passionate about the latest tools and technology to defend against threats.
Topic Highlights
- Cyber Risk as an Enterprise Governance Responsibility
- Operating Effectively in a State of Permanent Disruption
- From Compliance to Risk-Informed Decision-Making
- Redefining the CISO Role and Cyber Operating Models
- Accountability at Scale Across Ecosystems and Supply Chains
Venue
Conrad New York Downtown
102 N End Avenue, New York, NY 10282
NOTE: All requests to attend will be reviewed by event staff and approved based on professional qualifications and event capacity.
Steering Committee
Guiding Our Summit With Industry Expertise
Our Summit Advisory Committee comprises industry visionaries whose guidance ensures the conference programs remain relevant, cutting-edge, and aligned with the most pressing cybersecurity challenges and opportunities – enabling attendees to apply the insights and learnings to their daily work.
Chris Riotta
Dr. Bharath Soni
Renaldo Jack
What Attendees Will Gain
- Insight into how agencies are operationalizing cyber governance under constant disruption
- Real-world approaches to balancing compliance, mission risk, and speed of execution
- Lessons learned on adapting cybersecurity strategies to achieve long-term resilience
- A peer-driven forum focused on decision-making, accountability, and leadership, not just technology
This summit is designed for CISOs who are not just managing cyber programs, but governing risk as a core function of modern government.
Agenda
Given the ever-evolving nature of cybersecurity, the agenda will be continually updated to feature the most timely and relevant sessions.
8:50 AM - 9:00 AM ET
Chair’s Opening Address
8:30 am - 8:35 am et
Opening Comments
9:00 AM - 9:40 AM ET
Governing Cyber Risk in a Constantly Contested Environment
Panel Dicsussion
- How are agencies redefining risk tolerance under persistent and asymmetric threats?
- What governance structures best support rapid, risk-informed decision-making?
- How can CISOs balance mission urgency with security accountability?
- What does “good governance” look like beyond traditional controls and compliance?
- How are expectations from secretaries, agency heads, and oversight bodies changing?

Sanjit Ganguli,
VP, CTO in Residence, Zscaler
9:40 AM - 10:20 AM ET
Enabling Risk-Informed Decisions at Enterprise Scale
As organizations increase their digital presence across cloud platforms, third-party vendors, and remote workforces, the attack surface continues to grow, exposing new vulnerabilities.
- How can leaders gain enterprise-wide visibility into cyber risk?
- What enables consistent prioritization and accountability across complex environments?
- How do agencies translate technical risk into mission-relevant outcomes?

Vlad Brodsky,
Chief Information Officer & Chief Information Security Officer, OTC Markets Group Inc.

Steve Lenderman,
Head of Fraud Prevention, iSolved, CyberEdBoard Member

Josh Cigna,
Solutions Architect, Yubico
10:20 AM - 11:00 AM ET
Networking Break
11:00 AM - 11:30 AM ET
Modernizing Cyber Operating Models for Long-Term Resilience
Presenting Sponsor
- Why do legacy cyber operating models struggle in a sustained threat environment?
- How are agencies integrating cyber risk into enterprise planning and execution?
- What organizational changes are enabling greater resilience and adaptability?

Chris Wysopal,
Chief Security Evangelist, Veracode
11:30 AM - 12:00 PM ET
The CISO as a Risk Executive, Not a Control Owner
Fireside Chat
- How is the CISO role evolving across federal and public-sector organizations?
- How can CISOs influence outcomes without direct operational authority?
- What lessons have emerged from communicating risk to senior leadership, OMB, and Congress?
- How are CISOs navigating accountability in complex governance structures?

Vincent Stoffer,
Field CTO, Corelight, Inc
12:00 PM - 12:30 PM ET
Governing AI, Automation, and Emerging Technology Risk
Presenting Sponsor:
- What new governance challenges are created by accelerated AI adoption?
- How are agencies balancing innovation with security and policy mandates?
- Who is accountable for risk in automated and AI-driven decision-making?
- What governance frameworks are proving effective in practice?

