Live Workshop: What it Takes to Respond to Cloud Incidents

When an incident hits the cloud, what really happens?

‍

Behind the dashboards and playbooks, response looks less like a checklist and more like detective work: connecting identity changes, misconfigurations, and runtime behavior to uncover what’s truly at risk.

Join James Berthoty, founder at Latio, and Stav Sitnikov, co-founder at Stream Security, for a rare look inside a real cloud investigation: the chaos, the trade-offs, and the split-second decisions that shape the outcome.

For leaders, it’s a glimpse into how response really unfolds under pressure. For practitioners, it’s a chance to see how intent is revealed from noise and what precision looks like when every move counts.

Because response is where the rubber meets the road for security teams. And only those who truly understand their environments can respond precisely.

In this session, you’ll get:

• An expert-led walkthrough of detecting an actual incident
• A clear picture of what cloud response looks like in the real-world
• What teams can do to prepare and communicate a response plan for their environment

‍