PLAN YOUR VISIT · NOVEMBER 3–5, 2026 · FIRA GRAN VIA, HALL 2
BCC26 agenda for Compliance & Data Protection
NIS2, DORA, ISO 27001 and European digital sovereignty are reshaping compliance. BCC26 brings together national agencies, regulators and practitioners to turn obligations into operational resilience. Here is your plan, hour by hour.
Why attend if you work in compliance & data protection
NIS2 and DORA in practice
How the new European rules make cyber resilience everyone’s responsibility — and what it means for your organisation.
Hear from Europe’s agencies
INCIBE and the national cybersecurity centres of Finland, Austria and Portugal on resilience and sovereignty.
From paperwork to live evidence
Move from a bureaucratic ISMS to an operational model with compliance as code and OSCAL.
Connect with your community
DCA’s annual cybersecurity day, the CISO Leadership Awards and sessions on governance, third-party risk and data sovereignty.
Your day-by-day schedule
Every Compliance & Data Protection session at BCC26, hour by hour. Click a title for full details and speakers. Sessions at the same time run in parallel — pick the one that fits you best.
11:20h
Defending against hidden risks of AI tools in the workplace
Also recommended · Talk · 11:20h – 11:45h
Seamus Lennon · ThreatLocker
Auditorium I · Full Congress Pass
11:55h
Defending Europe in 2026: National cybersecurity strategies, collaboration & emerging threats
Also recommended · Roundtable · 11:55h – 12:55h
Moderated by Maurizio Mensi · Italian National School of Administration
Auditorium II · Full Congress Pass
13:05h
Trusted shield: Combining third-party innovation with sovereign control
Also recommended · Talk · 13:05h – 13:30h
Silvia Vázquez Corrochano · Telefónica
Auditorium I · Full Congress Pass
16:00h
From a Bureaucratic ISMS to an Operational Model: Live Evidence with OSCAL
Side event · 16:00h – 16:30h
Harald Messemer · MessemerTech OÜ
Networking Hub · Public Access
10:00h
Sovereign Cyber AI: Beyond the obvious
Also recommended · Talk · 10:00h – 10:35h
Kirti Kumar · EY
Auditorium I · Full Congress Pass
10:45h
No one is above the line: How NIS2 and DORA made the cybersecurity poverty line everyone’s problem
Talk · 10:45h – 11:10h
Rob Harrison · Sophos
Auditorium I · Full Congress Pass
13:05h
Europe’s cyber resilience & cyber sovereignty: a strategic perspective from Europe’s governmental cybersecurity agencies
Roundtable · 13:05h – 13:50h
INCIBE · NCSC Finland · Federal Chancellery Austria · National Cybersecurity Centre Portugal
Auditorium I · Full Congress Pass
16:30h
The CISO Leadership Awards Ceremony
Awards · 16:30h – 17:30h
Auditorium I · Full Congress Pass
15:30h
Jornada Anual DCA Ciberseguretat
Side event · 15:30h – 17:30h
DCA Cybersecurity Community
Level 0 · Room 2.1 · Public Access
NETWORKING AT BCC26
Want to network? Get the official BCC26 app
Download the official Barcelona Cybersecurity Congress app and switch on the Networking tab. You will be able to find and connect with other attendees who also have networking activated, chat with them and meet up at the congress.
1. Download the app
Free on the App Store and Google Play.
2. Activate Networking
Open the Networking tab and switch on your profile so others can find you.
3. Connect at the show
Browse attendees with networking active, send requests, chat and arrange meetings.
Your industry. Your cybersecurity future.
At a glance
- Event: Barcelona Cybersecurity Congress 2026 (BCC26), organised by Fira de Barcelona
- Dates: 3–5 November 2026
- Venue: Fira de Barcelona Gran Via, Hall 2, Barcelona (Spain)
- For Compliance & Data Protection: 5 dedicated sessions plus 4 recommended talks
- Key topics: NIS2, DORA, ISO 27001, compliance as code (OSCAL), third-party risk and European cyber sovereignty
- Speakers from: INCIBE, the national cybersecurity centres of Finland and Portugal, Austria’s Federal Chancellery, Sophos and more
Frequently asked questions
When and where is Barcelona Cybersecurity Congress 2026?
BCC26 takes place on 3–5 November 2026 at the Fira de Barcelona Gran Via venue, Hall 2, in Barcelona (Spain).
Are there sessions about NIS2 and DORA at BCC26?
Yes. On Wednesday 4 November, Sophos explains how NIS2 and DORA made cyber resilience everyone’s responsibility, and a roundtable with INCIBE and European national cybersecurity agencies discusses resilience and sovereignty. On Tuesday 3 November there is a side event on moving from a bureaucratic ISMS to live evidence with OSCAL.
What pass do I need to attend these sessions?
Most congress sessions in Auditorium I and Auditorium II require a Full Congress Pass. Side events in the Networking Hub and other rooms marked “Public Access” are open to all registered visitors. Get your pass.
Can I add BCC26 sessions to my calendar?
Yes. Every session on this page has buttons to add it to Google Calendar or Outlook, with the date, time, room and a link to the session details.
How can I network with other attendees at BCC26?
Download the official Barcelona Cybersecurity Congress app, activate the Networking tab and connect with other attendees who also have networking enabled to chat and arrange meetings at the congress.
Explore other profiles: CISOs & Security Leaders agenda · IT & Infrastructure agenda · All profiles · Full BCC26 programme
Ready to build your BCC26 agenda?
Explore every session, side event and activity, filtered for Compliance & Data Protection.