Agenda

Breakfast Networking Break

Chair's Opening Remarks

►Secure Your Supply Chain — A NIS2 Imperative for Resilience

Geoffrey Taylor, Information Security Officer, Nordea Asset Management

• Understanding how rising supply chain attacks threaten organisations and why this is a core focus under NIS2
• Recognising how evolving regulatory requirements are driving renewed emphasis on third-party risk management
• Adopting a proactive, risk-based approach beyond compliance to strengthen supply chain resilience

►Balancing Innovation, Stability, and Security in Modern IT Landscapes

Stefan Schweizer,Senior Vice President Sales Europe, OpenSystems

• Navigating the trade-offs between innovation speed, operational resilience, and enterprise rise
• Positioning cybersecurity as a driver of business value, trust, and competitive advantage
• Strengthening governance and accountability to meet rising regulatory and compliance demands
• Enabling scalable, secure growth across hybrid environments through platform-driven strategies

►Resilience for Everything: How to Ensure Business Continuity Across Cloud, Identity, and AI

Gary Adams, Sales Engineering Manager, Rubrik

• Ensure recoverable backups for on-premises, cloud, and SaaS data
• Protect, analyse, and restore identity systems—from AD to Entra ID and Okta
• Accelerate AI transformation while maintaining control and rolling back when necessary

►One Security Vision: Uniting E.ON’s Subsidiaries Through Standardization

Julian Dube, Information Security Officer, E.ON Digital Technology
Cornelius Schneider, Governance, Risk and Compliance Manager, E.ON Digital Technology

• How to standardize security across diverse subsidiaries with unique structures and requirements
• Applying the Central Governance Framework as the blueprint for IT and OT alignment
• Preparing subsidiaries through onboarding and central service integration
• Aligning leadership and objectives to achieve group-wide transparency and security consistency

Networking Break

►Fireside Chat: Securing Systems We can't Switch Off

Manit Sahib, Ethical Hacker & Former Head of Penetration Testing & Red Teaming, Bank of England 
Ivo Friedberg, Head of Cyber Defense & Shared Services, Austrian Power Grid AG

• Where does traditional cyber security best practice break down in industrial OT environments, and how do you design security for systems that cannot simply be stopped, rebooted, or patched in the usual way?
• In critical infrastructure environments, where cyber risk, safety, engineering integrity, and physical consequences are tightly interconnected, how do you ensure clear ownership of risk rather than it sitting ambiguously between cyber, engineering, and operations?
• What does it mean in practice to operate systems that other sectors, supply chains, and communities depend on, and how does that responsibility influence your approach to cyber resilience and OT protection?
• Have you made (or had to make) any tough or even controversial decisions around your cybersecurity or security architecture  recently?

►AI Safety First: Securing the AI Explosion with Cloudflare SASE

Sebastian Scherl, SASE GTM Lead DACH, Cloudflare

• Why AI is redefining modern network architecture

• Secure AI access — without compromising data or control

• Take control of MCP servers: Stop Shadow AI before it starts

►Knowledge is the best defense: What do you know about identities?

Andreas Mueller, Regional Sales Director CEUR, Delinea

• Identify all identities and their Risk for you within your organization!
• AI is on everyone's lips: What does AI do with your identities?
• Manage permissions for your critical accounts.
• How to easy bring knowledge into real policies and actions

Lunch Networking Break

►Third-Party & Outsourcing Risk Management – Focus on Cybersecurity and Operational Resilience

Daniele Sangion, CISO & CSO, UniCredit Bank Austria

• Risks you don’t see until it’s too late
• Cyber exposure beyond your perimeter
• Resilience that must work under stress, not just on paper
• Decisions that boards expect — and regulators will test

►Zero Trust Controls at the Endpoint

John McNamee, Sales Team Lead,ThreatLocker

• Discover how ThreatLocker applies Zero Trust at the endpoint, eliminating implicit trust by continuously verifying every application, executable, and action before authorisation
• Learn how a deny-by-default, malware-proofing approach reduces ransomware risk, stopping unauthorised software and scripts even when other security layers are bypassed
• Understand how least-privilege enforcement limits attacker capability, ensuring applications and users can perform only explicitly approved actions on enterprise devices
• Explore how granular, policy-based endpoint control safeguards against modern threats, reducing enterprise exposure to ransomware and other advanced attacks

►Ransomware 3.0: Weaponizing AI for the Next Generation of Ransomware Attacks

Manit Sahib, Ethical Hacker & Former Head of Penetration Testing & Red Teaming, Bank of England

• LIVE DEMO - Inside the first AI-powered ransomware attack — See how my custom Agentic Ransomware Gang can take down a network in under 8 mins
• First-hand insights from real-world red team ops — from legacy tech and broken access controls to the critical lack of real-world security testing
• Why traditional security fails — compliance checklists and conventional tools don’t stop modern ransomware
• What CISOs and security leaders must do now — real-world, field-tested steps to prove your controls work before attackers do it for you

►Education Seminars

Delegates will be able to choose from the following topics:

• Visibility, Governance, and Control: Protecting Enterprise Content Across Files, M365, and AI, Mert Topaloglu, Presales Manager, FileOrbis
• Balancing Innovation, Stability, and Security in Practice,  Stefan Schweizer, Senior Vice President Sales Europe, Open Systems

Networking break

►Panel Discussion: Third Party (and beyond) — Where Modern Breaches Begin

Manit Sahib, Ethical Hacker & Former Head of Penetration Testing & Red Teaming, Bank of England (Moderator) 
Nikolaus Brandstetter, Group CISO, MM Group
José Torre, CISO & Data Privacy & Compliance Manager, A1 Digital
Utz Nisslmüller, Security Specialist, City of Vienna
Gerald Schremser, Group CISO, Prinzhorn Group

• How do you identify and manage single points of failure within subcontracting and fourth-party relationships?
• When in-house AI is tightly governed, how do you manage the risks introduced by AI embedded in third-party tools and add-ons?
• What strategies are most effective for detecting and preventing shadow IT and shadow procurement?
• How do you drive cultural change to strengthen and streamline the third-party onboarding process?

Chairs Closing Remarks