Navigating the AI Frontier: Ethical Considerations and Risk Mitigation in Cybersecurity 

As artificial intelligence (AI) rapidly evolves, its integration into cybersecurity solutions presents both immense opportunities and significant risks. This presentation will delve into the ethical implications of AI in cybersecurity, exploring key considerations such as bias, accountability, and transparency. We will also discuss strategies for mitigating the risks associated with AI-powered attacks and ensuring the responsible development and deployment of AI-driven security solutions. 

• Developing ethical frameworks to ensure AI is used responsibly and ethically in security applications 

• Implementing techniques to identify and address biases in AI models, preventing discriminatory or unfair outcomes 

• Enhancing accountability and transparency in AI-driven decision-making 

• Developing strategies to detect and prevent attacks leveraging AI techniques, such as adversarial machine learning and deepfake attacks. 

• Fostering responsible AI development and deployment through ethical guidelines, certifications, and regulatory frameworks 

CISO is not a Swiss Knife: You need to build a balanced team 

• The industry seems to be awash with crazy CISO jobs specs; this is no longer acceptable way to search for a CISO 

• How can we expect CISOs to handle variety of hands-on responsibilities as well as manage strategy? 

• We need to build balanced cyber teams to make sure we can safeguard the business 

• How to start with people, processes and only then technology 

• Understanding why bad things happen in the first place and how to prevent them 

• How to build and implement the right culture 

Marius Poskus, Global Vice President of Cyber Security, Global Financial Services 

This focused session is your opportunity to learn more about the cutting edge technologies transforming the future of the information technology and cybersecurity markets. Each solution spotlight lasts just ten minutes. 

Reserved for Cobalt Labs 

Less Busy More Impact 

• Understand the truth behind our busyness habits 

• Practical and behavioural experiments to implement immediately  

• Protect yourself and your people from the threat of overworking and burnout 

Chris Lovett, Leadership & Simplicity Coach, Author, Speaker 

Reserved for Protocol Policy Systems 

The Internet of Things (IoT) Security Challenge Protecting Connected Devices and Networks 

The proliferation of IoT devices has created new attack surfaces and amplified the risks of data breaches and cyberattacks. This session will explore the unique security challenges posed by IoT devices, including vulnerabilities, lack of visibility, and supply chain risks. We will discuss best practices for securing IoT networks, protecting connected devices, and mitigating the risks associated with IoT deployments. 

• Identifying and addressing IoT security challenges and risks 

• Implementing strong authentication, encryption, and access controls to protect IoT devices and networks from unauthorized access 

• Due diligence on IoT device manufacturers and suppliers to ensure they have adequate security measures in place 

• Adopting industry-standard security practices, such as regular firmware updates, vulnerability scanning, and segmentation 

• Mitigate the risks of IoT deployments 

Cybersecurity Governance and Risk Management: A Framework for Effective Decision-Making 

The cybersecurity landscape is constantly evolving, with new threats emerging on a regular basis. This session will provide an overview of emerging cybersecurity threats, including advanced persistent threats (APTs), supply chain attacks and nation-state sponsored hacking. We will discuss strategies for staying ahead of the curve, identifying emerging threats, and protecting organisations against future attacks. 

• An overview of advanced persistent threats – what, where, when and how 

• Examples of supply chain attacks: targeting vulnerabilities in third-party vendors or suppliers to gain unauthorized access to systems and data 

• Preparing strategies to mitigate the risk of nation-state sponsored hacking 

• Staying ahead of the curve: Proactive measures to stay informed about emerging threats, conduct regular assessments, train employees, and collaborate with others to enhance security. 

Insider Threats: Detecting, Preventing, and Responding to Malicious Activity 

Insider threats pose a significant risk to organisations, as employees or contractors may have privileged access to sensitive data and systems. This presentation will explore the various types of insider threats, including unintentional disclosures, data theft, and sabotage. We will discuss strategies for detecting, preventing, and responding to insider threats, protecting sensitive information, and maintaining a secure work environment. 

