Ransomware Without Borders: Building Supply-Chain Resilience for the Next Generation of Attacks

A Core Focus at The Grand IT Security | Stockholm 2026

Ransomware has evolved beyond isolated attacks-it has become a global supply-chain crisis. In today’s hyperconnected digital economy, a single compromised vendor, third-party platform, or software dependency can cascade across entire ecosystems, disrupting critical services, financial operations, and public trust.

As Nordic enterprises deepen their digital interdependence, supply-chain resilience has emerged as the new frontline of cyber defense. At The Grand IT Security 2026, one of the event’s three strategic focus areas will examine how organizations can prepare for a new generation of ransomware-one that exploits not just technology, but trust itself.


The New Age of Ransomware: Beyond the Perimeter

Ransomware has evolved from crude lock-and-demand tactics into a multi-stage, multi-target industry. Attackers no longer rely solely on phishing or brute-force entry-they infiltrate through managed service providers, software updates, and trusted partners.

Modern ransomware groups now operate as organized enterprises, leveraging affiliate models, dark web marketplaces, and data extortion tactics to maximize their impact. The boundaries between cybercrime and state-sponsored operations have blurred, creating a landscape where attacks transcend borders and industries alike.

For Nordic enterprises, the message is clear: resilience cannot stop at your firewall-it must extend to every link in your digital chain.


The Supply-Chain Weakness: Trust as the New Target

Every enterprise today depends on a vast network of suppliers, vendors, and third-party service providers. But that same network-if left unmonitored-creates a complex web of hidden vulnerabilities. A single compromised software update or insecure integration can become an attacker’s Trojan horse, spreading ransomware far beyond its original target.

Supply-chain attacks such as SolarWinds and Kaseya were warnings of what’s to come: indirect infiltration on a global scale. To combat this, organizations must adopt end-to-end visibility, vendor risk scoring, and continuous trust verification across their entire ecosystem.

The focus must shift from reactive incident response to proactive assurance-where third-party relationships are treated with the same rigor as internal infrastructure.


Building Cyber Resilience: From Response to Recovery

Resilience is no longer just about prevention-it’s about preparedness, containment, and continuity. The next generation of ransomware response demands a multi-layered approach:

  • Zero-trust principles applied to partner and vendor access.

  • Immutable backups and rapid recovery strategies to minimize downtime.

  • Threat intelligence sharing between industries and governments to identify cross-border campaigns early.

In the Nordic context, where industries like energy, manufacturing, and logistics are tightly interconnected, coordinated defense strategies are essential. Resilience is no longer a competitive advantage-it’s a shared responsibility.


Why This Matters for Leaders

The rise of borderless ransomware is not just a cybersecurity issue-it’s a business continuity and national security imperative. For executives, the conversation must move beyond technical containment toward strategic governance:

  • How resilient is our extended ecosystem?

  • Can we recover operations within hours, not days?

  • Do our suppliers adhere to the same security standards we demand internally?

At The Grand IT Security 2026, senior leaders, policymakers, and cybersecurity innovators will gather to confront these questions. Through high-level roundtables, case-driven keynotes, and one-on-one strategy sessions, participants will explore how to:

  • Strengthen supply-chain transparency and accountability.

  • Integrate resilience into procurement and vendor management.

  • Develop cross-sector response frameworks for ransomware crises.


Securing the Future of Digital Supply Chains

In an age where ransomware knows no borders, trust and resilience define the strength of every organization. The enterprises that thrive will be those that treat cybersecurity not as an IT function, but as a strategic cornerstone of business survival.

The Grand IT Security 2026 offers Nordic leaders a platform to shape that future, where security, collaboration, and resilience become the foundations of a trusted digital economy.

Join us on May 21st, 2026
Stockholm Waterfront Congress Centre, Sweden
By invitation only

Share it :
SEE ALL UNIQUE TOPICS

Round Table Discussion

Mattias Wiklund

Regional CIO, Toyota Northern Europe

Moderator

As organizations increasingly deploy AI agents and autonomous systems, securing their identities throughout the lifecycle—from onboarding to decommissioning—has become critical. This session explores strategies for enforcing role-based access, automating credential management, and maintaining continuous policy compliance while enabling AI systems to operate efficiently.

  • Role-based access and automated credential lifecycle management.
  • Continuous monitoring for policy compliance.
  • Ensuring secure decommissioning of autonomous systems.
Surinder Lall

Head of Cyber Governance, Risk and Compliance, DMG Media

Moderator

Nazlı Şahin

Director - Security, Risk, and Compliance, Accedo

Moderator

Automated workflows and CI/CD pipelines often rely on high-value credentials and secrets that, if compromised, can lead to severe security incidents. This discussion covers practical approaches to securing keys, detecting anomalous activity, and enforcing least-privilege access without creating operational bottlenecks.

