Program

Automating tier-one triage didn't remove human error from security operations, it just relocated it upstream into detection logic nobody revisits.

Frontline firefighting experience shows why calm leadership, rigorous training, and regular tabletop exercises decide how teams perform during cyber incidents.

A breakout session on how seniority bias and credentialism keep young cyber talent invisible, traced through one 15-year-old's path from locksport to the stage.

Two contrasting real-world Essential Eight rollouts, one well-funded and one not, reveal why planning and roadmap discipline matter more than budget.

Scenario analysis stress-tests four cyber security service models against AI, geopolitical and social shifts to prepare for an unpredictable future.

Now-patched vulnerabilities in the popular BBOT attack surface mapping tool show how offensive security software can expose the pentesters using it.

Lessons from hacking a submarine's control systems shape five principles for communicating technical risk in terms executives will act on.

New automated decision-making disclosure laws demand a reasoning chain from autonomous agents, and this session presents primitives for runtime governance.

Breaking a malware build into small, legitimate-looking requests across multiple LLMs reliably bypasses safety refusals, a gap current safeguards don't close.

Modern macOS trust decisions are enforced through a distributed web of code-signing, entitlements and policy daemons most defenders treat as isolated controls.

AI adoption is outpacing ISMS updates, and this session, from an auditor's view, sets out what to change before your next surveillance audit.

Thirty common mistakes new SOC analysts make in their first month reveal the gap between studying security theory and triaging live alerts under pressure.

Australian cyber threat intelligence practitioners share war stories, common misconceptions, and what actually builds an impactful CTI practice.

Three human risk management practitioners debate why awareness training and phishing metrics fail to change behaviour, and what actually works instead.

A shared responsibility model maps AI security accountability across deployment tiers, showing which risks are yours and which belong to vendors.

Pitting autonomous AI agents against each other in Active Directory shows defenders lose not from weak models but from withholding environment context.

A cyber security leader's journey from early hardship to a career in IT distribution, cloud hosting and security leadership shows how reinvention works.

A panel on how combining risk quantification with continuous exposure management grounds cyber investment in validated, exploitable exposure data.

Borrowing Formula 1's shift to proactive failure analysis, this session introduces a method for testing whether security controls hold under pressure.

As cyber obligations multiply across jurisdictions, the real risk is regulatory fragmentation diverting effort into coordination rather than resilience.

A cryptographic bill of materials is the essential first step toward quantum-resilient architecture, and this session gives a practical blueprint for one.

Cross-chain financial crime increasingly mimics legitimate blockchain activity, so detection needs to shift from anomalies to behavioural context.

A practical architecture bridges security logging and data governance so organisations can identify affected individuals fast enough for reporting deadlines.

Cyber practice lacks medicine's clinical diagnostic method, and 25 years of case studies show threat intelligence often answers questions nobody asked.