RSA Conference Courses

Cloud Threat Modeling - From Architecture Design to Application Development

Learn to model cloud threats by mapping assets, attackers, attack surfaces, and mitigations through STRIDE, attack trees, and the Cloud Controls Matrix.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

The Rise of the BISO Role

Explore how a Business Information Security Officer builds a cybersecurity service, bridges security and business teams, and aligns risk support with organizational priorities.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Cybersecurity Metrics Development for Board and Risk Committee Reporting

Learn to develop, evaluate, and report actionable cybersecurity metrics that help boards make decisions about cost, maturity, and risk.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Infosec Makeover - Love it or Leave it, Product Security is Here to Stay

Explore product security as InfoSec’s general contractor, covering its scope, capabilities, team structure, and practitioner hiring.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Cryptography in Distributed Systems

Explore cryptographic accumulators, anonymous credentials, multi-party revocation, and compressed Schnorr proofs for privacy-preserving identity and blockchain systems.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Reducing Payment Fraud with SWIFT Customer Security Controls Framework

An expert panel examines how SWIFT’s Customer Security Controls Framework strengthens cyber hygiene and reduces fraud across the global payments ecosystem.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

The New Ground Truth for Security

How high-fidelity infrastructure data can establish ground truth for identifying and stopping advanced cyber threat actors.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Threat Response Needs New Thinking - Don't Ignore This Key Resource

Use network data to rethink real-time threat response, reduce SOC alert fatigue, and catch attacks more effectively.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

How to Prepare Infrastructure for a War and Enable a Company's Security

A MacPaw case study on preparing infrastructure, implementing wartime plans, and maintaining company security and business continuity during a full-scale invasion.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Undercover Agent in the Chinese Card Shop Ecosystem - Become a Phishing Master

An anonymous researcher examines Chinese dark-web card shops, American card sales, and the phishing tactics used by hackers in this ecosystem.

• YouTube
• 56 minutes
• Self-Paced
• Free Video

ChatGPT Weighs In on Identity and Instant Payments

Examines digital identity considerations and fraud risks surrounding instant, irrevocable payments, using ChatGPT as a discussion partner.

• YouTube
• 56 minutes
• Self-Paced
• Free Video

We're Not Doomed! How to Successfully Manage Software Supply Chain Security

Uses four real-world software supply chain attacks and OSCAR to help organizations assess and improve DevSecOps programs.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

OWASP Top 10 Security Risks for Low-Code/No-Code

Explore the OWASP Top 10 security risks in low-code/no-code applications, including identity mechanisms and real-world enterprise findings.

• YouTube
• 1 hour
• Self-Paced
• Free Video

What Top CISOs Include in Updates for the Board - A Look at Actual Examples

CISOs share real examples of communicating security risk posture and metrics in board updates.

• YouTube
• 1 hour
• Self-Paced
• Free Video

Dudes, Do Better - Dismantling Toxic Masculinity at Work

A workplace webcast urging organizations to recognize and dismantle toxic masculine behavior and align management with stated values.

• YouTube
• 59 minutes
• Self-Paced
• Free Video