Secure by Design, Not By Chance: The Rise of Security Control Management [InfoSec World 2025]

​Cybersecurity’s static, fragmented approach to compliance is failing in the face of rapid innovation, complex infrastructure, and relentless risk. Today, security and engineering teams face a widening ‘compliance gap’; legacy processes built for periodic paperwork and discrete audits cannot keep pace with the realities of DevSecOps, hybrid cloud, and continuous deployment. The industry is overdue to “name the problem,” not just patch it.

​​This fireside chat marks the official launch of Security Control Management (SCM) as a new software category: one purpose-built to shift risk management from manual, after-the-fact reporting to proactive, embedded defense at the heart of every enterprise. ​

​​SCM platforms unify security control selection, mapping, validation, and enforcement—transforming scattered paperwork and reactive compliance into a streamlined, automated discipline that empowers decision-making at the speed of relevance.

Panelists include:

• ​​Marene Allison, former CISO, Johnson & Johnson

• ​​Maj. Gen. Ryan Heritage (ret.), former Director of Operations, US Cyber Command

• ​​Lisa Umberger, Former NSA Security Leader; Co-Founder and CEO, Sicura

​​Following the fireside chat, please join the panelists for a meet-and-greet. Panelists will be in attedance to conduct further discussion about the rapid evolution of cybersecurity in government and the private sector. Drinks will be provided.

​All attendees must complete registration and obtain a ticket for InfoSec World 2025. A conference badge for InfoSecWorld 2025 is required for admission to this event.