Brief Agenda

October 6, 2026

08:00 am

08:30

09:00

Register; grab a coffee. Mix, mingle and say hello to peers old and new.

09:00 am

09:00

09:10

Conference Chair’s Welcome Remarks

John Erik Setsaas

Setsaas Trust Advisory

09:10

10:10

Morning Power Hour Panel Session - Setting the Stage

Identity First Security: The New Foundation of Enterprise Trust

What does “Identity First Security” really mean in practice?
Why is identity becoming the primary security perimeter?
Is Zero Trust evolving into an outcome of Identity First Security?
How are AI, machine identities and autonomous agents reshaping enterprise trust?
Why are non-human identities (NHI) becoming the next major security challenge?
How should organisations prepare for Identity Threat Detection & Response (ITDR)?
Why do security transformations struggle when moving from strategy to enterprise-wide execution?
How do identity, data and cyber resilience work together as one security strategy?
How do leaders balance resilience, innovation and user experience?
Are legacy IAM programmes ready for cloud-native and AI-driven enterprises?
Where should organisations prioritise investment: IAM, PAM, ITDR, AI Security or Identity Governance?
How are DORA, NIS2 and the European Digital Identity framework influencing security priorities?
What will separate Identity First security leaders from laggards by 2030?

Richard van der Meer

Nissan

Sabna Sainudeen

Carlsberg Group

Pawel Bildziuk

Hapag-Lloyd AG

Senior Executive

TBC

Senior Executive

Available for Platinum Sponsor

John Erik Setsaas

Setsaas Trust Advisory (Moderator)

10:00 am

10:10

10:35

Identity First in the AI Era: Building Trust Across Human, Machine & AI Identities

Why is identity becoming the primary control layer for enterprise security?
How are AI agents, machine identities and autonomous systems redefining trust?
What will it take to secure human, machine and AI identities at enterprise scale?
What will define the next generation of Identity First organisations?

Senior Executive

TBC (Reserved for Title Sponsor)

10:35

10:55

Zero Trust on the Factory Floor: Identity-First Security Across IT & OT at a Global Automaker

Identity as the perimeter — across IT and OT.
The legacy and OT reality check.
From architecture to continuous enforcement.
Lessons from the frontline.

Dr. Ioana Teodoreanu

AUMOVIO

10:55

11:10

Navigating Permanent Disorder

How continuous disruption is reshaping resilience and security leadership
Bridging the gap between boardroom strategy and frontline execution
Building organisational agility through faster decision-making and empowered teams
Turning uncertainty into resilience, adaptability, and competitive advantage

Valeria Castellani

Prada Group

11:00 am

11:10

11:40

Morning Networking Break/ Pre-Arranged Meetings (30 minutes)

11:40

12:00

Sovereignty by Design: From Bring Your Own Key to Full Architectural Control

Why data sovereignty and digital sovereignty are not the same question
Bring Your Own Key to Hold Your Own Key: mapping the real spectrum of control
Why customer-held keys mean even a government subpoena can't unlock your data
From air-gapped on-premises to hosted control — where sovereignty actually lives

Philipp Wittek

Kiteworks

12:00

12:45

Panel 2: Identity, IAM & Data Protection: Securing Access in Real Time

Why has identity become the primary control layer in modern cybersecurity?
How are organisations evolving IAM beyond authentication and access administration?
Where do IGA programmes still struggle at enterprise scale?
How are organisations addressing privileged access risks across employees, third parties and cloud?
What impact will the EUDI Wallet and Europe’s digital identity framework have on enterprise IAM?
How are SCA/2FA and continuous authorisation evolving across digital banking channels?
What does continuous authorisation and adaptive access look like in practice?
How should identity and data protection strategies work together in real time?
How can real-time fraud monitoring leverage identity context to protect digital interactions?
How are organisations securing machine identities, APIs, service accounts and workloads?
What role can behavioural analytics and ITDR play beyond authentication?
How should IAM evolve as AI agents access enterprise systems and data?
How can organisations balance security, data protection, user experience and DORA/NIS2 compliance?
How does AI-driven automation make authorization more critical?
How can trust move from one-time authentication to continuous assessment?
How can organisations verify payment intent beyond a valid OTP?
Can the EUDI Wallet simplify onboarding and strong authentication?

Anmol Singh

Olympus Corporation

Francesco Aicardi

European Commission

Andreas Avato

Deutsche Bank

Prashant Tripathi

Elisity

Senior Executive

Moderator

12:00

12:45

13:00

Too Many Identities, Too Little Visibility?

Why identity environments are becoming harder to govern at enterprise scale?
Who owns machine, service and non-human identities when no employee directly controls them?
How do organisations discover orphaned, over-privileged and unmanaged identities?
Where identity, data, and security controls fail to work together in real time?

