The Boston Security Meetup is a community gathering built for hackers and information security professionals: a place to meet like-minded people, trade ideas, and talk through real problems in a relaxed setting. Bishop Fox is glad to be part of the July edition, helping fuel the kind of honest, practitioner-driven conversation this community does well.

Ori Zigindere will be presenting on Continuous Threat Exposure Management: what it actually means in practice, how it differs from traditional vulnerability management, and how organizations are using it to get a sharper, more continuous view of their attack surface.

Join us for an evening of great conversations, food, and drinks; with post-event drinks after the session around 8:30 PM. Whether you want to dig into the talk, swap war stories, or just connect with people doing interesting work, the team will be around all night. Come find us.

For more details, visit: Boston Security Meetup

"From Spreadsheets to Continuous Risk Reduction: Understanding CTEM in Practice"

Speaker: Ori Zigindere, Staff Technical Product Manager, Bishop Fox

Date/Time: Wednesday, July 16, 2026 | 7:00 PM ET

Abstract:

As organizations face increasingly complex attack surfaces, traditional vulnerability management alone is no longer sufficient to prioritize and reduce cyber risk. Continuous Threat Exposure Management (CTEM), introduced by Gartner, provides a strategic framework for continuously identifying, validating, prioritizing, and remediating exposures that are most likely to impact the business.

This presentation will provide an overview of CTEM, including its core phases; scoping, discovery, prioritization, validation, mobilization and explain how CTEM differs from conventional vulnerability management programs. Attendees will learn how organizations are using CTEM today to gain a more comprehensive understanding of their attack surface by combining asset discovery, vulnerability intelligence, attack path analysis, security validation, and risk-based prioritization.

This talk is aimed at security leaders, practitioners, vulnerability management teams, and risk management professionals looking to move beyond spreadsheet-driven approaches toward a continuous, business-aligned model for risk reduction.