Executive Summit

Executives are often flying blind when it comes to cybersecurity spending. They want limited risk, but don’t know how to achieve it. Protection level agreements (PLAs) turn cybersecurity spending into a strategic business decision. CISOs can use PLAs to offer executives a continuum of risks in return for different levels of investment.  

In this session, you'll learn how to:

• Expose gaps between security investments, business expectations, and actual protection
• Move from reporting metrics to governing protection outcomes
• Use Protection Level Agreements to align risk, funding, and accountability

Agentic AI is rapidly reshaping security operations, automating triage, investigation, and response at scale. As routine work shifts to machines, organizations risk losing critical skills, judgment, and institutional knowledge. CISOs must decide what to automate, what to preserve, and how to evolve roles and operating models—while leveraging AI to extend security expertise beyond traditional boundaries. 

Join this session to hear about:

• How agentic AI is reshaping SOC roles, workflows, and career paths
• How to identify and preserve critical skills while redesigning roles for the next 1–2 years
• Practical approaches to balancing AI automation with human judgment and leadership at scale

 In today’s dynamic world, CISOs must elevate beyond tactical experts to strategic business partners who influence true change. The time has come to redefine security leadership into business leadership by championing a responsible culture of innovation, driving organizational growth, and taking personal ownership of the company’s reputation.

Join John Gift, SVP & Global CISO at PepsiCo as he shares his perspective on:

• Reducing risk while improving resiliency to maintain a company’s brand and customer’s trust
• Building a responsible culture of emerging technology from AI to Quantum
• Developing intentional relationships to navigate evolving threats, and operational challenges

When legacy systems can’t be patched, recovery becomes a key compensating control. CISOs rely on recovery documentation as evidence to protect themselves and their organizations. This session covers how immutable backups and traceable recovery records withstand regulatory and legal scrutiny after incidents and how forensic and threat intelligence data can turn reactive recovery into a documented, risk-based decision.

Join this session to learn:

• How recovery and immutable backups protect unpatched legacy systems
• Building recovery records for regulatory and legal review
• Using forensic and threat intelligence to justify response decisions

As AI agents proliferate in security operations, CISOs must strategically manage token consumption and associated costs, while weighing those costs against the risk they mitigate. Organizational structures are evolving to support agent-centric models, and the hardest questions are as much about people as technology: how roles change, which skills matter, and what new leadership approaches and cross-functional collaboration the shift demands. This session will explore how to balance risk, cost, efficiency and resilience as the enterprise and its workforce adapts to the next wave of AI-driven security.

Join this session to discuss:

• Managing token consumption and aligning FinOps priorities against risk-reduction value
• Redesigning teams, roles and skills for agent-centric security models
• Anticipating future shifts in AI-driven organizational structures and the talent implications

Connect with like-minded peers in a one-on-one setting through Peer-to-Peer Meetings. You will be matched with peers in your community based on your shared interests and priorities.

In 2018 you had two years to patch. Today the exploit often exists before the CVE does. This session argues that AI didn't break enterprise security – it removed the margin hiding how broken it already was. Evidence-led, experience-driven, and culminating in four uncomfortable actions you can take back to your team.
Join this session to:

• Assess why human-gated patch approval has become a liability rather than a control using measured exploitation timelines
• Scope autonomous containment and reversion authority by blast radius – determining what an AI analyst should be permitted to do alone
• Reframe recovery as a tested security control under your ownership by going beyond a checkbox

 Generative AI has rapidly evolved from a curiosity into a core driver of enterprise productivity. But as employees embrace its ability to generate content, code, and insights on demand, a new reality is emerging: data security is now the defining challenge of AI adoption. Organizations that recognize this shift early and proactively adapt their data security strategies will be best positioned to innovate with confidence. 

Join this session to discover: 

• What makes GenAI fundamentally different and its impact on business operations and risk  

• Where unintended data exposure and downstream consequences can arise  

• How to adopt AI responsibly without slowing innovation 

Agents are becoming the biggest opportunity in the enterprise, and the biggest adversary. They read your data and act under borrowed identities, at a speed no human review process was built to match. The old question in security was how to keep bad actors out. The new one is more complex: how do you create and manage the biggest risk in your own enterprise, the agents you deployed on purpose?
Join this boardroom to discuss:

• Establishing a framework where data, identity, and agent security operate as one system
• Shifting from asking whether you can trust your agents to determining what access they can be trusted with
• Balancing innovation and risk by creating visibility needed to understand agent activity

CISOs must secure the enterprise as generative AI adoption grows, ensuring governance, compliance, and visibility. Employees using browser-based AI tools expose organizations to risks like data leakage, security breaches, and regulatory issues. Responsible AI adoption requires balancing innovation and control. Threats from “Shadow AI” and cross-border data flows highlight the need for strong policies that protect the enterprise and enable secure, productive AI use. By advancing security posture and robust policies, organizations can confidently manage AI-driven transformation.

Join this session to discover:

• Mitigating risks from unauthorized AI tools
• Implementing global security policies
• Safeguarding data with secure AI adoption