Back | Home Agenda

Track: CISOs & Security Leader

Tue 03

11:55h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

ENISA Insights on EU Cybersecurity Act, NIS2 & Threat Resilience

Hans De Vries ENISA Chief Cybersecurity and Operations Officer (COO) Speaker

2026-11-03 11:55 2026-11-03 12:20 Europe/Madrid ENISA Insights on EU Cybersecurity Act, NIS2 & Threat Resilience ENISA Insights on EU Cybersecurity Act, NIS2 & Threat Resilience Auditorium I

Tue 3

11:55h - 12:20h Auditorium I Full Congress Pass

11:45h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

Closing and next steps

2026-11-03 11:45 2026-11-03 11:50 Europe/Madrid Closing and next steps Summarise key takeaways and proposed next steps for end users, technology providers and ecosystem stakeholders, including collaboration opportunities and practical actions to advance quantum-safe readiness. Level 0 - Room 2.2

Tue 3

11:45h - 11:50h Level 0 - Room 2.2 Public Access

11:05h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Theme 3: Use cases & transition challenges – Migration lessons and challenges

Manuel García-Cervigón Nestlé Strategic Product Portofolio Architect Speaker

Maria Gregori Caixabank Director of Innovation, digital assets & Power Platform Speaker

2026-11-03 11:05 2026-11-03 11:45 Europe/Madrid Theme 3: Use cases & transition challenges – Migration lessons and challenges End users share practical lessons and open questions around cryptographic inventory, legacy systems, supplier dependencies, prioritisation, interoperability and the organisational challenges of migrating to quantum-safe technologies. Level 0 - Room 2.2

Tue 3

11:05h - 11:45h Level 0 - Room 2.2 Public Access

16:55h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Decision-making under pressure: When cyber incidents become physical and operational crises

Jonatan Quintana IEEE Senior Member Corporate Security, Risk & Resilience Advisor Speaker

2026-11-03 16:55 2026-11-03 17:20 Europe/Madrid Decision-making under pressure: When cyber incidents become physical and operational crises How should leaders respond when a cyber incident threatens people, facilities and essential operations? This session explores practical approaches to making decisions with incomplete information and limited time, coordinating cyber, physical security and operational teams, and assessing the wider consequences of containment measures. Drawing on experience in high-risk security environments, it focuses on protecting people and maintaining business continuity. Auditorium I

Tue 3

16:55h - 17:20h Auditorium I Full Congress Pass

13:05h

Conference | Congress Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

Sunburst — Taking luck out of incident response

Tim Brown Team8 Partner and CISO in Residence Speaker

2026-11-03 13:05 2026-11-03 13:30 Europe/Madrid Sunburst — Taking luck out of incident response

In 2020, the Russian SVR compromised SolarWinds' Orion build pipeline, and roughly 18,000 organizations downloaded the tainted update. Tim Brown, former CISO of SolarWinds, shares his first-person account of leading the response to SUNBURST, the SEC charges that followed, and five years to vindication.

Brown has often called that response lucky — the right help arrived, the team stayed aligned, transparency was a situational call rather than a plan, and the tabletop exercises they'd run hadn't covered this scenario. It worked, but it worked because of people and circumstance no organization can count on twice.

This keynote moves from that manual, human-driven response to what's possible today: how agentic AI is changing incident detection, triage, and response, and what it takes to replace luck with design — rehearsed, scenario-flexible playbooks and tooling that don't depend on who happens to be in the room when the call comes in.

Auditorium II

Tue 3

13:05h - 13:30h Auditorium II Full Congress Pass

10:00h

Side Event | Side Event AI, identity and trust in the digital environment Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

The CISO no longer makes decisions alone

Juan Ma Perals Global CISO Council Spain Chapter President / Founder Speaker

Iñaki Aldaz Global CISO Council Spain Chapter, Ajuntament de Sant Cugat del Vallès Police Inspector, Leadership & Public Safety Specialist Speaker

2026-11-03 10:00 2026-11-03 11:00 Europe/Madrid The CISO no longer makes decisions alone Official presentation of the Global CISO Council Spain Chapter, its purpose, working model and collaboration initiatives with the CISO community in Spain. The session will conclude with an opportunity for discussion and networking. Level 1 - Room 2.3

Tue 3

10:00h - 11:00h Level 1 - Room 2.3 Public Access

10:00h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

Cybersecurity. Business. Disruption. New angles for a new era

Xavier Vila ISACA Barcelona Board Member Speaker

Schedule

10:00h - 10:15h

Welcome and introductions

Ramsés Gallego ISACA Barcelona Chapter President Host

10:15h - 11:00h

At the DNA of every company: Identity and Access Management

Ramsés Gallego ISACA Barcelona Chapter President Speaker

11:00h - 11:45h

It’s not Machine Learning. It’s Human Teaching!

Ramsés Gallego ISACA Barcelona Chapter President Speaker

11:45h - 12:15h

Navigating the future: Cybersecurity Trends and ISACA Certifications for 2026

Théo Nottelet ISACA Regional Development Manager Iberian Market Speaker

12:15h - 13:00h

AI, PQC and the overloaded CISO: From exhausted gatekeeper to ecosystem coach

Xavier Vila ISACA Barcelona Board Member Speaker

13:00h - 13:45h

Protecting and defending at machine speed. A New Beginning

Ramsés Gallego ISACA Barcelona Chapter President Speaker

2026-11-03 10:00 2026-11-03 13:45 Europe/Madrid Cybersecurity. Business. Disruption. New angles for a new era

- At the DNA of every company: Identity and Access Management

- Building and running a SOC… from scratch

- Privacy as the pillar of every society

- The Perfect Storm: Threats & Risks IN the Cloud, FROM the Cloud, THROUGH the Cloud

- It’s not Machine Learning. It’s Human Teaching!

