Plan. Create Playbooks. Respond.

We're expecting 350+ CISO, Manager and Analyst attendees in this concentrated yet focused community event. Join us!


About IR17

IR17 is a conference for cybersecurity professionals to learn and develop playbooks to improve Incident Response processes.

  • 30+ hours of practical training on today’s best practices in incident response topics
  • 36 breakout sessions designed for all levels of experience
  • Learn practical operations tips and best practices from industry leaders
  • Leave the conference with a developed incident response plan

Community-Driven conference for all levels of cybersecurity professionals!


Information Security Executives

Information Security Executives will have a great opportunity to share best practices in cybersecurity with their peers. IR17 will provide a collaborative space to discuss and learn how to bridge the gap between technology and business to ensure high potential in security teams.



Managers will learn techniques and develop playbooks to manage security teams in an efficient and cost-effective manner. Customized playbooks will improve security team's preparedness to cyber-incidents and attacks.

Security Analysts


Analysts will improve their knowledge about different systems logs, security alerts, and proper response to incidents to ensure their organization’s safety. Analysts will gather knowledge to implement incident response playbooks within their organizations.

IR17 Agenda



Nadhem AlFardan

Security Architect at Cisco Systems


Linus Barloon II

Director of Cybersecurity at the Office of the Sergeant at Arms, U.S. Senate


Nick Bilogorskiy

Sr. Director, Threat Operations at Cyphort


Ed Cabrera

Chief Cybersecurity Officer at Trend Micro


David Girard

Breach Detection Team Leader at Trend Micro


Lt. Gen. Rhett Hernandez (ret.)

Former Commander of the U.S. Army Cyber Command & President at CyberLens


Larry Johnson

CEO at CyberSponse


Terry McAuliffe

Governor of Virginia


Gary McIntyre

Senior Security Services Architect at Cisco Systems


Robert Novy

Deputy Assistant Director, Office of Investigations, U.S. Secret Service


Razwan Raja

Principal at XOR Security


Mike Rogers

Former Congressman (Michigan’s Eighth Congressional District)


Wasif Shakeel

Vice President - Cyber Defense at Defense Point Security


Mark Sullivan

Principal at GSIS


Kelcey Tietjen

Chief Information Security Officer at LANL


Gregory Touhill

Cybersecurity and IT Senior Executive


Joel Wallenstrom

CEO at Wickr

Why Should You Attend?

Build playbooks for your organization by working with the best in the industry

Leave with operational Incident Response plan by using the best tools

Learn how to build efficient and effective processes



Join the Incident Response Community to be a part of the conversation.

No incident response conversation should be discoverable by an adversary because it takes place on insecure mainstream communication platforms.

Get Wickr Pro
An out-of band end-to-end encrypted ephemeral channel where IR professionals share indicators, threat intel and conduct investigations.

Venue Information

The Ritz-Carlton, Pentagon City is conveniently located Close to Pentagon. This 5-star hotel is 5 minutes away from the heart of Washington, D.C.


1250 South Hayes Street
Arlington, VA 84440

The Incident Response Conference (IR17) is being held at the Ritz-Carlton, Pentagon City. IR17 has reserved a block of rooms at the Ritz Carlton Pentagon City at a group rate of $265 USD per night (plus tax). Please make sure to reserve your room now as the block will fill quickly. Reservation requests for the IR17 Annual Summit will be accepted through Monday, August 21, 2017. The block is available up to this date or until filled. Reservations requests received after August 21 are on vacancy and price availability.

Ritz Carlton

Be a Part of the New Community!

Do not miss this opportunity to be part of history! Join the cybersecurity community and be part of inspiring change in improving incident response process!

Stay Connected on  

Join the Incident Response Consortium Slack Channel to be a part of the conversation.

Register Below

IR17 is a free event. All registrants must use their corporate or government email address to attend. Any registrants using personal email accounts will be denied entry.

If you’re a consultancy, consultant, product vendor, staffing provider or service provider, please click HERE

Our Mission

IR17 is organized by Incident Response Consortium, a non-profit organization dedicated to improving the incident response process within the cybersecurity community.