Despite billions spent annually on IAM, PAM, and IGA tools, more than 40% of enterprise applications remain outside the identity perimeter. Critical platforms—social media apps, vendor portals, legacy tools, and other disconnected apps—lack SAML, SCIM, or API support. These “last mile” gaps create dangerous patterns: weak or reused passwords, unmanaged privileged accounts, incomplete deprovisioning, and widespread credential sharing. The result? Elevated breach risk and compliance exposure.    

In this session, Donovan Blaylock will expose why disconnected apps are one of today’s biggest blind spots in identity security. He’ll share how leading enterprises are closing these gaps with automation—eliminating manual credential management, streamlining provisioning and deprovisioning, enforcing MFA without added friction, and securing high-risk shared accounts like corporate social media.    

Attendees will leave with practical strategies to extend their identity perimeter to every app—without custom connectors or hidden license costs—and learn how to reduce risk, save time, and strengthen compliance across their organization’s most vulnerable access points.

AI has fundamentally changed what regulators, customers, and boards expect organizations to know — and prove — about the software they ship. In 2026, transparency is no longer a differentiator; it’s the baseline. From the EU Cyber Resilience Act to evolving U.S. guidance, organizations are under growing pressure to demonstrate how AI-enabled software is built, governed, and secured across the supply chain.  

This session takes a candid look at the emerging reality of AI governance and software trust. Drawing on patterns Sonatype observes across thousands of development teams, we’ll explore how organizations are responding to new compliance expectations, where governance efforts break down, and what “good” looks like in practice. We’ll examine how transparency artifacts (including SBOMs) fit into broader governance programs — and why many fail to translate into real risk reduction or audit readiness.  

Attendees will learn:

- How AI governance and software transparency expectations are evolving in 2026

- What regulators and customers increasingly expect organizations to prove

- Common gaps that undermine AI and software trust initiatives

- Practical approaches to operationalizing transparency for compliance, risk reduction, and long-term trust

"Shall I Certify You, Sir?" explores the certification landscape and how it has changed, identifying opportunities, consequences, and challenges most companies will need to plan for when seeking certification to a standard or framework. It will provide the advantages so that you can speak to your organization about the return on investment certification will bring and how to provide value to the certification process.

This session explores the critical role of cyber resiliency in helping organizations withstand and recover from today’s evolving threats. Participants will dive into strategies for reducing attack surfaces, visualizing networks, and securing critical IT assets, while also examining how compliance regulations can enhance security and safeguard sensitive data.  In this session you will:  Explore strategies to reduce attack surfaces and secure critical IT assets  Learn how network visualization strengthens resiliency  Understand how compliance regulations can enhance security and protect sensitive data  Gain actionable insights to strengthen security posture, minimize vulnerabilities, and prepare for future challenges

Abstract
AI and new digital technologies will continue to shift the cybersecurity landscape in 2026. This session explores how modern tools can enhance detection, response, and decision making while introducing new risks tied to generative systems, data integrity, and fast moving threat innovation. Leaders will gain a clear view of how to adopt emerging technology in a responsible and strategic way that supports resilience and aligns with enterprise risk goals.

Key Takeaways
• How AI and emerging tech are reshaping core security functions
• The new risks created by generative models and evolving attack techniques
• Practical governance steps that support responsible AI use
• Examples of organizations pairing innovation with disciplined risk management

From vibe coding and autonomous agents to generative chatbots in everyday workflows, AI adoption is constant and occurring at a pace that most security programs have not been able to realistically govern. Well-intentioned employees, misaligned agents, overly permissive access, and weak data controls are introducing new forms of risk, often without malicious intent. At the same time, adversaries are actively probing these gaps through indirect prompt injection and jailbreaking techniques. But there's good news too. More often than not, failures leave signals long before they become significant incidents. In this session, you’ll learn how an AI security blueprint can help you identify emerging risk, align controls to new AI projects, and ensure adoption and deployment happen securely without impacting speed or access.

By 2028, Gartner predicts that 15% of daily business decisions will be made autonomously by AI agents — creating new risk surfaces with direct operational impact. CIOs must extend resilience practices to agentic AI by quantifying agent risk, capturing and monitoring agent activity, and preparing recovery playbooks that reverse unauthorized or harmful agent actions. This holistic approach ensures workflows remain intact, data integrity is preserved, and business continuity is upheld—even when AI agents misstep.