Level 0 - Room 2.1

Tue 3

10:00h - 13:45h Level 0 - Room 2.1 Public Access

17:00h

Side Event | Side Event AI, identity and trust in the digital environment CISOs & Security Leader IT & Infrastructure

Deepfakes & Spoofing: When SMS and Voice Cannot Be Trusted

Xavier Álvarez Merabytes Director de Operaciones Speaker

#Security, #Spoofing

2026-11-03 17:00 2026-11-03 17:30 Europe/Madrid Deepfakes & Spoofing: When SMS and Voice Cannot Be Trusted Today, threat actors can send calls and SMS from any number, with any text and voice, seamlessly impersonating bank clients and providers. We’ll cover critical defenses, including why you should adopt RCS, how to implement rotating voice security keys, and the importance of real-world deepfake simulations. Networking Hub

Tue 3

17:00h - 17:30h Networking Hub Public Access

16:30h

Side Event | Side Event AI, identity and trust in the digital environment CISOs & Security Leader IT & Infrastructure

Nobody Reads 40,000 Vulnerability Findings

Gerardo Prieto The Mill Adventure CISO Speaker

#HumanInTheLoop, #Remediation

2026-11-03 16:30 2026-11-03 17:00 Europe/Madrid Nobody Reads 40,000 Vulnerability Findings Handing the backlog to a chain of AI agents — and knowing when to stop and ask a human. Detection was never the bottleneck. Triage, ownership, chasing and retesting are. This session walks through an agentic pipeline that takes a finding — whether it came from a cloud scanner, a SAST tool, an endpoint agent or a pentest report — all the way to a verified fix. Contextual severity scoring, one agent independently checking another's work, and the hard part: knowing when the automation is confident and when a human still has to decide. Networking Hub

Tue 3

16:30h - 17:00h Networking Hub Public Access

15:30h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk Compliance & Data Protection CISOs & Security Leader

Jornada Anual DCA Ciberseguretat

Laura Caballero Nadales Cybersecurity Agency of Catalonia Director Speaker

Alba Barrientos DCA Gestora de la Comunitat Ciberseguretat Host

José Nicolás Castellano Cybersecurity Consultant Speaker

Xavier Pi UPC School Co-director Máster Industria 4.0 Speaker

Olga Sánchez Caixabank IT Manager Speaker

Barbara Eisele DCA Gestora Blockchain Speaker

2026-11-03 15:30 2026-11-03 17:30 Europe/Madrid Jornada Anual DCA Ciberseguretat La comunitat de ciberseguretat de la Digital Catalonia Alliance (DCA) celebra la seva jornada anual en el marc del Barcelona Cybersecurity Congress, un punt de trobada per a empreses, professionals i agents de l’ecosistema digital. La sessió donarà visibilitat a solucions tecnològiques innovadores en els àmbits de la ciberseguretat i el blockchain, i abordarà els reptes de la confiança digital des de diferents perspectives. El programa inclourà demostracions i casos pràctics, una sessió sobre com s’executa un ciberatac i una taula rodona amb experts en ciberseguretat, compliance i blockchain. La jornada finalitzarà amb un espai de networking per fomentar connexions i noves oportunitats de col·laboració Level 0 - Room 2.1

Tue 3

15:30h - 17:30h Level 0 - Room 2.1 Invitation required

11:20h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience Compliance & Data Protection CISOs & Security Leader

Panel – ¿Quién controla realmente el riesgo de la cadena de suministro industrial?

Oscar López GB-FOODS CISO Global Speaker

César Delgado Rockwell Automation Cybersecurity Business Development Speaker

Pablo Carmona Preventa de Redes y Ciberseguridad OT/IT Speaker

Joan Figueras Coordinador de CCI en Cataluña Speaker

Maite Arcos Fundación ESYS Directora Moderator

2026-11-03 11:20 2026-11-03 12:00 Europe/Madrid Panel – ¿Quién controla realmente el riesgo de la cadena de suministro industrial? text Networking Hub

Tue 3

11:20h - 12:00h Networking Hub Public Access

10:40h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience CISOs & Security Leader IT & Infrastructure

El papel del fabricante en la ciberresiliencia industrial

César Delgado Rockwell Automation Cybersecurity Business Development Speaker

2026-11-03 10:40 2026-11-03 11:00 Europe/Madrid El papel del fabricante en la ciberresiliencia industrial text Networking Hub

Tue 3

10:40h - 11:00h Networking Hub Public Access

10:20h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience CISOs & Security Leader IT & Infrastructure

¿Qué ocurre cuando falla un tercero tecnológico crítico?

Oscar López GB-FOODS CISO Global Speaker

2026-11-03 10:20 2026-11-03 10:40 Europe/Madrid ¿Qué ocurre cuando falla un tercero tecnológico crítico? text Networking Hub

Tue 3

10:20h - 10:40h Networking Hub Public Access

10:00h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience CISOs & Security Leader IT & Infrastructure

Apertura: la cadena de suministro industrial ya no es una cadena

José Valiente Centro de Ciberseguridad Industrial (CCI) Director General Speaker

2026-11-03 10:00 2026-11-03 10:20 Europe/Madrid Apertura: la cadena de suministro industrial ya no es una cadena text Networking Hub

Tue 3

10:00h - 10:20h Networking Hub Public Access

10:00h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience Compliance & Data Protection CISOs & Security Leader IT & Infrastructure

Ciberresiliencia en la cadena de suministro industrial

Schedule

10:00h - 10:20h

Apertura: la cadena de suministro industrial ya no es una cadena

José Valiente Centro de Ciberseguridad Industrial (CCI) Director General Speaker

10:20h - 10:40h

¿Qué ocurre cuando falla un tercero tecnológico crítico?

