Back | Home Agenda

Download PDF

Congress

Tue 03

11:20h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

Defending against hidden risks of AI tools in the workplace

Seamus Lennon ThreatLocker Vice President of Operations for EMEA Speaker

#CISOs&SecurityLeader, #Compliance&DataProtection, #CybersecurityConsultants, #IT&Infrastructure

2026-11-03 11:20 2026-11-03 11:45 Europe/Madrid Defending against hidden risks of AI tools in the workplace AI tools have the power to transform organizational productivity while exponentially increasing risk. Join this session to uncover how workplace AI tools can expose sensitive data, bypass controls, and introduce new attack surfaces. We’ll also explore what you can do to mitigate these risks effectively without impeding innovation. Auditorium I

Tue 3

11:20h - 11:45h Auditorium I Full Congress Pass

15:45h

Conference | Congress Cybersecurity as a strategic business and reputational risk IT & Infrastructure

Are you okay, Internet? The state of the internet in 2026

Martijn Grooten Censys Principal Security Researcher Speaker

#AttackSurface, #CyberRisk, #InfrastructureSecurity, #InternetExposure, #InternetSecurity

2026-11-03 15:45 2026-11-03 16:10 Europe/Madrid Are you okay, Internet? The state of the internet in 2026 In this presentation, Censys researcher Martijn Grooten walks through interesting findings from the 2026 Censys State of the Internet report and will answer questions such as: what trends do we see when it comes to Internet-connected services? Who are the major players? What are the vulnerabilities that should concern us? How is the rapid adoption of AI affecting the Internet map. Auditorium I

Tue 3

15:45h - 16:10h Auditorium I Full Congress Pass

14:35h

Conference | Congress AI, identity and trust in the digital environment IT & Infrastructure

Securing AI agents

Roger Gallego Delinea Iberia Sales Manager Speaker

#AccessGovernance, #AIAgents, #AISecurity, #Authorization, #IdentityGovernance, #PrivilegedAccess, #RuntimeAuthorization

2026-11-03 14:35 2026-11-03 15:00 Europe/Madrid Securing AI agents

Chasing every agent identity in our organizations doesn't scale. We must implement runtime authorization, which enforces policy at the point of action.

Agents are running on standing credentials issued to people, not to systems. Vault them and replace standing access with just-in-time access.

Auditorium II

Tue 3

14:35h - 15:00h Auditorium II Full Congress Pass

15:45h

Conference | Congress Cybersecurity as a strategic business and reputational risk IT & Infrastructure

Assume breach, prepare for recovery: Why data resilience is mandatory for business survival

Miguel Tena Martin Object First Field Sales Engineer Speaker

#BusinessContinuity, #CyberResilience, #DataProtection, #DataResilience, #DisasterRecovery, #Ransomware, #Recovery

2026-11-03 15:45 2026-11-03 16:10 Europe/Madrid Assume breach, prepare for recovery: Why data resilience is mandatory for business survival

Zero Trust teaches us to assume that there’s a breach, but what’s the worst that could happen when there is a breach? And how do you mitigate against that?

Join Miguel Tena, Object First Field Sales Engineer as he discusses why data resilience is critical in the evolving cybersecurity landscape and what that means in practice. Leveraging insights from research on data protection and ransomware trends, Miguel will explore how organisations can prepare for the worst-case scenario: where a cybercriminal has access to all passwords and secrets. Meeting regulatory and cyberinsurance requirements and, ultimately, guaranteeing business survival mean this is no longer ‘just’ an IT topic, it’s a board-level imperative.

Auditorium II

Tue 3

15:45h - 16:10h Auditorium II Full Congress Pass

11:20h

Conference | Congress AI, identity and trust in the digital environment IT & Infrastructure

Your agents will inherit your blind spots: Context before autonomy in the integrated SOC

Charalambos Ioannides ClearSkies™ Sales Engineering Manager Speaker

2026-11-03 11:20 2026-11-03 11:45 Europe/Madrid Your agents will inherit your blind spots: Context before autonomy in the integrated SOC

Every agentic SOC demo works, because every demo environment has perfect context. Yours does not. An alert carries almost none of what is needed to judge it: who the identity is, how critical the asset is, what depends on it, whether a change window is open. Analysts assemble that context by asking people. An agent has nobody to ask, and when context is missing it does not stop, it reasons around the gap and answers confidently anyway.

