Back | Home Agenda

Track: CISOs & Security Leader

Tue 03

12:00h

Side Event | Side Event CISOs & Security Leader

CISO AI Coffee Talk & Tour

2026-11-03 12:00 2026-11-03 13:00 Europe/Madrid CISO AI Coffee Talk & Tour Exclusive gathering of CISOs for an informal coffee and networking session focused on the impact of Artificial Intelligence on cybersecurity. This private roundtable is designed to encourage the exchange of experiences, challenges, and best practices among security leaders from a variety of industries. The discussion will provide a valuable opportunity to share insights, explore emerging trends, and expand professional connections in a relaxed setting. The session will be moderated by David Hidalgo, CISO at Fira de Barcelona, who will guide the conversation through open discussion and interactive exchanges, fostering meaningful dialogue and networking among participants. Networking Hub

Tue 3

12:00h - 13:00h Networking Hub Invitation required

11:55h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

Strengthening Europe’s Cyber Resilience – transition from regulatory framework to implementation

Hans De Vries ENISA Chief Cybersecurity and Operations Officer (COO) Speaker

2026-11-03 11:55 2026-11-03 12:20 Europe/Madrid Strengthening Europe’s Cyber Resilience – transition from regulatory framework to implementation Strengthening Europe’s Cyber Resilience – transition from regulatory framework to implementation Auditorium I

Tue 3

11:55h - 12:20h Auditorium I Full Congress Pass

12:15h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

Round Table: Preparing for the Quantum-Safe Transition – The End-User Perspective

Manuel García-Cervigón Nestlé Strategic Product Portofolio Architect, IT Security & Compliance Speaker

Joan Puig Banc Sabadell CISO Speaker

Pau Serra CaixaBank Tech Security Architect Speaker

Isart Canyameres Cybersecurity Agency of Catalonia Head of the Innovation Unit Moderator

2026-11-03 12:15 2026-11-03 13:00 Europe/Madrid Round Table: Preparing for the Quantum-Safe Transition – The End-User Perspective This session explores the main challenges organisations face when starting their quantum-safe migration journey, from setting priorities and managing complexity to addressing third-party dependencies. Experts will discuss how to launch an effective migration programme, build a useful cryptographic inventory, integrate crypto-agility from the outset, and distinguish quantum-safe migration from traditional risk management. The discussion will conclude with practical recommendations to help organisations prioritise actions, overcome barriers and develop a structured, actionable roadmap towards quantum readiness. Level 0 - Room 2.2

Tue 3

12:15h - 13:00h Level 0 - Room 2.2 Public Access

11:30h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Round Table: What technologies can help mitigate the quantum threat? How can businesses adopt them?

Victor Canivell Qilimanjaro President and Co-Founder Speaker

Vanesa Díaz Luxquanta QKD expert Speaker

Carlos Abellan Quside PQC expert Speaker

Natalia Gómez CTTI Director of Strategy and Planning for Digital Infrastructure Speaker

Jordi Mur Emerging Technologies, Quantum & Cybersecurity Expert Moderator

2026-11-03 11:30 2026-11-03 12:15 Europe/Madrid Round Table: What technologies can help mitigate the quantum threat? How can businesses adopt them? This session explores how close we are to Q-Day and the breakthroughs and warning signs businesses should monitor. Experts will discuss how Post-Quantum Cryptography (PQC), Quantum Key Distribution (QKD) and Quantum Random Number Generators (QRNGs) complement each other, their technological maturity and readiness for enterprise adoption. The discussion will cover implementation strategies, integration with existing IT and network infrastructure, hardware requirements, operational performance, interoperability, and the role of telecom providers. It will also examine access to public QKD infrastructure, deployment challenges and affordable business models for SMEs, concluding with practical recommendations to help organizations take their first steps towards quantum-safe security. Level 0 - Room 2.2

Tue 3

11:30h - 12:15h Level 0 - Room 2.2 Public Access

10:00h

Conference | Congress Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

Opening Session BCC

Laura Caballero Nadales Cybersecurity Agency of Catalonia Director Speaker

Albert Tort Generalitat de Catalunya Secretary of Telecommunications and Digital Transformation Speaker

Flavia Santoro BCC Director Speaker

2026-11-03 10:00 2026-11-03 10:35 Europe/Madrid Opening Session BCC

The Opening Session of the Barcelona Cybersecurity Congress 2026 will officially launch the congress, bringing together industry leaders, cybersecurity experts and key stakeholders.

The session will set the tone for a congress dedicated to knowledge sharing, innovation and building a more secure digital future.

Auditorium I

Tue 3

10:00h - 10:35h Auditorium I Full Congress Pass

13:05h

Conference | Congress Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

Sunburst — Taking luck out of incident response

Tim Brown Team8 Partner and CISO in Residence Speaker

2026-11-03 13:05 2026-11-03 13:30 Europe/Madrid Sunburst — Taking luck out of incident response

In 2020, the Russian SVR compromised SolarWinds' Orion build pipeline, and roughly 18,000 organizations downloaded the tainted update. Tim Brown, former CISO of SolarWinds, shares his first-person account of leading the response to SUNBURST, the SEC charges that followed, and five years to vindication.

Brown has often called that response lucky — the right help arrived, the team stayed aligned, transparency was a situational call rather than a plan, and the tabletop exercises they'd run hadn't covered this scenario. It worked, but it worked because of people and circumstance no organization can count on twice.

This keynote moves from that manual, human-driven response to what's possible today: how agentic AI is changing incident detection, triage, and response, and what it takes to replace luck with design — rehearsed, scenario-flexible playbooks and tooling that don't depend on who happens to be in the room when the call comes in.

Auditorium II

Tue 3

13:05h - 13:30h Auditorium II Full Congress Pass

10:00h

Side Event | Side Event AI, identity and trust in the digital environment Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

The CISO no longer makes decisions alone

Juan Ma Perals Global CISO Council Spain Chapter President / Founder Speaker

Iñaki Aldaz Global CISO Council Spain Chapter, Ajuntament de Sant Cugat del Vallès Police Inspector, Leadership & Public Safety Specialist Speaker

2026-11-03 10:00 2026-11-03 11:00 Europe/Madrid The CISO no longer makes decisions alone Official presentation of the Global CISO Council Spain Chapter, its purpose, working model and collaboration initiatives with the CISO community in Spain. The session will conclude with an opportunity for discussion and networking. Level 1 - Room 2.3

Tue 3

10:00h - 11:00h Level 1 - Room 2.3 Public Access

10:00h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

Cybersecurity. Business. Disruption. New angles for a new era

Xavier Vila ISACA Barcelona Board Member Speaker

Schedule

10:00h - 10:15h

Welcome and introductions

Ramsés Gallego ISACA Barcelona Chapter President Host

10:15h - 11:00h

At the DNA of every company: Identity and Access Management

Ramsés Gallego ISACA Barcelona Chapter President Speaker

11:00h - 11:45h

It’s not Machine Learning. It’s Human Teaching!

