Agenda

►What comes after Zero Trust Architecture?

Herbert Leenstra, Security Architect, Rabobank

• Understand the most impactful trends of the 14 identified technology trends that are driving the evolution beyond traditional Zero Trust Architecture.
• Discover the concept of the Security Immune System (SIS) and how AI, automation, and PQC are transforming security architectures.
• Gain practical insights to assess the impact of these trends and incorporate them into your organization's future security strategy and architecture roadmap.

►Has the West Won the Cyber War?

William Dixon, Senior Associate Fellow, Royal United Services Institute, & Associate Fellow, GLOBSEC

• Has the West Won the Cyber War?: How Russia, Iran and other authoritarian states pioneered cyber warfare — and why the West thought they had the advantage.
• The West’s Hidden Advantage: The Market: How capital, talent, technology and commercial innovation have become an unexpected source of Western cyber power.
• The China Test: Has the West really won? China combines authoritarian state power with a vast technology ecosystem — putting the West’s greatest advantage to the test.
   

►Rise of Autonomous Attacks (Live Mythos-Style Hack)

Manit Sahib, Ethical Hacker & Former Head of Penetration Testing & Red Teaming, Bank of England

• See how autonomous AI agents are now running the recon and exploitation phases of real-world attacks. and what that means for boards, CISOs, and red teams in 2026.
• A first-hand look at how agentic offensive AI works in practice, driven by intent, not step-by-step instruction.
• See AI agent run reconnaissance against a controlled target, identify exploitable assets, and demonstrate the early stages of a kill chain in real time.
• A walk through real-world findings from recent engagements including critical vulnerabilities discovered by AI agents that automated scanners had missed for over 18 years.
• What defenders need to know: why traditional, control-based security models are structurally insufficient against goal-driven autonomous attackers, and the three specific actions every CISO should be taking before this becomes the default attacker model.

►Navigating the Ripple Effect: How New Cyber Regulations Shape Corporate Strategy

Barbara Pires, Chief Information Security Officer, Booking Holdings Financial Services

• I will add these as the bullet points for now as I need to add something to the agenda but feel free to edit and we can update accordingly.
• Understand how emerging cyber regulations reshape enterprise risk appetite, investment priorities, operating models, and board-level decision-making.
• Explore how regulatory change extends beyond compliance—affecting supply chains, third-party risk, incident response, resilience, M&A, and competitive positioning.
• Identify how leading organizations can move from reactive compliance to proactive cyber governance, using regulation as a catalyst for resilience, trust, and strategic differentiation.

►Beyond Compliance: From Regulation to Resilience

Simon Brady, Event Chairman (Moderater)
Lalit Bhakuni, Senior Leader Cyber Defense, ABN AMRO Bank
Eleonora Petridou, CISO, RIPE NCC

• What has changed your organisation with NIS2, DORA or the CER Directive, and what lessons have you learned from implementation?
• Which metrics or indicators do you use to demonstrate cyber resilience to your board and regulators and which have you stopped using because they don't drive better decisions?
• How are you preparing for the next wave of cyber regulation and emerging threats?