Back | Home Agenda

Track: CISOs & Security Leader

Tue 03

15:30h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk Compliance & Data Protection CISOs & Security Leader

Jornada Anual DCA Ciberseguretat

Alba Barrientos DCA Gestora de la Comunitat Ciberseguretat Host

Germà Bustamante Divulgador de Ciberseguretat Moderator

José Nicolás Castellano Cybersecurity Consultant Speaker

Xavier Pi UPC School Co-director Máster Industria 4.0 Speaker

Olga Sánchez Caixabank IT Manager Speaker

Barbara Eisele DCA Gestora Blockchain Speaker

2026-11-03 15:30 2026-11-03 17:30 Europe/Madrid Jornada Anual DCA Ciberseguretat La comunitat de ciberseguretat de la Digital Catalonia Alliance (DCA) celebra la seva jornada anual en el marc del Barcelona Cybersecurity Congress, un punt de trobada per a empreses, professionals i agents de l’ecosistema digital. La sessió donarà visibilitat a solucions tecnològiques innovadores en els àmbits de la ciberseguretat i el blockchain, i abordarà els reptes de la confiança digital des de diferents perspectives. El programa inclourà demostracions i casos pràctics, una sessió sobre com s’executa un ciberatac i una taula rodona amb experts en ciberseguretat, compliance i blockchain. La jornada finalitzarà amb un espai de networking per fomentar connexions i noves oportunitats de col·laboració Level 0 - Room 2.1

Tue 3

15:30h - 17:30h Level 0 - Room 2.1 Public Access

16:30h

Side Event | Side Event AI, identity and trust in the digital environment CISOs & Security Leader

Nobody Reads 40,000 Vulnerability Findings

Gerardo Prieto MessemerTech OÜ CISO Speaker

#HumanInTheLoop, #Remediation

2026-11-03 16:30 2026-11-03 17:00 Europe/Madrid Nobody Reads 40,000 Vulnerability Findings Handing the backlog to a chain of AI agents — and knowing when to stop and ask a human. Detection was never the bottleneck. Triage, ownership, chasing and retesting are. This session walks through an agentic pipeline that takes a finding — whether it came from a cloud scanner, a SAST tool, an endpoint agent or a pentest report — all the way to a verified fix. Contextual severity scoring, one agent independently checking another's work, and the hard part: knowing when the automation is confident and when a human still has to decide. Networking Hub

Tue 3

16:30h - 17:00h Networking Hub Public Access

15:10h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

The confidence gap: Securing what changes faster than you can test

Marcelo Castro Escalada Outpost24 Senior Product Manager Speaker

#AccessGovernance, #AIAgents, #AISecurity, #Authorization, #IdentityGovernance, #PrivilegedAccess, #RuntimeAuthorization

2026-11-03 15:10 2026-11-03 15:40 Europe/Madrid The confidence gap: Securing what changes faster than you can test

Security leaders face a difficult reality: applications, infrastructure, APIs, and attack surfaces are changing faster than traditional security programs can validate them.

While annual and periodic testing still provide value, they were never designed for environments shaped by AI-powered development, continuous deployment, and rapidly evolving threats. The result is a growing confidence gap between perceived security and actual exposure.

So how do organizations determine what to test, when to test it, and where to focus their efforts as the environment continuously changes?

In this session, we'll explore the shift from static testing programs to continuous, risk-based validation strategies that enable teams to identify exploitable risk, prioritize what matters most, and validate security as their attack surface evolves. We'll examine the role of automation, human expertise, and continuous exposure assessment in helping organizations move from reactive testing to continuous confidence.

Join us to see how modern security teams are adapting their validation strategies to keep pace with change and make better security decisions in an increasingly dynamic risk landscape.

