Conference Description
Key Takeaways
- Regional cybersecurity conference serving IT and security professionals across the Midwest since 2012
- Practitioner-led sessions covering risk assessment, incident response, compliance, and emerging AI-driven threats
- Technical focus areas include cloud security, zero trust architecture, ransomware defence, and identity management
- Designed for CISOs, security managers, SOC analysts, compliance officers, and IT leaders
- CPE credits available for qualifying attendees
Introduction
The Secure Iowa Conference brings together cybersecurity and IT professionals from across the Midwest to address the operational realities of defending organisations against increasingly sophisticated threats. Now in its second decade, the conference has established itself as a practitioner-focused event where security leaders share strategies drawn from direct experience managing incidents, building security programmes, and navigating compliance requirements. The timing remains particularly relevant as organisations contend with AI-enabled attack techniques, expanding cloud environments, and regulatory frameworks that continue to evolve in scope and complexity.
About This Event
Established in 2012, Secure Iowa has grown into the state’s principal cybersecurity gathering, attracting attendees from enterprise, public sector, healthcare, education, retail, and insurance organisations. The conference takes place at The Meadows Event Center in Altoona, Iowa, and combines keynote presentations, panel discussions, breakout sessions, and vendor exhibits. Sessions are delivered by working practitioners—CISOs, IT managers, and SOC analysts—rather than exclusively by vendors or consultants, lending the programme a practical orientation grounded in day-to-day security operations.
The event offers CPE credits for qualifying participants, making it a useful professional development opportunity for those maintaining industry certifications. Networking opportunities run throughout the programme, providing space for peer-to-peer discussion on shared challenges.
Primary Discussion Topics
The conference programme spans both technical and governance domains, reflecting the breadth of responsibilities that modern security teams carry. Core technical subjects include penetration testing methodologies, incident response procedures, endpoint protection strategies, and ransomware defence. Cloud security receives substantial attention, with particular emphasis on Microsoft 365 and Azure environments—platforms that have become foundational infrastructure for many organisations but introduce configuration complexities and shared responsibility considerations that security teams must actively manage.
Identity and access management features prominently, as credential compromise remains a primary attack vector across industries. Sessions address zero trust architecture principles and their practical implementation, moving beyond theoretical frameworks to examine how organisations can incrementally adopt these models within existing environments.
The programme also addresses AI-driven threats and defences, acknowledging that machine learning capabilities are now being leveraged by both attackers and defenders. Deepfake technology and its implications for social engineering attacks represent an emerging concern that security awareness programmes must increasingly address.
Risk Management and Compliance
A distinguishing characteristic of Secure Iowa is its emphasis on risk-based decision making rather than fear-driven security spending. Sessions examine how organisations can conduct meaningful risk assessments, prioritise remediation efforts with limited resources, and communicate security posture to executive leadership in business terms. This approach recognises that security teams operate under budget constraints and must demonstrate return on investment for security initiatives.
Compliance requirements receive dedicated coverage, including SOC 2 frameworks and CMMC certification pathways. For organisations serving government clients or operating in regulated industries, understanding these requirements has become essential to maintaining market access. The conference addresses how compliance programmes can be structured to satisfy audit requirements while genuinely improving security posture, rather than treating compliance as a checkbox exercise disconnected from operational security.
Business continuity and disaster recovery planning round out the governance discussions, examining how organisations can maintain operations during security incidents and recover effectively when prevention fails.
Who Should Attend
The conference serves security and IT professionals at multiple levels of seniority and technical depth. CISOs and security managers will find strategic content addressing programme development, resource allocation, and executive communication. SOC analysts and technical practitioners can engage with sessions covering specific tools, techniques, and threat intelligence. Compliance officers benefit from regulatory guidance and framework implementation discussions. Business leaders responsible for security oversight gain exposure to current threat landscapes and defensive strategies without requiring deep technical backgrounds.
The event draws attendees from diverse sectors, including healthcare organisations navigating patient data protection requirements, educational institutions managing distributed user populations, and technology-driven businesses building security into product development lifecycles.
Vendor Ecosystem
The conference features exhibits from established security vendors and technology providers, including Microsoft, Palo Alto Networks, Fortinet, Arctic Wolf, Checkpoint, Varonis, and Rubrik, among others. These exhibits provide attendees with opportunities to evaluate security tools and services, though the programme maintains its educational focus rather than functioning primarily as a sales environment. Managed detection and response services, backup and recovery solutions, and endpoint protection platforms are well represented across the vendor floor.