2025 Cybersecurity Summit

Towerwall

The ultimate gathering of cyber experts &amp; enthusiasts at the 2025 Cybersecurity Summit presented by Towerwall &amp; MassBay Community College.

MassBay Community College Wellesley Hills Campus, Oakland Street, Wellesley, MA, USA

2025 Cybersecurity SummitJoin us for the 2025 Cybersecurity Summit, a must-attend event for all tech enthusiasts and cybersecurity professionals! This in-person summit will be held at the MassBay Community College Wellesley Hills Campus in Wellesley, MA, USA. Get ready to dive into the latest trends, exchange knowledge, and network with industry experts. Don't miss this opportunity to enhance your understanding of information security and stay ahead in the ever-evolving digital world. Mark your calendars and secure your spot now!

Agenda

2025 Towerwall | Mass Bay Cybersecurity Summit 

Registration, Breakfast, and Networking/Exhibitor Showcase

Welcome Remarks

How AI-Enabled Deepfakes Are Changing Social Engineering and How You Need to Change Your Training
AI-enabled deepfakes are easier than ever and getting easier. Hackers only need a picture of you and 6-30 seconds of audio of your voice to create a realistic deepfake of you saying or doing anything. Attend this session to see how easy it is for anyone to do a realistic deepfake and how you need to update your training to help defend. Taught by 36-year cybersecurity practitioner, Roger A. Grimes, Data Driven Evangelist for KnowBe4, and author of 15 books and over 1500 magazine articles on cybersecurity.


Morning Keynote Presentation: Roger A. Grimes, KnowBe4

Networking/Exhibitor Showcase

Breakout Sessions I

Securing cloud environments, managing access controls, and ensuring compliance with cloud-specific standards. 

Key Topics:
•	Cloud Security Fundamentals – Threats, vulnerabilities, and shared responsibility model.
•	Single vs. Multi-Cloud Security Challenges – Risk management, data protection, and configuration complexities.
•	Access Controls & Identity Management – Role-based access (RBAC), zero trust, and multi-factor authentication (MFA).
•	Compliance & Regulatory Standards – Meeting frameworks like GDPR, SOC 2, and ISO 27001.
•	Best Practices for Secure Cloud Adoption – Encryption, continuous monitoring, and security automation.


Mastering Cloud Security: Navigating Single and Multi-Cloud Environments

Cybersecurity regulations like GLBA, CMMC, and HIPAA are critical for protecting sensitive financial, defense, and healthcare data. This session breaks down the essentials of each—who must comply, why it matters, how to meet requirements, and when to take action—to help your organization avoid risk and stay audit-ready.

Key Topics
•  What They Are
GLBA: Financial data protection
CMMC: Defense contractor cybersecurity
HIPAA: Safeguarding health information
•  Who Must Comply
Industries and roles impacted
•  Why It Matters
Avoiding fines, breaches, and reputational damage
•  How to Stay Compliant
Policies, training, security controls, and audits
•  When to Act
Key timelines, review cycles, and response requirements
•  Common Pitfalls
Gaps in understanding, third-party risk, and lack of follow-through
•  Helpful Tools & Resources
Frameworks, tech tools, and expert support


Cybersecurity Regulations: GLBA, CMMC & HIPAA – Ensuring Compliance

Strengthening organizational resilience through tabletop exercises and testing incident response and recovery plans.

Key Topics
o	Importance of Incident Response & Disaster Recovery – Minimizing downtime, protecting data, and ensuring business continuity.
o	Developing a Strong Incident Response Plan – Key components, roles, and communication strategies.
o	Disaster Recovery Planning – Backup strategies, system restoration, and continuity planning.
o	Tabletop Exercises & Testing – Simulating cyber incidents, identifying gaps, and improving response readiness.
o	Continuous Improvement & Compliance – Updating plans, meeting regulatory requirements, and learning from past incidents.

Incident Response & Disaster Recovery Plans

Breakout Sessions II

Mitigating risks from third-party vendors and addressing cybersecurity threats within the supply chain.
Key Topics:
o	Understanding Supply Chain Cyber Risks – Common threats, attack vectors, and real-world incidents.
o	Vendor Risk Assessment – Evaluating third-party security practices and compliance requirements.
o	Mitigating Third-Party Risks – Contractual security obligations, continuous monitoring, and incident response planning.
o	Supply Chain Security Best Practices – Zero Trust principles, secure procurement processes, and risk frameworks (e.g., NIST, ISO).
o	Regulatory & Compliance Considerations – Meeting industry standards and legal requirements for vendor security.

Supply Chain & Vendor Risk Management

Peter Perrinez  |  Artic Wolf

Don’t end up on the “Dark Web”: How Arctic Wolf Solutions can help you prepare for disaster. Ever been to the “Dark Web”? Want to see what that really is and what anyone with a computer and the internet can gain access to in less than 60 seconds? Join Arctic Wolf as we rummage around some stolen data, talk about some notable, local examples, how this ties into cyber insurability and how Arctic Wolf’s Managed Security Operations Services can help your company not windup on the “Dark Web”.

Don’t end up on the “Dark Web”: How Arctic Wolf Solutions can help you prepare

AI and Machine Learning are transforming cybersecurity by enhancing threat detection, prevention, and response. These technologies analyze vast data in real time to identify threats but also introduce risks as attackers use AI for sophisticated cyberattacks. A balanced approach is essential to leverage AI’s benefits while mitigating threats.

Key Topics
o	AI in Threat Detection – Behavioral analysis, anomaly detection, and zero-day threat identification.
o	AI for Threat Prevention – Predictive analytics, fraud detection, and automated risk assessment.
o	AI in Incident Response – Automated threat containment, AI-driven SIEM, and cybersecurity automation.
o	Risks of AI in Cybersecurity – AI-generated attacks, model biases, and ethical concerns.
o	Future Trends & Best Practices – AI in security frameworks, human-AI collaboration, and emerging innovations


AI and Machine Learning in Cybersecurity

Data Discovery/Data Classification & DLP (Data Loss Prevention): What type of data do you have? Who owns it? Classifying sensitive data and implementing strategies to prevent unauthorized access or leakage.

Afternoon Keynote Presentation: Kelly Haydu - CarGurus

Closing Remarks

Lunch, Networking, and Exhibitor Showcase 

Drawings for BINGO Prizes and Twitter Contest – MUST be present to win!

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}