Ramsés Gallego ISACA Barcelona Chapter President Speaker

11:45h - 12:15h

Navigating the future: Cybersecurity Trends and ISACA Certifications for 2026

Théo Nottelet ISACA Regional Development Manager Iberian Market Speaker

12:15h - 13:00h

AI, PQC and the overloaded CISO: From exhausted gatekeeper to ecosystem coach

Xavier Vila ISACA Barcelona Board Member Speaker

13:00h - 13:45h

Protecting and defending at machine speed. A New Beginning

Ramsés Gallego ISACA Barcelona Chapter President Speaker

2026-11-03 10:00 2026-11-03 13:45 Europe/Madrid Cybersecurity. Business. Disruption. New angles for a new era

- At the DNA of every company: Identity and Access Management

- Building and running a SOC… from scratch

- Privacy as the pillar of every society

- The Perfect Storm: Threats & Risks IN the Cloud, FROM the Cloud, THROUGH the Cloud

- It’s not Machine Learning. It’s Human Teaching!

Level 0 - Room 2.1

Tue 3

10:00h - 13:45h Level 0 - Room 2.1 Public Access

17:00h

Side Event | Side Event AI, identity and trust in the digital environment CISOs & Security Leader IT & Infrastructure

Deepfakes & Spoofing: When SMS and Voice Cannot Be Trusted

Xavier Álvarez Merabytes Director de Operaciones Speaker

#Security, #Spoofing

2026-11-03 17:00 2026-11-03 17:30 Europe/Madrid Deepfakes & Spoofing: When SMS and Voice Cannot Be Trusted Today, threat actors can send calls and SMS from any number, with any text and voice, seamlessly impersonating bank clients and providers. We’ll cover critical defenses, including why you should adopt RCS, how to implement rotating voice security keys, and the importance of real-world deepfake simulations. Networking Hub

Tue 3

17:00h - 17:30h Networking Hub Public Access

16:30h

Side Event | Side Event AI, identity and trust in the digital environment CISOs & Security Leader IT & Infrastructure

Nobody Reads 40,000 Vulnerability Findings

Gerardo Prieto The Mill Adventure CISO Speaker

#HumanInTheLoop, #Remediation

2026-11-03 16:30 2026-11-03 17:00 Europe/Madrid Nobody Reads 40,000 Vulnerability Findings Handing the backlog to a chain of AI agents — and knowing when to stop and ask a human. Detection was never the bottleneck. Triage, ownership, chasing and retesting are. This session walks through an agentic pipeline that takes a finding — whether it came from a cloud scanner, a SAST tool, an endpoint agent or a pentest report — all the way to a verified fix. Contextual severity scoring, one agent independently checking another's work, and the hard part: knowing when the automation is confident and when a human still has to decide. Networking Hub

Tue 3

16:30h - 17:00h Networking Hub Public Access

15:30h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk Compliance & Data Protection CISOs & Security Leader

Jornada Anual DCA Ciberseguretat

Laura Caballero Nadales Cybersecurity Agency of Catalonia Director Speaker

Alba Barrientos DCA Gestora de la Comunitat Ciberseguretat Host

José Nicolás Castellano Cybersecurity Consultant Speaker

Xavier Pi UPC School Co-director Máster Industria 4.0 Speaker

Olga Sánchez Caixabank IT Manager Speaker

Barbara Eisele DCA Gestora Blockchain Speaker

2026-11-03 15:30 2026-11-03 17:30 Europe/Madrid Jornada Anual DCA Ciberseguretat La comunitat de ciberseguretat de la Digital Catalonia Alliance (DCA) celebra la seva jornada anual en el marc del Barcelona Cybersecurity Congress, un punt de trobada per a empreses, professionals i agents de l’ecosistema digital. La sessió donarà visibilitat a solucions tecnològiques innovadores en els àmbits de la ciberseguretat i el blockchain, i abordarà els reptes de la confiança digital des de diferents perspectives. El programa inclourà demostracions i casos pràctics, una sessió sobre com s’executa un ciberatac i una taula rodona amb experts en ciberseguretat, compliance i blockchain. La jornada finalitzarà amb un espai de networking per fomentar connexions i noves oportunitats de col·laboració Level 0 - Room 2.1

Tue 3

15:30h - 17:30h Level 0 - Room 2.1 Invitation required

11:20h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience Compliance & Data Protection CISOs & Security Leader

Panel – ¿Quién controla realmente el riesgo de la cadena de suministro industrial?

Oscar López Grupo Agrolimen Cybersecurity & IT Governance Manager Speaker

César Delgado Rockwell Automation Cybersecurity Business Development Speaker

Pablo Carmona Preventa de Redes y Ciberseguridad OT/IT Speaker

Joan Figueras Coordinador de CCI en Cataluña Speaker

Maite Arcos Fundación ESYS Directora Moderator

2026-11-03 11:20 2026-11-03 12:00 Europe/Madrid Panel – ¿Quién controla realmente el riesgo de la cadena de suministro industrial? text Networking Hub

Tue 3

11:20h - 12:00h Networking Hub Public Access

10:40h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience CISOs & Security Leader IT & Infrastructure

El papel del fabricante en la ciberresiliencia industrial

César Delgado Rockwell Automation Cybersecurity Business Development Speaker

2026-11-03 10:40 2026-11-03 11:00 Europe/Madrid El papel del fabricante en la ciberresiliencia industrial text Networking Hub

Tue 3

10:40h - 11:00h Networking Hub Public Access

10:20h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience CISOs & Security Leader IT & Infrastructure

¿Qué ocurre cuando falla un tercero tecnológico crítico?

