Back | Home Agenda

Track: Compliance & Data Protection

Tue 03

15:30h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk Compliance & Data Protection CISOs & Security Leader

Jornada Anual DCA Ciberseguretat

Alba Barrientos DCA Gestora de la Comunitat Ciberseguretat Host

Germà Bustamante Divulgador de Ciberseguretat Moderator

José Nicolás Castellano Cybersecurity Consultant Speaker

Xavier Pi UPC School Co-director Máster Industria 4.0 Speaker

Olga Sánchez Caixabank IT Manager Speaker

Barbara Eisele DCA Gestora Blockchain Speaker

2026-11-03 15:30 2026-11-03 17:30 Europe/Madrid Jornada Anual DCA Ciberseguretat La comunitat de ciberseguretat de la Digital Catalonia Alliance (DCA) celebra la seva jornada anual en el marc del Barcelona Cybersecurity Congress, un punt de trobada per a empreses, professionals i agents de l’ecosistema digital. La sessió donarà visibilitat a solucions tecnològiques innovadores en els àmbits de la ciberseguretat i el blockchain, i abordarà els reptes de la confiança digital des de diferents perspectives. El programa inclourà demostracions i casos pràctics, una sessió sobre com s’executa un ciberatac i una taula rodona amb experts en ciberseguretat, compliance i blockchain. La jornada finalitzarà amb un espai de networking per fomentar connexions i noves oportunitats de col·laboració Level 0 - Room 2.1

Tue 3

15:30h - 17:30h Level 0 - Room 2.1 Public Access

16:00h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk Compliance & Data Protection

Del SGSI burocrático al modelo operativo: evidencias vivas con OSCAL

Harald Messemer MessemerTech OÜ SO 27001 Lead Auditor Speaker

#ComplianceAsCode, #ContinuousAssurance, #ISO27001, #OSCAL, #SGSI

2026-11-03 16:00 2026-11-03 16:30 Europe/Madrid Del SGSI burocrático al modelo operativo: evidencias vivas con OSCAL El SGSI y la ISO 27001 suelen vivirse como burocracia, al margen del trabajo real de ciberseguridad. Esta charla propone lo contrario: integrar el SGSI en los pipelines de desarrollo y operaciones hasta convertirlo en parte del modelo operativo. La clave: sistemas que generan evidencias estructuradas y firmadas, vinculadas de forma trazable a políticas, estándares y requisitos legales. OSCAL hace de capa común para seguir de forma continua la implementación y la efectividad de cada control. El resultado: dejar de preparar auditorías como ejercicios puntuales y demostrar un proceso vivo. Ante una auditoría ISO 27001 o una solicitud de cliente, la trazabilidad, las evidencias y la evolución de cada control ya están ahí. Networking Hub

Tue 3

16:00h - 16:30h Networking Hub Public Access

Wed 04

10:45h

Conference | Congress Compliance & Data Protection

No one is above the line: How NIS2 and DORA made the cybersecurity poverty line everyone’s problem

Rob Harrison Sophos Vice President Speaker

#Accountability, #Compliance, #Compliance&DataProtection, #CyberRegulation, #CyberResilience, #DORA, #Governance, #NIS2, #RiskManagement

2026-11-04 10:45 2026-11-04 11:15 Europe/Madrid No one is above the line: How NIS2 and DORA made the cybersecurity poverty line everyone’s problem Europe's regulators have quietly redrawn the cybersecurity poverty line - the gap between the few organisations that can run security as a system and the millions that have the tools but not the capability to make them work. Under NIS2 and DORA, that gap is no longer a social problem; it's a legal one, and it runs straight through your supply chain. When an under-resourced supplier or ICT provider sits below the line, you inherit both the breach and the regulatory exposure and, increasingly, your board inherits personal liability for it. This session examines how MDR and an agentic SOC scale security operations across 40,000 organizations, and why the harder, unsolved problem is scaling strategy and governance. That's the gap Sophos CISO Advantage is built to close: scaling the judgment of a world-class CISO, continuous control validation, and regulator-ready metrics to organisations with or without a CISO, so they can both deliver their security strategy and prove it, and lift their whole ecosystem above the line. Auditorium I

Wed 4

10:45h - 11:15h Auditorium I Full Congress Pass

13:05h

Roundtable | Congress AI, identity and trust in the digital environment Compliance & Data Protection

Europe’s cyber resilience & cyber sovereignty: a strategic perspective from Europe’s governmental cybersecurity agencies

Lino Santos Portuguese National Cybersecurity Center Head of the Portuguese National Cybersecurity Center Speaker

Marcos Gómez INCIBE - Instituto Nacional de Ciberseguridad CISO & Deputy Director of Corporate Security Speaker

Pekka Jokinen National Cyber Security Center Finland Deputy Director General Speaker

Maurizio Mensi Italian National School of Administration Professor of Law and Economics Moderator

Arno Spiegel Federal Chancellery (Austria) Deputy Director - Cybersecurity and Crisis Data Center Speaker

#CyberResilience, #CyberSovereignty, #EuropeanSecurity, #GovernmentCybersecurity, #NIS2, #StrategicCooperation, #ThreatLandscape

2026-11-04 13:05 2026-11-04 13:55 Europe/Madrid Europe’s cyber resilience & cyber sovereignty: a strategic perspective from Europe’s governmental cybersecurity agencies

Europe is entering a decisive era for cybersecurity. As geopolitical tensions, sophisticated cyber threats, supply-chain dependencies and digital disruption continue to grow, European governments must strengthen their ability to anticipate, withstand and recover from cyber incidents while protecting Europe’s strategic digital autonomy.

This high-level panel brings together senior representatives from the national cybersecurity agencies of Portugal, Spain, Finland and Austria to explore the governmental perspective on European Cyber Resilience and Cyber Sovereignty. The discussion will examine how European nations are translating EU cyber strategies, regulations and resilience frameworks into national capabilities; protecting critical infrastructure and government services; strengthening public-private cooperation; securing strategic technologies and supply chains; and developing greater European sovereignty in an increasingly contested digital environment.

The panel will provide practical insights into Europe’s evolving cybersecurity priorities, cross-border cooperation and the capabilities required to build a more resilient, secure and digitally sovereign Europe.

Auditorium I

Wed 4

13:05h - 13:55h Auditorium I Full Congress Pass

Track: Compliance & Data Protection

Jornada Anual DCA Ciberseguretat

Del SGSI burocrático al modelo operativo: evidencias vivas con OSCAL

No one is above the line: How NIS2 and DORA made the cybersecurity poverty line everyone’s problem

Europe’s cyber resilience & cyber sovereignty: a strategic perspective from Europe’s governmental cybersecurity agencies

#BCC26

October is Cyber Month.