Join this session to learn:

•  How to set resilience standards for AI agents to align with enterprise risk
•  Proven strategies for detecting and containing rogue or unintended AI behavior
•  Playbooks for rapid rollback and business continuity when AI disrupts workflows

Abstract:
As organizations expand their digital ecosystems, risks extend far beyond internal networks. Threat actors are increasingly exploiting supply chains, third-party vendors, and identity gaps to gain access. This session brings together cybersecurity leaders and solution providers to explore how these interwoven risks create a complex attack surface -and how technology can help mitigate them.

Panelists will share real-world examples, lessons from managing large vendor networks, and innovative tools and frameworks for continuous risk assessment. Discussions will highlight strategies for mapping hidden dependencies, enforcing strong identity governance, and strengthening resilience through automation, collaboration, and transparency. Attendees will gain actionable insights on reducing exposure, improving third-party risk visibility, and leveraging technology to secure their extended digital ecosystem.

Key Takeaways:
• Understand how supply chains, vendors, and identities amplify organizational risk.
• Explore practical methods and tools for assessing, monitoring, and mitigating third-party and ecosystem vulnerabilities.
• Learn how to treat identity as a security perimeter using zero trust, access governance, and automated solutions.
• Gain insights from real-world breaches that reveal common gaps in vendor and identity controls.
• Walk away with a technology-informed framework to enhance resilience, secure partnerships, and reduce exposure across your digital ecosystem.

AI is reshaping cybersecurity at a pace most organizations can’t match, giving attackers new ways to automate reconnaissance, exploit misconfigurations, and accelerate data theft while turning everyday systems and AI agents into high‑risk access points. This session explores how AI can also be a powerful defense — helping teams gain visibility into sensitive data, classify it at scale, right‑size access, and detect emerging threats faster.

For years, the industry has focused on "shifting left" by integrating security checks into the coding process. However, even with 100% code coverage, organizations still face significant risks because the most critical vulnerabilities are often decided long before a developer ever opens an IDE. These "architecture-level" risks are frequently missed because they are buried in project requirements and design documents that security teams don't have the time or tools to review. In this session, we’ll discuss how to move beyond reactive code scanning by identifying and mitigating risks at the design phase.

News headlines show you the breaches at massive corporations, but it’s everyday organizations that face the most threats. Adversaries prey on the human psyche and use AI to advance their tactics and target the companies that keep our communities running.  For these companies, a ransomware or BEC attack isn’t just a stressful event—it’s the reason they can’t make payroll. This session explores how hackers plan to win, and why you don’t need a massive budget to fight back.  We’ll get into how Huntress brings cyber resilience through a powerful combo of purpose-built technology and human SOC expertise to stop threats before they cause damage—because organizations of ALL sizes deserve a fighting chance against attackers.

Many of today’s identity security gaps stem from exposed data you can’t easily see – harvested from malware-infected devices and successful phishing campaigns targeting your employees, contractors, and suppliers. Criminals operationalize this data to carry out targeted cyberattacks, using it to deploy ransomware, steal sensitive data and critical IP, and quietly establish persistent access.These identity assets enable attackers to create synthetic identities, impersonate trusted users, bypass security controls, and move laterally across applications and systems with alarming efficiency.     In this session, we’ll explore how these identity assets come together to form an attack surface that traditional controls can’t fully cover. Drawing from SpyCloud’s insights into the criminal underground and the cybercrime economy, we’ll share practical tips on what you need to know to better defend your organization from identity threats in 2026.

By 2026, synthetic reality, autonomous AI agents, and machine‑speed cyber operations have collapsed the boundaries between truth and deception. In this keynote, Jennifer Raiford — CEO of GLOBE‑SEC, Chief Digital Trust & Risk Officer, and widely known as the Olivia Pope of Cyber and AI — unveils the emerging doctrine of digital deterrence. She explores how nations, enterprises, and critical infrastructure must adapt to adversaries that don’t sleep, don’t negotiate, and don’t need human operators. Drawing on national‑level advisory work, the GLOBE‑SEC Methodology, and cryptographic trust architectures like Enigma.io ($ENX), she outlines a new operating system for sovereignty, resilience, and verifiable truth. This session reframes cybersecurity as a strategic instrument of power — and digital trust as the defining currency of the next decade.