Agenda

Registration & Breakfast Networking

Chair's Welcome

►Securing the Smart City: Integrating Cyber Resilience into Madrid’s Digital Transformation

Fernando de Pablo Martín, Director General, Madrid Digital Office

• Madrid's Digital Transformation Strategy
• How cybersecurity is integrated into a city's digital transformation strategy
• City Hall Protection vs. City Asset Protection
• IT Cybersecurity and OT Cybersecurity
• Protection of People, Processes, and Things: From digital Identity to AI

►Delinea: Secure identities

Roger Gallego, Iberia Sales Manager, Delinea

• Who is Delinea?
• Authentication, authorisation, and identity governance
• Different types of identities that exist in an organisation
• Concepts used in identity security (JEP, JIT, Zero Trust)
• Business initiatives that drive privileged access management and identity protection projects in today's market

►Securing Tomorrow: Post-Quantum Cryptography and Banco Sabadell’s Strategy

Gonzalo Brandon, Principal Security Architect, Sabadell

• How quantum principles are applied to secure communications and why it matters today

• Exploring the vulnerabilities that quantum computing introduces to current cryptographic systems

• How Banco Sabadell is preparing with a roadmap toward adopting post-quantum cryptography

• Key takeaways on resilience, readiness, and the path forward in a quantum era

Networking Break

► Panel Discussion: Battling Nation-State Hackers: Winning the Cyber War

Jesús Abascal Santamaría, CISO, Eni Plenitude Iberia (Moderator) 
Jorge Lopez Hernandez-Ardieta, Global CISO, Tunstall Healthcare Group 
Flavio Carvalho, CISSP, CISO Iberia for Crédit Agricole Group

• How can organisations effectively leverage threat intelligence to proactively counter nation-state attacks? Can they?
• Are we doing enough to address supply chain vulnerabilities, or is this an overlooked entry point for nation-state threats?
• What strategic, forward-looking investments are essential for effectively countering the evolving tactics of APTs?
• In the event of a sector wide cyber-attack are we adequately prepared, and can vendors and service providers effectively handle the pressure of a coordinated response?

►Identity as a Strategic Differentiator in the Age of Cyber Threats

Jorge Sanz, Gerente - IAM, Santander

• The rising complexity of identity as both a business enabler and a critical organizational challenge
• Why identity situational awareness is essential to avoid misdiagnosis and guide maturity journeys
• Strengthening Internal Identity Governance with CIAM and Lessons Learned
• Leveraging data and AI to turn identity into a resilience-building, threat-response advantage

Lunch Networking Break

►Ransomware 3.0: Weaponizing AI for the Next Generation of Ransomware Attacks

Manit Sahib, Ethical Hacker & Former Head of Penetration Testing & Red Teaming, Bank of England

• LIVE DEMO - Inside the first AI-powered ransomware attack — See how my custom Agentic Ransomware Gang can take down a network in under 8 mins 
• First-hand insights from real-world red team ops — from legacy tech and broken access controls to the critical lack of real-world security testing
• Why traditional security fails — compliance checklists and conventional tools don’t stop modern ransomware 
• What CISOs and security leaders must do now — real-world, field-tested steps to prove your controls work before attackers do it for you

►SD-WAN Success Case in Industrial Assets

Javier Sánchez Salas, CISO, ENGIE España 
Francisco Javier Dominguez, OT Engineer, ENGIE España

• Why? Detected needs and risks

• How to approach a scalable and repeatable infrastructure

• Application in a production environment or translating theory into practice

Networking Break

►Panel Discussion: Securing Future Architectures 

Jorge Pardeiro Sánchez, Head of Security by Design, Banco Sabadell (Moderator) 
Gabriel Moliné, CISO, Carrefour Spain
Ignacio del Pozo, Cybersecurity Architect, Swiss Re 
Fernando Sanz de Galdeano, CISO, Arcano Partners
 

• How can security teams design resilient architectures to integrate and leverage emerging technologies such as AI, quantum computing, and IoT?
• What role does AI play in developing proactive rather than reactive security strategies? 
• What are the best practices for integrating AI without disrupting legacy systems and existing workflows? 
• How can organisations implement zero-trust principles and adaptive access controls to secure ever-evolving environments driven by AI and edge computing?

Chairs Closing Remarks