5G Cybersecurity Networks Broaden the Attack Surface

The rollout of 5G networks is ushering in a new era of connectivity, offering faster speeds, lower latency, and the ability to support millions of devices simultaneously. These advancements promise to revolutionize industries, from healthcare to transportation to entertainment, and enable new technologies like the Internet of Things (IoT), autonomous vehicles, and smart cities. However, with these immense benefits comes an equally significant challenge: cybersecurity. The introduction of 5G networks significantly broadens the cybersecurity attack surface, increasing the number of potential entry points for cybercriminals and other malicious actors. This article will explore how 5G networks expand cybersecurity risks, highlighting the vulnerabilities they introduce, the challenges businesses face, and the solutions that must be implemented to secure this next-generation network.

The Expanded Attack Surface of 5G Networks

The 5G cybersecurity landscape dramatically differs from its predecessors, such as 4G and 3G, due to the increased complexity of 5G networks and the number of connected devices they enable. 5G networks are designed to be more flexible and scalable, incorporating new technologies such as network slicing, edge computing, and massive IoT connectivity. While these innovations provide tremendous opportunities for growth and advancement, they also introduce new risks to security.

In a traditional cellular network, a relatively small number of base stations and core network elements connect users and devices. However, in 5G cybersecurity, the scale increases exponentially due to the ability to support millions of connected devices in a small area. This expansion dramatically broadens the attack surface, creating more potential targets for cybercriminals to exploit. Integrating 5G with other networks, including Wi-Fi and IoT devices, further complicates matters, as vulnerabilities in one network area can propagate across the entire system.

Additionally, the distributed nature of 5G networks, which leverage edge computing and virtualized functions, makes the traditional network perimeter more difficult to define. This makes it harder to enforce security policies and monitor potential security threats in real-time. The increased complexity of managing numerous interconnected networks opens up opportunities for attackers to infiltrate the system at various levels.

The Role of IoT in 5G Cybersecurity Vulnerabilities

One of the primary driving forces behind expanding the attack surface in 5G networks is the proliferation of IoT devices. The IoT is expected to be a key enabler of 5G, with billions of devices—from smart home appliances to connected vehicles—relying on high-speed, low-latency connectivity. While these devices provide tremendous value, they also present a significant cybersecurity risk.

IoT devices often lack robust security features, with many designed for convenience rather than security. These devices typically have limited processing power and storage, making it difficult to implement complex security protocols. Moreover, attackers can exploit many IoT devices with weak or default passwords, unpatched firmware, and open communication channels. In a 5G-enabled world, where IoT devices will be more interconnected and numerous than ever, the risk of cyberattacks exploiting these vulnerabilities increases exponentially.

For instance, attackers could compromise a smart home device like a thermostat or refrigerator, use it as a gateway into the more extensive network, and then move laterally to more sensitive parts of the infrastructure, such as industrial control systems or critical infrastructure networks. The challenge of securing millions of IoT devices on a 5G network, especially as they are often outside the direct control of organizations, becomes a significant concern for 5G cybersecurity.

Furthermore, the low-cost nature of many IoT devices means that organizations might not prioritize updating or patching their systems, leaving them susceptible to long-term attacks. This issue is compounded by the fact that many IoT devices can’t self-diagnose or report security issues. As the 5G ecosystem becomes more interconnected, businesses must implement robust security practices across the IoT landscape, including network segmentation, device authentication, and regular software updates.

Network Slicing and Virtualization: New Vulnerabilities

A significant feature of 5G networks is the concept of network slicing, which enables operators to create multiple virtual networks tailored to the specific needs of different industries or use cases. This technology allows for a more efficient allocation of resources, as each slice can be optimized for a particular application, such as autonomous driving, healthcare, or public safety.

However, while network slicing offers flexibility and customization, it presents new cybersecurity challenges. Each slice of the network operates as a separate virtual network but still shares the same physical infrastructure. This means a vulnerability in one slice could affect others, creating a domino effect that could compromise the entire network. If an attacker successfully breaches a single slice, they could gain access to multiple services or sectors, leading to a widespread security incident.

