Agenda

Breakfast networking and registration 

Chairman's Welcome

►Mythos and Beyond: What the Next Generation of AI Means for Security, Sovereignty, and Business

Rob Flanders, Head of Threat and Incident Response, BAE Systems

• The changing AI landscape: the latest advances in AI models, the impact of US export controls, and how policy is shaping global AI development.
• Emerging security challenges: how increasingly capable AI models are changing the cyber threat landscape, including the path towards the much-discussed concept of Recursive Self-Improvement (RSI).
• Implications for the UK and Europe: what a US-centric AI ecosystem means for competitiveness, sovereignty, and the capabilities organisations will need to succeed.

►Trust, then autonomy: A new framework for evaluating Agentic AI in security

Chris Vaughan, Security Engineer, Sublime Security 

• Over the past 18 months, the security industry has sprinted from "AI-assisted" to "autonomous". At most large scale industry conferences you attend in 2026, the show floors are almost entirely dedicated to agentic AI, yet the evaluation rigor applied to those products has barely changed. This talk will cover:
• How to identify the gap between the autonomy a vendor markets and the autonomy they actually deliver, and why that gap is more dangerous in security than anywhere else
• A practical autonomy framework for security AI (the equivalent of SAE levels) and why advancing from Level 1 to Level 4 is a trust relationship between vendor and customer, built on transparency, explainability, and auditability, rather than a product roadmap
• What rigorous AI evaluation actually looks like: benchmark design, test set construction, and why a vendor who can only show results (not methodology) is telling you something important
• Six questions to ask any security vendor that claims to have autonomous AI, which cannot be answered with marketing speak

►The Six-Hop Debrief: What One Real Breach Teaches Us About Standing Privilege

Lee Elliott, Director of Solutions Engineering, BeyondTrust

• In this session, BeyondTrust’s Lee Elliot walks you through a real supply chain breach involving two companies, six hops, and three identity classes. We will show how standing privilege, not exploits or malware, let attackers move from a compromised laptop to full production access, and how that risk could have been eliminated with zero standing privilege.
• See how a single compromised endpoint escalated into a six-hop breach across two companies without any exploit, malware, or privilege escalation. Everything worked as designed.
• Learn why standing privilege, not identity type, is the real attack surface, whether the identity is human, machine, or AI.
• Understand the difficult questions you need to ask to assess your identity and access posture. 
• Learn how to reach zero standing privilege with the visibility, intelligence, and enforcement needed to shrink your identity attack surface

►Panel Discussion: Capacity or Efficiency – What's the Real Issue in Cyber Defence?

Simon Brady, Event Chairman, Moderator
Tom Beshaw, Head of Security Operations & Threat Management, Johnson Matthey
Leroy Stanford, Director of Cyber Security, Ocado Group
Chris Morris, Senior Sales Engineer, Vega

• For years, cybersecurity has been framed as a capacity challenge: more threats, more alerts, more tools, and never enough people or budget. But what if the real constraint isn't capacity at all? What if organisations are failing to get the most from the people, platforms, and data they already have?
• Are security teams truly capacity constrained, or is operational inefficiency the bigger barrier to improving cyber resilience?
• Where is the greatest source of inefficiency today—people, processes, technology, or fragmented data?
• How should organisations measure efficiency in cyber defence, and what metrics best demonstrate a meaningful reduction in cyber risk?
• If you had one strategic investment over the next three years, would you prioritise increasing capacity or improving efficiency—and why?

► Education Seminar 1

Delegates will be able to choose from a range of topics:

• From the Front Lines: A Five-Time CISO's 5 Lessons — and How AI Rewrites the Rules, Niall Browne, CEO and Co-Founder, AIBound
• Humans Are the Weakest Link? Think again, Etay Maor, VP Threat Intelligence and Founding Member of Cato CTRL, Cato Networks
• Own, Outsource, Automate, Eliminate: A Framework for a successful Passwordless Implementation, Marta Góral, Head of Partner Sales, UK&I, OneSpan and John Gilbert, Director, Red Lodge Consulting Ltd
• The Agentic Enterprise: Securing Humans, Data, and AI, Alistair Mills, Director, Sales Engineering, Proofpoint
• Built, Deployed, Compliant: How to Map Your AI and Avoid Regulatory Fines, Andrew Dreier, Manager of Sales Engineering, Varonis

Networking Break

►The Deadline Moved. The Declaration Didn't.

