Securitas Sverige AB

Security leaders are increasingly expected to demonstrate measurable value. This final roundtable explores how security can be connected directly to business resilience, innovation and growth.

• Translating security investment into business outcomes.
• Demonstrating the value of resilience and preparedness.
• Prioritising investment according to business-critical risk.
• Building stronger relationships between security, finance and business leadership.

As technology becomes more distributed, organisations must reconsider where security capabilities should sit. This session examines different operating models and the trade-offs between control, speed and proximity to the business.

• Centralising specialist security capabilities where scale matters.
• Embedding security expertise within technology and business teams.
• Establishing consistent standards across decentralised environments.
• Designing operating models that can adapt as the organisation changes.

Traditional security awareness programmes are evolving as employees increasingly interact with AI, cloud services and sophisticated social-engineering attacks.

• Moving from annual training towards continuous behavioural engagement.
• Preparing employees for AI-enabled social engineering and deception.
• Creating a positive culture of security ownership.
• Measuring behavioural change rather than training completion.

Technology and security decisions increasingly overlap. This discussion explores how organisations can create stronger alignment between technology leadership, security and business priorities.

• Establishing shared ownership of technology risk.
• Balancing security requirements with business agility.
• Aligning investment priorities across technology and security.
• Creating common measures of performance and resilience.

Attackers and automated systems can operate continuously and at enormous scale. This session explores how security teams can redesign processes for a world where response time is increasingly measured in seconds.

• Automating detection and containment where appropriate.
• Creating real-time decision and escalation mechanisms.
• Combining human expertise with machine-scale analysis.
• Designing operations around speed without sacrificing control.

Security teams often operate across dozens of platforms, creating overlapping capabilities, fragmented visibility and operational complexity.

• Identifying unnecessary duplication across security tools.
• Consolidating platforms without creating new blind spots.
• Evaluating security technology according to outcomes.
• Building a coherent architecture rather than an accumulation of products.

Security is increasingly moving closer to engineering and product teams. This session explores how organisations can make security part of the development and operational lifecycle.

• Integrating security into DevSecOps and product engineering.
• Shifting security controls closer to development.
• Creating shared accountability between security and engineering.
• Measuring secure development through meaningful outcomes.

The demand for specialised security expertise continues to grow whilst organisations struggle to find and retain the right people. This discussion explores alternative approaches to building capability.

• Identifying the skills that will become critical.
• Developing internal talent and career pathways.
• Using automation to augment scarce expertise.
• Determining when to build capability internally and when to partner externally.

AI can analyse vast amounts of security data and automate repetitive tasks, but effective security operations still require judgement, context and accountability.

• Identifying the right balance between automation and human oversight.
• Automating investigation and response without creating new risks.
• Reducing alert fatigue and improving analyst productivity.
• Redesigning SOC workflows around AI capabilities.

Security teams face an ever-growing volume of alerts, vulnerabilities and intelligence. The answer may not be more tools, but better prioritisation and orchestration.

• Reducing noise across security platforms.
• Correlating signals across identity, endpoint, cloud and network environments.
• Prioritising threats according to business impact.
• Automating repetitive investigation and triage.

Cyber resilience cannot sit within a single department. This session examines how organisations can establish shared ownership across security, technology, risk and operational functions.

• Defining clear accountability during major disruption.
• Integrating security and operational resilience programmes.
• Establishing common risk and resilience language.
• Running cross-functional exercises that reflect real-world scenarios.

Security teams often report activity rather than outcomes. This discussion explores which measures can genuinely demonstrate preparedness, resilience and risk reduction.

• Moving beyond alert volumes and vulnerability counts.
• Measuring resilience of critical business services.
• Connecting security metrics with business impact.
• Creating meaningful reporting for senior leadership and boards.

Major incidents can affect identity, endpoints, cloud services, applications and communications simultaneously. This session examines how organisations can coordinate recovery across complex technology environments.

• Establishing recovery priorities across interconnected systems.
• Maintaining trusted communications during major incidents.
• Coordinating technology, security and business recovery teams.
• Testing recovery at enterprise rather than system level.

