Bad news: your data classification program probably failed. Good news: it actually matters now. AI agents are running wild across your data, and classification is finally the thing that unlocks productivity instead of just killing projects. We'll dig into what's broken, why it matters, and five simple questions your team should ask.

AI has fundamentally changed vulnerability discovery: vulnerabilities are published faster than ever, the disclosure-to-exploitation window is collapsing, and exploitation is the leading initial access vector. But rushing patches is risky: even routine vendor updates can trigger outages. Patch too slowly and attackers win; too fast and the outage is self-inflicted. The session shows AI reshaping both sides, from faster attacks to AI-driven vulnerability assessment and Patch Intelligence that keep humans in control. Vetcor shows how eight to ten technicians manage 15,000 endpoints across 900 clinics, with automated patching reclaiming 40+ hours monthly, powered by risk-aware remediation within unified endpoint management.

As organisations accelerate AI adoption, CISOs must enable innovation while protecting sensitive data, meeting evolving regulatory obligations and sustaining critical business services. The challenge is turning these demands into a coherent security strategy with clear priorities and measurable outcomes.

Drawing on CISO advisory engagements and strategy workshops across EMEA, this session presents a practical approach to connecting business objectives, AI and privacy risks, and regulatory expectations with accountable ownership, security architecture and investment decisions. It explores how network security approaches to securing AI, identity, Zero Trust and integrated security operations support that strategy, and how leaders can build evidence of control effectiveness and business value.

Attendees will leave with questions to pressure-test their strategy and a method for shaping a phased roadmap: 0-30 days, 30-90 days and 3-12 months - with clear owners, dependencies and success measures that support meaningful board conversations.

As AI agents increasingly interact with businesses on behalf of customers, they present new opportunities to drive revenue, improve customer experiences and streamline digital transactions. But this creates a growing tension between embracing AI-driven innovation and protecting businesses from fraud and malicious automation.

Using everyday scenarios, from managing loyalty programmes to making purchases, this interactive workshop explores how legitimate AI agents and malicious actors can interact with the same digital services. How can security teams distinguish between them, manage the risks and enable trusted interactions without restricting the commercial opportunities AI agents bring?

Through a practical case study and open discussion, delegates will explore the visibility and controls needed to navigate this new landscape.

Attackers no longer start with production. They start with recovery. Adversarial AI now goes after the backup tier first, corrupting or deleting restore points so that when the ransom note lands, there is nothing clean to go back to. At the same time, machine identities outnumber humans 82 to 1.

AI agents, copilots and MCP connections are being handed privileged access and acting at machine speed. Identity is the new perimeter, and the backup platform is now part of the attack surface.

In this 20-minute workshop, Richard Storry, International Channel SE Leader at Druva, shows how to anticipate that move and neutralise it before it lands. He will set out what a resilient recovery tier actually looks like. That means a true logical air-gap and immutability that a compromised admin cannot switch off. It means Safe Mode tenant lockdown the moment an attack is suspected. And it means zero-trust policy controls and least-privilege guardrails for the non-human identities now operating across your estate. Delegates will also get a simple five-level cyber readiness model to benchmark where they stand today.

AI promises to transform the SOC, but the real question for security leaders is whether they can trust, explain, and remain accountable for AI-driven decisions. The session explored automation bias, accountability gaps, and how a human-led, AI-accelerated SOC can work in practice through a Huntress customer story.

AI isn’t just reshaping the threat landscape, it’s changing how security leaders and teams operate across the business. This interactive discussion will explore how leadership, decision-making, and operational priorities are evolving in the era of agentic AI, and what this means in practice for modern security organisations.

• How agentic AI is collapsing the gap between strategy and execution, and why articulating clear outcomes is now your most valuable skill

• Why the operational grip that made great CISOs is becoming their biggest constraint in an autonomous world

• How shifting focus from controls to outcomes builds the machine-speed defence that makes compliance and resilience a byproduct, not a goal.

Direct third-party supplier oversight has matured considerably over the past decade, yet most organisations still have limited visibility beyond their first tier of suppliers. The dependencies that sit two or three layers deeper, shared infrastructure, common software vendors, concentrated niche services providers, are rarely surfaced through a bilateral risk assessment, and are often only discovered once a disruption has already impacted multiple organisations at once.

This roundtable brings together CISOs as well cyber security and TPRM practicioners to compare notes on a problem that sits largely outside individual control: how do you manage risk in a supply chain layer you can't directly assess or have contractual relationships with? The discussion will draw on real operational experience to explore where nth-party exposure has caused genuine difficulty, what's realistic to expect from current tools and processes, and how this challenge can be overcome in practice.

Join us for an interactive roundtable on bridging the gap between perceived and actual network visibility. We will examine the limitations of traditional asset management—like CMDBs and EDR agents—and quantify exposure risks across unagentable OT, IoT, and building management systems. With AI-assisted attacks accelerating the speed at which adversaries exploit hidden entry points, achieving total asset clarity has never been more urgent.

• Roundtable question: What do you use for asset management, and do you think it’s 100% accurate, reliable, and up to date?

• Roundtable question: What % of connected smart thermostats, cameras, HVAC systems, PLC’s, or other similar equipment are accounted for in your asset management solution?

• Roundtable question: Are you feeling more or less urgent to understand your assets and exposures in this new AI assisted attack era?

• Roundtable question: When was the last time you performed active discovery on your own network?