Oscar López GB-FOODS CISO Global Speaker

10:40h - 11:00h

El papel del fabricante en la ciberresiliencia industrial

César Delgado Rockwell Automation Cybersecurity Business Development Speaker

11:00h - 11:20h

Cómo gestionar dependencias en proyectos industriales complejos

María Dolores Trapero Elecnor Sistemas Responsable de Centro de Ciberseguridad y redes IT/OT Speaker

11:20h - 12:00h

Panel – ¿Quién controla realmente el riesgo de la cadena de suministro industrial?

Oscar López GB-FOODS CISO Global Speaker

César Delgado Rockwell Automation Cybersecurity Business Development Speaker

Pablo Carmona Preventa de Redes y Ciberseguridad OT/IT Speaker

Joan Figueras Coordinador de CCI en Cataluña Speaker

Maite Arcos Fundación ESYS Directora Moderator

2026-11-03 10:00 2026-11-03 12:00 Europe/Madrid Ciberresiliencia en la cadena de suministro industrial La resiliencia industrial ya no depende únicamente de proteger los activos propios, sino de comprender y gobernar las dependencias tecnológicas que sostienen la operación. Este side event aborda la cadena de suministro desde cuatro perspectivas complementarias: operador industrial, fabricante, ingeniería y gobierno del riesgo. Analizaremos qué ocurre cuando falla un tercero tecnológico crítico, cómo diseñar productos y arquitecturas capaces de resistir, y cómo gestionar dependencias en proyectos industriales complejos. La sesión culminará con un panel sobre quién controla realmente el riesgo de la cadena de suministro, poniendo el foco en responsabilidad compartida, visibilidad, alternativas, capacidad de respuesta y continuidad operativa. Networking Hub

Tue 3

10:00h - 12:00h Networking Hub Public Access

15:10h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

The confidence gap: Securing what changes faster than you can test

Marcelo Castro Escalada Outpost24 Senior Product Manager Speaker

#AccessGovernance, #AIAgents, #AISecurity, #Authorization, #IdentityGovernance, #PrivilegedAccess, #RuntimeAuthorization

2026-11-03 15:10 2026-11-03 15:35 Europe/Madrid The confidence gap: Securing what changes faster than you can test

Security leaders face a difficult reality: applications, infrastructure, APIs, and attack surfaces are changing faster than traditional security programs can validate them.

While annual and periodic testing still provide value, they were never designed for environments shaped by AI-powered development, continuous deployment, and rapidly evolving threats. The result is a growing confidence gap between perceived security and actual exposure.

So how do organizations determine what to test, when to test it, and where to focus their efforts as the environment continuously changes?

In this session, we'll explore the shift from static testing programs to continuous, risk-based validation strategies that enable teams to identify exploitable risk, prioritize what matters most, and validate security as their attack surface evolves. We'll examine the role of automation, human expertise, and continuous exposure assessment in helping organizations move from reactive testing to continuous confidence.

Join us to see how modern security teams are adapting their validation strategies to keep pace with change and make better security decisions in an increasingly dynamic risk landscape.

Auditorium II

Tue 3

15:10h - 15:35h Auditorium II Full Congress Pass

13:05h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Trusted shield: Combining third-party innovation with sovereign control

Alejandro Ramos Telefónica Tech Global Cybsercurity Director Speaker

#DigitalSovereignty, #TechnologyGovernance, #ThirdPartyRisk, #VendorSecurity

2026-11-03 13:05 2026-11-03 13:30 Europe/Madrid Trusted shield: Combining third-party innovation with sovereign control Innovation increasingly depends on third-party technologies but adopting them should not mean losing control over critical data, services or decisions. This session explores why organisations need clear governance frameworks, security controls and visibility over technological dependencies—enabling them to benefit from global innovation while preserving autonomy, resilience and digital sovereignty. Auditorium I

Tue 3

13:05h - 13:30h Auditorium I Full Congress Pass

11:55h

Roundtable | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Defending Europe in 2026: National cybersecurity strategies, collaboration & emerging threats

Maurizio Mensi Italian National School of Administration Professor of Law and Economics Moderator

Jan Smedts Digitaal Vlaanderen (Flanders) CEO Speaker

Dan Cîmpean National Directorate for Cyber Security (DNSC) (Romania) Director Speaker

Laura Caballero Nadales Cybersecurity Agency of Catalonia Director Speaker

Adam Marczyski NASK National Research Institute (Poland) Deputy Director for Cybersecurity and Innovation Speaker

#CyberResilience, #CyberSovereignty, #EuropeanSecurity, #NationalCybersecurityStrategies, #ThreatLandscape

2026-11-03 11:55 2026-11-03 12:55 Europe/Madrid Defending Europe in 2026: National cybersecurity strategies, collaboration & emerging threats Our next round table brings together cybersecurity representatives from Catalonia, Flanders, Romania and Poland to discuss some of the key challenges shaping cybersecurity in Europe today. The conversation will explore the evolving threat landscape, the impact of regulation and AI, the need to strengthen talent and public-private collaboration, and the importance of cross-border cooperation and digital trust. Auditorium II

Tue 3

11:55h - 12:55h Auditorium II Full Congress Pass

11:20h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

Defending against hidden risks of AI tools in the workplace

Seamus Lennon ThreatLocker Vice President of Operations for EMEA Speaker

#CISOs&SecurityLeader, #Compliance&DataProtection, #CybersecurityConsultants, #IT&Infrastructure