Traditional point-in-time assessments struggle to keep pace with rapidly changing technology environments. This discussion explores continuous approaches to understanding and reducing exposure.

• Maintaining an up-to-date view of the attack surface.
• Prioritising vulnerabilities according to business risk.
• Identifying exposed assets that traditional inventories miss.
• Measuring whether exposure is actually declining.

Cybersecurity decisions are increasingly influenced by geopolitical developments, sanctions, state-sponsored activity and technology dependencies.

• Assessing exposure to state-sponsored cyber activity.
• Understanding geopolitical dependencies within technology ecosystems.
• Preparing for cyber incidents linked to wider geopolitical events.
• Integrating geopolitical intelligence into security planning.

Identity has become central to modern attacks, with compromised credentials providing direct routes into cloud environments, applications and sensitive data.

• Moving towards continuous identity verification.
• Detecting abnormal authentication and privilege use.
• Protecting privileged and administrative identities.
• Combining identity intelligence with threat detection and response.

Cloud concentration creates enormous efficiency but can also introduce systemic dependencies. This session explores how organisations can prepare for outages, compromises or strategic disruption affecting critical providers.

• Mapping critical cloud dependencies.
• Identifying single points of technological failure.
• Developing realistic multi-cloud and contingency strategies.
• Testing recovery when core cloud services become unavailable.

Organisations increasingly depend on suppliers, SaaS platforms, technology partners and outsourced services. Yet these external relationships can introduce risks that internal security teams cannot directly control.

• Identifying critical third-party dependencies.
• Prioritising suppliers according to business impact.
• Continuously monitoring supplier security posture.
• Establishing meaningful resilience requirements within contracts.

Ransomware continues to evolve from an IT security problem into a threat to operational continuity. This discussion examines how organisations can maintain essential services during a major attack.

• Protecting critical systems and recovery infrastructure.
• Building resilient backup and restoration strategies.
• Testing business operations during prolonged disruption.
• Coordinating technical recovery with executive crisis management.

No security architecture can guarantee that every attack will be stopped. This session explores how organisations can design critical services to withstand compromise and recover rapidly.

• Identifying business-critical services and dependencies.
• Designing recovery strategies around operational priorities.
• Testing resilience against realistic attack scenarios.
• Measuring recovery capability rather than simply counting incidents.

When an autonomous system behaves unexpectedly or an AI-enabled application is compromised, conventional incident-response playbooks may not be sufficient. This discussion explores how response strategies need to evolve.

• Defining what constitutes an AI security incident.
• Establishing containment procedures for autonomous systems.
• Preserving evidence and audit trails from AI activity.
• Integrating AI incidents into wider crisis-management frameworks.

Generative AI is making it easier to impersonate individuals, manipulate communications and create convincing synthetic identities. This session examines how organisations can distinguish trusted interactions from sophisticated deception.

• Detecting AI-generated impersonation and synthetic identities.
• Strengthening authentication beyond traditional credentials.
• Protecting executives and high-value users from targeted deception.
• Establishing trusted channels for sensitive communications.

Effective AI governance needs to provide assurance without turning every AI initiative into a lengthy approval process. This discussion explores how organisations can create proportionate and scalable controls.

• Establishing risk-based AI governance frameworks.
• Automating approval and assurance processes.
• Creating clear ownership across technology, security, legal and business functions.
• Enabling experimentation within controlled environments.

AI introduces attack techniques that do not fit neatly into traditional application-security models. This session explores emerging methods for manipulating models, agents and AI-enabled applications.

• Understanding prompt injection and indirect manipulation.
• Protecting AI systems from malicious inputs and instructions.
• Detecting attempts to manipulate model behaviour.
• Designing layered controls around AI applications and agents.

The value of AI depends heavily on access to enterprise data, but this creates significant exposure when sensitive information is used for training, retrieval or inference.