Auditorium II

Tue 3

11:20h - 11:45h Auditorium II Full Congress Pass

11:55h

Roundtable | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Defending Europe in 2026: National cybersecurity strategies, collaboration & emerging threats

Maurizio Mensi Italian National School of Administration Professor of Law and Economics Moderator

Jan Smedts Digitaal Vlaanderen (Flanders) CEO Speaker

Dan Cîmpean National Directorate for Cyber Security (DNSC) (Romania) Director Speaker

Laura Caballero Nadales Cybersecurity Agency of Catalonia Director Speaker

Adam Marczyski NASK National Research Institute (Poland) Deputy Director for Cybersecurity and Innovation Speaker

#CyberResilience, #CyberSovereignty, #EuropeanSecurity, #NationalCybersecurityStrategies, #ThreatLandscape

2026-11-03 11:55 2026-11-03 12:55 Europe/Madrid Defending Europe in 2026: National cybersecurity strategies, collaboration & emerging threats This panel will bring together senior representatives from leading national cybersecurity agencies across Europe to discuss the key challenges and opportunities shaping Europe’s cyber resilience. The discussion will address strategic, regulatory and operational priorities needed to strengthen cybersecurity cooperation and preparedness across the continent. Auditorium II

Tue 3

11:55h - 12:55h Auditorium II Full Congress Pass

13:05h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Trusted shield: Combining third-party innovation with sovereign control

Alejandro Ramos Telefónica Tech Global Cybsercurity Director Speaker

#DigitalSovereignty, #TechnologyGovernance, #ThirdPartyRisk, #VendorSecurity

2026-11-03 13:05 2026-11-03 13:30 Europe/Madrid Trusted shield: Combining third-party innovation with sovereign control Innovation increasingly depends on third-party technologies but adopting them should not mean losing control over critical data, services or decisions. This session explores why organisations need clear governance frameworks, security controls and visibility over technological dependencies—enabling them to benefit from global innovation while preserving autonomy, resilience and digital sovereignty. Auditorium I

Tue 3

13:05h - 13:30h Auditorium I Full Congress Pass

15:10h

Conference | Congress AI, identity and trust in the digital environment IT & Infrastructure

Stop managing remote access. Start governing vendors

Michael Ferdinandsen Secomea CEO & President Speaker

#AccessGovernance, #AISecurity, #CyberPhysicalResilience, #IdentityGovernance, #PrivilegedAccess, #SecureRemoteAccess

2026-11-03 15:10 2026-11-03 15:35 Europe/Madrid Stop managing remote access. Start governing vendors Third-party access has become one of the biggest cybersecurity and compliance challenges in modern manufacturing. As vendor ecosystems grow and regulations such as NIS2 raise accountability, manufacturers need more than secure connectivity. They need visibility, governance, and control. Discover why third-party access management is emerging as a strategic OT capability and how purpose-built Secure Remote Access enables secure collaboration without compromising productivity. Auditorium I

Tue 3

15:10h - 15:35h Auditorium I Full Congress Pass

15:10h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

The confidence gap: Securing what changes faster than you can test

Marcelo Castro Escalada Outpost24 Senior Product Manager Speaker

#AccessGovernance, #AIAgents, #AISecurity, #Authorization, #IdentityGovernance, #PrivilegedAccess, #RuntimeAuthorization

2026-11-03 15:10 2026-11-03 15:35 Europe/Madrid The confidence gap: Securing what changes faster than you can test

Security leaders face a difficult reality: applications, infrastructure, APIs, and attack surfaces are changing faster than traditional security programs can validate them.

While annual and periodic testing still provide value, they were never designed for environments shaped by AI-powered development, continuous deployment, and rapidly evolving threats. The result is a growing confidence gap between perceived security and actual exposure.

So how do organizations determine what to test, when to test it, and where to focus their efforts as the environment continuously changes?

In this session, we'll explore the shift from static testing programs to continuous, risk-based validation strategies that enable teams to identify exploitable risk, prioritize what matters most, and validate security as their attack surface evolves. We'll examine the role of automation, human expertise, and continuous exposure assessment in helping organizations move from reactive testing to continuous confidence.

Join us to see how modern security teams are adapting their validation strategies to keep pace with change and make better security decisions in an increasingly dynamic risk landscape.

Auditorium II

Tue 3

15:10h - 15:35h Auditorium II Full Congress Pass

16:20h

Conference | Congress Cybersecurity as a strategic business and reputational risk IT & Infrastructure

Improve security posture: Start with your endpoints

Juan José González NinjaOne Level 2 Solutions Engineer Speaker

2026-11-03 16:20 2026-11-03 16:45 Europe/Madrid Improve security posture: Start with your endpoints

Many organizations continue to invest heavily in advanced cybersecurity solutions in efforts to better defend against attacks that are not only increasing in frequency but also becoming more complex and difficult to detect. However, the importance of good cyber hygiene, starting with the endpoint, is often overlooked.

NinjaOne consolidates workflows, reduces silos, and provides a single source of truth for all your security and endpoint data.

Join NinjaOne's Solutions Engineer Juan José González as he demonstrates the power and simplicity of the NinjaOne platform and how it can enable you to achieve these benefits:

Detect and respond to threats faster with real-time visibility and control over your entire IT environment.

Harden endpoints by removing unnecessary software and minimizing your attack surface through automated device configuration at scale.

Make sure systems are always secure and up to date with automated patch management.

Recover quickly in the event of an attack with secure, cloud-based backup.

