Killing in the name: What your business or client wants to say to you about the security uplift

Inspired by Rage Against the Machine’s iconic anthem, this Think Tank session will unpack what the business really wants to say to security teams—but rarely does out loud. It’s raw, it’s real, and it’s the conversation we need to have.

Too often, security professionals—internal or external—roll into projects armed with frameworks, tools, and mandates, only to face silent resistance, implementation gridlock, or outright rejection. This session explores why. Using provocative lines from Killing in the Name, we’ll flip the script and listen to the business’ unspoken truths.

“Some of those that work forces, are the same that burn crosses” — How security teams, while well-intentioned, are sometimes seen as obstructive, hypocritical, or tone-deaf. Especially in MSSP or consulting roles, it’s easy to be perceived as the department of ‘no’ rather than the partner in ‘how’.

“And now you do what they told ya” — Why security professionals often come off as inflexible and disconnected, delivering top-down mandates with little business empathy. This dynamic fosters compliance theatre, not cultural change.

“Killing in the name of…” — The chilling truth: security uplift, if mishandled, can appear to threaten business goals. Slower releases, higher friction, team attrition, or lost customers. These are very real fears. When security becomes a perceived existential threat to the business, resistance is inevitable.

“F you, I won’t do what you tell me” — When your stakeholders hit this breaking point, your uplift program has already failed. Not because your controls were wrong, but because your approach didn’t land. The real failure is not technical—it’s relational.

This Think Tank will challenge attendees to reframe their role: from the enforcer of controls to the enabler of resilience. Adrian Kitto, CISO at Detexian, will guide an open, high-energy discussion on how to design and deliver a security uplift program that meets the business where it is, elevates security without killing agility, and earns buy-in from those who matter.

You’ll walk away with practical insights on:

The final 10 minutes will be open Q&A, encouraging an honest and dynamic exchange with peers.

This isn’t just another security talk. It’s a challenge to rethink how we show up—and how we lead.