Chris Young,
Cybersecurity Enterprise Account Executive, OpenText
12:30 PM - 1:30 PM ET
Lunch
1:30 PM - 2:00 PM ET
From Compliance to Capability: Making Governance Actionable
Group Discussion
- Why does compliance alone fail to reduce real-world cyber risk?
- How can governance be embedded into day-to-day mission operations?
- What metrics truly reflect security effectiveness rather than audit readiness?
- Where are agencies seeing measurable improvement?

Kristopher Schroeder,
Founder & CEO, Replica Cyber
2:00 PM - 2:30 PM ET
Securing the Supply Chain in a Federated Government Ecosystem
Presenting Sponsor
- How can agencies govern risk across contractors, integrators, and shared services?
- What does accountability look like in complex and distributed supply chains?
- How are agencies moving from vendor compliance to shared risk ownership?
- What practical approaches are improving third-party risk governance?

Tim Hill
VP, Software Engineering, Rocket Software
2:30 PM - 3:00 PM ET
Workforce Strain, Skills Gaps, and the Sustainability of Cyber Programs
Group Discussion
- How are agencies governing cyber risk when workforce capacity is constrained?
- What roles and responsibilities must evolve to sustain programs long term?
- How can automation relieve pressure without introducing new risk?
- What workforce strategies are proving most effective today?

Sandeep Bhide
VP Product Management, ProcessUnity
3:00 PM - 3:30 PM ET
Operationalizing Zero Trust as a Governance Model
Presenting Sponsor
- How does Zero Trust change governance, not just architecture?
- How are agencies aligning Zero Trust initiatives with mission priorities?
- What metrics indicate meaningful progress at the enterprise level?
- What lessons have emerged from agencies further along the journey?

Scott Tenenbaum
Head of Claims, North America, Resilience

David Anderson
CIPP/US, Vice President, Cyber, Woodruff Sawyer - A Gallagher Company

Kimberly Pack
Counsel, Thompson Hine LLP
3:30 PM - 4:00 PM ET
Networking Break
4:00 pm - 4:40 pm ET
Roundtable
As organizations across industries face increasing data demands, building an intelligent data infrastructure is no longer optional - it's essential for staying ahead.
From healthcare to financial services, companies must rethink their data management strategies to drive efficiency, security, and innovation. A modern data infrastructure can transform raw data into a powerful resource, optimizing performance and enabling smarter decision-making while safeguarding sensitive information. Whether you’re looking to modernize your data strategy or protect critical assets, this session offers practical insights to help you build a data infrastructure designed to meet the challenges and opportunities ahead.
This session will explore the components of a resilient, secure, and scalable data infrastructure, highlighting how intelligent systems can deliver actionable insights, automate workflows, and meet the growing needs of diverse sectors.
Key topics include:
- Leveraging AI for Efficiency: How intelligent systems can streamline operations and generate insights that lead to better business outcomes.
- Enhancing Security: Approaches for embedding strong security measures directly into your data infrastructure to protect against emerging threats.
- Scalability for the Future: Developing a flexible and adaptable infrastructure capable of evolving with your business needs and handling increasingly complex workloads.

Vincent Stoffer,
Field CTO, Corelight, Inc
4:40 pm - 5:20 pm Et
What “Good” Looks Like in 2026: Measuring Cyber Governance Maturity
Panel Discussion
- How are agencies defining cyber governance maturity today?
- What indicators distinguish effective governance from paper compliance?
- How can metrics drive accountability without slowing mission execution?
- How should agencies prepare governance models for the next wave of disruption?

Seth Rose,
Supervisory Special Agent Group 06, U.S. Department of the Treasury/Cyber Investigations Unit

Imran Khan
VP Cyber Security Transformation Lead, BNP Paribas
5:20 PM - 5:30 PM ET
Chair’s Closing Address
5:30 PM ET
Drinks Reception
Register
CPE Credits
Our Summits offer Continuing Education Credits. Learn informative and engaging content created specifically for security professionals.