• Preventing sensitive data leakage through AI systems.
• Applying access controls to AI-driven data retrieval.
• Protecting confidential information throughout the AI lifecycle.
• Maintaining visibility over what data AI systems can access.

AI introduces a new ecosystem of models, datasets, APIs, platforms and external providers. Each dependency can introduce vulnerabilities that are difficult to identify through traditional security assessments.

• Assessing third-party AI models and service providers.
• Understanding provenance and integrity of training data.
• Managing vulnerabilities across AI dependencies.
• Establishing assurance requirements for AI suppliers.

AI systems can behave unexpectedly even when they operate within their intended parameters. This session explores how organisations can detect, investigate and contain harmful or unreliable AI behaviour.

• Establishing runtime monitoring and behavioural controls.
• Detecting model drift and unexpected outcomes.
• Creating escalation procedures for high-risk decisions.
• Balancing automation with meaningful human intervention.

Security cannot be added after AI has already entered production. This discussion examines how security, privacy and governance can be incorporated into AI architecture from the outset.

• Embedding security requirements into AI development.
• Establishing secure-by-design principles for AI applications.
• Managing risks across development, testing and production.
• Creating clear ownership between technology, security and business teams.

The growth of applications, APIs, service accounts and AI agents is creating an identity environment in which non-human identities may outnumber human users. This session examines how organisations can regain visibility and control.

• Discovering and classifying machine and AI identities.
• Applying least privilege to non-human users.
• Automating credential rotation and lifecycle management.
• Detecting dormant, excessive or compromised privileges.

Operating AI systems in live environments introduces dynamic risks. Learn how to define operational boundaries, integrate human oversight, and set up monitoring and alerting mechanisms that maintain both compliance and agility in high-stakes operations.

• Define operational boundaries for autonomous agents.
  
• Integrate human-in-the-loop review processes.
  
• Alert and respond to compliance or behavioral deviations.
  

As organizations increasingly deploy AI agents and autonomous systems, securing their identities throughout the lifecycle—from onboarding to decommissioning—has become critical. This session explores strategies for enforcing role-based access, automating credential management, and maintaining continuous policy compliance while enabling AI systems to operate efficiently.

• Role-based access and automated credential lifecycle management.
• Continuous monitoring for policy compliance.
• Ensuring secure decommissioning of autonomous systems.

Automated workflows and CI/CD pipelines often rely on high-value credentials and secrets that, if compromised, can lead to severe security incidents. This discussion covers practical approaches to securing keys, detecting anomalous activity, and enforcing least-privilege access without creating operational bottlenecks.

• Detect and respond to anomalous credential usage.
• Implement least-privilege access policies.
• Secure CI/CD and AI automation pipelines without slowing innovation.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

As generative and predictive AI models are deployed across enterprises, understanding their provenance, training data, and deployment risks is essential. This session provides frameworks for model governance, data protection, and approval workflows to ensure responsible, auditable AI operations.

• Track model provenance and lineage.
• Prevent data leakage during training and inference.
• Approval workflows for production deployment.

Operating AI systems in live environments introduces dynamic risks. Learn how to define operational boundaries, integrate human oversight, and set up monitoring and alerting mechanisms that maintain both compliance and agility in high-stakes operations.

• Define operational boundaries for autonomous agents.
  
• Integrate human-in-the-loop review processes.
  
• Alert and respond to compliance or behavioral deviations.
  

AI agents often interact with sensitive data, making it vital to apply robust data protection strategies. This session explores encryption, tokenization, access governance, and audit trail practices to minimize exposure while enabling AI-driven decision-making.

• Implement encryption, tokenization, and access controls.
  
• Maintain comprehensive audit trails.
  
• Reduce exposure through intelligent data governance policies.
  
  

Autonomous systems can behave unpredictably, potentially creating self-propagating risks. This discussion covers behavioral anomaly detection, leveraging AI for threat intelligence, and implementing containment and rollback strategies to mitigate rogue AI actions.

• Behavioral anomaly detection.
  
• AI-assisted threat detection.
  
• Containment and rollback strategies.

