41st CISO Insight Summit

The opening keynote confronts the defining tension of the year: AI adoption is now a survival requirement, and it is simultaneously the fastest-growing source of enterprise risk. Drawing on a live enterprise program rather than theory, this session examines how one security leader has enabled the business to move at speed without writing the incident report of 2027, covering the decisions that earned trust with the CIO and the board, the controls that proved worth the friction, and the moments where saying no was the right call.

You'll leave with a clear-eyed view of what a defensible AI security posture looks like in practice, the questions to ask before your next model or agent goes live, and a sense of where your own programme sits against a peer who is further down the road.

As a continuation of the Catalyst Mission track, these sessions will establish a strategic blueprint to chart the pathway toward identifying a solution.

Track 1: Securing AI at Scale: Enabling Innovation Without Introducing Unmanageable Risk
Track 2: Cyber Resilience as a Business Imperative: Preparing for the Breach, Not Just Preventing It
Track 3: Identity Security: Defending the New Enterprise Perimeter
Track 4: Managing Third-Party Risk in an Interconnected Digital Ecosystem

Most conversations about AI and security focus on defending against it. This one flips the lens: how do you use it? Hosted by a practising CISO, this closed-door discussion gets specific about where AI is genuinely earning its place in the security function, from accelerating policy development and review, to triaging and prioritising vulnerabilities against an unmanageable backlog, to compressing the timeline from detection to containment during live incident response.

Expect an honest exchange about what has worked, what over-promised, and what it takes to trust an AI-assisted output when the stakes are high. You'll leave with peer-tested use cases you can pilot immediately, a realistic view of the effort behind each, and a candid account of the failure modes worth avoiding.

Security architecture and network architecture stopped being separable some time ago, and for most enterprises the network is now either the enabler of digital speed or the reason initiatives stall. This keynote makes the case that connectivity decisions are strategy decisions: how the network underpins zero trust rather than undermining it, what changes when AI workloads and distributed operations reshape traffic patterns, and where the trade-offs between performance, control and cost are actually being made.

You'll take away a framework for evaluating whether your connectivity model is accelerating or throttling the business, and the questions worth putting to your architecture team before the next investment cycle.

Most conversations about AI and security focus on defending against it. This one flips the lens: how do you use it? Hosted by a practising CISO, this closed-door discussion gets specific about where AI is genuinely earning its place in the security function, from accelerating policy development and review, to triaging and prioritising vulnerabilities against an unmanageable backlog, to compressing the timeline from detection to containment during live incident response.

Expect an honest exchange about what has worked, what over-promised, and what it takes to trust an AI-assisted output when the stakes are high. You'll leave with peer-tested use cases you can pilot immediately, a realistic view of the effort behind each, and a candid account of the failure modes worth avoiding.

Global scale and local control pull in opposite directions, and data sovereignty rules keep tightening the vice. This session examines how organizations are running genuinely global cloud platforms while satisfying an expanding patchwork of residency, privacy and regulatory requirements, without fragmenting into a dozen incompatible regional estates.

It covers architectural patterns that keep sovereignty manageable, the governance model that makes multi-jurisdiction operation sustainable, and where centralization is worth defending against local pressure. You'll take away a practical view of the sovereignty decisions coming down the track and how to design for them now rather than retrofitting later.

Zero trust has suffered more from enthusiastic marketing than almost any concept in security, which makes an honest account of a real implementation genuinely valuable. This end-user keynote covers what was actually delivered, in what order, and at what cost: where the model produced measurable risk reduction, where it collided with user experience and legacy reality, and how the program kept executive support through the unglamorous middle years.

You'll leave with a realistic sequencing plan drawn from someone who has done it, the metrics that demonstrated progress to a skeptical board, and a clear sense of which zero trust promises hold up in a distributed enterprise and which don't.

Legacy platforms are where security debt compounds quietly, in unpatchable systems, scarce skills, and controls bolted on decades after the architecture was set. This session tells the story of a multi-year legacy exit that actually finished and actually paid back: how the business case was built and defended across budget cycles, how risk was managed during the long middle period when both old and new ran in parallel, and what the security posture looked like on the other side.

You'll take away a migration approach that survives leadership changes, the arguments that unlock funding for work with no visible feature output, and the risk-reduction case for finally tackling the system everyone has learned to live with.

Continuing your mission tracks, having built the blueprint we now enter the reckoning – a decisive phase where insights are rigorously challenged and crystallised into solution-led outcomes.

Track 1: Securing AI at Scale: Enabling Innovation Without Introducing Unmanageable Risk
Track 2: Cyber Resilience as a Business Imperative: Preparing for the Breach, Not Just Preventing It
Track 3: Identity Security: Defending the New Enterprise Perimeter
Track 4: Managing Third-Party Risk in an Interconnected Digital Ecosystem

Most enterprises have finished migrating and are now living with the result: sprawling estates, unclear ownership, costs that grow faster than usage and a security posture stretched across environments nobody fully maps.

This session is about the phase after migration, namely consolidating, governing and turning a scattered cloud footprint into genuine operating leverage. It covers the visibility and ownership models that make sprawl manageable, where consolidation delivers both cost and risk benefits, and how to make the case for cleanup work that doesn't ship features. You'll leave with a diagnostic for your own estate and a prioritised set of moves that reduce exposure and spend at the same time.

Most security organizations are structured to absorb attacks. Golan Ben-Oni has spent two decades proving there is another way. As CIO and CISO of IDT Corporation; a role spanning seven verticals from telecoms to fintech, Golan runs one of the most distinctive strategic offensive security programs in the private sector: actively pursuing the state-sponsored threat actors targeting his business, in coordination with partners including Palo Alto Networks, SentinelOne, Mandiant and Microsoft.

From the operation against Russian state actors that made the front page of The New York Times in 2017 to the takedown campaigns he is leading today, this closed-door case study examines what it really takes for a defender to play both sides of the court: when offense is a legitimate and necessary component of defense, how to build the ecosystem and legal partnerships that make it possible, and why collaboration — even with direct competitors — is now a survival requirement. Woven throughout is the tension every leader in the room is living with: driving the AI adoption a legacy enterprise needs to stay alive over the next five years, while denying that same technology to the adversaries working around the clock to get in.

Every organization carries systems too critical to fail and too old to defend properly, and the traditional answer of a multi-year big-bang replacement has a failure rate that makes boards understandably nervous.

This session explores the composable alternative: decomposing critical platforms incrementally, delivering value and reducing risk at each step rather than at the end. It covers where to cut first, how to keep security and integrity intact while the architecture is in motion, and how to sustain momentum on a program measured in years.

You'll take away a staged approach to modernizing the systems you can least afford to break, and the governance that keeps an incremental program from stalling halfway.