Main Program

Drawing on 2,000 SME engagements, this session reframes supplier risk assessment as a partnership model rather than a gate that locks smaller vendors out.

How the mDL digital credential standard's cryptographic key binding stops leaked identity documents being reused for fraud after a breach.

A real GAMP 5 assessment of a SharePoint QMS shows Australian biomedical manufacturers what FDA 21 CFR Part 11 demands before entering the US market.

PhD research finds that whether organisations adopt a castle-moat or zero trust security paradigm quietly shapes how they actually respond to incidents.

International research into how leading countries teach cyber security and train teachers offers practical lessons for strengthening Australia's approach.

People, culture and workforce development are the subjects for Professor Paul Haskell-Dowland of Edith Cowan University at 12pm Wednesday in Ask an Expert 1.

Almost every signal Entra ID Conditional Access trusts is self-reported at sign-in and so can be spoofed, which is what the What If tool cannot show.

The Essential Eight has been reshaped from prescriptive controls into a principles-based framework, and this session covers the decisions behind it.

Access and privilege work differently once software and AI agents authenticate on a person's behalf, which puts non-human identities alongside human ones.

Keeping a CV in your own voice while using AI to tighten it is the main focus, and the talk ends on deepfake fraud in hiring from both sides of the table.

Biological systems offer proven resilience patterns that could reshape security architecture beyond perimeter and layered defence thinking.

A functional cyber security home lab can be built from free tools and secondhand hardware, then scaled into a genuine red and blue team range.

An insider's guide to submitting a winning conference proposal covers topic selection, abstract writing, and how selection panels evaluate entries.

A panel examines whether reliance on AI tooling is quietly eroding the analytical skills the next generation of security professionals will need.

Vulnerability lists without asset, identity, and exposure context hide the toxic combinations that actually lead to business-ending compromise.

A practical roadmap for becoming or partnering with an accredited Digital ID provider under Australia's new legislated framework and dual-regulator oversight.

GPS spoofing disrupted Strait of Hormuz shipping within hours using cheap open-source tools, exposing a threat largely absent from cyber security conversations.

Five years of scam data reveal how fraud tactics, channels and targeted credentials have shifted, with detection improving but overall harm continuing to rise.

A real ransomware attack chain traces stolen credentials from an infostealer log through a marketplace sale to full network compromise.

DFIR investigations keep surfacing the same root causes, and this session shows how translating findings into risk language stops incidents repeating.

Documented 2025 cases show adversaries rewriting malware, mass-generating phishing lures and hijacking defenders' own AI tools, breaking key CTI assumptions.

A ground-level look at how the PSPF, ISM, and ASD interlock explains what it actually takes to qualify and work as a registered IRAP assessor.

Good user experience is a technical requirement for security tooling, not window dressing, and this talk offers low-cost ways to test and improve it.