Auditorium II

Tue 3

16:20h - 16:45h Auditorium II Full Congress Pass

16:20h

Conference | Congress AI, identity and trust in the digital environment IT & Infrastructure

New threat landscape and challenges in the age of Frontier AI

Joan Ruiz Fortinet Systems Engineer Manager Speaker

2026-11-03 16:20 2026-11-03 16:45 Europe/Madrid New threat landscape and challenges in the age of Frontier AI In this talk we will discuss current state of the art and landscape of emerging threats due to the progress of frontier ai models and we'll introduce Fortinet layered security approach to fight against it Auditorium I

Tue 3

16:20h - 16:45h Auditorium I Full Congress Pass

12:30h

Conference | Congress

Simplifying AI complexity: How to survive in the post-Mythos era

Román Vargas Sierra Cisco Cybersecurity Sales Specialist Speaker

2026-11-03 12:30 2026-11-03 12:55 Europe/Madrid Simplifying AI complexity: How to survive in the post-Mythos era

Artificial intelligence has moved out of the lab and into the very heartbeat of our society. But with unprecedented speed comes unprecedented complexity. In the post-Mythos era, AI is not just a productivity tool; it is an active, autonomous participant in our digital ecosystems.

For many organizations, managing this revolution has turned into an operational labyrinth of fragmented tools, blind spots and emerging security risks.

How do we embrace the immense power of AI without losing control of our critical systems?

Join this session for an insightful, no-nonsense roadmap on how leaders can strip away the noise, master AI complexity and build digital environments that are resilient, transparent and ready for tomorrow.

Auditorium I

Tue 3

12:30h - 12:55h Auditorium I Full Congress Pass

13:05h

Conference | Congress Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

Sunburst — Taking luck out of incident response

Tim Brown Team8 Partner and CISO in Residence Speaker

2026-11-03 13:05 2026-11-03 13:30 Europe/Madrid Sunburst — Taking luck out of incident response

In 2020, the Russian SVR compromised SolarWinds' Orion build pipeline, and roughly 18,000 organizations downloaded the tainted update. Tim Brown, former CISO of SolarWinds, shares his first-person account of leading the response to SUNBURST, the SEC charges that followed, and five years to vindication.

Brown has often called that response lucky — the right help arrived, the team stayed aligned, transparency was a situational call rather than a plan, and the tabletop exercises they'd run hadn't covered this scenario. It worked, but it worked because of people and circumstance no organization can count on twice.

This keynote moves from that manual, human-driven response to what's possible today: how agentic AI is changing incident detection, triage, and response, and what it takes to replace luck with design — rehearsed, scenario-flexible playbooks and tooling that don't depend on who happens to be in the room when the call comes in.

Auditorium II

Tue 3

13:05h - 13:30h Auditorium II Full Congress Pass

16:55h

Conference | Congress

Decision-making under pressure: When cyber incidents become physical and operational crises

Jonatan Quintana IEEE Senior Member Corporate Security, Risk & Resilience Advisor Speaker

2026-11-03 16:55 2026-11-03 17:20 Europe/Madrid Decision-making under pressure: When cyber incidents become physical and operational crises How should leaders respond when a cyber incident threatens people, facilities and essential operations? This session explores practical approaches to making decisions with incomplete information and limited time, coordinating cyber, physical security and operational teams, and assessing the wider consequences of containment measures. Drawing on experience in high-risk security environments, it focuses on protecting people and maintaining business continuity. Auditorium I

Tue 3

16:55h - 17:20h Auditorium I Full Congress Pass

16:55h

Conference | Congress

From smart cities to cyber-resilient cities. How Greater Paris is helping municipalities prepare for cyber

Geoffroy Boulard Greater Paris Metropolis Vice-President for Communication and Digital Innovation Speaker

2026-11-03 16:55 2026-11-03 17:20 Europe/Madrid From smart cities to cyber-resilient cities. How Greater Paris is helping municipalities prepare for cyber As cities become increasingly digital, cybersecurity is a growing concern for local governments. This session will explore the main challenges faced by municipalities and present how the Greater Paris Metropolis supports local authorities in strengthening their cyber resilience. Through initiatives such as the CYBIAH programme, a municipal Bug Bounty scheme and REMPART, a cyber crisis simulation exercise developed with ANSSI, the session will showcase practical tools and collaborative approaches to help cities better anticipate, prevent and respond to cyber threats. Auditorium II

Tue 3

16:55h - 17:20h Auditorium II Full Congress Pass

13:40h

Conference | Congress

From 840 days to 1.6: Rebuilding application security for the Frontier-AI era

Daniela da Cruz Checkmarx Vice President of Artificial Intelligence Speaker

2026-11-03 13:40 2026-11-03 14:10 Europe/Madrid From 840 days to 1.6: Rebuilding application security for the Frontier-AI era

In 2018, the median time to exploit a disclosed vulnerability was 840 days. Today it is 1.6, and frontier AI is pushing that toward minutes. At the same time, AI is writing a growing share of production code, adding new vulnerabilities on top of unresolved backlogs. European regulators have taken notice: from DORA and the EU AI Act to the ECB’s requirement that significant banks submit a cyber-resilience action plan by 31 October 2026, “should have” has become “must have”.

