Main Program

Australian SMEs face relentless cybercrime with stretched IT teams, and practical, budget-fit steps can still close the gap adversaries exploit.

Two landmark 2025 OAIC privacy rulings set a legal baseline for reasonable security controls, giving CISOs court-tested language to justify next year's budget.

Commodity phishing kits and infostealer economics have made MFA bypass routine, and this session sets out a tiered defence built from a real breach.

Scenario analysis stress-tests four cyber security service models against AI, geopolitical and social shifts to prepare for an unpredictable future.

A practical walkthrough of operationalising ISO 42001 and ISO 42005 AI impact assessments inside existing governance frameworks like ISO 27001.

A behaviour-led model built on constrain, observe, and pursue helps OT and ICS teams detect adversary movement before signature-based alerts fire.

Bring your leadership, governance and accountability questions to Dan Maslin at Ask an Expert 1 from 3.50pm on Wednesday 14 October.

Starting from attackers who simply log in, the argument is that siloed teams and tools each see part of identity and privilege, and should work together.

Known as the Friendly Hacker, Keren Elazari founded BSidesTLV and Leading Cyber Ladies, and researches security tech at Tel Aviv University.

Geoff White has delivered more than 300 keynotes. His investigations range from North Korea's hacking campaign to tech's transformation of money laundering.

Taher Elgamal, a cryptographer recognised in the industry as the father of SSL, invented data security and digital signature standards for areas including DSS.

Following the Slay Review, a panel debates whether mandatory threat sharing can turn critical infrastructure defence into a legislated sovereign capability.

Australia's newly established Cyber Civilian Reserve turns years of policy discussion into a deployable, industry-led national cyber capability.

Whoever launches an agentic tool lends it their privileges, and the governance response covers scoping those permissions and monitoring what agents do.

Responding to incidents and communicating under pressure are the skills in focus for entry-level staff, with examples from RMIT's TAFE and vocational programs.

A year of stress-testing a single AI merge-gate agent against attackers led to a multi-agent supply chain security system that caught a major npm compromise.

Practical steps that improve application security and developer experience together, rather than trading one off against the other.

Cutting security spend to the compliance minimum shifts real risk onto employees, customers, and communities rather than the company that saved money.