As offensive AI accelerates cyber incidents, response can no longer remain manual. This session introduces Cyber Incident Response Management (CIRM) and explores how AI-enabled response helps teams coordinate decisions, reduce regulatory burden, strengthen readiness, and improve resilience.

We explore how multi-cloud environments have evolved past human-scale management. As organisations deploy resources across fragmented infrastructures, security teams face a deluge of disconnected alerts, hidden attack paths and compliance gaps. Traditional Cloud Security Posture Management tools identify problems, but they often lack the context to prioritise and fix them.

We explore where audit-heavy operating models help, where they fall short, and what mature security leaders are doing to connect compliance activity to real operational readiness, across controls, suppliers, incident response and ownership.

Many organisations struggle to turn abstract threat intelligence into concrete action. This session shows how structured threat and risk analysis, profiling attackers, mapping assets, uncovering vulnerabilities - feeds directly into red team testing, so defences are prioritised on genuine risk rather than guesswork.

Many unpatched legacy vulnerabilities, an explosion in the number of vulnerabilities, an explosion in the number of monitored software (CPEs), and a reduction in the average time it takes to exploit vulnerabilities (MTTE) - are we facing a tsunami of vulnerabilities, and are we all about to be completely overwhelmed?

Explore how the CISO role is evolving from risk gatekeeper to business enabler. Learn why boards are prioritising AI-savvy, engineering-focused security leaders, how regulatory pressures are reshaping expectations, and what defines success in today’s high-stakes executive security market.

M365 environments are more complex, but security gaps persist and are now delaying AI adoption. As Copilot surfaces hidden risks in SharePoint and beyond, issues like oversharing and weak governance are becoming strategic blockers to innovation.

Financial fraud is growing in scale and sophistication. This session explores how the MITRE Fight Fraud Framework (F3) empowers organisations with a shared language, structured insight and collaborative approach to detect, understand and disrupt cyber-enabled fraud.