Back | Home Agenda

Track: Systemic, cyber-physical and supply chain resilience

Tue 03

16:00h

Side Event | Side Event Cybersecurity as a strategic business and reputational risk Systemic, cyber-physical and supply chain resilience Compliance & Data Protection

From a Bureaucratic ISMS to an Operational Model: Live Evidence with OSCAL

Harald Messemer MessemerTech OÜ SO 27001 Lead Auditor Speaker

#ComplianceAsCode, #ContinuousAssurance, #ISO27001, #OSCAL, #SGSI

2026-11-03 16:00 2026-11-03 16:30 Europe/Madrid From a Bureaucratic ISMS to an Operational Model: Live Evidence with OSCAL The ISMS and ISO 27001 are often perceived as bureaucratic processes disconnected from day-to-day cybersecurity operations. This talk proposes a different approach: integrating the ISMS into development and operations pipelines until it becomes part of the operational model. The key is to build systems that generate structured, signed evidence, traceably linked to policies, standards and legal requirements. OSCAL provides a common layer to continuously track the implementation and effectiveness of each control. The result is a shift from preparing for audits as one-off exercises to demonstrating an ongoing, living process. When facing an ISO 27001 audit or a customer request, traceability, evidence and the evolution of each control are already in place. Networking Hub

Tue 3

16:00h - 16:30h Networking Hub Public Access

10:00h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience IT & Infrastructure

Ciberresiliencia en la cadena de suministro industrial

Schedule

10:00h - 10:20h

Apertura: la cadena de suministro industrial ya no es una cadena

José Valiente Centro de Ciberseguridad Industrial Director General Speaker

10:20h - 10:40h

¿Qué ocurre cuando falla un tercero tecnológico crítico?

Oscar López GB-FOODS CISO Global Speaker

10:40h - 11:00h

El papel del fabricante en la ciberresiliencia industrial

César Delgado Rockwell Automation Cybersecurity Business Development Speaker

11:00h - 11:20h

Cómo gerstionar dependencias en proyectos industriales complejos

María Dolores Trapero Elecnor Sistemas Responsable de Centro de Ciberseguridad y redes IT/OT Speaker

11:20h - 12:00h

Panel – ¿Quién controla realmente el riesgo de la cadena de suministro industrial?

Oscar López GB-FOODS CISO Global Speaker

César Delgado Rockwell Automation Cybersecurity Business Development Speaker

Pablo Carmona Preventa de Redes y Ciberseguridad OT/IT Speaker

Joan Figueras Coordinador de CCI en Cataluña Speaker

Maite Arcos Fundación ESYS Directora Moderator

2026-11-03 10:00 2026-11-03 12:00 Europe/Madrid Ciberresiliencia en la cadena de suministro industrial La resiliencia industrial ya no depende únicamente de proteger los activos propios, sino de comprender y gobernar las dependencias tecnológicas que sostienen la operación. Este side event aborda la cadena de suministro desde cuatro perspectivas complementarias: operador industrial, fabricante, ingeniería y gobierno del riesgo. Analizaremos qué ocurre cuando falla un tercero tecnológico crítico, cómo diseñar productos y arquitecturas capaces de resistir, y cómo gestionar dependencias en proyectos industriales complejos. La sesión culminará con un panel sobre quién controla realmente el riesgo de la cadena de suministro, poniendo el foco en responsabilidad compartida, visibilidad, alternativas, capacidad de respuesta y continuidad operativa. Networking Hub

Tue 3

10:00h - 12:00h Networking Hub Public Access

13:05h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Trusted shield: Combining third-party innovation with sovereign control

Alejandro Ramos Telefónica Tech Global Cybsercurity Director Speaker

#DigitalSovereignty, #TechnologyGovernance, #ThirdPartyRisk, #VendorSecurity

2026-11-03 13:05 2026-11-03 13:30 Europe/Madrid Trusted shield: Combining third-party innovation with sovereign control Innovation increasingly depends on third-party technologies but adopting them should not mean losing control over critical data, services or decisions. This session explores why organisations need clear governance frameworks, security controls and visibility over technological dependencies—enabling them to benefit from global innovation while preserving autonomy, resilience and digital sovereignty. Auditorium I