This session looks at what that shift means for security and engineering leaders, in banking and beyond. We will examine why AI-only security (fast, but probabilistic) and traditional AppSec (reliable, but slow and noisy) each fall short, and how a hybrid model, combining deterministic detection with multi-model AI reasoning, can surface vulnerabilities that rules alone miss while cutting false-positive noise. We’ll then follow findings through to action: triage prioritised by attackability rather than severity, automated remediation, and the governance needed to keep humans in control.

Attendees will leave with a practical Capture, Eliminate, Govern framework and a checklist for turning a regulatory action plan into day-to-day engineering practice.

Auditorium II

Tue 3

13:40h - 14:10h Auditorium II Full Congress Pass

10:45h

Conference | Congress

When AI becomes the adversary: The new race between cyber attackers and defenders

James Burchell Crowdstrike Sales Engineering Manager Speaker

2026-11-03 10:45 2026-11-03 11:10 Europe/Madrid When AI becomes the adversary: The new race between cyber attackers and defenders Agentic AI is reshaping cyberattacks, enabling adversaries to move beyond AI-assisted operations toward autonomous intrusions. CrowdStrike's latest threat research reveals real-world examples of AI agents executing complex attack tasks with minimal human direction or intervention. Drawing on frontline adversary intelligence, this keynote explores the rise of the agent-state and the new challenges it creates for defenders. Learn how organisations can rethink their defences to counter AI-driven attacks, combining human expertise, adversary intelligence, and AI-powered security to stay ahead. Auditorium II

Tue 3

10:45h - 11:10h Auditorium II Full Congress Pass

Wed 04

11:55h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

New operating models for governing AI and cybersecurity

Sounil Yu Cyber Defense Matrix and the DIE Triad Author and creator Speaker

#AIGovernance, #CISOs, #CyberResilience, #CybersecurityLeadership, #Governance, #RiskManagement, #SecurityOperatingModel, #Strategy

2026-11-04 11:55 2026-11-04 12:20 Europe/Madrid New operating models for governing AI and cybersecurity AI is not just more automation. It requires new thinking and new operating models to govern and secure properly. This session explores these operating models, shares practical ways to apply them, and predicts what is coming next. Auditorium I

Wed 4

11:55h - 12:20h Auditorium I Full Congress Pass

13:05h

Roundtable | Congress AI, identity and trust in the digital environment Compliance & Data Protection

Europe’s cyber resilience & cyber sovereignty: a strategic perspective from Europe’s governmental cybersecurity agencies

Marcos Gómez INCIBE - Instituto Nacional de Ciberseguridad CISO & Deputy Director of Corporate Security Speaker

Pekka Jokinen National Cyber Security Center Finland Deputy Director General Speaker

Maurizio Mensi Italian National School of Administration Professor of Law and Economics Moderator

Arno Spiegel Federal Chancellery (Austria) Deputy Director - Cybersecurity and Crisis Data Center Speaker

Carlos Moreira Antunes National Cybersecurity Centre (Portugal) Head of Legal and International Affairs Speaker

#CyberResilience, #CyberSovereignty, #EuropeanSecurity, #GovernmentCybersecurity, #NIS2, #StrategicCooperation, #ThreatLandscape

2026-11-04 13:05 2026-11-04 13:50 Europe/Madrid Europe’s cyber resilience & cyber sovereignty: a strategic perspective from Europe’s governmental cybersecurity agencies

Europe is entering a decisive era for cybersecurity. As geopolitical tensions, sophisticated cyber threats, supply-chain dependencies and digital disruption continue to grow, European governments must strengthen their ability to anticipate, withstand and recover from cyber incidents while protecting Europe’s strategic digital autonomy.

This high-level panel brings together senior representatives from the national cybersecurity agencies of Portugal, Spain, Finland and Austria to explore the governmental perspective on European Cyber Resilience and Cyber Sovereignty. The discussion will examine how European nations are translating EU cyber strategies, regulations and resilience frameworks into national capabilities; protecting critical infrastructure and government services; strengthening public-private cooperation; securing strategic technologies and supply chains; and developing greater European sovereignty in an increasingly contested digital environment.

The panel will provide practical insights into Europe’s evolving cybersecurity priorities, cross-border cooperation and the capabilities required to build a more resilient, secure and digitally sovereign Europe.

Auditorium I

Wed 4

13:05h - 13:50h Auditorium I Full Congress Pass

15:10h

Conference | Congress AI, identity and trust in the digital environment IT & Infrastructure

Quantum cryptography: Past, present, future

Carlos Solano Sánchez NTT Data Senior Product Manager Speaker

#CryptoAgility, #Cryptography, #PostQuantumCryptography, #PQC, #QKD, #QuantumCryptography, #QuantumSecurity

2026-11-04 15:10 2026-11-04 15:35 Europe/Madrid Quantum cryptography: Past, present, future

Cryptography is facing one of the greatest turning points in its history. This presentation will explore the evolution of encryption, from the cryptographic models that currently protect our communications and data to the new paradigms that will shape digital security in the quantum era.

