Selective Encryption to Protect Sensitive Data at ISC2 Security Congress

MENLO PARK, CA, UNITED STATES, October 16, 2026 /CourierPR/ -- The session will take place on Tuesday, October 27, 2026, from 10:35 to 11:05 a.m. MT in the Expo Hall Theater 3 at the Gaylord Rockies Resort & Convention Center in Aurora, Colorado.

WHAT: At the conference, Confidencial’s co-founder and CTO, Karim Eldefrawy, will demonstrate how selective encryption protects sensitive information within enterprise documents and AI data pipelines. Joe Spinoso, Director of Security Infrastructure at Orrick, will discuss how redefining critical assets changes security priorities and investment decisions.

WHO: - Karim Eldefrawy, Co-founder and CTO, Confidencial - Joe Spinoso, Director of Security Infrastructure, Orrick, Herrington & Sutcliffe LLP

MEDIA OPPORTUNITIES: Eldefrawy will be available onsite for media interviews and full product demonstrations. Topics include: - How encrypting sensitive fields, cells, and paragraphs limits the exposure of confidential information in stolen or misdirected files. - Maintaining granular access controls, revoking access after sharing, and tracking access as documents move to partners and other environments. - Protecting confidential information while preserving the surrounding context needed for authorized AI workflows. - Addressing today’s exposed data while preparing for future cryptographic threats, including “harvest now, decrypt later,” through crypto-agile architecture.

Confidencial protects sensitive information within enterprise documents, files, and AI data pipelines. Its patented selective protection technology, developed through DARPA-funded research at SRI International, ensures only the sensitive parts of a file remain locked, while authorized users and AI tools continue to work with the rest. Protection, access controls, and audit trails travel with the data, and access can be revoked after a file has been shared.

During the session, Eldefrawy will show how an attacker’s access to a stolen document is significantly limited, thanks to selective encryption. This approach challenges security leaders to rethink their strategies beyond breach prevention and focus on the broader implications of data exposure. As data moves across email, cloud platforms, external partners, and AI tools, protection must travel with the information itself, ensuring that sensitive content remains secure even when the document is shared or accessed by unauthorized parties.

The session aims to highlight that stopping a breach is only half the battle. The real challenge lies in what attackers can do with the data they steal. By implementing selective encryption, organizations can mitigate the damage caused by data breaches, ensuring that sensitive information remains protected while maintaining the usability of the rest of the document.