Oscar López Grupo Agrolimen Cybersecurity & IT Governance Manager Speaker

2026-11-03 10:20 2026-11-03 10:40 Europe/Madrid ¿Qué ocurre cuando falla un tercero tecnológico crítico? text Networking Hub

Tue 3

10:20h - 10:40h Networking Hub Public Access

10:00h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience CISOs & Security Leader IT & Infrastructure

Apertura: la cadena de suministro industrial ya no es una cadena

José Valiente Centro de Ciberseguridad Industrial (CCI) Director General Speaker

2026-11-03 10:00 2026-11-03 10:20 Europe/Madrid Apertura: la cadena de suministro industrial ya no es una cadena text Networking Hub

Tue 3

10:00h - 10:20h Networking Hub Public Access

10:00h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience Compliance & Data Protection CISOs & Security Leader IT & Infrastructure

Ciberresiliencia en la cadena de suministro industrial

Schedule

10:00h - 10:20h

Apertura: la cadena de suministro industrial ya no es una cadena

José Valiente Centro de Ciberseguridad Industrial (CCI) Director General Speaker

10:20h - 10:40h

¿Qué ocurre cuando falla un tercero tecnológico crítico?

Oscar López Grupo Agrolimen Cybersecurity & IT Governance Manager Speaker

10:40h - 11:00h

El papel del fabricante en la ciberresiliencia industrial

César Delgado Rockwell Automation Cybersecurity Business Development Speaker

11:00h - 11:20h

Cómo gestionar dependencias en proyectos industriales complejos

María Dolores Trapero Elecnor Sistemas Responsable de Centro de Ciberseguridad y redes IT/OT Speaker

11:20h - 12:00h

Panel – ¿Quién controla realmente el riesgo de la cadena de suministro industrial?

Oscar López Grupo Agrolimen Cybersecurity & IT Governance Manager Speaker

César Delgado Rockwell Automation Cybersecurity Business Development Speaker

Pablo Carmona Preventa de Redes y Ciberseguridad OT/IT Speaker

Joan Figueras Coordinador de CCI en Cataluña Speaker

Maite Arcos Fundación ESYS Directora Moderator

2026-11-03 10:00 2026-11-03 12:00 Europe/Madrid Ciberresiliencia en la cadena de suministro industrial La resiliencia industrial ya no depende únicamente de proteger los activos propios, sino de comprender y gobernar las dependencias tecnológicas que sostienen la operación. Este side event aborda la cadena de suministro desde cuatro perspectivas complementarias: operador industrial, fabricante, ingeniería y gobierno del riesgo. Analizaremos qué ocurre cuando falla un tercero tecnológico crítico, cómo diseñar productos y arquitecturas capaces de resistir, y cómo gestionar dependencias en proyectos industriales complejos. La sesión culminará con un panel sobre quién controla realmente el riesgo de la cadena de suministro, poniendo el foco en responsabilidad compartida, visibilidad, alternativas, capacidad de respuesta y continuidad operativa. Networking Hub

Tue 3

10:00h - 12:00h Networking Hub Public Access

15:10h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

The confidence gap: Securing what changes faster than you can test

Marcelo Castro Escalada Outpost24 Senior Product Manager Speaker

#AccessGovernance, #AIAgents, #AISecurity, #Authorization, #IdentityGovernance, #PrivilegedAccess, #RuntimeAuthorization

2026-11-03 15:10 2026-11-03 15:35 Europe/Madrid The confidence gap: Securing what changes faster than you can test

Security leaders face a difficult reality: applications, infrastructure, APIs, and attack surfaces are changing faster than traditional security programs can validate them.

While annual and periodic testing still provide value, they were never designed for environments shaped by AI-powered development, continuous deployment, and rapidly evolving threats. The result is a growing confidence gap between perceived security and actual exposure.

So how do organizations determine what to test, when to test it, and where to focus their efforts as the environment continuously changes?

In this session, we'll explore the shift from static testing programs to continuous, risk-based validation strategies that enable teams to identify exploitable risk, prioritize what matters most, and validate security as their attack surface evolves. We'll examine the role of automation, human expertise, and continuous exposure assessment in helping organizations move from reactive testing to continuous confidence.

Join us to see how modern security teams are adapting their validation strategies to keep pace with change and make better security decisions in an increasingly dynamic risk landscape.

Auditorium II

Tue 3

15:10h - 15:35h Auditorium II Full Congress Pass

13:05h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Lessons learned from security incidents: How to improve threat detection and response

David López Meco Telefónica Tech Global Head of Cybersecurity Product & Presales Engineering Speaker

#DigitalSovereignty, #TechnologyGovernance, #ThirdPartyRisk, #VendorSecurity

2026-11-03 13:05 2026-11-03 13:30 Europe/Madrid Lessons learned from security incidents: How to improve threat detection and response

Security incidents in recent years have made it clear that the ability to prevent attacks is no longer enough. Rapid detection, investigative capabilities, and coordinated response are key factors in minimizing the impact of a security breach.

In this session, we will review some of the key lessons learned from real-world incidents and trends observed in today’s threat landscape. We will analyze the challenges organizations face in identifying malicious behavior, reducing response times, and improving their resilience against increasingly sophisticated attacks.

Based on these findings, we will explore how managed detection and response (MxDR) models help complement the capabilities of security teams by combining technology, threat intelligence, and expert knowledge, providing a more comprehensive view of the environment and a more effective response to incidents.

Auditorium I

Tue 3

13:05h - 13:30h Auditorium I Full Congress Pass

11:55h

Roundtable | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Defending Europe in 2026: National cybersecurity strategies, collaboration & emerging threats

Maurizio Mensi Italian National School of Administration Professor of Law and Economics Moderator

Jan Smedts Digitaal Vlaanderen (Flanders) CEO Speaker

Dan Cîmpean National Directorate for Cyber Security (DNSC) (Romania) Director Speaker

Laura Caballero Nadales Cybersecurity Agency of Catalonia Director Speaker

Adam Marczyski NASK National Research Institute (Poland) Deputy Director for Cybersecurity and Innovation Speaker

#CyberResilience, #CyberSovereignty, #EuropeanSecurity, #NationalCybersecurityStrategies, #ThreatLandscape

2026-11-03 11:55 2026-11-03 12:55 Europe/Madrid Defending Europe in 2026: National cybersecurity strategies, collaboration & emerging threats Our next round table brings together cybersecurity representatives from Catalonia, Flanders, Romania and Poland to discuss some of the key challenges shaping cybersecurity in Europe today. The conversation will explore the evolving threat landscape, the impact of regulation and AI, the need to strengthen talent and public-private collaboration, and the importance of cross-border cooperation and digital trust. Auditorium II

Tue 3

11:55h - 12:55h Auditorium II Full Congress Pass

11:20h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

Defending against hidden risks of AI tools in the workplace

Seamus Lennon ThreatLocker Vice President of Operations for EMEA Speaker

#CISOs&SecurityLeader, #Compliance&DataProtection, #CybersecurityConsultants, #IT&Infrastructure

2026-11-03 11:20 2026-11-03 11:45 Europe/Madrid Defending against hidden risks of AI tools in the workplace AI tools have the power to transform organizational productivity while exponentially increasing risk. Join this session to uncover how workplace AI tools can expose sensitive data, bypass controls, and introduce new attack surfaces. We’ll also explore what you can do to mitigate these risks effectively without impeding innovation. Auditorium I

Tue 3

11:20h - 11:45h Auditorium I Full Congress Pass

Wed 04

10:00h

Side Event | Side Event CISOs & Security Leader

AI in your CISO security program: From risk to readiness

DrBA MSc Jeroen Van Der Vlies checksec.nl Trainer, Writer, A.I. CISO/CISPO and Auditor Speaker

2026-11-04 10:00 2026-11-04 11:30 Europe/Madrid AI in your CISO security program: From risk to readiness

Turn AI uncertainty into security leadership

AI is changing the rules of cyberattack and defence. For CISOs, the challenge is clear: manage emerging risks while putting AI to work in the security program.

