Blue Team Con 2026

1:30pm CDT

Saturday September 12, 2026 1:30pm - 1:55pm CDT

If you've ever game-mastered a tabletop campaign, you already understand AI governance: your world has rules that can't bend, your players will find every loophole you didn't think of, and saying "no" all the time loses the table. The same pattern is playing out right now in every organization handing AI agents write access to production systems, and the solution is the same: make the governed path the apparent path.

Your employees are already using AI agents to write code, modify configurations, and execute shell commands, many without understanding what they're authorizing. Traditional security controls are blind to this: EDR doesn't flag an AI agent opening a port, DLP doesn't catch a model exporting records to a temp directory, and change management doesn't have a ticket type for "the AI refactored our auth module."

The instinct is to restrict access or schedule another training. Restriction drives usage underground. Classroom training can't keep pace with adoption. But training delivered inside the tool itself, guidance at the moment of risk, maintained by AI from current documentation; actually sticks, because users encounter it when they need it, not months before.

This talk presents a practical approach drawn from field experience building and testing a governance framework for AI agents: make the governed path easier than the ungoverned one, and embed the education in the guardrails themselves. When your secure pipeline is less friction than the alternative AND teaches users why it matters in context, you get compliance and competence as side effects of normal usage.

We'll cover why current tooling misses AI-driven changes, a field incident where a governance system silently failed and then told the AI the failure was intentional, experiments in securing MCP, and actionable takeaways you can apply regardless of which AI tools your organization runs.

Speakers

Johnathon Rhoades

Founder, (RIT) - Rhoades Institute of Technology

Johnathon Rhoades founded and operates the Rhoades Institute of Technology (RIT), where he oversees development, legal filings, outreach, event planning, and much of the organization’s day-to-day administration, as well as all current technical efforts. Before launching RIT, his... Read More →

Saturday September 12, 2026 1:30pm - 1:55pm CDT
Swissôtel Chicago 323 E Wacker Dr, Chicago, IL 60601, USA

Talk Track 3