Enterprises need to maintain security while avoiding lock-in with specific AI vendors. This session explores open standards, interoperability, and monitoring frameworks that ensure security and governance across multi-vendor AI environments.

• Open standards and interoperable monitoring frameworks.
  
• Cross-platform governance for multi-vendor environments.
  
• Maintain security without sacrificing flexibility.
  

AI systems can occasionally act outside intended parameters, creating operational or security incidents. This session addresses detection, escalation, containment, and post-incident analysis to prepare teams for autonomous agent misbehavior.

• Detection and escalation protocols.
  
• Containment and mitigation strategies.
  
• Post-incident analysis and lessons learned.
  
  

Organizations must ensure AI operations comply with GDPR, the AI Act, PII, and other regulations. This session explores embedding compliance controls into operational workflows, mapping regulatory requirements to AI systems, and preparing audit-ready evidence.

• Map regulatory requirements to operational workflows.
• Embed compliance controls into daily AI operations.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Static audits are no longer enough. This session explores embedding continuous compliance and assurance into operations, enabling real-time monitoring, cross-team collaboration, and proactive gap resolution.

• Automated evidence collection and dashboards.
  
• Cross-team integration between IT, HR, and risk.
  
• Rapid identification and resolution of compliance gaps.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Hybrid work increases complexity in maintaining compliance. This session focuses on policies, monitoring, and cultural strategies for securing distributed teams without reducing agility.

• Endpoint and remote access controls.
  
• Policy enforcement across multiple locations.
  
• Promote a security and compliance-first culture.

Leaders need measurable insights into organizational resilience. This session covers dashboards, automated alerting, and reporting frameworks for operational and compliance metrics.

• Dashboards for key resilience indicators.
  
• Automated alerts for control failures.
  
• Documentation for leadership and regulators.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Skilled cybersecurity professionals are in high demand. This session explores strategies for recruitment, career development, and retention to secure top talent in a competitive market.

• Employer branding and recruitment strategies.
  
• Career development pathways.
  
• Retention programs for high-demand skills.

Teams must be prepared for evolving threats, including AI-driven risks. Learn how to design training programs, simulations, and metrics for skill development.

• AI security and automation-focused training.
  
• Scenario-based simulations and exercises.
  
• Skill tracking and competency measurement.

Collaboration between sectors accelerates threat detection and response. Explore frameworks for intelligence sharing, coordinated response, and evaluating partnerships.

• Share actionable intelligence securely.
  
• Establish coordinated response frameworks.
  
• Measure partnership effectiveness.

Incident response effectiveness relies on preparedness and coordination. This session highlights training, roles, and post-incident analysis to strengthen response capabilities.

• Cross-functional training programs.
  
• Clear escalation paths and role definitions.
  
• Post-incident analysis and continuous improvement.

Human limitations impact security operations. Learn strategies to monitor stress, implement support programs, and build resilience.

• Monitor workload and stress indicators.
  
• Implement well-being and counseling programs.
  
• Build resilience into operations.

International teams require consistent policies and flexible execution. This session covers coordination, communication, and tool centralization for global operations.

• Align policies globally while empowering local execution.
  
• Define communication protocols across time zones.
  
• Centralized tools with flexible deployment.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Effective collaboration depends on streamlined tools and processes. Explore strategies to reduce tool fatigue, enable real-time coordination, and enhance teamwork.

• Evaluate ticketing, SIEM, and collaboration platforms.
  
• Avoid tool fatigue and duplication.
  
• Enable real-time coordination and alerting.

Knowledge sharing strengthens resilience. Learn how to exchange actionable intelligence securely, standardize reporting, and maintain trust across organizations.

• Threat intelligence and mitigation strategies.
  
• Standardized reporting formats for partners.
  
• Ensure confidentiality and trust frameworks.

Aligning security initiatives improves impact and efficiency. This session covers prioritization, coordination, and shared accountability across teams and sectors.

• Coordinate timelines and goals across teams.
  
• Identify overlapping initiatives and redundancies.
  
• Establish shared accountability structures.