The gap between your contributions and your career isn't a performance problem. It's a visibility problem. 

This isn't about self-promotion. It's about strategic visibility, making your contributions impossible to overlook.

Most security programs measure effort — not outcomes. Organizations patch thousands of vulnerabilities, deploy dozens of tools, and run annual tabletop exercises… but when an attacker shows up, none of that matters.

What matters is whether they can prove their defenses actually work.

In this talk, Horizon3.ai shares how leading organizations are using autonomous pentesting to see their environment through the attacker’s eyes — continuously, safely, and at scale. By shifting from assumptions to proof, they’ve learned to:
• Prioritize what’s exploitable. Focus limited resources on the weaknesses that truly put the business at risk that are known to be abused by threat actors.
• Quickly fix what matters. Close the loop from find → fix → verify and reduce your exploitable attack surface.
• Reduce attacker dwell time. Use pentest results to precisely deploy honeyTokens to detect compromise early, and to continuously prove your EDR and SIEM are tuned and working as intended.

Cyber resilience isn’t about being perfect — it’s about getting better over time. And the only perspective that truly matters is the attacker’s.

Agents are hitting production faster than security teams can inventory them. Each one holds credentials, calls tools, and acts on its own. That’s a new risk surface with real operational impact.  

So how do you extend resilience to something that makes its own decisions? I’ll walk through how we approach it with Rubrik Agent Cloud: discover the agents, score their risk, enforce policy, and recover when one goes off script. Then I’ll dig into Agent Insights, which calls out the risks you never thought to write a policy for and turns them into the policies you need.  

You’ll leave with: A way to set resilience standards for agents that line up with enterprise risk Strategies for detecting and containing rogue behavior Visibility into what your agents are actually doing

Your email security platform is probably working exactly as designed. That's the problem. GenAI made targeted attacks cheap and scalable. Centralized detection must generalize across customers, but attackers don't. A precision layer of organization-specific email security can stop more attacks and adapt to what gets through — hear how organizations like Snowflake and Elastic use this approach.

Abstract
AI and new digital technologies will continue to shift the cybersecurity landscape in 2026. This session explores how modern tools can enhance detection, response, and decision making while introducing new risks tied to generative systems, data integrity, and fast moving threat innovation. Leaders will gain a clear view of how to adopt emerging technology in a responsible and strategic way that supports resilience and aligns with enterprise risk goals.

Key Takeaways
• How AI and emerging tech are reshaping core security functions
• The new risks created by generative models and evolving attack techniques
• Practical governance steps that support responsible AI use
• Examples of organizations pairing innovation with disciplined risk management

The industry is captivated by the promise of AI autonomy. As AI systems evolve from passive chatbots into agents that retrieve enterprise data, use tools, communicate with other agents, and trigger workflows, they create new paths through which information, instructions, identity, and authority can move across the enterprise.

This session examines how established cybersecurity principles such as zero trust, least privilege, separation of duties, isolation, scoped credentials, and continuous verification can be applied to agentic AI architectures. Through practical design patterns, we will explore how to modularize agentic workflows, establish clear trust boundaries, control the movement and persistence of information, separate probabilistic reasoning from privileged execution, and limit the blast radius of unexpected or compromised behavior.

The session will provide a structured way to examine what each agent can access, remember, communicate, delegate, and execute, and where technical controls should be placed to keep that scope and authority bounded.

Attendees will leave with:

· A framework for mapping traditional security principles to agentic AI workflows

· Architecture patterns for separating AI reasoning from privileged execution

· Practical approaches for constraining agent identities, memory, tools, communication, and delegation

· Strategies for making an agent’s scope and authority technically enforceable

· A design-review methodology for assessing access, trust boundaries, and blast radius before deployment

By 2028, Gartner predicts that 15% of daily business decisions will be made autonomously by AI agents — creating new risk surfaces with direct operational impact. CIOs must extend resilience practices to agentic AI by quantifying agent risk, capturing and monitoring agent activity, and preparing recovery playbooks that reverse unauthorized or harmful agent actions. This holistic approach ensures workflows remain intact, data integrity is preserved, and business continuity is upheld—even when AI agents misstep.

Join this session to learn:

 How to set resilience standards for AI agents to align with enterprise risk

 Proven strategies for detecting and containing rogue or unintended AI behavior

 Playbooks for rapid rollback and business continuity when AI disrupts workflows

Attackers are no longer triggering alerts; they’re hiding in plain sight. This session shows how deception technology transforms attacker behavior into high-confidence detection signals. Learn how integrating deception into an Open Active XDR platform improves visibility, reduces noise, and enables faster, smarter response to real threats across modern enterprise environments

Abstract:
As organizations expand their digital ecosystems, risks extend far beyond internal networks. Threat actors are increasingly exploiting supply chains, third-party vendors, and identity gaps to gain access. This session brings together cybersecurity leaders and solution providers to explore how these interwoven risks create a complex attack surface -and how technology can help mitigate them.

Panelists will share real-world examples, lessons from managing large vendor networks, and innovative tools and frameworks for continuous risk assessment. Discussions will highlight strategies for mapping hidden dependencies, enforcing strong identity governance, and strengthening resilience through automation, collaboration, and transparency. Attendees will gain actionable insights on reducing exposure, improving third-party risk visibility, and leveraging technology to secure their extended digital ecosystem.

Key Takeaways:
• Understand how supply chains, vendors, and identities amplify organizational risk.
• Explore practical methods and tools for assessing, monitoring, and mitigating third-party and ecosystem vulnerabilities.
• Learn how to treat identity as a security perimeter using zero trust, access governance, and automated solutions.
• Gain insights from real-world breaches that reveal common gaps in vendor and identity controls.
• Walk away with a technology-informed framework to enhance resilience, secure partnerships, and reduce exposure across your digital ecosystem.