2026-11-03 11:20 2026-11-03 11:45 Europe/Madrid Defending against hidden risks of AI tools in the workplace AI tools have the power to transform organizational productivity while exponentially increasing risk. Join this session to uncover how workplace AI tools can expose sensitive data, bypass controls, and introduce new attack surfaces. We’ll also explore what you can do to mitigate these risks effectively without impeding innovation. Auditorium I

Tue 3

11:20h - 11:45h Auditorium I Full Congress Pass

Wed 04

10:00h

Side Event | Side Event CISOs & Security Leader

AI in your CISO security program: From risk to readiness

DrBA MSc Jeroen Van Der Vlies checksec.nl Trainer, Writer, A.I. CISO/CISPO and Auditor Speaker

2026-11-04 10:00 2026-11-04 11:30 Europe/Madrid AI in your CISO security program: From risk to readiness

Turn AI uncertainty into security leadership

AI is changing the rules of cyberattack and defence. For CISOs, the challenge is clear: manage emerging risks while putting AI to work in the security program.

Move beyond the hype. Join this workshop to explore how to connect AI adoption with business strategy, establish effective governance, and turn promising use cases into measurable security outcomes.

From strategic insight to practical action

Join DrBA MSc Jeroen Van Der Vlies for a business-focused discussion on AI, cybersecurity, and executive decision-making. Explore perspectives from EC-Council’s Certified AI Program Manager CAIPM training and his book, How Can the C-level Boardroom Stay Agile and Make Effective Company Decisions of (New) “Cyber” Business Risks.

The session brings together AI risk management, security operations, and boardroom priorities, focusing on supporting compliance with applicable requirements under the AI Act, GDPR, NIS2, CER, and the Cybersecurity Act.

Three calls to action

Take control of your AI risk. Map your organization’s AI exposure and establish clear policies, accountability, and oversight aligned with your business priorities.

Put AI to work in your security program. Prioritize use cases—from alert triage to incident response—and plan controlled pilots with clear success criteria.

Turn ambition into readiness. Build an actionable roadmap that connects people, processes, and technology with measurable outcomes and executive oversight.

Networking Hub

Wed 4

10:00h - 11:30h Networking Hub Public Access

13:20h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Cyber crisis simulation: when transportation stops due to a cyber attack

2026-11-04 13:20 2026-11-04 13:55 Europe/Madrid Cyber crisis simulation: when transportation stops due to a cyber attack A facilitated crisis scenario in which a cyber incident disrupts transportation services. Participants explore decision-making, coordination between operators and authorities, communications, recovery priorities and lessons for incident response and business continuity. Level 1 - Room 2.3

Wed 4

13:20h - 13:55h Level 1 - Room 2.3 Public Access

13:55h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

Closing remarks: 10 priorities for transportation cyber resilience

2026-11-04 13:55 2026-11-04 14:00 Europe/Madrid Closing remarks: 10 priorities for transportation cyber resilience A concise closing synthesis of practical priorities for transportation and maritime cyber resilience, covering governance, visibility, supplier risk, OT protection, response exercises and cross-sector cooperation. Level 1 - Room 2.3

Wed 4

13:55h - 14:00h Level 1 - Room 2.3 Public Access

11:00h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Panel 1: the new threat landscape for smart transportation

2026-11-04 11:00 2026-11-04 11:40 Europe/Madrid Panel 1: the new threat landscape for smart transportation Panel discussion on threats to connected mobility and transport operations, including digital platforms, fleet connectivity, passenger systems, third-party services and the operational consequences of disruption. Level 1 - Room 2.3

Wed 4

11:00h - 11:40h Level 1 - Room 2.3 Public Access

10:30h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Opening: the new cyber threat landscape for European transportation

2026-11-04 10:30 2026-11-04 10:40 Europe/Madrid Opening: the new cyber threat landscape for European transportation A concise overview of the changing threat landscape facing European transport systems, including connected infrastructure, operational technology, digital platforms and dependencies between operators, suppliers and public services. Level 1 - Room 2.3

Wed 4

10:30h - 10:40h Level 1 - Room 2.3 Public Access

10:00h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Registration & Networking

2026-11-04 10:00 2026-11-04 10:30 Europe/Madrid Registration & Networking Registration, informal networking and arrival of participants ahead of the programme. Level 1 - Room 2.3

Wed 4

10:00h - 10:30h Level 1 - Room 2.3 Public Access

10:00h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

CyberHub Spain National Conference: Cybersecurity in the face of the new technological landscape

Schedule

10:00h - 10:05h

Opening

Albert Anglarill Recasens AMETIC Director Territorial y de Proyectos Speaker

10:00h - 10:45h

Panel 1. European and Spanish cybersecurity strategy

Albert Anglarill Recasens AMETIC Director Territorial y de Proyectos Moderator

José Martínez-Usero DIGITALEUROPE Director for Projects Speaker

Daniel Burgos UNIR Vicerrector. Catedrático de Tecnologías para la Educación y la Comunicación, Vicerrector de Proyecto Speaker

Krzysztof Szubert European Cyber Security Organisation (ECSO) Member of the Board of Directors Speaker

10:45h - 10:55h

Keynote. Building a European Cybersecurity Skills Network: From National Hubs to Long-Term European Cooperation

Urša Mlekuž Chamber of Commerce & Industry of Slovenia Consultant Speaker

11:15h - 12:00h

Panel 2. The business challenge: Capabilities, talent, and resilience

Marcos Gómez INCIBE - Instituto Nacional de Ciberseguridad CISO & Deputy Director of Corporate Security Speaker