Move beyond the hype. Join this workshop to explore how to connect AI adoption with business strategy, establish effective governance, and turn promising use cases into measurable security outcomes.

From strategic insight to practical action

Join DrBA MSc Jeroen Van Der Vlies for a business-focused discussion on AI, cybersecurity, and executive decision-making. Explore perspectives from EC-Council’s Certified AI Program Manager CAIPM training and his book, How Can the C-level Boardroom Stay Agile and Make Effective Company Decisions of (New) “Cyber” Business Risks.

The session brings together AI risk management, security operations, and boardroom priorities, focusing on supporting compliance with applicable requirements under the AI Act, GDPR, NIS2, CER, and the Cybersecurity Act.

Three calls to action

Take control of your AI risk. Map your organization’s AI exposure and establish clear policies, accountability, and oversight aligned with your business priorities.

Put AI to work in your security program. Prioritize use cases—from alert triage to incident response—and plan controlled pilots with clear success criteria.

Turn ambition into readiness. Build an actionable roadmap that connects people, processes, and technology with measurable outcomes and executive oversight.

Networking Hub

Wed 4

10:00h - 11:30h Networking Hub Public Access

14:45h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

Closing remarks and next steps

Ulrich Seldeslachts LSEC Leaders in Security CEO Speaker

2026-11-04 14:45 2026-11-04 15:00 Europe/Madrid Closing remarks and next steps Key findings from the day - ACTI-X next steps - Opportunities for cooperation and community participation Level 1 - Room 2.3

Wed 4

14:45h - 15:00h Level 1 - Room 2.3 Public Access

13:45h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Talk: AI in cybersecurity and critical infrastructure – From threat detection to autonomous assistance

Luis Búrdalo S2GRUPO Head of R&D Speaker

2026-11-04 13:45 2026-11-04 14:15 Europe/Madrid Talk: AI in cybersecurity and critical infrastructure – From threat detection to autonomous assistance AI-supported CTI analysis - Detection, enrichment and prioritisation - Agentic AI and automated workflows - Human oversight and trustworthy AI - Opportunities and risks of AI-enabled cyber defence Level 1 - Room 2.3

Wed 4

13:45h - 14:15h Level 1 - Room 2.3 Public Access

10:45h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Keynote: Cyber threat intelligence across the EU – Collective defence and cross border coordination for critical sectors

Ulrich Seldeslachts LSEC Leaders in Security CEO Speaker

2026-11-04 10:45 2026-11-04 11:00 Europe/Madrid Keynote: Cyber threat intelligence across the EU – Collective defence and cross border coordination for critical sectors The EU CTI landscape: Moving from isolated threat data silos to collective European situational awareness - Navigating NIS2 and the Critical Entities Resilience (CER) Directive: Operational implications for cross-border transport operators - How European partnerships, ISACs, and initiatives like ACTI-X bridge the gap between national CSIRTs, regional authorities, and industrial transport networks. Level 1 - Room 2.3

Wed 4

10:45h - 11:00h Level 1 - Room 2.3 Public Access

10:15h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Welcome and opening remarks

Ulrich Seldeslachts LSEC Leaders in Security CEO Speaker

2026-11-04 10:15 2026-11-04 10:20 Europe/Madrid Welcome and opening remarks Setting the scene, LSEC as a security catalyst. Level 1 - Room 2.3

Wed 4

10:15h - 10:20h Level 1 - Room 2.3 Public Access

10:00h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Registration & Networking

2026-11-04 10:00 2026-11-04 10:15 Europe/Madrid Registration & Networking Registration, informal networking and arrival of participants ahead of the programme. Level 1 - Room 2.3

Wed 4

10:00h - 10:15h Level 1 - Room 2.3 Public Access

10:00h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

The new attack surface in healthcare & pharma: Balancing AI, vendor access, and rapid response

Jordi García Palo Alto Networks Solutions Consultant Speaker

Miguel Angel Benito Servei de Salut de les Illes Balears Subdirector de Transformación, Innovación y Salud Digital Speaker

2026-11-04 10:00 2026-11-04 10:35 Europe/Madrid The new attack surface in healthcare & pharma: Balancing AI, vendor access, and rapid response As modern hospitals and pharmaceutical companies evolve into highly interconnected digital ecosystems, their attack surface has expanded exponentially, making cybersecurity critical for both patient safety and intellectual property protection. This session explores real-world use cases across clinical environments and pharma R&D to address the most pressing challenges facing security teams today. Auditorium II

Wed 4

10:00h - 10:35h Auditorium II Full Congress Pass

10:00h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

CyberHub Spain National Conference: Cybersecurity in the face of the new technological landscape

Schedule

10:00h - 10:05h

Opening

Albert Anglarill Recasens AMETIC Director Territorial y de Proyectos Speaker

10:05h - 10:40h

Panel 1. European and Spanish cybersecurity strategy

Albert Anglarill Recasens AMETIC Director Territorial y de Proyectos Moderator

José Martínez-Usero DIGITALEUROPE Director for Projects Speaker

Daniel Burgos UNIR Vicerrector. Catedrático de Tecnologías para la Educación y la Comunicación, Vicerrector de Proyecto Speaker

10:40h - 10:50h

Keynote. Building a European Cybersecurity Skills Network: From National Hubs to Long-Term European Cooperation

Urša Mlekuž Chamber of Commerce & Industry of Slovenia Consultant Speaker

10:50h - 10:55h

Presentation of the report “Analysis of Cybersecurity Needs in Spain 2026”

Rocío Baeza AMETIC Project and Policy Manager Speaker

11:15h - 12:00h

Panel 2. The business challenge: Capabilities, talent, and resilience

Marcos Gómez INCIBE - Instituto Nacional de Ciberseguridad CISO & Deputy Director of Corporate Security Speaker

