About
Bil Harmer has been breaking, building, and leading in security for over 25 years. He’s led security programs for startups, governments, and global financial institutions—and knows firsthand how to balance speed with protection when the stakes are high. In 2007, he pioneered a hybrid SAS70/ISO methodology that laid the groundwork for modern SaaS security audits, years before SOC2 became table stakes. A sought-after speaker and advisor, Bil has presented across North America and Europe at events like RSA, ISSA, GrrCon, and CSA. His work has appeared in Dark Reading, Data Informed, Security Intelligence, and more. He’s advised companies like Adallom, Trust Science, ShieldX, and Integris, and held senior security leadership roles at SAP/SuccessFactors, Zscaler, SecureAuth and Craft Ventures. Today, he runs Killswitch Advisory—a security firm for companies that need sharp, decisive infosec leadership without the corporate theater.
Sessions
Breaking the Rules: The CISO Playbook Wasn’t Built for AI
What you will learn:
The security playbook was built for a world of applications, infrastructure, identities, and human users. AI is changing the rules. As AI moves from experiment to infrastructure, product, and workforce, security leaders are being forced to rethink how they manage risk, enable the business, and build security programs that can keep pace. The challenge is no longer simply securing AI. It is figuring out how security itself needs to change. Larry Letow, CEO of TachTech, brings together three security leaders operating at very different points on that frontier: an AI-native company moving at extraordinary speed, a developer platform where security has to scale with the product, and one of the world's largest platforms navigating security, safety, identity, and emerging AI technologies at massive scale. What assumptions are no longer holding up? Where does more control actually create more risk? What should be automated, delegated, or eliminated? And when AI can build, act, and make decisions, how does security evolve from a gatekeeper to an enabler? This is a candid conversation about the rules worth keeping, the rules worth rewriting, and what it takes to build and secure an AI-enabled business without slowing it down.