Tue 3

13:05h - 13:30h Auditorium I Full Congress Pass

11:55h

Roundtable | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Defending Europe in 2026: National cybersecurity strategies, collaboration & emerging threats

Maurizio Mensi Italian National School of Administration Professor of Law and Economics Moderator

Jan Smedts Digitaal Vlaanderen (Flanders) CEO Speaker

Dan Cîmpean National Directorate for Cyber Security (DNSC) (Romania) Director Speaker

Laura Caballero Nadales Cybersecurity Agency of Catalonia Director Speaker

Adam Marczyski NASK National Research Institute (Poland) Deputy Director for Cybersecurity and Innovation Speaker

#CyberResilience, #CyberSovereignty, #EuropeanSecurity, #NationalCybersecurityStrategies, #ThreatLandscape

2026-11-03 11:55 2026-11-03 12:55 Europe/Madrid Defending Europe in 2026: National cybersecurity strategies, collaboration & emerging threats This panel will bring together senior representatives from leading national cybersecurity agencies across Europe to discuss the key challenges and opportunities shaping Europe’s cyber resilience. The discussion will address strategic, regulatory and operational priorities needed to strengthen cybersecurity cooperation and preparedness across the continent. Auditorium II

Tue 3

11:55h - 12:55h Auditorium II Full Congress Pass

Wed 04

12:00h

Side Event | Side Event Systemic, cyber-physical and supply chain resilience CISOs & Security Leader IT & Infrastructure

ISC2 Community & Professional Development Forum

Alejandro Cadarso ISC2 Spain Chapter / Field CTO President Host

Néstor Angulo ISC2 Spain Chapter / CISSP Head of Technology Moderator

Sebastián Correas ISS & GRC Consultant / CISSP / CCSSP / ISO27001 & ISO 42001 Lead Auditor Speaker

Mykhailo Sindieiev DevSecOps Engineer / OWASP Barcelona Leader Speaker

#Ciberseguridad, #ISC2, #ISC2Spain, #OWASP, #SBOM

2026-11-04 12:00 2026-11-04 13:30 Europe/Madrid ISC2 Community & Professional Development Forum ISC2 Spain Chapter is organising this 90-minute session to share updates on the Chapter’s development, its certification initiatives, continuing education and professional development activities, and to host a collaborative roundtable with OWASP. The roundtable, entitled “SBOM: The Foundation for Secure Development, Vulnerability Management, and Compliance”, will explore software supply chain security and Software Bills of Materials (SBOMs) in the context of the CRA (Cyber Resilience Act) and NIS2, offering a practical perspective on vulnerabilities and open-source risk management. An open space to learn, exchange experiences and strengthen the professional cybersecurity community. Networking Hub

Wed 4

12:00h - 13:30h Networking Hub Public Access

11:20h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

The new frontier: Sovereignty and resilience in the age of AI

José de la Cruz TrendAI™ Technical Director Iberia Speaker

Raúl Guillén TrendAI™ European Cybersecurity Strategist Speaker

2026-11-04 11:20 2026-11-04 11:45 Europe/Madrid The new frontier: Sovereignty and resilience in the age of AI Frontier AI is creating a new technology frontier — and a new security challenge. Organisations must not only protect AI systems, but also understand their dependencies, maintain control over critical capabilities and remain resilient as the technology evolves. This session explores the intersection of Frontier AI, digital sovereignty and cyber resilience, bringing together strategic and technical perspectives on how to navigate this rapidly changing landscape. Auditorium II

Wed 4

11:20h - 11:45h Auditorium II Full Congress Pass

11:55h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

New operating models for governing AI and cybersecurity

Sounil Yu Cyber Defense Matrix and the DIE Triad Author and creator Speaker

#AIGovernance, #CISOs, #CyberResilience, #CybersecurityLeadership, #Governance, #RiskManagement, #SecurityOperatingModel, #Strategy

2026-11-04 11:55 2026-11-04 12:20 Europe/Madrid New operating models for governing AI and cybersecurity AI is not just more automation. It requires new thinking and new operating models to govern and secure properly. This session explores these operating models, shares practical ways to apply them, and predicts what is coming next. Auditorium I

