2026 Agenda

October 8, 2026
SINETNew York

7:30 AM – 8:30 AM

Registration 

8:30 AM – 5:30 PM

General Session
Main Auditorium

Panel Topics

Modern Third Party Risk Management

Modern Third-Party Risk Management is undergoing a structural transformation driven by the need for continuous visibility, agentic automation, and speed in response. As AI fundamentally accelerates and reshapes the risk landscape, it exposes a stark gap in operational speed, risk transparency, and decision-making: while enterprises pivot internal capabilities to machine speed, TPRM remains significantly hindered. At the same time, the historic divide between procurement and security teams is no longer viable, demanding a tighter operational partnership between commercial and technical leadership. This session explores how CISOs and risk professionals are redesigning their TPRM programs to secure the open-source ecosystem and operate at machine speed while aligning security architecture directly with business operations.

Securing the Digital Factory: The Criticality of IT/OT Convergence

Leading CISOs discuss the urgent mandate to secure Operational Technology (OT) across modern, interconnected manufacturing landscapes. The panel will explore how IT/OT convergence, rapid digital transformation, and widespread vendor dependencies expose just-in-time production lines to catastrophic cyber disruptions. Attendees will gain actionable strategies for balancing high-volume operational efficiency with robust risk mitigation, protecting critical intellectual property, and effectively managing third-party risks across a complex, volatile global plant footprint.

The Mythos Moment: The New Rules of AI-Powered Cyber

AI has fundamentally changed the economics of cyber offense. As autonomous AI systems dramatically increase the speed, scale, and sophistication of attacks, security leaders must rethink how they defend the enterprise.
This panel brings together five leading CISOs to discuss what changes now—from continuous defense and AI-assisted operations to vulnerability prioritization, third-party AI risk, board governance, and the future role of the security organization. Join us for a practical discussion on how enterprise security is being rebuilt for the AI era.

Deception as Defense: Can More Attacker Automation Mean More Defender Control?

Detection metrics across industry are the best they have ever been. Coverage is up, mean time to detect is down, dwell time has fallen sharply over a decade. And almost no security leader reports feeling more confident than they did three years ago.

That gap is the topic of this panel. We have made significant progress in detection and have failed to solve comprehension. Four thousand alerts a day with capacity to investigate a third is not a detection failure, it is a failure of understanding, and more detection will not touch it. AI compressed the time available to interpret, which sharpened the problem considerably.

But it also created an opening, and that is the argument on the table. AI transformed the speed and scale of attacks, but the story is more nuanced than escalation. The core asymmetry is in how AI perceives reality. AI agents are literal, which makes them uniquely susceptible to deception. They struggle to separate what is true from what is merely plausible, the same limitation that produces hallucination, and that limitation is exploitable.

Deception, thoughtfully designed, becomes more than a defensive tactic. It is a strategic lever to ethically degrade the reasoning and capability of AI attackers while generating actionable intelligence and genuine defender control.

The AI Inflection Point: Transforming Cybersecurity for a New Era

Cybersecurity has entered the age of AI. The same technology driving unprecedented innovation is also accelerating threats, reshaping risk, and redefining what it means to defend an organization. For CISOs, the challenge is no longer whether to embrace AI, but how to leverage it as a strategic advantage. This session examines the leadership decisions, emerging risks, and transformative opportunities that will define cybersecurity’s next era.

The Role Identity Plays In AI Attacks

How to Boil an Ocean: Challenging Conventional Approaches to Minimizing the Attack Surface

Keeping our attackable surface area small has always been a challenge. All companies want to be “out there” to market, to grow revenues, to enhance reputation, to influence industry direction and to motivate change. Being “out there” also increases the size of the target on our backs at a time when AI is increasing the speed and accuracy of the attacks aimed at that target. Join a small panel discussion of leading edge thinking on ways to challenge conventional approaches to achieving the impossible.

Using AI to Survive and Thrive: Defensive and Offensive Approaches

Artificial intelligence is fundamentally changing cybersecurity—on both sides of the battlefield. This talk explores what it means to lead in an era where intelligence, automation, and computational power are becoming abundant. As AI gives defenders unprecedented capabilities, it is equally empowering adversaries with new levels of scale, speed, and sophistication. The greatest risk facing cybersecurity leaders is not AI itself, but failing to adapt quickly enough.

This session will challenge CISOs to move beyond incremental improvement and reimagine their cyber programs as AI-native organizations. We will examine how AI is transforming both offense and defense, why traditional security operating models are becoming obsolete, and how leaders can harness AI to eliminate toil, amplify human expertise, and create a modern cyber function that not only survives disruption but thrives because of it. The future will belong to organizations that embrace exponential change before it is forced upon them.

AI-Native Platforms Are Breaking the Model: Rethinking the Security Stack for the AI Era

The debate between best-of-breed point products and unified platforms is nothing new, but AI is fundamentally changing the equation. As AI-native platforms mature, they are increasingly automating work that once required security analysts to manually triage alerts, correlate findings, and orchestrate actions across multiple tools. The trajectory is becoming clear: AI-native platforms are consolidating capabilities that were once spread across a fragmented security stack. Rather than rewarding an ever-growing collection of individually smarter tools, the market is shifting toward intelligent platforms that can do more on their own. For buyers, the question is no longer whether this shift will happen, but how quickly.

This panel examines the impact AI-native platforms are having on the security stack, including which manual workflows they are starting to eliminate and where they are driving vendor consolidation. Panelists will also discuss how CISOs should think about shifting security work from human analysts to AI agents: which tasks are ready to hand off now, which still require human judgment, and what governance needs to be in place as that balance continues to shift.

Developing and Reporting AI Metrics to the Board

As organizations rapidly deploy AI, security leaders face increasing pressure to quantify AI-related cyber risk and demonstrate the effectiveness of security controls. Traditional cybersecurity metrics were not designed for AI systems, creating new challenges in measuring model exposure, data security, governance, adversarial threats, and operational resilience. This panel will explore the metrics CISOs should track to assess AI risk, communicate meaningful insights to boards and regulators, and enable innovation while maintaining trust, security, and accountability.

Harnessing Quantum Intelligence: The Future of Secure Systems

This is about more than just quantum computing delivering the ability to break contemporary encryption. The future of secure systems requires us to first understand and respect the state of the art in quantum machine learning to avoid embarking on a hype cycle of stratospheric proportions and hyperbolic promises about the end of secrets or privacy. This conversation will cover how Risk Executives are preparing for the advent of quantum computing and demystifying a topic perpetually placed as “five to ten years out.”

5:30 PM – 7:00 PM

General Reception