Punit Bafna, Head of Cybersecurity & Compliance, Haleon

• What actually changed under the AI Act amendments in July 2026, and which obligations were never deferred at all?
• Why standard identity controls (recertification, joiner-mover-leaver, segregation of duties) fail structurally when the identity is an autonomous agent
• Where the current control frameworks stop short, and what evidence a board realistically needs before declaring controls effective

►Agentic AI, Business Psychology and the New Resilience Risk

Richard Cassidy, International CISO, Rubrik

• As agentic AI enters live enterprise environments with minimal human oversight, autonomous decision-making is rapidly outpacing traditional controls—exposing critical vulnerabilities across data governance, supply chains, and operational accountability. 
• In this cybersecurity event presentation, Rubrik’s EMEA CISO, Richard Cassidy, unpacks what "going rogue" actually looks like in real-world AI deployments. 
• Attend this session to gain practical strategies for detecting, containing, and governing machine-speed AI risks before operational control slips away.

►Meet Your Rogue Agents

Scott Shields, Enterprise Sales Engineer, Delinea

• Every headline AI agent incident this year shares the same root cause: the database deleted in nine seconds, the outage from an agent left to "fix" its own problem, the AI that kept finding new ways to act after being shut down.  Nothing was hacked. Nothing broke. Every action was taken with credentials the agent was, technically, allowed to use.
• The uncomfortable truth for security leaders is not that agents might go rogue, its recognising they are rouge by design without appropriate controls.  
• This reframes agentic AI as an identity and access problem, not a model-safety one.
• This session will cover some real world learnings from the field and offer some practical insights to help you securely prepare for the agentic era.

►Empowering Cyber Defence: Fighting Against The AI Bot Threat

Tim Ayling, Vice President -  Cyber Solutions Specialists, Thales

• Artificial Intelligence is revolutionizing the cybersecurity landscape, enabling organizations to detect threats faster, respond to incidents more effectively, and stay one step ahead of adversaries. 
• Join Thales for an in-depth exploration of how AI solutions are shaping the future of cyber defence. 
• Our experts will examine real-world examples, highlight the benefits and challenges of integrating AI into existing security ecosystems, and showcase the latest AI advancements from Thales that deliver enhanced threat detection and automated response. 
• Learn how you can leverage AI to proactively secure your organization’s digital assets and adapt to the rapidly evolving threat landscape. 
• This interactive session will provide valuable insights for cybersecurity leaders, IT professionals, and anyone interested in building AI-powered resilience.

► Education Seminar 2

Delegates are invited to attend:

• Smaller Surfaces. Smaller Spend. Controlled Agents. Controlled Runtimes, Richard Meeus, Senior Director Security Technology and Strategy, EMEA, Akamai
• Million Dollar Conversation: What happens when the criminal isn't breaking into the conversation, they're already in it?, John Mc Loughlin, Group CEO, J2 Software
• When the attacker is an AI Agent, Ian Dutton, EMEA Sales Engineering Lead, LMNTRIX
• AI Agents are the Ultimate Insiders: Securing AI and the Humans Behind It, Alexander Decarne, Sr Product Marketing Manager, Threat Protection, Mimecast
• From Secure Email to Brand Recognition with BIMI, Faisal Misle, Senior Lead Engineer, Customer Success, Red Sift

Lunch and Networking 

►Fireside Chat: Cybersecurity at a Tipping Point – The Future of the Security Stack

Simon Brady, Event Chairman (Moderator)
Polina Korosteleva, Principal Security Architect, Trainline
Jonathan Dean, Enterprise Architect – Operational Technology, Southern Water

• Are the largest security platforms pulling away, and can smaller vendors keep pace with the speed and investment AI demands?
• Are large organisations moving from best-of-breed point solutions towards fewer, broader platforms? Are we at a genuine tipping point?
• How large organisations buy security technology today: What matters when evaluating new technology: innovation, integration, resilience, cost and vendor longevity?
• In an AI-driven world, where will specialist vendors still have an edge, and what will the security stack of the future look like?