Additionally, the virtualization of network functions, such as through software-defined networking (SDN) and network functions virtualization (NFV), introduces another layer of complexity. These virtualized components allow for increased flexibility and scalability, but they can also present new attack vectors. Virtualized systems often rely on software interfaces, which can be vulnerable to exploitation if not adequately secured. Attackers can exploit flaws in the virtualization layer to gain unauthorized access to the network, potentially leading to service disruptions or data breaches.

As the 5G network grows more complex with network slicing and virtualization, organizations must implement strong security measures to isolate slices, monitor traffic, and ensure that vulnerabilities are identified and mitigated in real-time. Proper configuration, continuous monitoring, and robust testing must become essential practices to safeguard the integrity of 5G networks.

Protecting 5G Networks: Strategies for Enhanced Cybersecurity

While the 5G cybersecurity landscape presents significant challenges, there are several strategies that businesses and telecom operators can adopt to protect their networks and mitigate risks. Some of the most important approaches to securing 5G networks include:

1. Strengthening Authentication and Access Controls: As 5G networks enable more devices and users to connect simultaneously, ensuring proper authentication becomes increasingly essential. Businesses should implement multi-factor authentication (MFA) and robust identity and access management (IAM) systems to ensure that only authorized users and devices are granted access to the network. By verifying the identity of users and devices at multiple levels, businesses can prevent unauthorized access and limit the impact of a potential breach.

2. Encrypting Data and Communications: Given the enormous volume of data transmitted across 5G networks, encryption should be a top priority for protecting sensitive information. Both data at rest and in transit should be encrypted using strong encryption protocols to ensure that attackers cannot intercept or tamper with communications. Encryption plays a crucial role in safeguarding privacy and ensuring that attackers cannot read or manipulate the data even if attackers gain access to the network.

3. Implementing AI and Machine Learning for Threat Detection: As 5G networks become more complex, manually monitoring and securing these environments can be daunting. Leveraging artificial intelligence (AI) and machine learning (ML) for threat detection can help automate the identification of abnormal activities and potential attacks. AI-driven security tools can analyze vast amounts of data from across the network and flag suspicious behaviors in real-time, allowing quicker detection and response to threats.

4. Continuous Network Monitoring and Real-Time Response: In the fast-paced world of 5G, threats can evolve rapidly, and organizations need to be proactive in monitoring network activity. Continuous monitoring and real-time response systems help ensure that cybersecurity teams are alerted to potential threats as soon as they arise. Intrusion detection systems (IDS) and intrusion prevention systems (IPS) should be deployed across the network to provide visibility into network traffic and respond to attacks as soon as they are detected.

5. Collaboration Between Telecom Providers and Cybersecurity Experts: Finally, one of the most effective ways to protect 5G cybersecurity is through collaboration between telecom providers, businesses, and cybersecurity experts. Telecom providers are responsible for securing the infrastructure, while enterprises are responsible for securing the applications and data they host. By working together, telecom providers and businesses can ensure that the security measures are comprehensive and align with the unique needs of 5G networks.

While 5G networks offer incredible potential for innovation, they also bring about significant cybersecurity risks. The expanded attack surface created by the proliferation of IoT devices, network slicing, and virtualization introduces new vulnerabilities that cybercriminals can exploit. Organizations must proactively secure their 5G networks by implementing strong authentication measures, encrypting data, leveraging AI-driven security tools, and collaborating with telecom providers. Only by addressing the unique 5G cybersecurity challenges head-on can businesses ensure that they can take full advantage of the benefits of 5G while minimizing the risks associated with this transformative technology.

Share it :
TBA

TBA

Moderator

TBA

TBA

Moderator

Security leaders are increasingly expected to demonstrate measurable value. This final roundtable explores how security can be connected directly to business resilience, innovation and growth.

  • Translating security investment into business outcomes.
  • Demonstrating the value of resilience and preparedness.
  • Prioritising investment according to business-critical risk.
  • Building stronger relationships between security, finance and business leadership.
TBA

TBA

Moderator

TBA

TBA

Moderator

As technology becomes more distributed, organisations must reconsider where security capabilities should sit. This session examines different operating models and the trade-offs between control, speed and proximity to the business.

  • Centralising specialist security capabilities where scale matters.
  • Embedding security expertise within technology and business teams.
  • Establishing consistent standards across decentralised environments.
  • Designing operating models that can adapt as the organisation changes.
TBA

TBA

Moderator

TBA

TBA

Moderator

Traditional security awareness programmes are evolving as employees increasingly interact with AI, cloud services and sophisticated social-engineering attacks.