Auditorium II

Tue 3

15:10h - 15:40h Auditorium II Full Congress Pass

13:05h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Trusted shield: Combining third-party innovation with sovereign control

#DigitalSovereignty, #TechnologyGovernance, #ThirdPartyRisk, #VendorSecurity

2026-11-03 13:05 2026-11-03 13:35 Europe/Madrid Trusted shield: Combining third-party innovation with sovereign control Innovation increasingly depends on third-party technologies but adopting them should not mean losing control over critical data, services or decisions. This session explores why organisations need clear governance frameworks, security controls and visibility over technological dependencies—enabling them to benefit from global innovation while preserving autonomy, resilience and digital sovereignty. Auditorium I

Tue 3

13:05h - 13:35h Auditorium I Full Congress Pass

11:55h

Roundtable | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Defending Europe in 2026: National cybersecurity strategies, collaboration & emerging threats

Maurizio Mensi Italian National School of Administration Professor of Law and Economics Moderator

#CyberResilience, #CyberSovereignty, #EuropeanSecurity, #NationalCybersecurityStrategies, #ThreatLandscape

2026-11-03 11:55 2026-11-03 12:55 Europe/Madrid Defending Europe in 2026: National cybersecurity strategies, collaboration & emerging threats This panel will bring together senior representatives from leading national cybersecurity agencies across Europe to discuss the key challenges and opportunities shaping Europe’s cyber resilience. The discussion will address strategic, regulatory and operational priorities needed to strengthen cybersecurity cooperation and preparedness across the continent. Auditorium II

Tue 3

11:55h - 12:55h Auditorium II Full Congress Pass

11:20h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

Defending against hidden risks of AI tools in the workplace

Seamus Lennon ThreatLocker Vice President of Operations for EMEA Speaker

#CISOs&SecurityLeader, #Compliance&DataProtection, #CybersecurityConsultants, #IT&Infrastructure

2026-11-03 11:20 2026-11-03 11:50 Europe/Madrid Defending against hidden risks of AI tools in the workplace AI tools have the power to transform organizational productivity while exponentially increasing risk. Join this session to uncover how workplace AI tools can expose sensitive data, bypass controls, and introduce new attack surfaces. We’ll also explore what you can do to mitigate these risks effectively without impeding innovation. Auditorium I

Tue 3

11:20h - 11:50h Auditorium I Full Congress Pass

Wed 04

12:00h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience CISOs & Security Leader IT & Infrastructure

ISC2 Community & Professional Development Forum

Alejandro Cadarso ISC2 Spain Chapter / Field CTO President Host

Néstor Angulo Patchstack. CISSP Head of Security Moderator

Sebastián Correas ISS & GRC Consultant / CISSP / CCSSP / ISO27001 & ISO 42001 Lead Auditor Speaker

Mykhailo Sindieiev DevSecOps Engineer / OWASP Barcelona Leader Speaker

#Ciberseguridad, #ISC2, #ISC2Spain, #OWASP, #SBOM

2026-11-04 12:00 2026-11-04 12:30 Europe/Madrid ISC2 Community & Professional Development Forum

ISC2 Spain Chapter organiza esta sesión de 90 minutos para compartir la evolución del Capítulo, sus iniciativas de certificación, formación continua y desarrollo profesional, y para acoger una mesa redonda de colaboración con OWASP.

La mesa redonda, titulada "SBOM: The Foundation for Secure Development, Vulnerability Management, and Compliance", abordará la seguridad de la cadena de suministro software y los SBOM en el marco de la CRA (Cyber Resilience Act) y NIS2, con una perspectiva práctica sobre vulnerabilidades y gestión de riesgo open source.

Un espacio abierto para aprender, intercambiar experiencias y fortalecer la comunidad profesional de ciberseguridad.

Networking Hub

Wed 4

12:00h - 12:30h Networking Hub Public Access

14:35h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

Agentic AI in Production: What Works and What Doesn’t in a Real SOC

Erik Alejos Agustí Fundació “la Caixa” CISO Speaker

Ángela Martijena Di Monte Var Group Iberia Head of Cyber Defence Speaker

2026-11-04 14:35 2026-11-04 15:05 Europe/Madrid Agentic AI in Production: What Works and What Doesn’t in a Real SOC

The evolution of the SOC is no longer just about increasing automation, but about improving decision-making and prioritising alerts according to actual business risk.