We will analyze the current state of pre-quantum cryptography, the risks posed by the arrival of quantum computers capable of compromising certain existing algorithms, and the transition towards post-quantum cryptography as a response to this new landscape. We will also explore the role of quantum cryptography and technologies such as Quantum Key Distribution (QKD), placing their level of maturity, applications, and challenges into context.

A journey through the past, present, and future to understand how information protection will evolve, what decisions organizations need to start making today, and why crypto-agility will become a strategic capability for addressing the next generation of threats.

Auditorium I

Wed 4

15:10h - 15:35h Auditorium I Full Congress Pass

15:45h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

Okay… so, what next?

Carlos Payés SentinelOne Strategic AI Executive Speaker

#AITransformation, #CISOs, #CyberLeadership, #DecisionMaking, #ExecutiveLeadership, #Governance, #RiskManagement, #SecurityStrategy

2026-11-04 15:45 2026-11-04 16:10 Europe/Madrid Okay… so, what next?

We are at the AI inflection point.

Externally, AI is enabling attackers. Internally, adoption is racing ahead of security, governance, and clarity of ownership. It all feels a bit uncomfortably familiar.

This session draws lessons from yesterday's cyber security as we look to tomorrow. What has worked, what failed, and where can we head next if we want to secure AI without slowing progress.

I’ll look ahead to autonomous SOC operations and a threat landscape shaped by AI-enabled attackers and machine-speed decision making.

AI is changing security. Okay... so, what next?

Auditorium I

Wed 4

15:45h - 16:10h Auditorium I Full Congress Pass

12:30h

Conference | Congress AI, identity and trust in the digital environment IT & Infrastructure

The real story behind zero trust, identity, and device security. From identity to workforce trust: Securing workforce access end-to-end

Darren James Specops Software Senior Product Manager Speaker

#AccessControl, #Authentication, #CyberRisk, #DeviceSecurity, #IdentityGovernance, #IdentitySecurity, #WorkforceIdentity, #ZeroTrust

2026-11-04 12:30 2026-11-04 12:55 Europe/Madrid The real story behind zero trust, identity, and device security. From identity to workforce trust: Securing workforce access end-to-end

Workforce access has never been more dynamic or more unpredictable. Users connect from anywhere, on devices that shift daily between personal, managed, trusted, and unknown, and security teams are expected to make the right call every time. Identity tells you who is connecting, but today’s environments make it equally critical to understand what they’re connecting with.

Because if you don’t trust the device, you can’t trust the access. This session explores how identity and device trust come together to meet the real access challenges organizations face. Curious how this story shapes the future of secure access in 2026? Join us to find out.

Auditorium II

Wed 4

12:30h - 12:55h Auditorium II Full Congress Pass

10:00h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

Sovereign Cyber AI: Beyond the obvious

Kirti Kumar EY / Cyber AI Products Partner / Global CTO Speaker

#AIGovernance, #AIInfrastructure, #AISecurity, #CyberSovereignty, #DataGovernance, #DigitalSovereignty, #EuropeanAI, #SovereignAI

2026-11-04 10:00 2026-11-04 10:35 Europe/Madrid Sovereign Cyber AI: Beyond the obvious Sovereign AI usually raises three concerns: where the data resides, what the regulator will ask, and a geopolitically induced coma. Those are the obvious ones. The harder questions are who can alter your AI, whether your defenders can live without it, and one rarely asked: how far an attacker can steer it without ever touching it. Drawing on real-world initiatives, this session sets out a reference architecture for Sovereign Cyber AI and its value-realisation model. Existing standards stop short of this, and closing the gap is our job as a community. The safeguards we settle on now are what the next generation inherits. Auditorium I

Wed 4

10:00h - 10:35h Auditorium I Full Congress Pass

10:45h

Conference | Congress Cybersecurity as a strategic business and reputational risk Compliance & Data Protection

No one is above the line: How NIS2 and DORA made the cybersecurity poverty line everyone’s problem

Rob Harrison Sophos Vice President Speaker

#Accountability, #Compliance, #Compliance&DataProtection, #CyberRegulation, #CyberResilience, #DORA, #Governance, #NIS2, #RiskManagement

2026-11-04 10:45 2026-11-04 11:10 Europe/Madrid No one is above the line: How NIS2 and DORA made the cybersecurity poverty line everyone’s problem Europe's regulators have quietly redrawn the cybersecurity poverty line - the gap between the few organisations that can run security as a system and the millions that have the tools but not the capability to make them work. Under NIS2 and DORA, that gap is no longer a social problem; it's a legal one, and it runs straight through your supply chain. When an under-resourced supplier or ICT provider sits below the line, you inherit both the breach and the regulatory exposure and, increasingly, your board inherits personal liability for it. This session examines how MDR and an agentic SOC scale security operations across 40,000 organizations, and why the harder, unsolved problem is scaling strategy and governance. That's the gap Sophos CISO Advantage is built to close: scaling the judgment of a world-class CISO, continuous control validation, and regulator-ready metrics to organisations with or without a CISO, so they can both deliver their security strategy and prove it, and lift their whole ecosystem above the line. Auditorium I

