From Attack Surface to Risk Surface Management | Sumedh Thakar, CEO of Qualys | ROCon 2025 Keynote

Filmed live at ROCon 2025 in Houston, this keynote from Qualys CEO Sumedh Thakar dives into the evolution of cybersecurity from Attack Surface Management (ASM) to Risk Surface Management (RSM) — a holistic, business-first approach to managing cyber risk. In this session, Sumedh challenges traditional security thinking and explains how organizations can operationalize risk, unify IT and security teams, and communicate cybersecurity’s business impact more effectively. You’ll learn: Why attack surface visibility isn’t enough without business context How to move from vulnerability detection to Risk Operations The role of AI and Agentic AI in modern cyber defense How to measure, communicate, and eliminate risk Why the Risk Operations Center (ROC) is the future of cybersecurity If you’re a CISO, cybersecurity leader, or IT executive, this talk provides a roadmap for managing risk at the speed of business. Learn more: https://www.qualys.com