BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.romhack.io//romhack-camp-2026//speaker//LLAYR7
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-romhack-camp-2026-HETQC3@cfp.romhack.io
DTSTART;TZID=CET:20261003T124000
DTEND;TZID=CET:20261003T130000
DESCRIPTION:Over the years as a cybersecurity pre-sales engineer\, I've had
  the privilege of seeing organizations prepare to defend themselves agains
 t sophisticated attackers\, ransomware gangs\, zero-days\, and nation-stat
 e threats. Sometimes\, however\, the biggest security problem was much clo
 ser to home.\nA company wants NAC\, but there's no IdP. Another wants PAM 
 while every workstation shares the same local administrator password. Some
 one wants an anti-spam solution while SPF\, DKIM and DMARC are not configu
 red properly. I've encountered passwords stored in passwords.txt\, environ
 ments where every machine is administered individually.\nThese aren't just
  funny war stories. They reveal a recurring problem: security products hav
 e prerequisites.\nNAC and EDR assume you can manage your endpoints. Vulner
 ability management assumes you know what assets you have. SIEM assumes you
  have useful logs and someone who can act on them. Zero Trust assumes you 
 have some idea who your users\, devices and applications actually are.\nTh
 is talk is a collection of strange\, surprising and sometimes painful less
 ons from the security pre-sales trenches\, and an argument for asking an u
 ncomfortable question before buying the next security product:\n“What sh
 ould we fix first?”\nBecause sometimes the most useful thing a security 
 vendor can tell you is:\n“You don't need our product yet.”
DTSTAMP:20260921T190418Z
LOCATION:STAGE 2 (Ghost in the Shellcode)
SUMMARY:You Don't Need a Security Solution - Max Derkach
URL:https://cfp.romhack.io/romhack-camp-2026/talk/HETQC3/
END:VEVENT
END:VCALENDAR
