Agenda

Presentations already confirmed include:


►Opening Keynote 

Félix Antonio Barrio Juárez, General Director, INCIBE


►Risk Management: Top-Down Risk Approach

Ramon De La Iglesia Vidal, Global Head of GRC, Santander Consumer Finance

  • Methodologies: Top-Down vs Bottom-up approach 
  • Risk management for compliance in the CISO arena 
  • Developing a method that management understand and embrace
  • So what we should be worried about? 

►From reactive intelligence to intelligence as a cornerstone of the cybersecurity strategy 

Marina Nogales, Director of Threat Intelligence, Unilever

  • Evolution of the cybercrime environment 
  • Exploration of classic models of cyber intelligence service in companies – not every foot fits the same shoe! 
  • Equipment, Processes, Technology… Navigating the chaos. 
  • Pathway to success: clear objectives, transversal function. Knowing the needs of the business and collaborating with other teams inside and outside of cyber

►Panel discussion: The role of the CISO as cyber-regulation grows

Laura Parra, Global CISO, Cellnex Telecom (Moderator)
Alberto López, CISO & CIO, Solaria Energía y Medio Ambiente 
Jesús Alonso Murillo, Group CISO, Línea Directa
Jesús Mérida Sanabria, CISO, Iberia

  • What are your biggest challenges in the day-to-day battle of protecting your customers and organisation? What threats worry you the most?
  • Security versus resilience: aligning security priorities with organizational objectives whilst striving for compliance. How do you prioritize?
  • What strategies do you have in place to ensure cloud security and manage associated risks?
  • With the regulatory environment continually evolving, and with new data protection laws and cybersecurity regulations being introduced, how do you ensure your organization remains compliant with both local and international regulations, and what challenges does this bring?
  • How do you comply in an affordable and secure manner?
  • With increasing personal liability for CISOs under new regulations — including potential fines and criminal charges — how do you balance legal accountability and personal responsibility? Is the job of the CISO becoming too dangerous?

►Panel discussion: Delivering an efficient Cybersecurity function

Ivan Sanchez Lopez, Group CISO, RSI Group (Moderator) 
Francisco García Lázaro, Corporate Information Security Sr. Director, Palladium Hotel Group 
Javier Sánchez Salas, CISO, ENGIE España

  • How to setup an efficient cyber team
  • Key stakeholders
  • Organizational challenges
  • Efficiency opportunities: AI, automation, vendor consolidation, product vs platform, etc
  • Cybersecurity ROI

Education seminars


It Started with a Cookie: Zero Trust & the Rise of Session Hijacking


Alfonso Hermosillo, Senior Solutions Engineer, SpyCloud

Learn how to go beyond traditional credential monitoring and implement continuous Zero Trust using enriched cybercrime telemetry.

Attendees will learn:

  • What security teams can learn from recent high-profile breaches where cybercriminals leveraged stolen session cookies in targeted attacks
  • Why it’s important to feed your Zero Trust policy engine with cybercrime telemetry for continuous exposure monitoring and reduced risk of session hijacking
  • How cybercrime telemetry aligns with popular compliance and risk management frameworks, including DORA, NIS2, and NIST CSF
  • How SpyCloud integrates with your existing security tools for automated identity exposure remediation