Queen City Conference 2026

Attendees, exhibitors & solutions

Who this event is for

Industry trends

Key trends shaping this market and its wider industry.

Hotel tiers

A range of accommodation options near the venue and across key areas.

Local transport

Get around the city with these convenient transport options.

Frequently asked

Glossary

1

SIEM

Security Information and Event Management. A platform that collects and correlates logs and alerts from across an IT environment so security teams can detect and investigate incidents. At Queen City Con, SIEM comparisons are relevant to SOC teams evaluating detection stacks.

2

SOAR

Security Orchestration, Automation, and Response. Tooling that connects security products and automates repetitive response steps, such as enriching alerts or opening tickets. Workshop discussions often cover where automation helps and where analyst judgment remains essential.

3

EDR / XDR

Endpoint Detection and Response / Extended Detection and Response. Security tools that monitor endpoints and other telemetry for malicious behavior and support investigation and containment. Exhibitors at cybersecurity events commonly demonstrate EDR and XDR workflows.

4

Zero Trust

A security model that requires continuous verification of users, devices, and access rather than trusting anything inside a network perimeter. Sessions may cover identity, segmentation, and policy enforcement in Zero Trust programs.

5

MFA

Multi-Factor Authentication. A login control that requires two or more independent credentials, such as a password plus a hardware token or authenticator app. MFA is a baseline control in most incident-prevention conversations.

6

Incident response

The organized process of detecting, containing, eradicating, and recovering from a security incident, followed by lessons learned. Hands-on workshops at Queen City Con may use tabletop or lab scenarios to practice these steps.

7

Threat hunting

A proactive, analyst-led search for hidden attacker activity that automated tools may have missed. Threat hunting usually starts with a hypothesis and uses telemetry, endpoint data, and network evidence.

8

Penetration testing

An authorized simulated attack against systems, applications, or networks to find exploitable weaknesses before criminals do. Pen-testing firms and red-team consultants often exhibit at cybersecurity conferences.

9

Tabletop exercise

A discussion-based simulation in which participants walk through a fictional incident to test decision-making, communication, and escalation paths. These exercises are common in conference workshops because they build practical response muscle.

10

SOC

Security Operations Center. The team and facility responsible for monitoring, detecting, and responding to security events, often around the clock. SOC managers attend events like Queen City Con to compare staffing models, tooling, and automation.

11

MITRE ATT&CK

A publicly maintained knowledge base of adversary tactics and techniques based on real-world observations. Security teams use it to map detections, prioritize coverage, and structure threat-hunting exercises.

12

CVSS

Common Vulnerability Scoring System. A standardized way to score the severity of software vulnerabilities. Vulnerability-management and patching discussions often reference CVSS scores alongside business context.