David Garriga Sirt CEO Speaker

Javier Zubieta AMETIC Presidente Comisión de Ciberseguridad Moderator

Jordi Ubach CyberTix Speaker

David Forner Agència de Ciberseguretat de Catalunya Jefe de la Unidad de Producto Transversal Speaker

12:00h - 12:45h

Panel 3. AI and quantum computing: The new technological landscape

Iván Gutiérrez Tecnalia Responsable de Frontier Cybersecurity Speaker

Ángel López Airbus Cyber Technical Manager Speaker

Mónica Espinosa Garcés Women4Cyber / Agència de Ciberseguretat de Catalunya Embajadora en Cataluña (Women4Cyber) / Jefa de Captura y Gestión de Fondos (ACC) Moderator

Elisabeth Ortega Qilimanjaro Solutions Architect & Product Manager Speaker

Domenico Tulli Quside PhD Co-founder & CTO Speaker

12:30h - 13:00h

Networking

13:00h - 13:30h

Closing

Paco Hortigüela Martos AMETIC Presidente Speaker

2026-11-04 10:00 2026-11-04 13:00 Europe/Madrid CyberHub Spain National Conference: Cybersecurity in the face of the new technological landscape

Cybersecurity is facing a technological landscape undergoing profound transformation. The emergence of artificial intelligence, advances in technologies such as quantum computing, and the evolution of cyber threats are reshaping the capabilities required by businesses, public administrations, and professionals.

The Cyberhubs Spain National Conference will bring together representatives from institutions, industry, academia, and the technology ecosystem to analyse the key challenges and opportunities facing the sector in Spain and Europe.

The event will explore the evolution of cybersecurity strategies, the development of skills and talent, and the impact of AI and other emerging technologies on the future of cybersecurity. It will provide a space to share experiences, identify needs, and strengthen collaboration among the different stakeholders across the ecosystem.

Level 0 - Room 2.1

Wed 4

10:00h - 13:00h Level 0 - Room 2.1 Public Access

13:05h

Conference | Congress Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

The human dimension of risk: Are you measuring what really matters?

Kike Serrano Velamazán Riot Market Launcher Spain & Iberia Ambassador and Speaker Speaker

2026-11-04 13:05 2026-11-04 13:30 Europe/Madrid The human dimension of risk: Are you measuring what really matters?

The human factor in cyber risk is evolving faster than CISOs can train their teams to keep up. AI-powered social engineering, shadow AI, and everyday risky behaviours are creating new vulnerabilities across organisations.

For security leaders, employee training completion rates reveal little about actual risk. The key is to understand where vulnerabilities are concentrated, which behaviours really matter, and how much risk can be reduced before an employee even needs to take action.

At Riot, we believe the opportunity lies in connecting both sides: automating what can be managed in the background, engaging employees when it really matters, and adapting protection according to risk levels.

As threats accelerate, security must also become more proactive, using behavioural signals, automation, and AI to identify vulnerabilities early and reduce risk before it turns into an incident.

Join us to discover:

- How organisations can move beyond awareness and compliance towards a more proactive and measurable approach to managing employees’ cybersecurity posture.

- What security leaders should really measure to understand and prioritise human risk.

- How automation and AI can reduce risk before human intervention is required, and where employee behaviour and engagement remain essential.

Auditorium II

Wed 4

13:05h - 13:30h Auditorium II Full Congress Pass

10:00h

Side Event | Side Event CISOs & Security Leader

CISO FORUM: Securing Cities and Critical Infrastructure

2026-11-04 10:00 2026-11-04 11:30 Europe/Madrid CISO FORUM: Securing Cities and Critical Infrastructure An exclusive roundtable bringing together cybersecurity leaders from city councils, public institutions and critical infrastructure operators to exchange experiences, challenges and best practices. Through an open discussion, participants will explore topics such as OT security, cyber resilience, crisis management, interdependencies and cross-sector collaboration. Level 1 - Room 2.5

Wed 4

10:00h - 11:30h Level 1 - Room 2.5 Invitation required

16:30h

Awards | Awards Cybersecurity as a strategic business and reputational risk Compliance & Data Protection CISOs & Security Leader

The CISO Leadership Awards Ceremony

Marcos Gómez INCIBE - Instituto Nacional de Ciberseguridad CISO & Deputy Director of Corporate Security Jury

Holger Spohn North Atlantic Treaty Organisation Principal Engineer (Advanced Cyber Defence Principles) Jury

José Valiente Centro de Ciberseguridad Industrial (CCI) Director General Jury

Krzysztof Szubert European Cyber Security Organisation (ECSO) Member of the Board of Directors Jury

Anett Mádi-Nátor Women4Cyber Foundation President Jury

Daniel Walther die Mobiliar Chief Information Security Officer Jury

Jon France ISC2 Chief Information Security Officer Jury

Katy Anton JP Morgan Executive Director of Cybersecurity Architecture Jury

Luca Dozio Altermaind Chief Information Security Officer Jury

Sascha Maier SV Group Chief Information Security Officer Jury

2026-11-04 16:30 2026-11-04 17:30 Europe/Madrid The CISO Leadership Awards Ceremony 28 of the most influential cybersecurity leaders in Europe and beyond are competing across 7 categories. The winners will be revealed live at Barcelona Cybersecurity Congress on 4 November at 16:30. Make sure you are in the room. Auditorium I

Wed 4

16:30h - 17:30h Auditorium I Full Congress Pass

12:00h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience CISOs & Security Leader IT & Infrastructure

ISC2 Community & Professional Development Forum

Alejandro Cadarso ISC2 Spain Chapter / Field CTO President Host

Néstor Angulo ISC2 Spain Chapter / CISSP Head of Technology Moderator

Sebastián Correas ISS & GRC Consultant / CISSP / CCSSP / ISO27001 & ISO 42001 Lead Auditor Speaker