David Garriga Sirt CEO Speaker

Javier Zubieta AMETIC Presidente Comisión de Ciberseguridad Moderator

Jordi Ubach CyberTix Speaker

David Forner Agència de Ciberseguretat de Catalunya Jefe de la Unidad de Producto Transversal Speaker

12:00h - 12:45h

Panel 3. AI and quantum computing: The new technological landscape

Iván Gutiérrez Tecnalia Responsable de Frontier Cybersecurity Speaker

Ángel López Airbus Cyber Technical Manager Speaker

Mònica Espinosa Garcés Women4Cyber / Agència de Ciberseguretat de Catalunya Embajadora en Cataluña (Women4Cyber) / Jefa de Captura y Gestión de Fondos (ACC) Moderator

Domenico Tulli Quside PhD Co-founder & CTO Speaker

Albert Solana Qilimanjaro Quantum Tech Chief of Staff Speaker

12:45h - 13:00h

Closing

Paco Hortigüela Martos AMETIC Presidente Speaker

13:00h - 13:30h

Networking

2026-11-04 10:00 2026-11-04 13:00 Europe/Madrid CyberHub Spain National Conference: Cybersecurity in the face of the new technological landscape

Cybersecurity is facing a technological landscape undergoing profound transformation. The emergence of artificial intelligence, advances in technologies such as quantum computing, and the evolution of cyber threats are reshaping the capabilities required by businesses, public administrations, and professionals.

The Cyberhubs Spain National Conference will bring together representatives from institutions, industry, academia, and the technology ecosystem to analyse the key challenges and opportunities facing the sector in Spain and Europe.

The event will explore the evolution of cybersecurity strategies, the development of skills and talent, and the impact of AI and other emerging technologies on the future of cybersecurity. It will provide a space to share experiences, identify needs, and strengthen collaboration among the different stakeholders across the ecosystem.

Level 0 - Room 2.1

Wed 4

10:00h - 13:00h Level 0 - Room 2.1 Public Access

13:05h

Conference | Congress Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

From culture to posture: Strengthening employee security in the age of AI

Kike Serrano Velamazán Riot Market Launcher Spain & Iberia Ambassador and Speaker Speaker

2026-11-04 13:05 2026-11-04 13:30 Europe/Madrid From culture to posture: Strengthening employee security in the age of AI

Today's threats evolve faster than we can train our teams, and CISOs know that legacy awareness programs are no longer enough to stop sophisticated and adaptive attacks.

By empowering users to take ownership of their daily cyber habits and actions, CISOs can limit their exposure to attacks, enable clearer reporting on key metrics, and build a stronger shared security posture across the organisation.

Join this boardroom to discuss strategies to:

- Expand security awareness programmes to engage all business units, not just IT

- Implement individual cybersecurity KPIs to encourage teams to build better habits

- Enable effective board-level reporting with clear, measurable security progress indicators

Auditorium II

Wed 4

13:05h - 13:30h Auditorium II Full Congress Pass

10:00h

Side Event | Side Event CISOs & Security Leader

CISO FORUM: Securing Cities and Critical Infrastructure

David Esteban Barcelona City Council CISO Speaker

2026-11-04 10:00 2026-11-04 11:30 Europe/Madrid CISO FORUM: Securing Cities and Critical Infrastructure An exclusive roundtable led by David Esteban, CISO of the Barcelona City Council, bringing together cybersecurity leaders from city councils, public institutions and critical infrastructure operators to exchange experiences, challenges and best practices. Through an open discussion, participants will explore topics such as OT security, cyber resilience, crisis management, interdependencies and cross-sector collaboration. Level 1 - Room 2.5

Wed 4

10:00h - 11:30h Level 1 - Room 2.5 Invitation required

16:30h

Awards | Awards Cybersecurity as a strategic business and reputational risk Compliance & Data Protection CISOs & Security Leader

The CISO Leadership Awards Ceremony

Marcos Gómez INCIBE - Instituto Nacional de Ciberseguridad CISO & Deputy Director of Corporate Security Jury

Holger Spohn North Atlantic Treaty Organisation Principal Engineer (Advanced Cyber Defence Principles) Jury

José Valiente Centro de Ciberseguridad Industrial (CCI) Director General Jury

Krzysztof Szubert European Cyber Security Organisation (ECSO) Member of the Board of Directors Jury

Anett Mádi-Nátor Women4Cyber Foundation President Jury

Daniel Walther die Mobiliar Chief Information Security Officer Jury

Jon France idea42 CISO Jury

Katy Anton JP Morgan Executive Director of Cybersecurity Architecture Jury

Luca Dozio Altermaind Chief Information Security Officer Jury

Sascha Maier SV Group Chief Information Security Officer Jury

2026-11-04 16:30 2026-11-04 17:30 Europe/Madrid The CISO Leadership Awards Ceremony 28 of the most influential cybersecurity leaders in Europe and beyond are competing across 7 categories. The winners will be revealed live at Barcelona Cybersecurity Congress on 4 November at 16:30. Make sure you are in the room. Auditorium I

Wed 4

16:30h - 17:30h Auditorium I Full Congress Pass

12:00h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience CISOs & Security Leader IT & Infrastructure

ISC2 Community & Professional Development Forum

Alejandro Cadarso ISC2 Spain Chapter / Field CTO President Host

Néstor Angulo ISC2 Spain Chapter / CISSP Head of Technology Moderator

Sebastián Correas ISS & GRC Consultant / CISSP / CCSSP / ISO27001 & ISO 42001 Lead Auditor Speaker

Mykhailo Sindieiev DevSecOps Engineer / OWASP Barcelona Leader Speaker

#Ciberseguridad, #ISC2, #ISC2Spain, #OWASP, #SBOM

2026-11-04 12:00 2026-11-04 13:30 Europe/Madrid ISC2 Community & Professional Development Forum ISC2 Spain Chapter is organising this 90-minute session to share updates on the Chapter’s development, its certification initiatives, continuing education and professional development activities, and to host a collaborative roundtable with OWASP. The roundtable, entitled “SBOM: The Foundation for Secure Development, Vulnerability Management, and Compliance”, will explore software supply chain security and Software Bills of Materials (SBOMs) in the context of the CRA (Cyber Resilience Act) and NIS2, offering a practical perspective on vulnerabilities and open-source risk management. An open space to learn, exchange experiences and strengthen the professional cybersecurity community. Networking Hub

Wed 4

12:00h - 13:30h Networking Hub Public Access

14:35h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

Agentic AI in production: What works and what doesn’t in a real SOC

Erik Alejos Agustí Fundació “la Caixa” CISO Speaker

Ángela Martijena Di Monte Var Group Iberia Head of Cyber Defence Speaker

2026-11-04 14:35 2026-11-04 15:00 Europe/Madrid Agentic AI in production: What works and what doesn’t in a real SOC

The evolution of the SOC is no longer just about increasing automation, but about improving decision-making and prioritising alerts according to actual business risk.