Senior Executive

TBC (Reserved for Buyer Side)

13:00

14:00

Networking Lunch/ Pre-arranged Meetings (60 mins)

Round Table Discussion

Table 1: Invisible Risk: Trust, Identity & Access

Table 2: Beyond Zero Trust: Security in Constant Change

14:00

14:45

Panel 3: AI vs AI: Defending Against Autonomous Cyber Threats

How is AI changing the nature and speed of cyberattacks?
Are we already seeing fully autonomous attack patterns in the wild?
How are organisations deploying AI within SOC and threat detection?
Should every enterprise AI agent have a governed identity, and who owns that identity?
How are AI and autonomous agents reshaping the cyber threat landscape?
Are autonomous cyberattacks already a reality, and how should organisations respond?
How is AI transforming SOC operations, threat detection and incident response?
How do you detect AI-generated threats such as deepfakes and synthetic attacks?
How should AI agents authenticate and access enterprise resources?
How do organisations prevent excessive privileges for AI agents?
Can existing IAM and PAM secure AI agents, or is a new model needed?
How do you detect rogue, compromised or impersonated AI agents?
How should trust between AI agents and machines be established?
How are deepfakes and synthetic identities changing identity security?
How do organisations balance autonomous defence with human oversight?

Nils Kaiser

Robert Bosch

Vanessa Anderson

Microsoft

Adrian Iacomi

Siemens Energy

Diana P.

Yunex Traffic

Senior Executive

TBC | Available for Panel Sponsor

Amela Gjishti

Women in Cybersecurity AI Affiliate (Moderator)

14:00

14:45

15:05

Autonomous Security Operations: Balancing Speed, Risk and Control

Are security teams still in control, or are AI systems already making real-time defence decisions?
What happens when automated detection starts triggering automated responses at scale?
How should identity, permissions and policy constrain autonomous security systems?
Where do blind spots emerge when attackers and defenders both rely on AI models?
Can SOC teams reliably validate and audit decisions they no longer fully execute themselves?

Senior Executive

Reserved for Silver Sponsor

15:00

15:05

15:50

Panel 4: Fraud, Identity Threats & Digital Trust in an AI-Driven World

How is fraud evolving with AI, automation, and identity attacks?
How are deepfakes, synthetic identities and impersonation changing digital fraud?
What role does identity verification and proofing play in fraud prevention today?
Where should KYC, authentication, behavioural intelligence and fraud detection intersect?
How are organisations detecting account takeover and identity fraud in real time at scale?
How can financial institutions and enterprises balance frictionless experiences with stronger identity assurance?
What role does behavioural analytics play in detecting compromised or manipulated identities?
How is AI changing the relationship between cybersecurity, fraud and FinCrime teams?
How is liability evolving when AI-driven identity fraud gets through?
What does continuous identity assurance look like beyond onboarding and initial KYC?
How can organisations protect customer trust as identity attacks become more sophisticated?

Norman Heit

Vodafone

Sascha Tomaczewski

Covestro

Patrick Spreckelmeyer

Nexent Bank

Susann Gäbler

Santander Deutschland

Senior Executive

TBC | Available for Panel Sponsor

Andres Maurer

Prod AG (Moderator)

15:50

16:05

Identity-First Architecture: Bridging the Gap Between Compliance and Continuous Trust

Shifting from legacy IAM models to identity as the primary security perimeter in hybrid environments
Balancing frictionless user experience with granular, real-time risk assessment and privilege management
Practical strategies to align identity security with core business agility and regulatory compliance

Roland Baum

Umbrella.Associates

16:00

16:05

16:45

Networking Break/ Pre- arranged Meetings (40 min)

Round Table Discussion

Table 3:Autonomous Threats vs Autonomous Defence

Table 4:Trust Under Attack: Fraud, Identity & AI

16:45

17:00

Securing Europe’s Digital Future: Resilience Beyond Cyber Risk

How are geopolitics reshaping enterprise risk in Europe?
Why is systemic dependency now the biggest exposure for organisations?
How do identity, access and third-party dependencies affect operational resilience?
What does resilience mean in a constantly disrupted environment?
How can enterprises ensure continuity under sustained uncertainty?

Senior Executive

Reserved for Keynote Sponsor

17:00

17:45

Panel 5: Building Cyber Resilience in a Fragmented and Volatile World

How are geopolitical tensions reshaping cybersecurity and identity-security strategies?
What are the biggest risks within third-party, supply-chain and privileged-access ecosystems?
How should organisations approach cyber resilience beyond prevention?
What role do identity governance and data governance play in enterprise resilience?
How are organisations aligning security programmes with DORA, NIS2 and evolving European regulation?
How should enterprises prepare for identity-provider, access-control or other critical security-service disruption?
What does a resilient enterprise architecture look like across cloud, legacy and distributed environments?
How are boards and leadership teams engaging with cyber and identity risk?
What role do simulations, stress testing and incident exercises play in readiness?
What will define cyber-resilience leaders over the next 3–5 years?