  • Moving from annual training towards continuous behavioural engagement.
  • Preparing employees for AI-enabled social engineering and deception.
  • Creating a positive culture of security ownership.
  • Measuring behavioural change rather than training completion.
TBA

TBA

Moderator

TBA

TBA

Moderator

Technology and security decisions increasingly overlap. This discussion explores how organisations can create stronger alignment between technology leadership, security and business priorities.

  • Establishing shared ownership of technology risk.
  • Balancing security requirements with business agility.
  • Aligning investment priorities across technology and security.
  • Creating common measures of performance and resilience.
TBA

TBA

Moderator

TBA

TBA

Moderator

Attackers and automated systems can operate continuously and at enormous scale. This session explores how security teams can redesign processes for a world where response time is increasingly measured in seconds.

  • Automating detection and containment where appropriate.
  • Creating real-time decision and escalation mechanisms.
  • Combining human expertise with machine-scale analysis.
  • Designing operations around speed without sacrificing control.
TBA

TBA

Moderator

TBA

TBA

Moderator

Security teams often operate across dozens of platforms, creating overlapping capabilities, fragmented visibility and operational complexity.

  • Identifying unnecessary duplication across security tools.
  • Consolidating platforms without creating new blind spots.
  • Evaluating security technology according to outcomes.
  • Building a coherent architecture rather than an accumulation of products.
TBA

TBA

Moderator

TBA

TBA

Moderator

Security is increasingly moving closer to engineering and product teams. This session explores how organisations can make security part of the development and operational lifecycle.

  • Integrating security into DevSecOps and product engineering.
  • Shifting security controls closer to development.
  • Creating shared accountability between security and engineering.
  • Measuring secure development through meaningful outcomes.
TBA

TBA

Moderator

TBA

TBA

Moderator

The demand for specialised security expertise continues to grow whilst organisations struggle to find and retain the right people. This discussion explores alternative approaches to building capability.

  • Identifying the skills that will become critical.
  • Developing internal talent and career pathways.
  • Using automation to augment scarce expertise.
  • Determining when to build capability internally and when to partner externally.
TBA

TBA

Moderator

TBA

TBA

Moderator

AI can analyse vast amounts of security data and automate repetitive tasks, but effective security operations still require judgement, context and accountability.

  • Identifying the right balance between automation and human oversight.
  • Automating investigation and response without creating new risks.
  • Reducing alert fatigue and improving analyst productivity.
  • Redesigning SOC workflows around AI capabilities.
TBA

TBA

Moderator

TBA

TBA

Moderator

Security teams face an ever-growing volume of alerts, vulnerabilities and intelligence. The answer may not be more tools, but better prioritisation and orchestration.

  • Reducing noise across security platforms.
  • Correlating signals across identity, endpoint, cloud and network environments.
  • Prioritising threats according to business impact.
  • Automating repetitive investigation and triage.
TBA

TBA

Moderator

TBA

TBA

Moderator

Cyber resilience cannot sit within a single department. This session examines how organisations can establish shared ownership across security, technology, risk and operational functions.

  • Defining clear accountability during major disruption.
  • Integrating security and operational resilience programmes.
  • Establishing common risk and resilience language.
  • Running cross-functional exercises that reflect real-world scenarios.
TBA

TBA

Moderator

TBA

TBA

Moderator

Security teams often report activity rather than outcomes. This discussion explores which measures can genuinely demonstrate preparedness, resilience and risk reduction.

  • Moving beyond alert volumes and vulnerability counts.
  • Measuring resilience of critical business services.
  • Connecting security metrics with business impact.
  • Creating meaningful reporting for senior leadership and boards.
TBA

TBA

Moderator

TBA

TBA

Moderator

Major incidents can affect identity, endpoints, cloud services, applications and communications simultaneously. This session examines how organisations can coordinate recovery across complex technology environments.

  • Establishing recovery priorities across interconnected systems.
  • Maintaining trusted communications during major incidents.
  • Coordinating technology, security and business recovery teams.
  • Testing recovery at enterprise rather than system level.
TBA

TBA

Moderator

TBA

TBA

Moderator

Traditional point-in-time assessments struggle to keep pace with rapidly changing technology environments. This discussion explores continuous approaches to understanding and reducing exposure.

