December 12th, 2025 meeting

DATE:December 12th, 2025 (PLEASE NOTE: this has been rescheduled for December)
TIME:2:00pm to 4:00pm (PST)
VENUE:Hybrid Zoom Online meeting & In-Person at Sophos Inc. (Map)
TOPIC:Taming the Hacker Storm: A Way to Defeat Cybercriminals and Malware
PRESENTERS: Roger A. Grimes (Presenting virtually/remote)
RECORDING: 
For those attending in person, please take the elevator to floor 15.

ABSTRACT

Malicious hackers and their malware creations are rampant on the Internet. Ransomware is taking down companies, hospitals, and even entire cities at will. Hundreds of millions of dollars are stolen, and millions of people’s accounts are stolen every day. A large portion of the Internet is just hacker traffic, phishing, and their malware programs. However, most people are unaware that we can significantly reduce Internet crime, making it nearly impossible for hackers and their malware creations to be successful. There is a way to make a far safer Internet for you, your children, your grandchildren, and your grandparents. We have most of the needed technology, we just need to make it more pervasive.


Attend this session to learn about:
The ONE BIG UNDERLYING COMPUTER SECURITY PROBLEM that underlies all other problems
How fixing that one problem will make the Internet a far safer place for the world to compute
Hear about the cool new Internet DNS-like service that will make it far harder for hackers to hide
Come learn what it would take and how you can help to one day make hackers and their malware creations something future generations learn about in history books
If you’re just tired about hiring about the problem, come learn how to SOLVE THE PROBLEM!

BIOGRAPHY

Roger A. Grimes, Data-Driven Defense Evangelist for KnowBe4, Inc., is a 36-year computer security consultant, instructor, holder of dozens of computer certifications, and author of 15 books and over 1,500 articles on computer security. He has spoken at many of the world’s biggest computer security conferences, been in Newsweek™ magazine, appeared on television, been interviewed for NPR’s All Things Considered™, the Wall Street Journal, and been a guest on dozens of radio shows and podcasts. He has worked at some of the world’s largest computer security companies, including Foundstone, McAfee, and Microsoft. He has consulted for hundreds of companies, from the largest to the smallest, around the world. He specializes in host and network security, quantum security, identity management, anti-malware, hackers, honeypots, Public Key Infrastructure, cloud security, cryptography, policy, and technical writing. His certifications have included CPA, CISSP, CISA, CISM, CEH, MSCE: Security, Security+, and yada-yada others, and he has been an instructor for many of them. His writings and presentations are often known for their real-world, contrarian views. He was the weekly security columnist for InfoWorld and CSO magazines between 2005 – 2019.

November 14th, 2025 meeting

DATE:October 14th, 2025
TIME:2:00pm to 4:00pm (PST)
VENUE:Hybrid Zoom Online meeting & In-Person at Sophos Inc. (Map)
TOPIC:Why We Resist: Uncovering the Psychological Barriers to Effective GRC
PRESENTERS: Jason Leuenberger (Presenting virtually)
RECORDING: 
For those attending in person, please take the elevator to floor 15.

ABSTRACT

GRC programs often stall or freeze, not due to lack of strategy, but because of hidden
psychological barriers. This talk explores Kegan’s Immunity to Change and Self-
Determination Theory to reveal why risk initiatives face resistance and how to design GRC
programs that actually stick.

BIOGRAPHY

Jason was previously the Head of GRC globally for Starbucks, and is now a certified
Leadership & Team coach. He brings 20+ years of experience in Cybersecurity, Risk
Management, GRC, and Privacy to his work with those in high stress roles. Day-to-day he
works with leaders & teams centered around their development goals, helping identify
obstacles that might be getting in their way, and then working to break free from anything
limiting them. He applies coaching and the social sciences to work in risk management with people and teams, understanding the most powerful component of managing risk: the
human beings involved in making those decisions.