Wed 4

10:45h - 11:10h Auditorium I Full Congress Pass

11:20h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

This is your brain on deepfakes: Why AI scams work on smart people and how you can stop it

Christian Reinhardt SoSafe SE Director Human Risk Management Speaker

#DataPrivacy, #DigitalTrust, #Governance, #IdentitySecurity, #Resilience, #TrustFrameworks

2026-11-04 11:20 2026-11-04 11:45 Europe/Madrid This is your brain on deepfakes: Why AI scams work on smart people and how you can stop it Deepfakes are no longer science fiction – they are here, and they are highly effective. Drawing on neuroscientific insights, this talk explains why the human brain is not built for these threats and how the same psychological mechanisms attackers exploit can be turned into powerful tools for awareness. Understanding the brain is key to building real security resilience. Auditorium II

Wed 4

11:20h - 11:45h Auditorium II Full Congress Pass

12:30h

Conference | Congress AI, identity and trust in the digital environment IT & Infrastructure

The dark side of AI: Tackling AI-based cyber attacks

Joan Vives ManageEngine Technical Consultant Speaker

#AISecurity, #AIThreats, #IdentitySecurity, #PAM, #ThreatLandscape

2026-11-04 12:30 2026-11-04 12:55 Europe/Madrid The dark side of AI: Tackling AI-based cyber attacks Privileged Access Management is evolving beyond simple password vaulting. Discover the mission to turn PAM360 into a comprehensive command center that builds, automates, and orchestrates your entire security landscape. This presentation covers the pillars of a robust PAM framework, the efficiency of automated operations, and the power of complex task orchestration. Auditorium I

Wed 4

12:30h - 12:55h Auditorium I Full Congress Pass

11:20h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

The new frontier: Sovereignty and resilience in the age of AI

José de la Cruz TrendAI™ Technical Director Iberia Speaker

Raúl Guillén TrendAI™ European Cybersecurity Strategist Speaker

2026-11-04 11:20 2026-11-04 11:45 Europe/Madrid The new frontier: Sovereignty and resilience in the age of AI Frontier AI is creating a new technology frontier — and a new security challenge. Organisations must not only protect AI systems, but also understand their dependencies, maintain control over critical capabilities and remain resilient as the technology evolves. This session explores the intersection of Frontier AI, digital sovereignty and cyber resilience, bringing together strategic and technical perspectives on how to navigate this rapidly changing landscape. Auditorium II

Wed 4

11:20h - 11:45h Auditorium II Full Congress Pass

11:55h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

Your AI Agents can act without you: Can you see them, control them and stop them?

Arvin Bansal C&S Wholesale Grocers CISO Speaker

2026-11-04 11:55 2026-11-04 12:20 Europe/Madrid Your AI Agents can act without you: Can you see them, control them and stop them?

Enterprise AI has crossed a line. The first wave advised people. Agentic AI can now use credentials, call APIs, access sensitive data and change business systems at machine speed.

Before you scale it, can you answer: How many agents are running? Who owns them? What can they access and change? Can an agent exceed the authority of the human it serves? Can you prove what an agent actually did? And if one is compromised or manipulated, can you stop it before it becomes a business incident?

Drawing on practical experience building an enterprise AI security strategy, Arvin Bansal will show how to move from AI policy to production control using TRACE: Track, Register, Approve, Certify and Expose. He will connect board risk to agent identity, permission inheritance, data protection, gateways, behavioral monitoring, forensic traceability and kill switches, showing how security can accelerate agentic transformation without surrendering control.

Auditorium II

Wed 4

11:55h - 12:20h Auditorium II Full Congress Pass

14:35h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

Agentic AI in production: What works and what doesn’t in a real SOC

Erik Alejos Agustí Fundació “la Caixa” CISO Speaker

Ángela Martijena Di Monte Var Group Iberia Head of Cyber Defence Speaker

2026-11-04 14:35 2026-11-04 15:00 Europe/Madrid Agentic AI in production: What works and what doesn’t in a real SOC

The evolution of the SOC is no longer just about increasing automation, but about improving decision-making and prioritising alerts according to actual business risk.

This session presents a real-world use case from Fundació “la Caixa”, whose 24/7 Follow-the-Sun SOC operates across Spain, Thailand and Mexico. Building on existing SIEM/SOAR automation, the organisation is exploring agentic AI capabilities using Devo and Strike AI 48 to support alert triage, enrichment and initial analysis.

The goal is to reduce analysts’ workload, improve response times and ensure more consistent risk-based prioritisation, while keeping human judgement at the centre. Preliminary results show improvements in triage time, analytical consistency and escalation processes. The session will also address key challenges, including agent governance, context quality and the need for human oversight.

Co-presented with Erik Alejos, Security Manager at Fundació “la Caixa”, this session shares practical lessons, benefits and limitations from a real-world implementation, with no commercial focus.

Auditorium II

Wed 4

14:35h - 15:00h Auditorium II Full Congress Pass

13:05h

Conference | Congress

The human dimension of risk: Are you measuring what really matters?