  • Detect and respond to anomalous credential usage.
  • Implement least-privilege access policies.
  • Secure CI/CD and AI automation pipelines without slowing innovation.
Sushil Shenoy

IT Security Specialist, VizRT

Moderator

AI-driven workflows can execute code autonomously, increasing operational efficiency but also introducing potential risks. This session focuses on containment strategies, sandboxing, real-time monitoring, and incident response planning to prevent rogue execution from causing disruption or damage.

  • Sandboxing and isolation strategies.
  • Real-time monitoring for unexpected behaviors.
  • Incident response protocols for AI-driven code execution.
Siegfried Moyo

Director, IT Security – (Deputy CISO), Americold Logistics, LLC

Moderator

As generative and predictive AI models are deployed across enterprises, understanding their provenance, training data, and deployment risks is essential. This session provides frameworks for model governance, data protection, and approval workflows to ensure responsible, auditable AI operations.

  • Track model provenance and lineage.
  • Prevent data leakage during training and inference.
  • Approval workflows for production deployment.
Anudeep Konduri

Sr Security Specialist, Ericsson

Moderator

Thom Langford

EMEA CTO, Rapid 7

Moderator

Operating AI systems in live environments introduces dynamic risks. Learn how to define operational boundaries, integrate human oversight, and set up monitoring and alerting mechanisms that maintain both compliance and agility in high-stakes operations.

  • Define operational boundaries for autonomous agents.
  • Integrate human-in-the-loop review processes.
  • Alert and respond to compliance or behavioral deviations.
Sandip Wajde

Managing Director- Global Head of Emerging Technology Operational Risks & Intelligence, BNP Paribas

Moderator

AI agents often interact with sensitive data, making it vital to apply robust data protection strategies. This session explores encryption, tokenization, access governance, and audit trail practices to minimize exposure while enabling AI-driven decision-making.

  • Implement encryption, tokenization, and access controls.
  • Maintain comprehensive audit trails.
  • Reduce exposure through intelligent data governance policies.

Nithin Krishna

Head of Cyber Defense Center, Jeppesen

Moderator

Autonomous systems can behave unpredictably, potentially creating self-propagating risks. This discussion covers behavioral anomaly detection, leveraging AI for threat intelligence, and implementing containment and rollback strategies to mitigate rogue AI actions.

  • Behavioral anomaly detection.
  • AI-assisted threat detection.
  • Containment and rollback strategies.
Elnaz Tadayon

Cybersecurity area manager, H&M

Moderator

Thea Sogenbits

CISO, Estonian Tax and Customs Board

Moderator

Marius Baczynski

Director of Security Service Sales, Radware

Moderator

Enterprises need to maintain security while avoiding lock-in with specific AI vendors. This session explores open standards, interoperability, and monitoring frameworks that ensure security and governance across multi-vendor AI environments.

  • Open standards and interoperable monitoring frameworks.
  • Cross-platform governance for multi-vendor environments.
  • Maintain security without sacrificing flexibility.
Bernard Helou

Cybersecurity Manager, Schibsted Media

Moderator

AI systems can occasionally act outside intended parameters, creating operational or security incidents. This session addresses detection, escalation, containment, and post-incident analysis to prepare teams for autonomous agent misbehavior.

  • Detection and escalation protocols.
  • Containment and mitigation strategies.
  • Post-incident analysis and lessons learned.

Payam Razifar

Information Security Specialist, Bravida

Moderator

Organizations must ensure AI operations comply with GDPR, the AI Act, and other regulations. This session explores embedding compliance controls into operational workflows, mapping regulatory requirements to AI systems, and preparing audit-ready evidence.

  • Map regulatory requirements to operational workflows.
  • Collect audit-ready evidence automatically.
  • Embed compliance controls into daily AI operations.
Daniel Westbom

IT Risk & Security Manager, SEB

Moderator

Christian Sahlén

Head of Security & Governance (CISO), TF Bank

Moderator

Compliance with multiple overlapping frameworks can be complex. This discussion covers aligning controls to business operations, avoiding duplication, and measuring effectiveness to achieve smooth regulatory alignment without sacrificing operational agility.

  • Map controls to business processes.
  • Eliminate duplicate efforts across frameworks.
  • Measure and track compliance effectiveness.
Bojana Stevanovic Medenica

Manager IT & IS, Extenda Retail

Moderator

Static audits are no longer enough. This session explores embedding continuous compliance and assurance into operations, enabling real-time monitoring, cross-team collaboration, and proactive gap resolution.

  • Automated evidence collection and dashboards.
  • Cross-team integration between IT, HR, and risk.
  • Rapid identification and resolution of compliance gaps.
Brett Hardman

CISO, Cabonline

Moderator

Manual compliance processes create inefficiencies and increase risk. Learn how to integrate IT and HR systems to automate evidence collection, streamline reporting, and enforce consistent policies.

  • Standardized data formats for reporting.
  • Integrations for real-time audit evidence.
  • Streamlined cross-functional reporting workflows.
Riccardo Pietri

CISO, Trade Ledger

Moderator

Translating AI regulations into actionable enterprise controls is essential. This session provides practical strategies for risk categorization, documentation, and inspection readiness for AI systems.