This session presents a real-world use case from Fundació “la Caixa”, whose 24/7 Follow-the-Sun SOC operates across Spain, Thailand and Mexico. Building on existing SIEM/SOAR automation, the organisation is exploring agentic AI capabilities using Devo and Strike AI 48 to support alert triage, enrichment and initial analysis.

The goal is to reduce analysts’ workload, improve response times and ensure more consistent risk-based prioritisation, while keeping human judgement at the centre. Preliminary results show improvements in triage time, analytical consistency and escalation processes. The session will also address key challenges, including agent governance, context quality and the need for human oversight.

Co-presented with Erik Alejos, Security Manager at Fundació “la Caixa”, this session shares practical lessons, benefits and limitations from a real-world implementation, with no commercial focus.

Auditorium II

Wed 4

14:35h - 15:05h Auditorium II Full Congress Pass

11:55h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

Your AI Agents Can Act Without You: Can You See Them, Control Them and Stop Them?

Arvin Bansal C&S Wholesale Grocers CISO Speaker

2026-11-04 11:55 2026-11-04 12:25 Europe/Madrid Your AI Agents Can Act Without You: Can You See Them, Control Them and Stop Them?

Enterprise AI has crossed a line. The first wave advised people. Agentic AI can now use credentials, call APIs, access sensitive data and change business systems at machine speed.

Before you scale it, can you answer: How many agents are running? Who owns them? What can they access and change? Can an agent exceed the authority of the human it serves? Can you prove what an agent actually did? And if one is compromised or manipulated, can you stop it before it becomes a business incident?

Drawing on practical experience building an enterprise AI security strategy, Arvin Bansal will show how to move from AI policy to production control using TRACE: Track, Register, Approve, Certify and Expose. He will connect board risk to agent identity, permission inheritance, data protection, gateways, behavioral monitoring, forensic traceability and kill switches, showing how security can accelerate agentic transformation without surrendering control.

Auditorium II

Wed 4

11:55h - 12:25h Auditorium II Full Congress Pass

11:20h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

The New Frontier: Sovereignty and Resilience in the Age of AI

José de la Cruz TrendAI™ Technical Director Iberia Speaker

Raúl Guillén TrendAI™ European Cybersecurity Strategist Speaker

2026-11-04 11:20 2026-11-04 11:50 Europe/Madrid The New Frontier: Sovereignty and Resilience in the Age of AI Frontier AI is creating a new technology frontier — and a new security challenge. Organisations must not only protect AI systems, but also understand their dependencies, maintain control over critical capabilities and remain resilient as the technology evolves. This session explores the intersection of Frontier AI, digital sovereignty and cyber resilience, bringing together strategic and technical perspectives on how to navigate this rapidly changing landscape. Auditorium II

Wed 4

11:20h - 11:50h Auditorium II Full Congress Pass

11:20h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

This is your brain on deepfakes: Why AI scams work on smart people and how you can stop it

Christian Reinhardt SoSafe SE Director Human Risk Management Speaker

#DataPrivacy, #DigitalTrust, #Governance, #IdentitySecurity, #Resilience, #TrustFrameworks

2026-11-04 11:20 2026-11-04 11:50 Europe/Madrid This is your brain on deepfakes: Why AI scams work on smart people and how you can stop it Deepfakes are no longer science fiction – they are here, and they are highly effective. Drawing on neuroscientific insights, this talk explains why the human brain is not built for these threats and how the same psychological mechanisms attackers exploit can be turned into powerful tools for awareness. Understanding the brain is key to building real security resilience. Auditorium II

Wed 4

11:20h - 11:50h Auditorium II Full Congress Pass

10:05h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

Sovereign Cyber AI: Beyond the obvious

Kirti Kumar EY / Cyber AI Products Partner / Global CTO Speaker

#AIGovernance, #AIInfrastructure, #AISecurity, #CyberSovereignty, #DataGovernance, #DigitalSovereignty, #EuropeanAI, #SovereignAI

