Andy Lalaguna

What you will learn:

•A clearer way to think about "reactive vs. proactive" security - testing and closing gaps continuously, rather than waiting for a scan cycle or an incident to tell you where they are •A practical look at working across an existing toolset rather than replacing it -where that helps, and where it has limits •A first-hand look at how Aston Villa FC - a growing Premier League club with a small IT team and a historic stadium's worth of third-party risk - used a NIST baseline assessment, 24/7 MDR for Microsoft, and MDR for Log to close real security gaps •How explainability, reversibility, and policy-bounded autonomy let security teams move at machine speed without losing the accountability boards, regulators, and cyber insurers now require