This session presents a real-world use case from Fundació “la Caixa”, whose 24/7 Follow-the-Sun SOC operates across Spain, Thailand and Mexico. Building on existing SIEM/SOAR automation, the organisation is exploring agentic AI capabilities using Devo and Strike AI 48 to support alert triage, enrichment and initial analysis.

The goal is to reduce analysts’ workload, improve response times and ensure more consistent risk-based prioritisation, while keeping human judgement at the centre. Preliminary results show improvements in triage time, analytical consistency and escalation processes. The session will also address key challenges, including agent governance, context quality and the need for human oversight.

Co-presented with Erik Alejos, Security Manager at Fundació “la Caixa”, this session shares practical lessons, benefits and limitations from a real-world implementation, with no commercial focus.

Auditorium II

Wed 4

14:35h - 15:00h Auditorium II Full Congress Pass

11:55h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

Your AI Agents can act without you: Can you see them, control them and stop them?

Arvin Bansal C&S Wholesale Grocers CISO Speaker

2026-11-04 11:55 2026-11-04 12:20 Europe/Madrid Your AI Agents can act without you: Can you see them, control them and stop them?

Enterprise AI has crossed a line. The first wave advised people. Agentic AI can now use credentials, call APIs, access sensitive data and change business systems at machine speed.

Before you scale it, can you answer: How many agents are running? Who owns them? What can they access and change? Can an agent exceed the authority of the human it serves? Can you prove what an agent actually did? And if one is compromised or manipulated, can you stop it before it becomes a business incident?

Drawing on practical experience building an enterprise AI security strategy, Arvin Bansal will show how to move from AI policy to production control using TRACE: Track, Register, Approve, Certify and Expose. He will connect board risk to agent identity, permission inheritance, data protection, gateways, behavioral monitoring, forensic traceability and kill switches, showing how security can accelerate agentic transformation without surrendering control.

Auditorium II

Wed 4

11:55h - 12:20h Auditorium II Full Congress Pass

11:20h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

The new frontier: Sovereignty and resilience in the age of AI

José de la Cruz TrendAI™ Technical Director Iberia Speaker

Raúl Guillén TrendAI™ European Cybersecurity Strategist Speaker

2026-11-04 11:20 2026-11-04 11:45 Europe/Madrid The new frontier: Sovereignty and resilience in the age of AI Frontier AI is creating a new technology frontier — and a new security challenge. Organisations must not only protect AI systems, but also understand their dependencies, maintain control over critical capabilities and remain resilient as the technology evolves. This session explores the intersection of Frontier AI, digital sovereignty and cyber resilience, bringing together strategic and technical perspectives on how to navigate this rapidly changing landscape. Auditorium II

Wed 4

11:20h - 11:45h Auditorium II Full Congress Pass

11:20h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

This is your brain on deepfakes: Why AI scams work on smart people and how you can stop it

Christian Reinhardt SoSafe SE Director Human Risk Management Speaker

#DataPrivacy, #DigitalTrust, #Governance, #IdentitySecurity, #Resilience, #TrustFrameworks

2026-11-04 11:20 2026-11-04 11:45 Europe/Madrid This is your brain on deepfakes: Why AI scams work on smart people and how you can stop it Deepfakes are no longer science fiction – they are here, and they are highly effective. Drawing on neuroscientific insights, this talk explains why the human brain is not built for these threats and how the same psychological mechanisms attackers exploit can be turned into powerful tools for awareness. Understanding the brain is key to building real security resilience. Auditorium I

Wed 4

11:20h - 11:45h Auditorium I Full Congress Pass

10:00h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

Sovereign Cyber AI: Beyond the obvious

Kirti Kumar Cyber AI Products Global CTO Speaker

#AIGovernance, #AIInfrastructure, #AISecurity, #CyberSovereignty, #DataGovernance, #DigitalSovereignty, #EuropeanAI, #SovereignAI

2026-11-04 10:00 2026-11-04 10:35 Europe/Madrid Sovereign Cyber AI: Beyond the obvious Sovereign AI usually raises three concerns: where the data resides, what the regulator will ask, and a geopolitically induced coma. Those are the obvious ones. The harder questions are who can alter your AI, whether your defenders can live without it, and one rarely asked: how far an attacker can steer it without ever touching it. Drawing on real-world initiatives, this session sets out a reference architecture for Sovereign Cyber AI and its value-realisation model. Existing standards stop short of this, and closing the gap is our job as a community. The safeguards we settle on now are what the next generation inherits. Auditorium I

Wed 4

10:00h - 10:35h Auditorium I Full Congress Pass

15:45h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

Okay… so, what next?

Carlos Payés SentinelOne Strategic AI Executive Speaker

#AITransformation, #CISOs, #CyberLeadership, #DecisionMaking, #ExecutiveLeadership, #Governance, #RiskManagement, #SecurityStrategy

2026-11-04 15:45 2026-11-04 16:10 Europe/Madrid Okay… so, what next?

We are at the AI inflection point.

Externally, AI is enabling attackers. Internally, adoption is racing ahead of security, governance, and clarity of ownership. It all feels a bit uncomfortably familiar.

This session draws lessons from yesterday's cyber security as we look to tomorrow. What has worked, what failed, and where can we head next if we want to secure AI without slowing progress.

I’ll look ahead to autonomous SOC operations and a threat landscape shaped by AI-enabled attackers and machine-speed decision making.

AI is changing security. Okay... so, what next?

Auditorium I

Wed 4

15:45h - 16:10h Auditorium I Full Congress Pass

11:55h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

New operating models for governing AI and cybersecurity

Sounil Yu Cyber Defense Matrix and the DIE Triad Author and creator Speaker

#AIGovernance, #CISOs, #CyberResilience, #CybersecurityLeadership, #Governance, #RiskManagement, #SecurityOperatingModel, #Strategy

2026-11-04 11:55 2026-11-04 12:20 Europe/Madrid New operating models for governing AI and cybersecurity AI is not just more automation. It requires new thinking and new operating models to govern and secure properly. This session explores these operating models, shares practical ways to apply them, and predicts what is coming next. Auditorium I

Wed 4

11:55h - 12:20h Auditorium I Full Congress Pass

Thu 05

10:05h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Beyond compliance: Building cyber resilience where people, digital security and physical safety converge

Farell Folly Cybersecurity Competencer Center Global Head Speaker

2026-11-05 10:05 2026-11-05 10:35 Europe/Madrid Beyond compliance: Building cyber resilience where people, digital security and physical safety converge

As Europe strengthens its cybersecurity regulations and digital sovereignty ambitions, organizations must move beyond compliance to build genuine, demonstrable cyber resilience.