Mykhailo Sindieiev DevSecOps Engineer / OWASP Barcelona Leader Speaker

#Ciberseguridad, #ISC2, #ISC2Spain, #OWASP, #SBOM

2026-11-04 12:00 2026-11-04 13:30 Europe/Madrid ISC2 Community & Professional Development Forum ISC2 Spain Chapter is organising this 90-minute session to share updates on the Chapter’s development, its certification initiatives, continuing education and professional development activities, and to host a collaborative roundtable with OWASP. The roundtable, entitled “SBOM: The Foundation for Secure Development, Vulnerability Management, and Compliance”, will explore software supply chain security and Software Bills of Materials (SBOMs) in the context of the CRA (Cyber Resilience Act) and NIS2, offering a practical perspective on vulnerabilities and open-source risk management. An open space to learn, exchange experiences and strengthen the professional cybersecurity community. Networking Hub

Wed 4

12:00h - 13:30h Networking Hub Public Access

14:35h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

Agentic AI in production: What works and what doesn’t in a real SOC

Erik Alejos Agustí Fundació “la Caixa” CISO Speaker

Ángela Martijena Di Monte Var Group Iberia Head of Cyber Defence Speaker

2026-11-04 14:35 2026-11-04 15:00 Europe/Madrid Agentic AI in production: What works and what doesn’t in a real SOC

The evolution of the SOC is no longer just about increasing automation, but about improving decision-making and prioritising alerts according to actual business risk.

This session presents a real-world use case from Fundació “la Caixa”, whose 24/7 Follow-the-Sun SOC operates across Spain, Thailand and Mexico. Building on existing SIEM/SOAR automation, the organisation is exploring agentic AI capabilities using Devo and Strike AI 48 to support alert triage, enrichment and initial analysis.

The goal is to reduce analysts’ workload, improve response times and ensure more consistent risk-based prioritisation, while keeping human judgement at the centre. Preliminary results show improvements in triage time, analytical consistency and escalation processes. The session will also address key challenges, including agent governance, context quality and the need for human oversight.

Co-presented with Erik Alejos, Security Manager at Fundació “la Caixa”, this session shares practical lessons, benefits and limitations from a real-world implementation, with no commercial focus.

Auditorium II

Wed 4

14:35h - 15:00h Auditorium II Full Congress Pass

11:55h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

Your AI Agents can act without you: Can you see them, control them and stop them?

Arvin Bansal C&S Wholesale Grocers CISO Speaker

2026-11-04 11:55 2026-11-04 12:20 Europe/Madrid Your AI Agents can act without you: Can you see them, control them and stop them?

Enterprise AI has crossed a line. The first wave advised people. Agentic AI can now use credentials, call APIs, access sensitive data and change business systems at machine speed.

Before you scale it, can you answer: How many agents are running? Who owns them? What can they access and change? Can an agent exceed the authority of the human it serves? Can you prove what an agent actually did? And if one is compromised or manipulated, can you stop it before it becomes a business incident?

Drawing on practical experience building an enterprise AI security strategy, Arvin Bansal will show how to move from AI policy to production control using TRACE: Track, Register, Approve, Certify and Expose. He will connect board risk to agent identity, permission inheritance, data protection, gateways, behavioral monitoring, forensic traceability and kill switches, showing how security can accelerate agentic transformation without surrendering control.

Auditorium II

Wed 4

11:55h - 12:20h Auditorium II Full Congress Pass

11:20h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

The new frontier: Sovereignty and resilience in the age of AI

José de la Cruz TrendAI™ Technical Director Iberia Speaker

Raúl Guillén TrendAI™ European Cybersecurity Strategist Speaker

2026-11-04 11:20 2026-11-04 11:45 Europe/Madrid The new frontier: Sovereignty and resilience in the age of AI Frontier AI is creating a new technology frontier — and a new security challenge. Organisations must not only protect AI systems, but also understand their dependencies, maintain control over critical capabilities and remain resilient as the technology evolves. This session explores the intersection of Frontier AI, digital sovereignty and cyber resilience, bringing together strategic and technical perspectives on how to navigate this rapidly changing landscape. Auditorium II

Wed 4

11:20h - 11:45h Auditorium II Full Congress Pass

11:20h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

This is your brain on deepfakes: Why AI scams work on smart people and how you can stop it

Christian Reinhardt SoSafe SE Director Human Risk Management Speaker

#DataPrivacy, #DigitalTrust, #Governance, #IdentitySecurity, #Resilience, #TrustFrameworks

2026-11-04 11:20 2026-11-04 11:45 Europe/Madrid This is your brain on deepfakes: Why AI scams work on smart people and how you can stop it Deepfakes are no longer science fiction – they are here, and they are highly effective. Drawing on neuroscientific insights, this talk explains why the human brain is not built for these threats and how the same psychological mechanisms attackers exploit can be turned into powerful tools for awareness. Understanding the brain is key to building real security resilience. Auditorium I

Wed 4

11:20h - 11:45h Auditorium I Full Congress Pass

10:00h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

Sovereign Cyber AI: Beyond the obvious

Kirti Kumar Cyber AI Products Global CTO Speaker

#AIGovernance, #AIInfrastructure, #AISecurity, #CyberSovereignty, #DataGovernance, #DigitalSovereignty, #EuropeanAI, #SovereignAI

2026-11-04 10:00 2026-11-04 10:35 Europe/Madrid Sovereign Cyber AI: Beyond the obvious Sovereign AI usually raises three concerns: where the data resides, what the regulator will ask, and a geopolitically induced coma. Those are the obvious ones. The harder questions are who can alter your AI, whether your defenders can live without it, and one rarely asked: how far an attacker can steer it without ever touching it. Drawing on real-world initiatives, this session sets out a reference architecture for Sovereign Cyber AI and its value-realisation model. Existing standards stop short of this, and closing the gap is our job as a community. The safeguards we settle on now are what the next generation inherits. Auditorium I

Wed 4

10:00h - 10:35h Auditorium I Full Congress Pass

15:45h

Conference | Congress AI, identity and trust in the digital environment CISOs & Security Leader

Okay… so, what next?

