Key activities the week of RSAC 2026

Kick off your conference week with two must-see panels at The Four Seasons San Francisco:

DTEX will be available throughout the week with multiple ways to connect and discuss how organizations are securing human and AI risk using behavioral intelligence.

12:30 to 1:30 PM | DPRK Threat Intelligence Panel

2:00 to 3:30 PM | Trust Issues: The Only AI Panel You Need to See This Week

Sean Joyce

Principal, Office of the Chairman, Global Cybersecurity and Privacy Leader, Pricewaterhouse (PWC)

Sean Joyce is a globally recognized leader in cybersecurity, digital trust, and national security. As a Principal at PwC, Sean holds two strategic leadership roles: serving in the Office of the Chairman and as the firm’s Global Cybersecurity and Privacy Leader. He previously led one of PwC’s largest businesses—the multibillion-dollar Cyber, Risk & Regulatory platform—where he scaled client impact across industries and geographies.

With decades of experience advising CEOs, boards, and governments, Sean is a trusted advisor to Fortune 100 leadership teams, specializing in navigating the convergence of cybersecurity, regulation, and digital transformation. He provides strategic counsel on governance and risk oversight, with a focus on how cybersecurity and resilience serve as core business enablers, not just risk mitigators. He has been engaged by C-suites during some of the most high-profile cyber breaches of the last decade, supporting regulatory response, breach investigations, and long-term remediation strategies.

Kevin Mandia, Founder of Mandiant

Kevin Mandia

Founder & Former CEO of Mandiant Co-Founder & General Partner at Ballistic Ventures

Kevin Mandia is one of the world’s most recognized cybersecurity experts, with more than 30 years of experience combatting cyber threats. As Co-founder and General Partner at Ballistic Ventures, he mentors entrepreneurs, leveraging his deep understanding of the threat landscape and his proven success as a founder and CEO.

Kevin founded Mandiant, serving as CEO from 2016 to 2024, including leading the company through its successful acquisition by Google in 2022. Beyond his leadership at Mandiant, Kevin has held influential roles in cybersecurity, including serving on the National Security Telecommunications Advisory Committee (NSTAC) and the CISA Cybersecurity Advisory Committee. Earlier in his career, he contributed to the consulting divisions of Sytex (acquired by Lockheed Martin) and Foundstone (acquired by McAfee).

In the U.S. Air Force, Kevin served as a computer security officer at the Pentagon, and later a special agent in the Air Force Office of Special Investigations. He holds a BS in computer science from Lafayette College and an MS in forensic science from The George Washington University.

Nicole Perlroth

Founding Partner, Silver buckshot, Venture Partner, Ballistic Ventures and Best Selling Author

Nicole Perlroth has committed her career to advancing cybersecurity awareness and fostering the innovation necessary to confront a new era of AI-enabled attacks.

She spent more than a decade leading cybersecurity reporting at The New York Times. Her investigations rooted out thousands of cyberattacks and helped compel the first U.S. hacking charges against the Chinese military, the blacklisting of Israel’s NSO Group, and earned several journalism awards.

Marshall Heilman

Chief Executive Officer, DTEX

Marshall Heilman is the Chief Executive Officer for DTEX Systems, the global leader for insider risk management. Marshall has more than 20 years of experience in cybersecurity (in startup and large public organizations), holding executive leadership and highly technical roles at Mandiant and Google.

He is an internationally recognized cybersecurity expert, regularly speaking at industry events. He also advises startups and growth companies as an adviser to multiple venture capital firms.

Marshall joined DTEX Systems from Mandiant (now part of Google Cloud) where he spent the past 17 years focused on protecting governments and companies around the globe.

Hart Rossman

Vice President of Security, AWS

Hart Rossman is the Vice President of Security including the AWS Security Office of the CISO and AWS CIRT. In this role he leads a global team helping customers implement AWS products and services securely, achieve their security goals, and respond to security incidents while innovating and deeply collaborating with teams across the broader Amazon organization and partners. Hart joined AWS in 2012 as an individual contributor and grew to lead Security & Infrastructure in AWS Professional Services, supporting enterprise customers design, build, and optimize their security, DevOps, and cloud infrastructure architecture at a planetary scale. 

Before AWS, Hart worked for over a decade as a systems integrator in the defense & intelligence, finance, and energy sectors. He is an Eagle Scout and has earned a CISSP, CSSLP, received his B.A. in Communication from the University of Maryland, College Park, and received his MBA from the University of Maryland, Robert H. Smith School of Business.

Amanda Gerut

West Coast Editor, Fortune

Amanda Gerut has been a journalist and editor for more than 20 years and currently serves as Fortune’s West Coast Editor. She edits and reports on publicly traded businesses, executive compensation, Securities and Exchange Commission regulations and investigations. Amanda previously worked for 13 years at the Financial Times’ Agenda, a publication for corporate board members of publicly traded companies. She is the former managing editor of BoardIQ, an FT publication dedicated to the governance and oversight of mutual funds. She previously worked as a reporter at New Jersey’s Star-Ledger and The Herald News. She lives in Los Angeles with her husband, two sons, and three rescue cats.

As AI agents gain real access to enterprise data, systems, and workflows, security leaders are rethinking how trust, visibility, and governance work when autonomous systems operate alongside people.

This panel brings together industry veterans to examine how organizations can clearly see risk, apply the right controls, and enable AI to deliver value safely. The discussion will focus on where traditional approaches must evolve and how visibility, context, and behavior form the foundation for securing human, data, and AI interactions.

Senior analysts and investigators unpack how DPRK operators are evolving insider operations, using crypto as a proving ground, and scaling those tactics into broader enterprise targets. 

The discussion will cover DPRK IT worker schemes tied to state objectives, how these actors refine tradecraft before expanding into other industries, how North Korea is experimenting with AI, and how defenders can counter these operations with AI-driven detection and investigation as insider TTPs and facilitator networks continue to evolve.

Monday, March 23rd at the Four Seasons

8:00 to 10:00 AM 
Welcome Breakfast 

9:30 to 12:30 PM
Welcome Lounge 
Meet with DTEX, plus professional headshot station

12:30 to 1:30 PM 
DPRK Threat Intelligence Panel 

2:00 to 3:30 PM 
Trust Issues: The Only AI Panel You Need to See This Week 

* Breakfast, lunch, snacks, and beverages will be provided throughout the day