Agenda | AKJ Associates

Presentations already confirmed include:

Education seminars

Your Perimeter is on the Front Lines: Attack Surface Reduction as a Primary Defence

Dan Andrew, Head of Security, Intruder

This education seminar will provide a deep-dive into core concepts and practical recommendations for Attack Surface Management (ASM) and Asset Discovery. Your perimeter is on the front line, and good patch management alone is not enough to protect it. You should leave this session with a better idea of how to blend ASM and Asset Discovery with Patch Management for a robust exposure management process.

We'll run through examples of attack surface risks, real-world vulnerabilities affecting internet exposed tech, and why implementing an ASM process is critical alongside patch management. It may be tempting to fall back on just patching your biggest *known* threats, but some of the biggest risks are vulnerabilities that are not yet publicly known. These threats do not have a CVSS score, and attack surface management is your primary defence. Learn how to future-proof your perimeter.

Asset Discovery is also an essential part of managing your attack surface. Keeping track of your internet exposed IPs and domains is far from trivial, and cloud environments in particular make this challenge harder. Losing track of some of your assets is no longer an embarrassing mistake - it's an unavoidable reality. We will show some examples of how this happens, and give a practical approach to asset discovery which helps you keep track, and avoid systems slipping outside of your exposure management process entirely.

Attendees will learn:

Integrating Attack Surface Management into your Patch Management process - defining ASM as a Primary Defence that's proactive, not reactive
Prioritisation considerations and why Informational risks are Criticals waiting to happen. Why not all 'Criticals' are equal, and why CVSS is not king
The importance of Asset Discovery to find Shadow IT and build a realistic view of your Attack Surface. Practical recommendations on how to approach this

From Reaction to Resilience: A New Path for Privileged Access

Fred Noordam, Regional Sales Manager Benelux, Silverfort
Al Scott, Senior Sales Engineer EMEA, Silverfort

As identity becomes the new security perimeter, organisations are realising that the most dangerous attacks no longer exploit technical vulnerabilities; they exploit identity. Modern attackers don’t break in, they log in. In this session, we explore how enterprises can move from reactive controls to proactive identity resilience.

Attendees will learn:

Understand why traditional Privileged Access Management (PAM) methods fall short in today’s evolving cyber threat landscape
Explore a modern, identity-centric approach that builds resilience at the core—moving from reactive controls to proactive defense
Learn about an agentless, continuous strategy for detecting and preventing privileged identity misuse in hybrid and cloud environments
Discover how to reduce attack surfaces, enforce adaptive access policies, and gain granular visibility—without disrupting operational workflows

From Cyber Security to Cyber Resilience

Wim Heijs, Senior Security Engineer, Commvault

During this session, Wim Heijs from industry leaders Commvault will explore the ideal response for limiting the impact of a cyberattack and creating a strategic cyber recovery and resilience plan. Discover how the right strategy can best minimise downtime and ensure business continuity and operational robustness. Cyber resilience is an ongoing process, so join us to learn how to anticipate, resist and recover from ransomware attacks, quickly restoring your Minimum Viable Company (MVC) and creating the shortest Mean Time to Clean Recovery (MTCR).

Attendees will learn: