Most organizations have an incident response plan. Most have never tested one against a scenario they might actually lose.
This session looks at what security operations can learn from how people actually experience and adapt to pain. Drawing on 25 years in cybersecurity, an academic background in trauma and resilience, ultramarathon training, and life with a chronic pain condition, the talk examines why most security teams rehearse only the scenarios they expect to pass, and what it would mean to train for failure instead.
Along the way we'll look at the difference between getting hit and taking a hit, what research on pain and resilience suggests about team performance under stress, how leadership behavior quietly shapes a team's capacity to recover, and why this particular motto can be as harmful as it is motivating.
Attendees will leave with a different way to think about readiness, and some practical starting points for building it.
Saturday September 12, 2026 5:00pm - 5:30pm CDT Swissôtel Chicago323 E Wacker Dr, Chicago, IL 60601, USA
