Main Program

Treating OT security as uniquely dangerous rather than an engineering condition keeps teams excluded and risk unmanaged, when shared ownership works better.

Lived experience under a surveillance state reshapes threat modelling, crisis leadership, and geopolitical strategy for Australia's Indo-Pacific position.

Farms increasingly depend on a single foreign satellite operator for connected equipment, leaving agricultural data integrity exposed as a security risk.

Using the 2026 Iran-US/Israel conflict as a case study, this session quantifies why organisations once considered non-combatants now carry real cyber risk.

A real AI-generated command-and-control sample shows how identity-based attacks now blend into legitimate activity, and what SOC teams need to change.

Cloud identity and access management attacks demand a specialised incident response approach distinct from traditional on-premises investigations.

Triage decisions made during SOC escalation can destroy the forensic evidence DFIR investigators need, and this session closes that handover gap.

A structured sprint cycle turns threat intelligence into validated detection coverage, hypothesis-driven hunts, and detection models that compound over time.

Stanislav Petrov's refusal to trust a flawed 1983 early-warning system offers a model for how security-critical AI decisions should be second-guessed.

A year of penetration testing AI-enabled applications exposes recurring failures in prompt handling, tool permissions and data leakage security teams miss.

A working proof of concept shows how a fake compliance website can trick AI agents into leaking secrets and suppressing vulnerability remediation.

Most organisations deploy AI but few govern it, and this session offers a three-step framework to unblock the compliance gridlock stalling AI oversight.

Solo IT responders without a SOC need a simple confirm, contain, preserve, communicate loop to manage the first hour of an incident without destroying evidence.

AI tools touching privileged legal communications create governance risks most organisations haven't addressed, and this session sets out the controls to own.

Human risk in DevSecOps now extends beyond phishing to fatigue, psychological safety and blind trust in AI overrides, needing teams designed for pressure.

Two years defending a Fortune 120 Korean e-commerce giant reveal what cyber security looks like on a frontline shaped by geopolitics and language barriers.

Ask an Expert 2 has Dan Goldberg of Omnicom on leadership, governance and accountability and law, policy and global power, from 10.55am, Thursday 15 October.

This tutorial gives SMEs a practical framework for selecting cyber insurance, preparing for underwriting, and staying claims-ready when an incident hits.

The MAESTRO framework applies threat modelling to agentic AI, helping practitioners identify threat vectors and co-create tailored countermeasures.

An inclusive culture systems framework gives cyber leaders practical steps to build unity, collaboration, and sustained high performance in their teams.

A hands-on workshop hunts threats across a simulated OT environment using Kali Purple, detecting and mitigating attacks on SCADA, PLCs and industrial networks.

Manual triage buckles once attack paths are automated and non-deterministic, and a four-pillar operating model for AI threat readiness is offered instead.

A former professional cricketer told she would never walk again, Kath Koschel taught herself to walk three times and founded The Kindness Factory.

Incident response and cyber insurance practitioners unpack why outcomes depend less on having a response plan than on executing it under real pressure.