►Evolving Security in a Changing Threat Landscape

Rob FitzSimons, Sales Engineer, Huntress

• As we continue to see, organisations continue to be targeted by attackers who do not need to break in, they simply log in using stolen credentials, compromised identities, or trusted tools.
• This session explores how organisations can move beyond alert fatigue and respond to the threats that matter most.
• We will discuss the modern attack chain, the importance of detecting initial access and lateral movement early, and how human-led threat hunting and security posture management can help protect organisations and strengthen resilience around the clock.

►Anti-Heroes! Why AI Goes Rogue

Michael Adjei, Director, Systems Engineering, Illumio

• We are now in the agentic AI era, but what happens when your supposedly trusted agent turns rogue? Why does that even happen? And more importantly, could your organisation be the next victim?
• The misalignment of increasingly capable AI models continues to be a big challenge for the major AI vendors.
• This means that the consumer organisations who are using these models could potentially be harbouring dangerous rogue agents deep inside their corporate networks — and the risk becomes more evident with each new reported frontier release.
• So, in this session, Michael Adjei, Director of Systems Engineering at the breach containment company, Illumio, will take attendees through the principles of: why AI agents go rogue; how rogue AI is amplifying existing foundational cyber problems; what it means for cyber and business resilience; and rethinking defence in-depth for this new agentic AI era.

►Zero Trust Controls at the Endpoint

John McNamee, Sales Manager, ThreatLocker

• Discover how ThreatLocker applies Zero Trust at the endpoint, eliminating implicit trust by continuously verifying every application, executable, and action before authorisation
• Learn how a deny-by-default, malware-proofing approach reduces ransomware risk, stopping unauthorised software and scripts even when other security layers are bypassed
• Understand how least-privilege enforcement limits attacker capability, ensuring applications and users can perform only explicitly approved actions on enterprise devices
• Explore how granular, policy-based endpoint control safeguards against modern threats, reducing enterprise exposure to ransomware and other advanced attacks

► Education Seminar 3

Delegates will be able to choose from a range of topics:

• You Don’t Need More Security Tools. You Need More Control., Rob Gupta, Founder and CEO, ConnectProtect
• Key findings from The Annual Cybersecurity Attitudes and Behaviours Report 2025/26, James Beary, Sales Director, CybSafe
• Inside the Inbox: Anatomy of an Email Attack, Chris Vaughan, Security Engineer, and Ed Maunders, Security Solutions Engineer, Sublime Security 

Networking Break

►Panel Discussion: The New Security Baseline: People, Platforms and Priorities

Simon Brady, AKJ Associates, Moderator
Katie Wood, Information Security Architect, Bibby Financial Services Limited
Soraya Viloria Montes de Oca, Group Information Security Officer, Harvey Nichols
Raam Ratnam, Managing Director, EMEA Corporate Ratings, London, S&P Global
Wisdom Aveh, Head of Information Security & Data Protection Officer, Kurt Geiger

• Which cybersecurity capabilities must organisations retain in-house, and which can be safely outsourced or automated without undermining resilience?
• What does a minimum viable security technology stack look like in 2026, and which tools, controls, and processes no longer justify the operational burden they create?
• What framework should CISOs use to decide which risks to mitigate, transfer, automate, or formally accept when security demand exceeds available capacity?

►Rise of Autonomous Attacks (Live Mythos-Style Hack)

Manit Sahib, Ethical Hacker & Former Head of Penetration Testing & Red Teaming, Bank of England

• See how autonomous AI agents are now running the recon and exploitation phases of real-world attacks. and what that means for boards, CISOs, and red teams in 2026
• A first-hand look at how agentic offensive AI works in practice, driven by intent, not step-by-step instruction
• See AI agent run reconnaissance against a controlled target, identify exploitable assets, and demonstrate the early stages of a kill chain in real time
• A walk through real-world findings from recent engagements including critical vulnerabilities discovered by AI agents that automated scanners had missed for over 18 years
• What defenders need to know: why traditional, control-based security models are structurally insufficient against goaldriven autonomous attackers, and the three specific actions every CISO should be taking before this becomes the default attacker model

Chairman's Closing Remarks

Drinks Reception & Networking, Kindly Sponsored by Vega.io