  • Maintaining an up-to-date view of the attack surface.
  • Prioritising vulnerabilities according to business risk.
  • Identifying exposed assets that traditional inventories miss.
  • Measuring whether exposure is actually declining.
TBA

TBA

Moderator

TBA

TBA

Moderator

Cybersecurity decisions are increasingly influenced by geopolitical developments, sanctions, state-sponsored activity and technology dependencies.

  • Assessing exposure to state-sponsored cyber activity.
  • Understanding geopolitical dependencies within technology ecosystems.
  • Preparing for cyber incidents linked to wider geopolitical events.
  • Integrating geopolitical intelligence into security planning.
TBA

TBA

Moderator

TBA

TBA

Moderator

Identity has become central to modern attacks, with compromised credentials providing direct routes into cloud environments, applications and sensitive data.

  • Moving towards continuous identity verification.
  • Detecting abnormal authentication and privilege use.
  • Protecting privileged and administrative identities.
  • Combining identity intelligence with threat detection and response.
TBA

TBA

Moderator

TBA

TBA

Moderator

Cloud concentration creates enormous efficiency but can also introduce systemic dependencies. This session explores how organisations can prepare for outages, compromises or strategic disruption affecting critical providers.

  • Mapping critical cloud dependencies.
  • Identifying single points of technological failure.
  • Developing realistic multi-cloud and contingency strategies.
  • Testing recovery when core cloud services become unavailable.
TBA

TBA

Moderator

TBA

TBA

Moderator

Organisations increasingly depend on suppliers, SaaS platforms, technology partners and outsourced services. Yet these external relationships can introduce risks that internal security teams cannot directly control.

  • Identifying critical third-party dependencies.
  • Prioritising suppliers according to business impact.
  • Continuously monitoring supplier security posture.
  • Establishing meaningful resilience requirements within contracts.
TBA

TBA

Moderator

TBA

TBA

Moderator

Ransomware continues to evolve from an IT security problem into a threat to operational continuity. This discussion examines how organisations can maintain essential services during a major attack.

  • Protecting critical systems and recovery infrastructure.
  • Building resilient backup and restoration strategies.
  • Testing business operations during prolonged disruption.
  • Coordinating technical recovery with executive crisis management.
TBA

TBA

Moderator

TBA

TBA

Moderator

No security architecture can guarantee that every attack will be stopped. This session explores how organisations can design critical services to withstand compromise and recover rapidly.

  • Identifying business-critical services and dependencies.
  • Designing recovery strategies around operational priorities.
  • Testing resilience against realistic attack scenarios.
  • Measuring recovery capability rather than simply counting incidents.
TBA

TBA

Moderator

TBA

TBA

Moderator

When an autonomous system behaves unexpectedly or an AI-enabled application is compromised, conventional incident-response playbooks may not be sufficient. This discussion explores how response strategies need to evolve.

  • Defining what constitutes an AI security incident.
  • Establishing containment procedures for autonomous systems.
  • Preserving evidence and audit trails from AI activity.
  • Integrating AI incidents into wider crisis-management frameworks.
TBA

TBA

Moderator

TBA

TBA

Moderator

Generative AI is making it easier to impersonate individuals, manipulate communications and create convincing synthetic identities. This session examines how organisations can distinguish trusted interactions from sophisticated deception.

  • Detecting AI-generated impersonation and synthetic identities.
  • Strengthening authentication beyond traditional credentials.
  • Protecting executives and high-value users from targeted deception.
  • Establishing trusted channels for sensitive communications.
TBA

TBA

Moderator

TBA

TBA

Moderator

Effective AI governance needs to provide assurance without turning every AI initiative into a lengthy approval process. This discussion explores how organisations can create proportionate and scalable controls.

  • Establishing risk-based AI governance frameworks.
  • Automating approval and assurance processes.
  • Creating clear ownership across technology, security, legal and business functions.
  • Enabling experimentation within controlled environments.
TBA

TBA

Moderator

TBA

TBA

Moderator

AI introduces attack techniques that do not fit neatly into traditional application-security models. This session explores emerging methods for manipulating models, agents and AI-enabled applications.

