Program

Lessons from Australia's aviation sector show how shared threat information and joint exercises build collective resilience against cascading incidents.

A role-based tabletop exercise walks participants through vulnerability disclosure and remediation while balancing incomplete information and pressure.

A hands-on workshop builds an open-source AI red teaming platform in Google Colab, tests it against live Hugging Face models, then runs it locally.

How attackers target AI systems through model manipulation and RAG abuse. Five practical steps for defending them, with case studies and hands-on labs.

In early 2026 Mark Vos's adversarial testing of a deployed AI agent drew national news coverage. He has held enterprise CISO roles at ANZ, IRESS and Serco.

Treating security as a shared, service-based capability rather than bespoke controls lets teams scale trust and data protection across hybrid networks.

A solo security professional built and shipped a fine-tuned AI security application alone, revealing how product security must change when AI writes the code.

A former undercover investigator exposes how romance scam networks weaponise trust and intimacy, and why victim blaming must give way to prevention.

Practitioners from three universities share how translating adversary behaviour into concise, timely messaging builds cyber awareness beyond compliance.

Cyber incidents increasingly cause physical damage, and this session shows why boards need one unified approach to legal, insurance and response decisions.

Three Australian court rulings show that having a cyber policy isn't enough; regulators now test whether controls were funded, monitored, and actually worked.

From the 2022 Viasat attack to CubeSat and ground station flaws, this session maps where cyber security meets orbital mechanics in critical infrastructure.

Applying Toyota's manufacturing principles, this talk offers a framework for building failure-friendly SOC culture and AI tooling with human oversight.

A live red team versus blue team simulation puts the audience in critical infrastructure decision-making roles where every choice has real consequences.

Cyber incidents place intense psychological pressure on responders, and this session covers preparing, supporting and recovering teams through that stress.

A CISO and an engineer share operational and technical perspectives on building accountability, trust boundaries and resilience into agentic AI in the SOC.

Why an effective incident tabletop exercise should expose real gaps and hard decisions rather than reassure the room that the plan already works.

Tim Dillon shares war stories from five years of CORIE exercises, covering social engineering and physical attacks on Australian financial institutions.

Compliance-as-a-service now delivers SOC 2 and ISO 27001 attestations in days rather than months, and the security community is split on what that costs.

Drawing on 2,000 SME engagements, this session reframes supplier risk assessment as a partnership model rather than a gate that locks smaller vendors out.

How the mDL digital credential standard's cryptographic key binding stops leaked identity documents being reused for fraud after a breach.

A real GAMP 5 assessment of a SharePoint QMS shows Australian biomedical manufacturers what FDA 21 CFR Part 11 demands before entering the US market.

PhD research finds that whether organisations adopt a castle-moat or zero trust security paradigm quietly shapes how they actually respond to incidents.

International research into how leading countries teach cyber security and train teachers offers practical lessons for strengthening Australia's approach.