Agenda

Presentations already confirmed include:


►AI in the Middle: Basic security considerations in multi-model/agentic architectures

Ben Trethowan, CISO, Brit Insurance

  • Identifying the need to perform effective supply chain security assessments upon AI providers, including consideration of product/service-level aspects.
  • Discussing the importance of effective Non-Human Identity (NHI) management, across user/workload identities, as the role of identity encapsulation/impersonation increases.
  • Highlighting the challenges of achieving pervasive security governance and observability across complex AI architectures.
  • Appreciating the potential ‘novel’ security threats introduced through AI utilisation.
  • Leveraging existing data security approaches to support the extension of data visibility/control into complex AI architectures.

►Can You Trust the AI You Buy?

Simon Brady, Event Chairman (AKJ Associates)
Andy Powell, CISO, A.P. Moller Maersk
David Varney, Partner, Womble Bond Dickinson

  • Rethinking procurement, assurance and accountability in the age of AI
  • How has the arrival of AI changed the way your organisation assesses and buys technology?
  • Have you changed where accountability sits when approving technology that incorporates AI — and who now needs to be involved?
  • Are your third-party contracts keeping pace with AI — particularly around data, security, transparency, assurance and liability?
  • Can we ever have sufficient visibility into the AI embedded across our technology supply chains — and if not, how do we manage the risks we cannot see?

►When "Vibe Coding" Collides with Production Reality: The Enterprise Security Bottleneck

Ajay Kumar, Head of AI, Salesforce

  • Where AI-generated code collides with enterprise security architecture
  • How AI-assisted development changes the application security threat model
  • How security can evolve without becoming the bottleneck

►Stop Misbehaving! Why AI agents don't follow their own rules

Etay Maor, VP Threat Intelligence and Co-Founder of Cato CTRL, Cato Networks

  • We read about AI agents performing malicious activities that they were not designed, and sometimes explicitly forbidden, to do.
  • This raises two questions: why do they do this, and how can they do this if there are guardrails.
  • In this session we will explore the different ways and reasons AI agents lose site of their true objectives, how threat actors can use this in their advantage, and what strategies and approaches organizations can take to detect, mitigate, and prevent this behavior.
  • Stop misbehaving, bad agent!