  • Understanding prompt injection and indirect manipulation.
  • Protecting AI systems from malicious inputs and instructions.
  • Detecting attempts to manipulate model behaviour.
  • Designing layered controls around AI applications and agents.
TBA

TBA

Moderator

TBA

TBA

Moderator

The value of AI depends heavily on access to enterprise data, but this creates significant exposure when sensitive information is used for training, retrieval or inference.

  • Preventing sensitive data leakage through AI systems.
  • Applying access controls to AI-driven data retrieval.
  • Protecting confidential information throughout the AI lifecycle.
  • Maintaining visibility over what data AI systems can access.
TBA

TBA

Moderator

TBA

TBA

Moderator

AI introduces a new ecosystem of models, datasets, APIs, platforms and external providers. Each dependency can introduce vulnerabilities that are difficult to identify through traditional security assessments.

  • Assessing third-party AI models and service providers.
  • Understanding provenance and integrity of training data.
  • Managing vulnerabilities across AI dependencies.
  • Establishing assurance requirements for AI suppliers.
TBA

TBA

Moderator

TBA

TBA

Moderator

AI systems can behave unexpectedly even when they operate within their intended parameters. This session explores how organisations can detect, investigate and contain harmful or unreliable AI behaviour.

  • Establishing runtime monitoring and behavioural controls.
  • Detecting model drift and unexpected outcomes.
  • Creating escalation procedures for high-risk decisions.
  • Balancing automation with meaningful human intervention.
TBA

TBA

Moderator

TBA

TBA

Moderator

Security cannot be added after AI has already entered production. This discussion examines how security, privacy and governance can be incorporated into AI architecture from the outset.

  • Embedding security requirements into AI development.
  • Establishing secure-by-design principles for AI applications.
  • Managing risks across development, testing and production.
  • Creating clear ownership between technology, security and business teams.
TBA

TBA

Moderator

TBA

TBA

Moderator

The growth of applications, APIs, service accounts and AI agents is creating an identity environment in which non-human identities may outnumber human users. This session examines how organisations can regain visibility and control.

  • Discovering and classifying machine and AI identities.
  • Applying least privilege to non-human users.
  • Automating credential rotation and lifecycle management.
  • Detecting dormant, excessive or compromised privileges.
TBA

TBA

Moderator

TBA

TBA

Moderator

Operating AI systems in live environments introduces dynamic risks. Learn how to define operational boundaries, integrate human oversight, and set up monitoring and alerting mechanisms that maintain both compliance and agility in high-stakes operations.

  • Define operational boundaries for autonomous agents.
  • Integrate human-in-the-loop review processes.
  • Alert and respond to compliance or behavioral deviations.
SEE ALL UNIQUE TOPICS

Round Table Discussion

Mattias Wiklund

Regional CIO, Toyota Northern Europe

Moderator

Riccardo Pietri

CISO, Anyfin

Moderator

Jonas Berglund

Security Transformation Associate Director, Accenture

Moderator

As organizations increasingly deploy AI agents and autonomous systems, securing their identities throughout the lifecycle—from onboarding to decommissioning—has become critical. This session explores strategies for enforcing role-based access, automating credential management, and maintaining continuous policy compliance while enabling AI systems to operate efficiently.

  • Role-based access and automated credential lifecycle management.
  • Continuous monitoring for policy compliance.
  • Ensuring secure decommissioning of autonomous systems.
Nazlı Şahin

Director - Security, Risk, and Compliance, Accedo

Moderator

Christian Nehammer

Account Executive, WIZ

Moderator

Joel Norrmarker

Senior Solutions Engineer, WIZ

Moderator

Aladdin Elfares

Account Executive, WIZ

Moderator

Automated workflows and CI/CD pipelines often rely on high-value credentials and secrets that, if compromised, can lead to severe security incidents. This discussion covers practical approaches to securing keys, detecting anomalous activity, and enforcing least-privilege access without creating operational bottlenecks.

  • Detect and respond to anomalous credential usage.
  • Implement least-privilege access policies.
  • Secure CI/CD and AI automation pipelines without slowing innovation.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Surinder Lall

Head of Cyber Governance, Risk and Compliance, DMG Media

Moderator

Marcus Ehrstrand

Senior Solutions Engineer, Okta

Moderator

As generative and predictive AI models are deployed across enterprises, understanding their provenance, training data, and deployment risks is essential. This session provides frameworks for model governance, data protection, and approval workflows to ensure responsible, auditable AI operations.

