One company. One breach. Five acts. Eight platforms.
Wednesday, October 7, 2026
0800 – 1730
Arctiq Executive Briefing Center, Las Vegas
Spend a day inside one company's worst year. Northstar Components is a mid-market manufacturer that gets breached, and you will learn how backward: we open with their cyber insurer denying the claim, then spend the day tracing the failure to the single click that started it. One company, one story, one track, no competing rooms. Six architecture sessions, eight fifteen-minute platform demos, and a live tabletop where the room runs the triage and decides what to do while the clock runs. Every session answers the same question the insurer asked Northstar and could not answer: can you prove your controls were actually working on the day the sky fell?
Hosted by Tim Tipton · Director, Cybersecurity Transformation
tim.tipton@arctiq.com
Reserve Your Seat
The Premise
Not a product showcase. A company you follow, backward.
Most security events hand you eight products and hope one sticks. This one hands you a company. For a single day in Las Vegas, the entire room follows Northstar Components, a mid-market manufacturer with a hybrid environment, remote engineers, third-party suppliers, sensitive design data, and executive pressure to adopt AI safely. Northstar is not a hypothetical; it is every mid-market organization that owns plenty of security tools and still could not answer the one question that mattered.
The event opens on the last bad day, when Northstar's cyber insurer denies the claim, not because the intrusion was sophisticated, but because the company cannot produce evidence that the controls it attested to were actually operating. Knowing the ending changes how you watch the day. You stop waiting to be sold and start hunting for the cause.
The Model
A capability-first model that reframes how security programs get built. Read it left to right — every program that broke started from the right.
Buying tools before defining capabilities is how programs become brittle — no owner, no success criteria, no evidence for an auditor.
Risk Appetite & Control ObjectivesControl Ownership & Exception HandlingEvidence Generation & Audit ReportingHuman Risk MeasurementAI Usage Visibility & ControlRegulated Data Collaboration BoundarySensitive Data Discovery & OwnershipAsset & OT Exposure IntelligenceIdentity Data Unification & ObservabilityCloud Attack Path & Toxic CombinationDetection, Triage & ResponseRecovery, Agent Governance & Rollback
Twelve capabilities, scored against your own program, the same ones Northstar couldn't demonstrate.
What You'll Leave With
A capability map, in your own handwriting.
You will not leave with a tote bag. You will leave with a capability map, scored against your own program in your own handwriting, twelve capabilities measured honestly against the same ones Northstar failed to demonstrate. That map tells you where your gaps are, which ones matter most, and what to do about the one that scores lowest. It is a working document, not a leave-behind, and it turns a day of watching into a clear read on your own posture that you can take back to your team and your board.
The Day
One track, 0800 to 1730. No competing rooms.
The event runs a single track from 0800 to 1730, opening with breakfast and closing with a reception, partner conversations, and next-step workshops for anyone who wants to go deeper.
0800
Breakfast & Registration
Check in and CPE scan. A first look at the capability map you'll fill in through the day.
Act I
Govern
Opening keynote and Session 1. The question in the room: who decided this risk was acceptable, and can they prove it?
Act II
Define Capabilities from Business Need
Session 2 and three platform demos. Boundary, data, and obligation become architecture.
1240–1325
Lunch & Capability Pods
Three rotating pods. Go to the one that matches the gap you just found on your own map.
Act III
Establish Trust Boundaries
Session 3 and a platform demo. Assets, exposure, and attack paths become the control plane.
Act IV
Operate
Session 4 and two platform demos. Identity and cloud are the modern control plane.
45 min
Live Tabletop: The Northstar Triage
An alert has fired. The room decides — escalate, contain, or watch — and sees what each choice actually costs.
Act V
Assure & Recover
Session 6 and a platform demo. Resilience, evidence, and AI agent governance close the loop.
20 min
Closing Panel
What good looks like twelve months later, answered with a number or a pass.
1650–1730
Reception
The pods stay open. So does the bar.
Core Capabilities
01
Full-Stack Observability:
End-to-end visibility from mainframe to microservices to mobile with all telemetry (metrics, logs, traces, events) in context.
02
Davis® AI:
Advanced root cause analysis, anomaly detection, and remediation guidance at scale.
03
Out-of-the-Box Alert Coverage & Davis® AI:
Detects issues others miss by combining broad default alert coverage with causal AI to uncover problems before users notice.
04
Grail™ + DQL:
High-speed, schema-on-read querying of logs, events, business, and security data.
Build tailored automation and platform extensions for unique business requirements.
07
Open Standards & Integrations:
Built-in support for OpenTelemetry, OpenSLO, and 750+ supported technologies.
08
Auto-Discovery & Auto-Instrumentation:
OneAgent® detects, instruments, and baselines every component automatically.
09
Auto-Baselining & Continuous Updates:
Learns “normal” behavior, adapts dynamically, and updates agents automatically to minimize maintenance.
10
Real-User & Synthetic Monitoring:
Advanced digital experience monitoring across web, mobile, and API layers.
11
Cloud-Native & Kubernetes Insights:
Real-time observability for microservices, serverless workloads, and container platforms.
6.75
hours CPE
Sessions qualify for 6.75 hours of self-reported CPE toward ISC2 and ISACA certifications. Scan at registration, after lunch, and at close — breaks, lunch, and the reception aren't included.
Before You Go
Four things go home with you.
Your capability map
Marked up, in your handwriting. Twelve capabilities, scored against your program, not Northstar's.
Your CPE certificate
6.75 hours, itemized by session, ready to self-report to ISC2 or ISACA.
The Northstar dossier
The full incident, all seven days, with the control that would have caught each one.
A workshop, if you want one
Your lowest-scored capability maps to a two-day Arctiq workshop. No obligation, no pitch on the way out.
ARCTIQ EXECUTIVE BRIEFINGS
Venue & Logistics
The room is kept deliberately small so the tabletop stays a conversation rather than a show of hands. This is for security and GRC leaders who are tired of buying tools and want to talk about capabilities, evidence, and what good actually looks like twelve months from now.
Wednesday, October 7, 2026
0800 – 1730
Arctiq Executive Briefing Center — 7140 Dean Martin Drive, #1100, Las Vegas, NV 89118
Can you prove your controls were working on the day the sky fell?
-1.png?width=1296&height=1296&name=openart-gpt-image-2-1_1787239283256_4681f1b9%20(1)-1.png)
