Your AI-Tool Cheat Sheet: choosing the right AI tool for the Job

Should you use Claude, ChatGPT, Jasper, Midjourney, or Perplexity for your current task? This talk answers that question with a practical decision framework for everyone in tech—engineers, designers, marketers, PMs, and beyond. We’ll compare AI tools side-by-side across real work scenarios: refactoring code, writing product launch emails, generating design concepts, researching competitors, and creating presentations. You’ll see which tool actually performs best for each job, and whether specialized tools like Jasper or Gamma are worth it.

Breaking Bad AI: Threat Modeling as Your Secret Weapon

GenAI adoption is soaring, but preparation for its inherent security risks—such as hallucinations, bias, and data exploitation—is alarmingly low. The skills needed for offensive security against AI have dropped to just prompt engineering, putting your applications at risk of exploits like Jailbreaking and RCE. This session will reveal why classic AppSec approaches fail due to AI’s “Black Box” foundation models and introduce Threat Modeling (DICE) as the essential process for identifying novel risks and building a robust, traceable security strategy.

Using AI for SOX-Critical SOC Report Analysis: From Compliance Burden to Strategic Intelligence

SOC reports are piling up, auditors are asking endless questions, and your team is drowning in manual analysis. But what if AI could transform this reactive compliance burden into proactive strategic intelligence?

Learn how a Director of Internal Audit transformed SOC report analysis across critical applications like Oracle EBS, Workday, and Salesforce. Through practical AI implementation, report review time dropped from 12+ hours to 1.5 hours while uncovering hidden risks that traditional analysis missed.

This isn’t theory—it’s proven results. You’ll see real examples of AI identifying operational risks in “clean” audit reports, mapping complex control frameworks in hours instead of days, and delivering audit-committee-ready analysis that transforms compliance from cost center to strategic advantage.

In this talk, we will cover:

• Why your technical expertise gives you a massive advantage over non-technical AI users
• How to start with your main ERP and scale across your SOX and operations critical application portfolio
• Real validation methods to ensure AI accuracy and maintain professional standards
• Practical strategies to transform from compliance support to strategic risk advisor

AI won’t replace IT professionals—it amplifies your knowledge to create unprecedented visibility into cross-system risks and dependencies. Your deep understanding of integrations, configurations, and data flows makes you uniquely positioned to extract maximum value from AI-enhanced SOC analysis.

The question isn’t whether AI will change compliance—it’s whether you’ll lead that change or react to it.

From Vibe Coding to Shippable App.

• What is vibe coding, and how is it different from AI-assisted engineering?
• How good at coding should you be to vibe code?
• Why vibe coding doesn’t always deliver what you want
• Why the SDLC still matters, even when you’re moving fast
• An overview of spec driven development and frameworks
• Vibe coding tips and best practices

AI May Handle the Basics, but Vigilance Is Still Required

AI is quickly becoming table stakes. It now accelerates analysis, automates tedious tasks, and spots patterns faster than we ever could. But attackers have the same advantage. They can also use AI to launch phishing campaigns, uncover vulnerabilities, and scale up old attacks in new ways. The basics will get faster on both sides.

That means the real differentiator is you. As the ultimate author of what you produce with AI, your vigilance will determine whether your company stays secure or ends up in the next breach report.

Attackers will use their creativity to confuse and bypass AI-driven defenses. It will take the creativity and vigilance of real people to stop them. Staying alert to new threats, questioning suspicious activity, and reviewing AI-generated code and content are non-negotiable going forward.

In this talk, we will cover:

Why and how individual contributors must review AI-generated code and outputs and take responsibility for what ships.

Why and how leaders must build a culture that motivates people to stay alert, take pride in their work, and remain accountable for security.

AI is a powerful co-pilot, but it will not cover everything. Creative attackers still look for the gaps humans leave behind. Our continued vigilance is what protects our work and what sets us apart in a world where AI has become the baseline.