Kike Serrano Velamazán Riot Market Launcher Spain & Iberia Ambassador and Speaker Speaker

2026-11-04 13:05 2026-11-04 13:30 Europe/Madrid The human dimension of risk: Are you measuring what really matters?

The human factor in cyber risk is evolving faster than CISOs can train their teams to keep up. AI-powered social engineering, shadow AI, and everyday risky behaviours are creating new vulnerabilities across organisations.

For security leaders, employee training completion rates reveal little about actual risk. The key is to understand where vulnerabilities are concentrated, which behaviours really matter, and how much risk can be reduced before an employee even needs to take action.

At Riot, we believe the opportunity lies in connecting both sides: automating what can be managed in the background, engaging employees when it really matters, and adapting protection according to risk levels.

As threats accelerate, security must also become more proactive, using behavioural signals, automation, and AI to identify vulnerabilities early and reduce risk before it turns into an incident.

Join us to discover:

- How organisations can move beyond awareness and compliance towards a more proactive and measurable approach to managing employees’ cybersecurity posture.

- What security leaders should really measure to understand and prioritise human risk.

- How automation and AI can reduce risk before human intervention is required, and where employee behaviour and engagement remain essential.

Auditorium II

Wed 4

13:05h - 13:30h Auditorium II Full Congress Pass

Thu 05

11:55h

Conference | Congress Systemic, cyber-physical and supply chain resilience IT & Infrastructure

Securing the intelligent network: Cyber resilience for AI, 5G and 6G

Connie McIntosh Ericsson Head of Security Speaker

#5GSecurity, #6GSecurity, #AISecurity, #CriticalInfrastructure, #CyberResilience, #NetworkResilience, #NetworkSecurity, #TelecomSecurity

2026-11-05 11:55 2026-11-05 12:20 Europe/Madrid Securing the intelligent network: Cyber resilience for AI, 5G and 6G AI is transforming intelligent transport networks into autonomous, software-defined systems, but with greater autonomy comes greater risk. This session examines emerging cyber threats across AI-driven control planes, edge and satellite infrastructure, quantum disruption, and the intersection of EU sovereignty, EU regulation, and cyber resilience. Auditorium I

Thu 5

11:55h - 12:20h Auditorium I Full Congress Pass

11:55h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Beyond cybersecurity: Who owns the decision?

Holger Spohn North Atlantic Treaty Organisation Principal Engineer (Advanced Cyber Defence Principles) Speaker

#BoardGovernance, #BusinessAlignment, #CISOs, #CyberLeadership, #CyberStrategy, #ExecutiveAccountability, #Governance, #RiskOwnership

2026-11-05 11:55 2026-11-05 12:20 Europe/Madrid Beyond cybersecurity: Who owns the decision?

Cybersecurity is no longer just about protecting systems, identities, and data.

As AI, automation, critical infrastructure, cloud platforms, and global supply chains become increasingly interconnected, security, resilience, and sovereignty are converging into a single challenge: maintaining the ability to act when dependencies fail, change, or come under pressure.

Drawing on insights from Black Hat and DEF CON, this keynote explores how the attack surface is expanding beyond technology into trust, dependency, autonomy, and decision-making itself. From critical infrastructure and supply chains to undersea cables, compute concentration, and hybrid cyber operations, the session examines how modern cyber incidents increasingly create operational, economic, and strategic effects.

Attendees will gain a new perspective on resilience, sovereignty, and agency in a world where digital capabilities depend on infrastructures and ecosystems that few organizations fully control.

Auditorium II

Thu 5

11:55h - 12:20h Auditorium II Full Congress Pass

10:45h

Conference | Congress AI, identity and trust in the digital environment IT & Infrastructure

Who governs the agents? Identity governance in the age of agentic AI

Raul D'Opazo One Identity Solutions Architect Speaker

#AccessControl, #AIAgents, #AISecurity, #Authorization, #IdentityGovernance, #NonHumanIdentities, #ZeroTrust

2026-11-05 10:45 2026-11-05 11:10 Europe/Madrid Who governs the agents? Identity governance in the age of agentic AI AI agents are rapidly becoming autonomous actors within the enterprise: accessing applications, consuming APIs, handling data and making decisions on behalf of humans and organisations. But who owns these identities? Who grants their access, certifies their permissions and removes them when they are no longer needed? This session explores why Agentic AI requires us to extend Identity Governance beyond the human workforce. We will examine how AI agents can be discovered, assigned ownership, governed throughout their lifecycle and linked to the permissions they accumulate across cloud and enterprise environments. The goal is simple: enable organisations to embrace Agentic AI without losing control of who - or what - has access to what, why, and on whose behalf. Auditorium I

Thu 5

10:45h - 11:10h Auditorium I Full Congress Pass

13:05h

Conference | Congress Systemic, cyber-physical and supply chain resilience IT & Infrastructure

Cyber resilience of emergency coordination centres from a law enforcement perspective on European security research

Rubén Fernández Bleda Ajuntament de València Police Officer and Project Manager Speaker

José L. Diego Ajuntament de València Police Inspector and Chief of Staff to the Chief Commissioner Speaker

#CriticalInfrastructure, #CyberResilience, #IncidentManagement, #LawEnforcement, #PublicSafety, #SecurityOperations

2026-11-05 13:05 2026-11-05 13:30 Europe/Madrid Cyber resilience of emergency coordination centres from a law enforcement perspective on European security research

This presentation explores how EU-funded security research helps law enforcement agencies protect citizens and counter cybercrime, from defining operational needs and co-designing solutions to validating emerging technologies.