2026-11-04 10:05 2026-11-04 10:40 Europe/Madrid Sovereign Cyber AI: Beyond the obvious Sovereign AI usually raises three concerns: where the data resides, what the regulator will ask, and a geopolitically induced coma. Those are the obvious ones. The harder questions are who can alter your AI, whether your defenders can live without it, and one rarely asked: how far an attacker can steer it without ever touching it. Drawing on real-world initiatives, this session sets out a reference architecture for Sovereign Cyber AI and its value-realisation model. Existing standards stop short of this, and closing the gap is our job as a community. The safeguards we settle on now are what the next generation inherits. Auditorium I

Wed 4

10:05h - 10:40h Auditorium I Full Congress Pass

11:55h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

New operating models for governing AI and cybersecurity

Sounil Yu Cyber Defense Matrix and the DIE Triad Author and creator Speaker

#AIGovernance, #CISOs, #CyberResilience, #CybersecurityLeadership, #Governance, #RiskManagement, #SecurityOperatingModel, #Strategy

2026-11-04 11:55 2026-11-04 12:25 Europe/Madrid New operating models for governing AI and cybersecurity AI is not just more automation. It requires new thinking and new operating models to govern and secure properly. This session explores these operating models, shares practical ways to apply them, and predicts what is coming next. Auditorium I

Wed 4

11:55h - 12:25h Auditorium I Full Congress Pass

Thu 05

11:55h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Beyond cybersecurity: Who owns the decision?

Holger Spohn North Atlantic Treaty Organisation Principal Engineer (Advanced Cyber Defence Principles) Speaker

#BoardGovernance, #BusinessAlignment, #CISOs, #CyberLeadership, #CyberStrategy, #ExecutiveAccountability, #Governance, #RiskOwnership

2026-11-05 11:55 2026-11-05 12:25 Europe/Madrid Beyond cybersecurity: Who owns the decision?

Cybersecurity is no longer just about protecting systems, identities, and data.

As AI, automation, critical infrastructure, cloud platforms, and global supply chains become increasingly interconnected, security, resilience, and sovereignty are converging into a single challenge: maintaining the ability to act when dependencies fail, change, or come under pressure.

Drawing on insights from Black Hat and DEF CON, this keynote explores how the attack surface is expanding beyond technology into trust, dependency, autonomy, and decision-making itself. From critical infrastructure and supply chains to undersea cables, compute concentration, and hybrid cyber operations, the session examines how modern cyber incidents increasingly create operational, economic, and strategic effects.

Attendees will gain a new perspective on resilience, sovereignty, and agency in a world where digital capabilities depend on infrastructures and ecosystems that few organizations fully control.

Auditorium II

Thu 5

11:55h - 12:25h Auditorium II Full Congress Pass

15:45h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

Okay… so, what next?

Chris Hosking Sentinelone Principal AI & Cloud Security Evangelist Speaker

#AITransformation, #CISOs, #CyberLeadership, #DecisionMaking, #ExecutiveLeadership, #Governance, #RiskManagement, #SecurityStrategy

2026-11-05 15:45 2026-11-05 16:10 Europe/Madrid Okay… so, what next?

We are at the AI inflection point.

Externally, AI is enabling attackers. Internally, adoption is racing ahead of security, governance, and clarity of ownership. It all feels a bit uncomfortably familiar.

This session draws lessons from yesterday's cyber security as we look to tomorrow. What has worked, what failed, and where can we head next if we want to secure AI without slowing progress.

I’ll look ahead to autonomous SOC operations and a threat landscape shaped by AI-enabled attackers and machine-speed decision making.

AI is changing security. Okay... so, what next?

Auditorium I

Thu 5

15:45h - 16:10h Auditorium I Full Congress Pass

Track: CISOs & Security Leader

#BCC26

October is Cyber Month.