Conference Description
Key Takeaways
- Explores the intersection of generative AI and enterprise cybersecurity operations
- Addresses data lifecycle management challenges created by AI system access
- Examines human-led, AI-supported models for Security Operations Centers
- Designed for cybersecurity practitioners, SOC teams, and technology leaders
- Provides networking opportunities within the Chicago cybersecurity community
Introduction
The ISSA Chicago August Chapter Meeting brings together cybersecurity professionals to examine one of the most pressing operational challenges facing enterprise security teams: the effective integration of artificial intelligence into security workflows. As organisations rapidly adopt generative AI tools across their environments, security leaders must grapple with fundamental questions about data governance, analyst workflows, and the appropriate balance between automation and human judgment.
This in-person gathering features two expert presentations addressing complementary aspects of the AI-security relationship. The timing reflects broader industry concerns, as security teams increasingly encounter AI systems that have access to vast quantities of enterprise data while simultaneously being asked to deploy AI-powered tools within their own operations.
Data Lifecycle Management in the Age of Generative AI
The first presentation tackles a governance challenge that has gained urgency with the proliferation of generative AI in enterprise environments. When AI systems can access, process, and potentially expose organisational data, the consequences of poor data hygiene become significantly more severe. Outdated files, excessive permissions, and forgotten data stores that previously represented manageable risks now present expanded attack surfaces and compliance concerns.
Generative AI has effectively created what the session describes as the strongest argument yet for rigorous data lifecycle management. Organisations that have deferred data classification, retention, and disposal decisions now face AI systems that may surface sensitive information in unexpected contexts. The presentation examines practical approaches to governing enterprise data when AI access fundamentally changes the risk calculus.
Rethinking the Role of AI in Security Operations
The second session addresses the operational side of AI adoption within Security Operations Centers. Rather than positioning AI as a replacement for human analysts, the presentation advocates for a human-led, AI-supported model that leverages the distinct strengths of each.
AI demonstrates clear value in specific SOC functions, including initial alert triage, data enrichment, and pattern detection across large datasets. However, the technology also introduces risks that security teams must actively manage. Automation bias—the tendency to over-trust automated recommendations—can undermine the critical thinking that effective security analysis requires. Questions of accountability become more complex when AI systems influence or make security decisions.
The session provides practical frameworks for integrating AI capabilities while preserving human judgment where it matters most. This balanced approach acknowledges both the efficiency gains AI can deliver and the limitations that make human oversight essential.
Who Should Attend
The meeting serves cybersecurity practitioners across experience levels, from analysts working directly in security operations to architects designing enterprise security programmes. SOC team members will find particular relevance in the discussion of AI integration models, while security leaders can apply the governance frameworks to organisational strategy. Technology professionals exploring AI adoption in security contexts, along with students and military veterans building careers in cybersecurity, will benefit from the practical insights and networking opportunities the chapter meeting provides.
Community and Professional Development
Beyond the formal presentations, the ISSA Chicago chapter meeting facilitates connections among cybersecurity professionals in the region. Dedicated networking time allows attendees to exchange perspectives on the challenges discussed during the sessions and build relationships within the local security community. This combination of expert-led education and peer interaction reflects the chapter meeting format’s enduring value for professional development in a rapidly evolving field.