In 2026, one of the biggest trends is agentic harnesses; how can I engineer systems around agents to get them to run autonomously for as long as possible before they break? They always break. Let's discuss how we identify what can or should be safely delegated to an autonomous system, and how we safely checkpoint activity to make sure there's always a human accountable at the end of the day.

Is there an offense and defense approach in Incident Response as it relates to AI?  Ransomware was never a question of if, but when.  Now in a landscape of AI tools, that risk is much more prevalent with Threat Actors able to work smarter, not harder to attack. How well your organization responds depends on the plans and controls you have in place before an incident occurs.

In this session, Arctic Wolf Vice President of Incident Response Kerri Shafer-Page draws on real-world customer experiences to walk through what attacks look like in practice, what executives are prioritizing, and what separates organizations that recover quickly from those that don't. Against the backdrop of a cyber insurance market that has seen dramatic premium swings over the past three years, we will share how organizations are reclaiming control through improved security posture and what shifting market conditions mean for your risk strategy in 2026 and beyond. Attendees will leave with a clearer picture of how to strengthen their incident response plan and make more informed decisions about cyber insurance coverage.

Cybersecurity leaders rarely struggle because they lack expertise. The greater challenge is getting others to understand the risk, align on what matters, and make the right decisions.

CISOs must communicate differently with security teams, IT leaders, business stakeholders, the C-suite, and the board. Yet too often, cybersecurity conversations remain centered on technical risk, vulnerabilities, controls, and compliance, making it difficult for non-technical stakeholders to understand the business implications and make informed trade-offs.

Drawing on her work with CISO and Deputy CISO leaders, Ivy Chin introduces a practical framework for communicating cyber risk as a business decision.

The framework helps leaders:

• Meet stakeholders in their world: adapt the message to what matters to the specific audience, using their language and connecting cybersecurity to the priorities and outcomes they are accountable for.
• Align on risk tolerance: create shared understanding with the board and C-suite about the level of cyber risk the organization is willing to accept and where the boundaries are.
• Use risk economics: translate cybersecurity risk and investment into business impact, financial exposure, trade-offs, opportunity cost, and value.
• Turn complexity into decisions: move from “here is the risk” to “here are the choices, trade-offs, and implications.”
• Create alignment that drives action: build shared ownership across security, IT, business, executive leadership, and the board.

The session can be delivered as an engaging keynote or an interactive workshop, customized to the conference audience and desired level of application.

Why Attend?

You will learn how to:

• Communicate in the language of your audience: Understand what matters in their world, connect to their priorities, and frame cybersecurity in terms of the outcomes they are responsible for.
• Align risk tolerance with leadership: Establish a shared understanding with the board and C-suite about the level of cyber risk the organization is prepared to accept.
• Speak the language of risk economics: Translate cybersecurity risk and investment into business impact, financial exposure, trade-offs, and value.
• Turn risk conversations into decisions: Give stakeholders the context, choices, and business implications they need to act, not simply another risk report.

Key Takeaways:

• Effective communication starts with the audience: The message is most powerful when it reflects what matters to the audience, uses their language, and supports their priorities.
• Risk tolerance is a business decision: CISOs can assess and quantify cyber risk, but leadership must align on how much risk the organization is willing to accept.
• Risk economics creates a common language: Connecting cyber risk to financial and business consequences enables more productive conversations with non-technical stakeholders.
• Influence goes beyond reporting: Effective CISOs don’t simply communicate risk, they create understanding, alignment, and commitment to action.

Who Should Attend?

This session is designed for CISOs, Deputy CISOs, security executives, cybersecurity leaders, and emerging security leaders who need to influence beyond the security organization.

It is especially relevant for leaders navigating complex relationships with IT, business stakeholders, C-suite executives, and boards, and for those seeking to elevate cybersecurity from a technical function to a strategic business conversation grounded in risk, economics, and informed decision-making.

Abstract:
Cybersecurity challenges are complex, and solving them requires teams with diverse perspectives, skills, and experiences. This panel explores how diversity drives better problem-solving, innovation, and threat detection in security organizations.

Panelists will share strategies for attracting and retaining talent from varied backgrounds, leveraging unique thinking styles, and applying different experiences to uncover blind spots in risk management. Attendees will gain actionable insights for building teams that are not only technically skilled but more adaptive, creative, and resilient in the face of evolving cyber threats.

Key Takeaways:

• Understand how diversity strengthens problem-solving, innovation, and threat response.
• Learn approaches to recruit and retain talent from non-traditional backgrounds.
• Explore how different perspectives and thinking styles reveal hidden risks.
• Gain strategies to create teams that are adaptable, collaborative, and resilient.
• Walk away with practical ideas for integrating diversity into cybersecurity team design and strategy.

The workforce has become a growing target for deception. From foreign nation-state actors obtaining employment under false pretenses to employees allowing unauthorized third parties to perform their work, organizations face a new class of insider risk that traditional security controls often fail to detect. As a result, fraudulent workers have become a top concern for many insider risk teams.  In this session, we'll examine real-world examples of these threats, discuss how organizations are detecting fraudulent workers, and share insights from insider risk programs on emerging priorities, key benchmarks, and the metrics program leaders use to measure success.

An agent doesn't wait for your scan window, and an ungoverned agent identity is really an ungoverned path to sensitive data. Finding it is the easier half. Jason Dobbs, Chief Technology Officer at PKWARE, covers why classification is what lets you match remediation to the business need instead of applying one blunt fix to everything, and how that simplifies your audit as you already have the evidence.  What attendees will learn;

• Why identity governance and data governance are the same problem wearing two badges
• Why one remediation tactic applied to everything either breaks the business or leaves data exposed 
• What an audit trail must contain to work as evidence instead of an explanation