• Identifying and addressing the root causes of insider threats and developing strategies to address them 

• Utilising behavioural analytics, anomaly detection and access controls to identify suspicious activity 

• Preventing insider threats through employee awareness and training 

• Developing incident response plans for insider threats to address insider threats, including containment, investigation, and remediation 

• Protecting sensitive information through access controls and data encryption 

Zero Trust Architecture: A Blueprint for Modern Cybersecurity 

Zero Trust Architecture (ZTA) has emerged as a foundational framework for modern cybersecurity, shifting the paradigm from perimeter-based security to a model that verifies and authorises every user and device before granting access to resources. This presentation will provide an overview of ZTA principles and best practices, exploring how organizations can implement ZTA to enhance their security posture and protect against advanced threats. 

• Understanding Zero Trust principles: Learn the core principles of Zero Trust, including continuous verification, least privilege access, and micro-segmentation 

• Developing a comprehensive Zero Trust strategy and roadmap to guide your organisation’s implementation efforts 

• Robust authentication, authorisation, and access controls to ensure that only authorised users and devices can access resources 

• Encryption, data loss prevention, and other security measures to protect sensitive data and resources from unauthorised access 

Cybersecurity in the Supply Chain: Mitigating Third-Party Risks 

Our speaker will explore the challenges of securing the supply chain, including third-party risk assessment, vendor management, and incident response. We will discuss best practices for mitigating supply chain risks and protecting sensitive data throughout the value chain. 

• Conducting thorough third-party risk assessments of third-party vendors and suppliers to identify potential risks 

• Establishing clear vendor contracts, performance requirement and security standards to manage third-party relationships 

• Enhance supply chain visibility and monitoring to identify potential vulnerabilities and monitor for suspicious activity 

• Developing incident response plans for supply chain breaches 

• Mitigate supply chain risks through collaboration and information sharing 

Implementing Business Continuity as part of Corporate Risk Management 

Discover how Diabetes UK seamlessly embedded Business Continuity into its Corporate Risk Management framework, overcoming challenges with minimal effort while maximising impact. Learn how aligning BC with organisational objectives and leveraging existing resources can drive resilience and sustainability across your organisation. 

• Understanding the critical role of Business Continuity (BC) in managing corporate risk. 

• Aligning BC with organisational objectives to ensure resilience and long-term sustainability 

• Overview of Diabetes UK’s organizational structure and operational challenges. 

• Leveraging existing processes and resources to avoid extensive efforts. 

Ali Jaffri, Head of IT Infrastructure and Cybersecurity, Diabetes UK 

Strategic Leadership in a Digital World: Navigating Innovation, Security, and Growth 

As digital transformation accelerates, CIOs and senior leaders face the complex challenge of balancing technological innovation with robust security measures while driving sustainable growth. This evolving landscape demands a forward-thinking approach to strategy, one that not only leverages emerging technologies but also addresses the risks and opportunities of a hyper-connected world. To remain competitive, organizations must prioritize agility, resilience, and cross-functional collaboration. 

• Aligning digital transformation with long-term business objectives, ESG considerations, and market dynamics 

• Developing adaptive leadership capabilities to navigate disruption, manage change, and inspire teams in times of volatility 

• Attracting and retaining top cybersecurity talent through competitive compensation packages, professional development opportunities and a people-centric work culture  

• Developing a robust training and education programme to equip employees with the necessary skills to protect against emerging threats 

• Creating a culture where security is a top priority, encouraging employees to report suspicious activity and participate in security awareness training 

Victor Murineanu, CISO, Chelsea Football Club 

Ali Jaffri, Head of IT Infrastructure and Cybersecurity, Diabetes UK 

Stewart Bertram, Head of Cyber Threat Intelligence, Nomura 

Adrian Smith, Chief Information Officer, Adsatis 

Moderated by: 

Lisa Ventura, Founder, CyberSecurity Unity