Our Article in CYBR.SEC Media "Hacker Summer Camp Is Missing the Nonprofit Sector"
As Black Hat, DEF CON, and BSidesLV wrap up in Las Vegas, the cybersecurity industry moves on to set next year’s priorities, shape new vendor roadmaps, and define what "risk" actually means.
But as the dust settles, a familiar question remains: Why is a $1.4 trillion sector—generating over 5% of U.S. GDP—still standing outside the room?
A few years ago, a conference organizer candidly told Sightline Founder Kelley Misata: "Nonprofits aren't the target audience. They can't afford the ticket to attend." Shortly after, a rare nonprofit CISO put the real problem into perspective: "I like the big conferences, but they don’t know how our business operates. How can I justify going when no one will see us?"
In her latest piece for CYBR.SEC.Media, Kelley dives into why the disconnect runs far deeper than $2,000 Briefing passes:
The Math Doesn't Add Up: Nonprofits hold some of the most sensitive data in existence, often managed by small teams with IT budgets measured in hundreds, not millions. Yet the industry's primary forums are built without them in mind.
Beyond Free Passes: Discounted tickets and CSR donations are generous, but access without understanding just leaves a nonprofit standing at the edge of a Business Hall designed for enterprise buyers.
Three Hard Questions: What would happen if conference organizers designed dedicated tracks, vendors viewed nonprofits as a real market rather than a tax write-off, and practitioners consistently spoke up for the sector?