Carlos Payés SentinelOne Strategic AI Executive Speaker

#AITransformation, #CISOs, #CyberLeadership, #DecisionMaking, #ExecutiveLeadership, #Governance, #RiskManagement, #SecurityStrategy

2026-11-04 15:45 2026-11-04 16:10 Europe/Madrid Okay… so, what next?

We are at the AI inflection point.

Externally, AI is enabling attackers. Internally, adoption is racing ahead of security, governance, and clarity of ownership. It all feels a bit uncomfortably familiar.

This session draws lessons from yesterday's cyber security as we look to tomorrow. What has worked, what failed, and where can we head next if we want to secure AI without slowing progress.

I’ll look ahead to autonomous SOC operations and a threat landscape shaped by AI-enabled attackers and machine-speed decision making.

AI is changing security. Okay... so, what next?

Auditorium I

Wed 4

15:45h - 16:10h Auditorium I Full Congress Pass

11:55h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

New operating models for governing AI and cybersecurity

Sounil Yu Cyber Defense Matrix and the DIE Triad Author and creator Speaker

#AIGovernance, #CISOs, #CyberResilience, #CybersecurityLeadership, #Governance, #RiskManagement, #SecurityOperatingModel, #Strategy

2026-11-04 11:55 2026-11-04 12:20 Europe/Madrid New operating models for governing AI and cybersecurity AI is not just more automation. It requires new thinking and new operating models to govern and secure properly. This session explores these operating models, shares practical ways to apply them, and predicts what is coming next. Auditorium I

Wed 4

11:55h - 12:20h Auditorium I Full Congress Pass

Thu 05

13:30h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

Closing: 10 actions to build Europe’s cybersecurity champions

Polyvios Hadjiyiangou Operations at European Cybersecurity Competence Centre (ECCC) Head of Unit Speaker

2026-11-05 13:30 2026-11-05 13:45 Europe/Madrid Closing: 10 actions to build Europe’s cybersecurity champions The closing session distils the forum into a short list of actionable recommendations for founders, investors, policymakers and ecosystem organisations seeking to build globally competitive European cybersecurity companies. Level 1 - Room 2.4

Thu 5

13:30h - 13:45h Level 1 - Room 2.4 Public Access

12:30h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

Founder–investor lightning discussion: What Europe gets right and wrong

2026-11-05 12:30 2026-11-05 13:00 Europe/Madrid Founder–investor lightning discussion: What Europe gets right and wrong A fast-paced founder-investor exchange on the strengths and weaknesses of Europe’s cybersecurity ecosystem. Participants will discuss funding, fragmentation, procurement, regulation, talent, exits and the practical changes that could help European companies scale internationally. Level 1 - Room 2.4

Thu 5

12:30h - 13:00h Level 1 - Room 2.4 Public Access

12:00h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

The founders’ startup perspective: Building the next European cybersecurity leader

Xavier Álvarez Merabytes Director de Operaciones Speaker

Dan Brett NNEAT CEO and co-founder Speaker

Oscar Villanueva Nymiz Founder & CEO Speaker

Antonio Muñoz Zepo CEO & Co-Founder Speaker

2026-11-05 12:00 2026-11-05 12:30 Europe/Madrid The founders’ startup perspective: Building the next European cybersecurity leader Founders compare approaches to building and scaling cybersecurity companies in Europe, including customer validation, differentiation, talent, international expansion and the challenge of turning technical innovation into a sustainable global business. Level 1 - Room 2.4

Thu 5

12:00h - 12:30h Level 1 - Room 2.4 Public Access

11:00h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

The investors’ perspective: What will it take to build Europe’s next cybersecurity champions?

2026-11-05 11:00 2026-11-05 11:30 Europe/Madrid The investors’ perspective: What will it take to build Europe’s next cybersecurity champions? Investors discuss the ingredients required to build Europe’s next cybersecurity leaders, from defensible technology and international go-to-market strategy to capital efficiency, talent, procurement access and follow-on funding. The session will explore how investors assess scale-up potential and what founders can do to become investment-ready. Level 1 - Room 2.4

Thu 5

11:00h - 11:30h Level 1 - Room 2.4 Public Access

10:30h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

Unlocking capital for Europe’s cyber and defence market

Krzysztof Szubert European Cyber Security Organisation (ECSO) Member of the Board of Directors Speaker

François Lavaste Tikehau Capital Executive Director Speaker

Magdalena Chałas Elevator Ventures Senior Investment Manager Speaker

2026-11-05 10:30 2026-11-05 11:00 Europe/Madrid Unlocking capital for Europe’s cyber and defence market This panel examines the European Cybersecurity Investment Platform and the Fund of Funds approach to mobilising public and private capital for specialised cybersecurity investment. Speakers will discuss progress, lessons learned, the role of regional and institutional actors, and how financing structures can help European companies scale while supporting strategic autonomy and industrial competitiveness. Level 1 - Room 2.4

Thu 5

10:30h - 11:00h Level 1 - Room 2.4 Public Access

10:05h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

What selling a cybersecurity company taught me about building the next one: The Blueliv journey from startup to successful exit, and how it shapes Zynap today