Wed 4

11:55h - 12:20h Auditorium I Full Congress Pass

Thu 05

13:05h

Conference | Congress Systemic, cyber-physical and supply chain resilience IT & Infrastructure

Cyber resilience of emergency coordination centres from a law enforcement perspective on European security research

Rubén Fernández Bleda Ajuntament de València Police Officer and Project Manager Speaker

José L. Diego Ajuntament de València Police Inspector and Chief of Staff to the Chief Commissioner Speaker

#CriticalInfrastructure, #CyberResilience, #IncidentManagement, #LawEnforcement, #PublicSafety, #SecurityOperations

2026-11-05 13:05 2026-11-05 13:30 Europe/Madrid Cyber resilience of emergency coordination centres from a law enforcement perspective on European security research

This presentation explores how EU-funded security research helps law enforcement agencies protect citizens and counter cybercrime, from defining operational needs and co-designing solutions to validating emerging technologies.

Drawing on València Local Police’s experience, it focuses on the GANNDALF pilot protecting the city’s emergency coordination centre, including its 092 call line and dispatch services. The pilot tests tools for early threat detection, cyber risk assessment, forensic visualisation and decision support against phishing, ransomware-style disruption and denial-of-service scenarios.

Using simulated environments and synthetic data, the session examines how an emergency organisation can safely evaluate advanced cybersecurity tools. It shares practical lessons on collaboration between police, researchers and technology providers, bridging European security R&D with the everyday operational needs of public safety agencies,

Auditorium I

Thu 5

13:05h - 13:30h Auditorium I Full Congress Pass

11:55h

Conference | Congress Systemic, cyber-physical and supply chain resilience CISOs & Security Leader

Beyond cybersecurity: Who owns the decision?

Holger Spohn North Atlantic Treaty Organisation Principal Engineer (Advanced Cyber Defence Principles) Speaker

#BoardGovernance, #BusinessAlignment, #CISOs, #CyberLeadership, #CyberStrategy, #ExecutiveAccountability, #Governance, #RiskOwnership

2026-11-05 11:55 2026-11-05 12:20 Europe/Madrid Beyond cybersecurity: Who owns the decision?

Cybersecurity is no longer just about protecting systems, identities, and data.

As AI, automation, critical infrastructure, cloud platforms, and global supply chains become increasingly interconnected, security, resilience, and sovereignty are converging into a single challenge: maintaining the ability to act when dependencies fail, change, or come under pressure.

Drawing on insights from Black Hat and DEF CON, this keynote explores how the attack surface is expanding beyond technology into trust, dependency, autonomy, and decision-making itself. From critical infrastructure and supply chains to undersea cables, compute concentration, and hybrid cyber operations, the session examines how modern cyber incidents increasingly create operational, economic, and strategic effects.

Attendees will gain a new perspective on resilience, sovereignty, and agency in a world where digital capabilities depend on infrastructures and ecosystems that few organizations fully control.

Auditorium II

Thu 5

11:55h - 12:20h Auditorium II Full Congress Pass

11:55h

Conference | Congress Systemic, cyber-physical and supply chain resilience IT & Infrastructure

Securing the intelligent network: Cyber resilience for AI, 5G and 6G

Connie McIntosh Ericsson Head of Security Speaker

#5GSecurity, #6GSecurity, #AISecurity, #CriticalInfrastructure, #CyberResilience, #NetworkResilience, #NetworkSecurity, #TelecomSecurity

2026-11-05 11:55 2026-11-05 12:20 Europe/Madrid Securing the intelligent network: Cyber resilience for AI, 5G and 6G AI is transforming intelligent transport networks into autonomous, software-defined systems, but with greater autonomy comes greater risk. This session examines emerging cyber threats across AI-driven control planes, edge and satellite infrastructure, quantum disruption, and the intersection of EU sovereignty, EU regulation, and cyber resilience. Auditorium I

Thu 5

11:55h - 12:20h Auditorium I Full Congress Pass

Track: Systemic, cyber-physical and supply chain resilience

#BCC26

October is Cyber Month.

Track: Systemic, cyber-physical and supply chain resilience