Cybersecurity involves multiple perspectives: executives, engineers, security professionals, safety experts and employees all perceive risks differently. True resilience emerges from connecting these views and addressing threats that affect industrial operations, critical infrastructure, supply chains, business continuity and human safety.

This session explores how organizations can turn regulatory requirements into practical resilience capabilities. Drawing on industrial cybersecurity and independent testing, inspection and certification, it examines how human-centered leadership, security-by-design, international standards and independent assurance can strengthen resilience, manage technological dependencies and build trust.

Ultimately, cyber resilience means bringing diverse perspectives together to protect people, sustain critical operations and preserve trust in an interconnected world.

Auditorium I

Thu 5

10:05h - 10:35h Auditorium I Full Congress Pass

11:20h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

When one attack makes everyone stronger: Inside collective defense

Víctor Manuel Hernández Gómez Orange Cyberdefense in Spain Country Manager Speaker

2026-11-05 11:20 2026-11-05 11:45 Europe/Madrid When one attack makes everyone stronger: Inside collective defense

Cyber threats are fast-moving, adaptive and increasingly interconnected, powered by AI. No organisation should have to face them alone.

Join Victor Hernandez, Orange Cyberdefense España, managing director, to discover how Dynamic SOC turns the scale and diversity of its protected community into a collective advantage. Signals from nearly 4,000 organizations, around 3 million supervised assets across 8 connected countries, combined with in-house cyber threat intelligence and human expertise, help identify emerging threats earlier and transform them into shared detection capabilities.

Dynamic SOC illustrates a simple conviction: when a threat is detected for one asset of one customer, the protection of the whole community can become stronger.

Auditorium II

Thu 5

11:20h - 11:45h Auditorium II Full Congress Pass

13:30h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

Closing: 10 actions to build Europe’s cybersecurity champions

Polyvios Hadjiyiangou Operations at European Cybersecurity Competence Centre (ECCC) Head of Unit Speaker

2026-11-05 13:30 2026-11-05 13:45 Europe/Madrid Closing: 10 actions to build Europe’s cybersecurity champions The closing session distils the forum into a short list of actionable recommendations for founders, investors, policymakers and ecosystem organisations seeking to build globally competitive European cybersecurity companies. Level 1 - Room 2.4

Thu 5

13:30h - 13:45h Level 1 - Room 2.4 Public Access

13:10h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

Open discussion with the audience about the European challenges for both investors and startup companies

Polyvios Hadjiyiangou Operations at European Cybersecurity Competence Centre (ECCC) Head of Unit Speaker

2026-11-05 13:10 2026-11-05 13:30 Europe/Madrid Open discussion with the audience about the European challenges for both investors and startup companies Open discussion with the audience about the European challenges for both investors and startup companies. Level 1 - Room 2.4

Thu 5

13:10h - 13:30h Level 1 - Room 2.4 Public Access

12:40h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

Panel B – The founders’ startup perspective: Building the next European cybersecurity leader

Xavier Álvarez Merabytes Director de Operaciones Speaker

Dan Brett NNEAT CEO and co-founder Speaker

Oscar Villanueva Nymiz Founder & CEO Speaker

Sarah Isal Auriga Partners Cybersecurity early-stage investor Moderator

Àlex Sànchez i Nofre Scud Cybersecurity CEO & Founder Speaker

2026-11-05 12:40 2026-11-05 13:10 Europe/Madrid Panel B – The founders’ startup perspective: Building the next European cybersecurity leader Founders compare approaches to building and scaling cybersecurity companies in Europe, including customer validation, differentiation, talent, international expansion and the challenge of turning technical innovation into a sustainable global business. Level 1 - Room 2.4

Thu 5

12:40h - 13:10h Level 1 - Room 2.4 Public Access

12:00h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

Panel A – The investors’ perspective: what will it take to build Europe’s next cybersecurity champions?

Alde Gonzalez Plug & Play Cybersecurity Investor & Consultant Moderator

Bastien Menguy Auriga Partners Cyber Investor Speaker

Bart Houlleberghs TIN Capital Partner Speaker

Alberto Pérez Arranz Giesecke+Devrient Investment Principal Speaker

Yanick Rosenbaum eCAPITAL VC Speaker

2026-11-05 12:00 2026-11-05 12:40 Europe/Madrid Panel A – The investors’ perspective: what will it take to build Europe’s next cybersecurity champions? Investors discuss the ingredients required to build Europe’s next cybersecurity leaders, from defensible technology and international go-to-market strategy to capital efficiency, talent, procurement access and follow-on funding. The session will explore how investors assess scale-up potential and what founders can do to become investment-ready. Level 1 - Room 2.4

Thu 5

12:00h - 12:40h Level 1 - Room 2.4 Public Access

10:30h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

ECSO panel: can Europe build a competitive cybersecurity industry?

François Lavaste Tikehau Capital Executive Director Speaker

Magdalena Chałas Elevator Ventures Senior Investment Manager Speaker

Polyvios Hadjiyiangou Operations at European Cybersecurity Competence Centre (ECCC) Head of Unit Moderator

2026-11-05 10:30 2026-11-05 11:00 Europe/Madrid ECSO panel: can Europe build a competitive cybersecurity industry? This panel examines the European Cybersecurity Investment Platform and the Fund of Funds approach to mobilising public and private capital for specialised cybersecurity investment. Speakers will discuss progress, lessons learned, the role of regional and institutional actors, and how financing structures can help European companies scale while supporting strategic autonomy and industrial competitiveness. Level 1 - Room 2.4

Thu 5

10:30h - 11:00h Level 1 - Room 2.4 Public Access

10:05h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

From cybersecurity startup to successful exit – the Blueliv story by Daniel Solis. What selling a cybersecurity company taught me about building the next one: The Blueliv journey from startup to successful exit, and how it shapes Zynap today