Daniel Solís Zynap Founder and CEO Speaker

2026-11-05 10:05 2026-11-05 10:30 Europe/Madrid What selling a cybersecurity company taught me about building the next one: The Blueliv journey from startup to successful exit, and how it shapes Zynap today Daniel Solís reflects on the Blueliv journey from startup growth to successful exit and how those lessons inform his work building Zynap today. The talk will focus on founder decision-making, market positioning, scaling and translating experience into a new venture. Level 1 - Room 2.4

Thu 5

10:05h - 10:30h Level 1 - Room 2.4 Public Access

10:00h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

Opening Europe’s Cybersecurity innovation moment by Catalonia cyber security agency

Polyvios Hadjiyiangou Operations at European Cybersecurity Competence Centre (ECCC) Head of Unit Speaker

2026-11-05 10:00 2026-11-05 10:05 Europe/Madrid Opening Europe’s Cybersecurity innovation moment by Catalonia cyber security agency A forum connecting European cybersecurity founders, investors, policymakers and ecosystem leaders to discuss how promising companies can scale into globally competitive champions. Sessions will explore growth capital, public-private investment mechanisms, founder lessons, exit pathways and the conditions needed to strengthen Europe's cybersecurity and defence innovation base. Level 1 - Room 2.4

Thu 5

10:00h - 10:05h Level 1 - Room 2.4 Public Access

10:00h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

European cyber innovation & investment forum

Schedule

10:00h - 10:05h

Opening Europe’s Cybersecurity innovation moment by Catalonia cyber security agency

Polyvios Hadjiyiangou Operations at European Cybersecurity Competence Centre (ECCC) Head of Unit Speaker

10:05h - 10:30h

What selling a cybersecurity company taught me about building the next one: The Blueliv journey from startup to successful exit, and how it shapes Zynap today

Daniel Solís Zynap Founder and CEO Speaker

10:30h - 11:00h

Unlocking capital for Europe’s cyber and defence market

Krzysztof Szubert European Cyber Security Organisation (ECSO) Member of the Board of Directors Speaker

François Lavaste Tikehau Capital Executive Director Speaker

Magdalena Chałas Elevator Ventures Senior Investment Manager Speaker

11:00h - 11:30h

The investors’ perspective: What will it take to build Europe’s next cybersecurity champions?

12:00h - 12:30h

The founders’ startup perspective: Building the next European cybersecurity leader

Xavier Álvarez Merabytes Director de Operaciones Speaker

Dan Brett NNEAT CEO and co-founder Speaker

Oscar Villanueva Nymiz Founder & CEO Speaker

Antonio Muñoz Zepo CEO & Co-Founder Speaker

12:30h - 13:00h

Founder–investor lightning discussion: What Europe gets right and wrong

13:00h - 13:30h

Your AI Agents need Passports

Jonathan Care Kuppinger Cole Lead Analyst and Practice Lead AI Speaker

13:30h - 13:45h

Closing: 10 actions to build Europe’s cybersecurity champions

Polyvios Hadjiyiangou Operations at European Cybersecurity Competence Centre (ECCC) Head of Unit Speaker

2026-11-05 10:00 2026-11-05 13:45 Europe/Madrid European cyber innovation & investment forum

Building Europe's next cybersecurity champions - from startup innovation to global scale, strategic capital & unicorn exits.

Can Europe build the next cybersecurity unicorn?

Level 1 - Room 2.4

Thu 5

10:00h - 13:45h Level 1 - Room 2.4 Public Access

12:30h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk CISOs & Security Leader

Should cybersecurity report to the CIO or directly to the CEO?

2026-11-05 12:30 2026-11-05 14:00 Europe/Madrid Should cybersecurity report to the CIO or directly to the CEO? Cybersecurity is increasingly a strategic business risk management issue, rather than solely a technological one. In this context, should the CISO report to the CIO or directly to the CEO? While reporting to the CIO facilitates coordination with Technology, reporting directly to the CEO strengthens the independence and visibility of the security function. This raises the question of whether a model in which the CISO works closely with the CIO while having direct access to the CEO to escalate critical risks and incidents offers the best balance. Networking Hub

Thu 5

12:30h - 14:00h Networking Hub Public Access

11:55h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Beyond cybersecurity: Who owns the decision?

Holger Spohn North Atlantic Treaty Organisation Principal Engineer (Advanced Cyber Defence Principles) Speaker

#BoardGovernance, #BusinessAlignment, #CISOs, #CyberLeadership, #CyberStrategy, #ExecutiveAccountability, #Governance, #RiskOwnership

2026-11-05 11:55 2026-11-05 12:20 Europe/Madrid Beyond cybersecurity: Who owns the decision?

Cybersecurity is no longer just about protecting systems, identities, and data.

As AI, automation, critical infrastructure, cloud platforms, and global supply chains become increasingly interconnected, security, resilience, and sovereignty are converging into a single challenge: maintaining the ability to act when dependencies fail, change, or come under pressure.

Drawing on insights from Black Hat and DEF CON, this keynote explores how the attack surface is expanding beyond technology into trust, dependency, autonomy, and decision-making itself. From critical infrastructure and supply chains to undersea cables, compute concentration, and hybrid cyber operations, the session examines how modern cyber incidents increasingly create operational, economic, and strategic effects.

Attendees will gain a new perspective on resilience, sovereignty, and agency in a world where digital capabilities depend on infrastructures and ecosystems that few organizations fully control.

Auditorium II

Thu 5

11:55h - 12:20h Auditorium II Full Congress Pass

Track: CISOs & Security Leader

#BCC26

October is Cyber Month.