Main Program

One practitioner achieved ISO 27001 and Essential Eight compliance simultaneously with no dedicated team, and this session shares the prioritisation method.

Most Australian and New Zealand cyber failures start in the boardroom, where technical risk language and business priorities still fail to connect.

What AI scams and deepfakes mean for seniors, CALD communities, NDIS participants and people with low digital confidence, and how community training can help.

Registering a rogue device to obtain a Primary Refresh Token, then using it to bypass MFA and Conditional Access, is demonstrated live with detection queries.

A narrative-driven, procedurally generated CTF platform replaces static challenges with adaptive difficulty so players solve problems, not memorise answers.

A recurring website contact name led to an OSINT investigation into shell companies and tax havens, showing how public data becomes real intelligence.

At 1.40pm Wednesday, NBN Australia CSO Darren Kane covers running secure operations and people, culture and workforce development in Ask an Expert 1.

This interactive game show reframes scams as social engineering, testing snap decisions under pressure to reveal the gap between confidence and reality.

A strategic thinking workshop helps cyber leaders act decisively through the fog of excess data, opinions, and urgency rather than waiting for certainty.

Score your organisation's cyber governance maturity in a Chatham House workshop, and leave with a custom report that you can bring back to your organisation.

Shadow AI and prompt injection are the named exposures, answered with a framework that runs from security governance through to continuous monitoring.

The first three contestants take the stage. Four rounds, one winner, a place in the grand final. Hosted by David Savva-Willett, Kyle Waters and Finley Keating.

AI ambition is running ahead of AI readiness, and the governance question is how to measure it and close the gap to enterprise scale.

Paige Crabtree and Emily Zhang lead a Careers Village session on building the next generation of cyber talent, at 2.30pm Wednesday in the Exhibition Hall.

A tested sequence turns IEC 62443 from a compliance checklist into a prioritised resilience roadmap spanning governance, asset visibility and incident response.

Most of an application's attack surface now comes from dependencies nobody on the team wrote or vetted, and traditional CVE scanning alone can't catch it.

A university-wide Cyber Champions Program grew to over 150 staff and measurably lifted security awareness and behaviour across the institution.

A panel on CyberPath, an industry-led cyber workforce initiative, covering how it differs from global schemes and what it means for employers.

Analysis of AI whistleblowing cases reveals a gap between what AI systems can do and what governance can detect, using disclosure as a diagnostic signal.

Drawing on five years of regulator decisions, this session sets out a defensible, privacy-first governance framework for facial recognition technology.

Australia's 2025 Commonwealth Cyber Security Posture Report shows real but slow progress, with legacy systems and rigid funding still holding agencies back.

A fake Australian financial services firm, built with synthetic data and left online, reveals exactly how real attackers reconnoitre, exfiltrate and negotiate.

Lessons from Colonial Pipeline, Oldsmar, and other landmark OT attacks build a practical post-incident framework for Australian critical infrastructure.

Most organisations already own the tools for continuous threat exposure management; this session explains the structures needed to make them work.