  • Track model provenance and lineage.
  • Prevent data leakage during training and inference.
  • Approval workflows for production deployment.
Sushil Shenoy

IT Security Specialist, VizRT

Moderator

Thom Langford

EMEA CTO, Rapid 7

Moderator

Operating AI systems in live environments introduces dynamic risks. Learn how to define operational boundaries, integrate human oversight, and set up monitoring and alerting mechanisms that maintain both compliance and agility in high-stakes operations.

  • Define operational boundaries for autonomous agents.
  • Integrate human-in-the-loop review processes.
  • Alert and respond to compliance or behavioral deviations.
Thea Sogenbits

CISO, Estonian Tax and Customs Board

Moderator

Scott Walker

VP of Sales, EMEA, Orca

Moderator

AI agents often interact with sensitive data, making it vital to apply robust data protection strategies. This session explores encryption, tokenization, access governance, and audit trail practices to minimize exposure while enabling AI-driven decision-making.

  • Implement encryption, tokenization, and access controls.
  • Maintain comprehensive audit trails.
  • Reduce exposure through intelligent data governance policies.

Nithin Krishna

Head of Cyber Defense Center, Jeppesen Foreflight

Moderator

Magnus Järnhandske

Chief of Cyber Security Operations, Asurgent

Moderator

Autonomous systems can behave unpredictably, potentially creating self-propagating risks. This discussion covers behavioral anomaly detection, leveraging AI for threat intelligence, and implementing containment and rollback strategies to mitigate rogue AI actions.

  • Behavioral anomaly detection.
  • AI-assisted threat detection.
  • Containment and rollback strategies.
Marius Baczynski

Director of Security Service Sales, Radware

Moderator

Enterprises need to maintain security while avoiding lock-in with specific AI vendors. This session explores open standards, interoperability, and monitoring frameworks that ensure security and governance across multi-vendor AI environments.

  • Open standards and interoperable monitoring frameworks.
  • Cross-platform governance for multi-vendor environments.
  • Maintain security without sacrificing flexibility.
Bernard Helou

Cybersecurity Manager, Schibsted Media

Moderator

AI systems can occasionally act outside intended parameters, creating operational or security incidents. This session addresses detection, escalation, containment, and post-incident analysis to prepare teams for autonomous agent misbehavior.

  • Detection and escalation protocols.
  • Containment and mitigation strategies.
  • Post-incident analysis and lessons learned.

Henrik Tholsby

CISO, Danderyds sjukhus

Moderator

Peter Dahl Inselseth

Major Account Director - Nordics, CATO Network

Moderator

Christian Sahlén

Head of Security & Governance (CISO), TF Bank

Moderator

Organizations must ensure AI operations comply with GDPR, the AI Act, PII, and other regulations. This session explores embedding compliance controls into operational workflows, mapping regulatory requirements to AI systems, and preparing audit-ready evidence.

  • Map regulatory requirements to operational workflows.
  • Embed compliance controls into daily AI operations.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

 

Bojana Stevanovic Medenica

Manager IT & IS, Extenda Retail

Moderator

Louise Lundgren

Sales Director - N.EUR, Synack

Moderator

Static audits are no longer enough. This session explores embedding continuous compliance and assurance into operations, enabling real-time monitoring, cross-team collaboration, and proactive gap resolution.

  • Automated evidence collection and dashboards.
  • Cross-team integration between IT, HR, and risk.
  • Rapid identification and resolution of compliance gaps.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Jan Olsson

Kriminalkommisarie / Police Superintendent, Swedish National Police SC3

Moderator

Johan Frederiksson

AVP Nordics, Igel

Moderator

Hybrid work increases complexity in maintaining compliance. This session focuses on policies, monitoring, and cultural strategies for securing distributed teams without reducing agility.

  • Endpoint and remote access controls.
  • Policy enforcement across multiple locations.
  • Promote a security and compliance-first culture.
Vivek Rao

Information Security Risk Specialist, Entercard Group AB

Moderator

Linda Avad

Chief Information Security Officer, Alecta

Moderator

Staffan Fredriksson

CISO, Regent AB

Moderator

Leaders need measurable insights into organizational resilience. This session covers dashboards, automated alerting, and reporting frameworks for operational and compliance metrics.

