Secure AF: Organizational Compliance in an Evolving Security Landscape

A North American look at security management programs, drawn from three years of industry work—and how a shifting view of security risk assessments is pushing the energy industry to rethink how it approaches this key area.

A North American look at security management programs, drawn from three years of industry work—and how a shifting view of security risk assessments is pushing the energy industry to rethink how it approaches this key area.

After speaking in Texas at API 2025, I came straight back to Calgary to give a talk at BSides Calgary 2025 on security management programs from a North American lens.

The drive to do this talk came from my work in industry over the last three years. A shifting view of security risk assessments has pushed the energy industry to think much more deliberately about how it wants to address this key area—moving away from checkbox compliance and toward programs that actually hold up in a changing threat environment.

My thanks to BSides Calgary and the Canadian Cybersecurity Network for the speaker spotlight and the opportunity to present.