Daniel Solís Zynap Founder and CEO Speaker

2026-11-05 10:05 2026-11-05 10:30 Europe/Madrid From cybersecurity startup to successful exit – the Blueliv story by Daniel Solis. What selling a cybersecurity company taught me about building the next one: The Blueliv journey from startup to successful exit, and how it shapes Zynap today Daniel Solís reflects on the Blueliv journey from startup growth to successful exit and how those lessons inform his work building Zynap today. The talk will focus on founder decision-making, market positioning, scaling and translating experience into a new venture. Level 1 - Room 2.4

Thu 5

10:05h - 10:30h Level 1 - Room 2.4 Public Access

10:00h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

Opening – Europe’s Cybersecurity innovation moment

Polyvios Hadjiyiangou Operations at European Cybersecurity Competence Centre (ECCC) Head of Unit Speaker

2026-11-05 10:00 2026-11-05 10:05 Europe/Madrid Opening – Europe’s Cybersecurity innovation moment A forum connecting European cybersecurity founders, investors, policymakers and ecosystem leaders to discuss how promising companies can scale into globally competitive champions. Sessions will explore growth capital, public-private investment mechanisms, founder lessons, exit pathways and the conditions needed to strengthen Europe's cybersecurity and defence innovation base. Level 1 - Room 2.4

Thu 5

10:00h - 10:05h Level 1 - Room 2.4 Public Access

10:00h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

European cyber innovation & investment forum

Schedule

10:00h - 10:05h

Opening – Europe’s Cybersecurity innovation moment

Polyvios Hadjiyiangou Operations at European Cybersecurity Competence Centre (ECCC) Head of Unit Speaker

10:05h - 10:30h

From cybersecurity startup to successful exit – the Blueliv story by Daniel Solis. What selling a cybersecurity company taught me about building the next one: The Blueliv journey from startup to successful exit, and how it shapes Zynap today

Daniel Solís Zynap Founder and CEO Speaker

10:30h - 11:00h

ECSO panel: can Europe build a competitive cybersecurity industry?

François Lavaste Tikehau Capital Executive Director Speaker

Magdalena Chałas Elevator Ventures Senior Investment Manager Speaker

Polyvios Hadjiyiangou Operations at European Cybersecurity Competence Centre (ECCC) Head of Unit Moderator

12:00h - 12:40h

Panel A – The investors’ perspective: what will it take to build Europe’s next cybersecurity champions?

Alde Gonzalez Plug & Play Cybersecurity Investor & Consultant Moderator

Bastien Menguy Auriga Partners Cyber Investor Speaker

Bart Houlleberghs TIN Capital Partner Speaker

Alberto Pérez Arranz Giesecke+Devrient Investment Principal Speaker

Yanick Rosenbaum eCAPITAL VC Speaker

12:40h - 13:10h

Panel B – The founders’ startup perspective: Building the next European cybersecurity leader

Xavier Álvarez Merabytes Director de Operaciones Speaker

Dan Brett NNEAT CEO and co-founder Speaker

Oscar Villanueva Nymiz Founder & CEO Speaker

Sarah Isal Auriga Partners Cybersecurity early-stage investor Moderator

Àlex Sànchez i Nofre Scud Cybersecurity CEO & Founder Speaker

13:10h - 13:30h

Open discussion with the audience about the European challenges for both investors and startup companies

Polyvios Hadjiyiangou Operations at European Cybersecurity Competence Centre (ECCC) Head of Unit Speaker

13:30h - 13:45h

Closing: 10 actions to build Europe’s cybersecurity champions

Polyvios Hadjiyiangou Operations at European Cybersecurity Competence Centre (ECCC) Head of Unit Speaker

2026-11-05 10:00 2026-11-05 13:40 Europe/Madrid European cyber innovation & investment forum

Building Europe's next cybersecurity champions - from startup innovation to global scale, strategic capital & unicorn exits.

Can Europe build the next cybersecurity unicorn?

Level 1 - Room 2.4

Thu 5

10:00h - 13:40h Level 1 - Room 2.4 Public Access

14:05h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Decision-making under pressure: When cyber incidents become physical and operational crises

Jonatan Quintana IEEE Senior Member Corporate Security, Risk & Resilience Advisor Speaker

2026-11-05 14:05 2026-11-05 14:30 Europe/Madrid Decision-making under pressure: When cyber incidents become physical and operational crises How should leaders respond when a cyber incident threatens people, facilities and essential operations? This session explores practical approaches to making decisions with incomplete information and limited time, coordinating cyber, physical security and operational teams, and assessing the wider consequences of containment measures. Drawing on experience in high-risk security environments, it focuses on protecting people and maintaining business continuity. Auditorium II

Thu 5

14:05h - 14:30h Auditorium II Full Congress Pass

12:30h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

Should cybersecurity report to the CIO or directly to the CEO?

2026-11-05 12:30 2026-11-05 14:00 Europe/Madrid Should cybersecurity report to the CIO or directly to the CEO? Cybersecurity is increasingly a strategic business risk management issue, rather than solely a technological one. In this context, should the CISO report to the CIO or directly to the CEO? While reporting to the CIO facilitates coordination with Technology, reporting directly to the CEO strengthens the independence and visibility of the security function. This raises the question of whether a model in which the CISO works closely with the CIO while having direct access to the CEO to escalate critical risks and incidents offers the best balance. Networking Hub

Thu 5

12:30h - 14:00h Networking Hub Public Access

11:55h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Beyond cybersecurity: Who owns the decision?

Holger Spohn North Atlantic Treaty Organisation Principal Engineer (Advanced Cyber Defence Principles) Speaker

#BoardGovernance, #BusinessAlignment, #CISOs, #CyberLeadership, #CyberStrategy, #ExecutiveAccountability, #Governance, #RiskOwnership

2026-11-05 11:55 2026-11-05 12:20 Europe/Madrid Beyond cybersecurity: Who owns the decision?

Cybersecurity is no longer just about protecting systems, identities, and data.

As AI, automation, critical infrastructure, cloud platforms, and global supply chains become increasingly interconnected, security, resilience, and sovereignty are converging into a single challenge: maintaining the ability to act when dependencies fail, change, or come under pressure.

Drawing on insights from Black Hat and DEF CON, this keynote explores how the attack surface is expanding beyond technology into trust, dependency, autonomy, and decision-making itself. From critical infrastructure and supply chains to undersea cables, compute concentration, and hybrid cyber operations, the session examines how modern cyber incidents increasingly create operational, economic, and strategic effects.

Attendees will gain a new perspective on resilience, sovereignty, and agency in a world where digital capabilities depend on infrastructures and ecosystems that few organizations fully control.

Auditorium II

Thu 5

11:55h - 12:20h Auditorium II Full Congress Pass

Track: CISOs & Security Leader

#BCC26