Main Program

Borrowing Formula 1's shift to proactive failure analysis, this session introduces a method for testing whether security controls hold under pressure.

As cyber obligations multiply across jurisdictions, the real risk is regulatory fragmentation diverting effort into coordination rather than resilience.

A cryptographic bill of materials is the essential first step toward quantum-resilient architecture, and this session gives a practical blueprint for one.

Cross-chain financial crime increasingly mimics legitimate blockchain activity, so detection needs to shift from anomalies to behavioural context.

A practical architecture bridges security logging and data governance so organisations can identify affected individuals fast enough for reporting deadlines.

Human in the Loop and Human on the Loop are the concepts used to sort security awareness work into what AI can automate and what must stay human-led.

An AI-augmented ransomware attack made a rehearsed incident response plan irrelevant within 90 minutes, exposing gaps regulators now penalise.

Identity frameworks built for humans fail when AI agents act autonomously with legitimate credentials, and this session maps that accountability gap.

As generative AI crawlers and agentic browsers surge, websites need a framework to distinguish trustworthy automation from attackers using the same access.

Crowd-based expert forecasting turns distributed security knowledge into a calibrated, dollar-denominated risk signal for assets no scanner can reach.

Multi-year research into validated SME assessments reveals a governance blind spot where self-reported confidence still substitutes for real cyber assurance.

Infostealer logs expose far more than usernames and passwords, including session cookies and SaaS access most security teams never think to monitor.

Using Colonial Pipeline and Stuxnet as examples, this session shows why OT risk increasingly comes from architecture and dependencies, not missing controls.

Well-designed checklists for the first two, eight and twenty-four hours of a cyber incident turn chaotic decision-making into calm, coordinated response.

Detection engineering should be driven by continuous adversarial simulation as ground truth, closing the gap between telemetry and real assurance.

Anthropic Deputy CISO Jason Clinton spent more than a decade at Google, where he led Chrome infrastructure security against advanced persistent threats.

Sir Tim Berners-Lee, founder of the World Wide Web Foundation and co-founder of the Open Data Institute, on where data and privacy are heading online.