Drawing on València Local Police’s experience, it focuses on the GANNDALF pilot protecting the city’s emergency coordination centre, including its 092 call line and dispatch services. The pilot tests tools for early threat detection, cyber risk assessment, forensic visualisation and decision support against phishing, ransomware-style disruption and denial-of-service scenarios.

Using simulated environments and synthetic data, the session examines how an emergency organisation can safely evaluate advanced cybersecurity tools. It shares practical lessons on collaboration between police, researchers and technology providers, bridging European security R&D with the everyday operational needs of public safety agencies,

Auditorium I

Thu 5

13:05h - 13:30h Auditorium I Full Congress Pass

12:30h

Conference | Congress AI, identity and trust in the digital environment IT & Infrastructure

Cutting through the HYPE: A practical approach to secure AI adoption

Federico Teti Zscaler Principal Strategy Architect Speaker

2026-11-05 12:30 2026-11-05 12:55 Europe/Madrid Cutting through the HYPE: A practical approach to secure AI adoption In this session, we cut through the noise and hype surrounding AI security to explore a practical, reality-based approach for secure AI adoption in the enterprise. While many vendors market broad AI security promises, they are often built on legacy architectures that fail to address decentralized agents and runtime risks. We will examine Zscaler's Zero Trust approach to AI security, demonstrating how true visibility, inline safeguards, and agent governance deliver real protection and risk mitigation beyond market rhetoric. Auditorium I

Thu 5

12:30h - 12:55h Auditorium I Full Congress Pass

13:05h

Conference | Congress

A sign without a lock: How the web decides which AI Agents to trust

Jaimes Morales Rodríguez de Lope Lognext Head of Cybersecurity Speaker

2026-11-05 13:05 2026-11-05 13:30 Europe/Madrid A sign without a lock: How the web decides which AI Agents to trust

AI agents no longer just answer questions. They browse, read and act on online services on our behalf. Every website now faces a new decision: trust this automated traffic, restrict it, or block it.

This talk presents the results of an empirical study on how websites actually treat AI-related User Agents. Combining large-scale measurement with controlled testing, we compared what websites declare in their policies, such as robots.txt, with what they really enforce. We also examined whether they identify AI agents, apply differentiated rules, and penalize some agents more than others.

The results show a fragmented and immature ecosystem. Some AI agents are widely accepted, while others face significantly more restrictions and blocking. In many cases, declared rules and real enforcement do not match. Together, these patterns point to new forms of trust and reputation between websites and autonomous systems.

Attendees will leave with a clear view of how the Internet is adapting to AI-driven traffic, which agents are penalized most often, and what this means for security, for businesses that publish content, and for the future of machine-to-web communication.

Auditorium II

Thu 5

13:05h - 13:30h Auditorium II Full Congress Pass

14:35h

Conference | Congress

From Alert Fatigue to Autonomous Triage: How Agentic AI Is Reshaping Vulnerability Management

Sharjeel Khan EPAM Senior Enterprise Security Architect (EMEA) Speaker

2026-11-05 14:35 2026-11-05 15:00 Europe/Madrid From Alert Fatigue to Autonomous Triage: How Agentic AI Is Reshaping Vulnerability Management Security teams are drowning in findings. SAST, SCA and secret-scanning tools generate thousands of alerts, most of them false positives or unreachable code, and analysts spend more time sorting noise than fixing real risk. This session shows how agentic AI can change that. Drawing on a working system I designed and built, I will walk through how an AI triage pipeline combines retrieval over CWE, MITRE ATT&CK and CISA KEV knowledge, code reachability analysis and exploit-probability scoring to classify findings, explain its reasoning and route confirmed issues straight to developers as fix pull requests, with a human analyst kept in the loop for every decision. Attendees will leave with a practical architecture, the guardrails that make AI triage trustworthy, and an honest view of where it works and where it still needs people. Auditorium II

Thu 5

14:35h - 15:00h Auditorium II Full Congress Pass

12:30h

Conference | Congress

Defending at AI speed

2026-11-05 12:30 2026-11-05 12:55 Europe/Madrid Defending at AI speed Cyber threats evolve rapidly and security operations must adapt to respond just as fast. This session explores the key challenges, needs, and capabilities for enabling an AI assisted cyberdefense model that accelerates detection, investigation, and response. Attendees will gain insights into how organizations can foster human expertise with AI capabilities to improve their chances to stay ahead of increasingly sophisticated attacks. Auditorium II

Thu 5

12:30h - 12:55h Auditorium II Full Congress Pass

Congress

#BCC26

October is Cyber Month.