  • Dashboards for key resilience indicators.
  • Automated alerts for control failures.
  • Documentation for leadership and regulators.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Helene Neuss

Information Security Strategist, Länsförsäkringar Bank

Moderator

Gamze Zengin

Information Security, Compliance & Risk Officer,
Åhléns Åhléns - Online & Varuhus

Moderator

Skilled cybersecurity professionals are in high demand. This session explores strategies for recruitment, career development, and retention to secure top talent in a competitive market.

  • Employer branding and recruitment strategies.
  • Career development pathways.
  • Retention programs for high-demand skills.
Helana Malm

Head of CSO Office | Deputy Head of Group Security & Cyber Defence, Chair of Women in Security, Swedbank

Moderator

Dzana Dzemidzic

BISO,
Swedbank

Moderator

Teams must be prepared for evolving threats, including AI-driven risks. Learn how to design training programs, simulations, and metrics for skill development.

  • AI security and automation-focused training.
  • Scenario-based simulations and exercises.
  • Skill tracking and competency measurement.
Johanna Parikka Altenstedt

Acting Head of Cybercenter and the Digital Security Unit, RISE

Moderator

Andreas Bergqvist

CSO, BankID

Desirée Winther

Team Lead | Public Sector Sweden, Commvault

Moderator

Collaboration between sectors accelerates threat detection and response. Explore frameworks for intelligence sharing, coordinated response, and evaluating partnerships.

  • Share actionable intelligence securely.
  • Establish coordinated response frameworks.
  • Measure partnership effectiveness.
Florin Chirilas

Local IT Security Officer, Vattenfall

Moderator

Severin Simko

Security Architect, Devoteam

Moderator

Incident response effectiveness relies on preparedness and coordination. This session highlights training, roles, and post-incident analysis to strengthen response capabilities.

  • Cross-functional training programs.
  • Clear escalation paths and role definitions.
  • Post-incident analysis and continuous improvement.
Jörgen Otosson

CISO, BITS DATA

Moderator

Anders Johansson

CISO, Alfa eCare Group

Moderator

Björn Orri Guðmundsson

CEO & Co-Founder, Aftra

Moderator

Human limitations impact security operations. Learn strategies to monitor stress, implement support programs, and build resilience.

  • Monitor workload and stress indicators.
  • Implement well-being and counseling programs.
  • Build resilience into operations.
Teresia Wilsted

ISO, MedMera Bank

Moderator

Oscar Wallenas

Enterprise Account Executive, Elastic

Moderator

International teams require consistent policies and flexible execution. This session covers coordination, communication, and tool centralization for global operations.

  • Align policies globally while empowering local execution.
  • Define communication protocols across time zones.
  • Centralized tools with flexible deployment.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Javvad Malik

Lead CISO Advisor, KnowBe4

Moderator

Sarbjit Singh

CISO, Mentimeter AB

Moderator

Reljo Saarepera

Programme Director, Estonian Public Procurement Center

Moderator

Effective collaboration depends on streamlined tools and processes. Explore strategies to reduce tool fatigue, enable real-time coordination, and enhance teamwork.

  • Evaluate ticketing, SIEM, and collaboration platforms.
  • Avoid tool fatigue and duplication.
  • Enable real-time coordination and alerting.
Niclas Kjellin

Cybersecurity Expert, Cloud Security Alliance

Moderator

Seamus Lennon

Vice President of Operations for EMEA, ThreatLocker

Moderator

Knowledge sharing strengthens resilience. Learn how to exchange actionable intelligence securely, standardize reporting, and maintain trust across organizations.

  • Threat intelligence and mitigation strategies.
  • Standardized reporting formats for partners.
  • Ensure confidentiality and trust frameworks.
Smeden Svahn

CISO, Adda

Moderator

Trish Almgren

Senior Manager, Product Marketing, Infoblox

Moderator

Aligning security initiatives improves impact and efficiency. This session covers prioritization, coordination, and shared accountability across teams and sectors.

  • Coordinate timelines and goals across teams.
  • Identify overlapping initiatives and redundancies.
  • Establish shared accountability structures.
;