  • Categorize AI systems by risk level.
  • Implement transparency and documentation measures.
  • Prepare for regulatory inspections proactively.
Staffan Fredriksson

CISO,
Regent AB

Moderator

Henrik Tholsby

CISO, Danderyds sjukhus

Moderator

Striking a balance between operational efficiency and regulatory compliance is critical. This session highlights prioritization frameworks, automation tools, and performance measurement to achieve both goals.

  • Prioritize high-risk areas for oversight.
  • Delegate through automation to reduce bottlenecks.
  • Measure risk-adjusted operational performance.
Teresia Wilsted

ISO, MedMera Bank

Moderator

Organizations operating internationally must manage overlapping regulations. This session discusses frameworks to map obligations, assess risk priorities, and coordinate cross-border compliance.

  • Map local and global obligations.
  • Assess regional vs enterprise risk priorities.
  • Coordinate cross-border compliance initiatives.
Anders Johansson

CISO, Alfa eCare Group

Moderator

Mergers and acquisitions present unique compliance risks. Learn how to embed security and regulatory due diligence throughout the transaction lifecycle.

  • Pre-merger cybersecurity and privacy assessments.
  • Post-merger policy harmonization.
  • Address legacy systems and compliance gaps.
Jan Olsson

Kriminalkommisarie / Police Superintendent, Swedish National Police SC3

Moderator

Hybrid work increases complexity in maintaining compliance. This session focuses on policies, monitoring, and cultural strategies for securing distributed teams without reducing agility.

  • Endpoint and remote access controls.
  • Policy enforcement across multiple locations.
  • Promote a security and compliance-first culture.
Vivek Rao

Information Security Risk Specialist, Entercard Group AB

Moderator

Leaders need measurable insights into organizational resilience. This session covers dashboards, automated alerting, and reporting frameworks for operational and compliance metrics.

  • Dashboards for key resilience indicators.
  • Automated alerts for control failures.
  • Documentation for leadership and regulators.
Victor Pettersson

CISO, Sokigo

Moderator

Sarbjit Singh

CISO, Mentimeter AB

Moderator

True compliance is cultural. This discussion explores leadership messaging, incentives, and integrating security and compliance principles into everyday workflows.

  • Leadership messaging and advocacy.
  • Incentivize proactive reporting.
  • Integrate compliance into everyday business processes.
Helene Neuss

Information Security Strategist, Länsförsäkringar Bank

Moderator

Gamze Zengin

Information Security, Compliance & Risk Officer,
Åhléns Åhléns - Online & Varuhus

Moderator

Skilled cybersecurity professionals are in high demand. This session explores strategies for recruitment, career development, and retention to secure top talent in a competitive market.

  • Employer branding and recruitment strategies.
  • Career development pathways.
  • Retention programs for high-demand skills.
Helana Malm

Head of CSO Office | Deputy Head of Group Security & Cyber Defence, Chair of Women in Security, Swedbank

Moderator

Dzana Dzemidzic

BISO,
Swedbank

Moderator

Teams must be prepared for evolving threats, including AI-driven risks. Learn how to design training programs, simulations, and metrics for skill development.

  • AI security and automation-focused training.
  • Scenario-based simulations and exercises.
  • Skill tracking and competency measurement.
Johan Rosell

Head of Center for Cybersecurity, RISE

Moderator

Andreas Bergqvist

CSO, BankID

Moderator

Collaboration between sectors accelerates threat detection and response. Explore frameworks for intelligence sharing, coordinated response, and evaluating partnerships.

  • Share actionable intelligence securely.
  • Establish coordinated response frameworks.
  • Measure partnership effectiveness.
Jörgen Ottosson

CISO, BITS DATA

Moderator

Florin Chirilas

Local IT Security Officer, Vattenfall

Moderator

Incident response effectiveness relies on preparedness and coordination. This session highlights training, roles, and post-incident analysis to strengthen response capabilities.

  • Cross-functional training programs.
  • Clear escalation paths and role definitions.
  • Post-incident analysis and continuous improvement.
Jakub Pasikowski

Information Security Manager, IT Compliance, Avalanche Studios

Moderator

Björn Orri Guðmundsson

CEO & Co-Founder, Aftra

Moderator

Human limitations impact security operations. Learn strategies to monitor stress, implement support programs, and build resilience.

  • Monitor workload and stress indicators.
  • Implement well-being and counseling programs.
  • Build resilience into operations.
Moderator

To Be Announced

Moderator

International teams require consistent policies and flexible execution. This session covers coordination, communication, and tool centralization for global operations.

  • Align policies globally while empowering local execution.
  • Define communication protocols across time zones.
  • Centralized tools with flexible deployment.
Marius Ebel

Information Security Senior Specialist

Moderator

Anette Karlsson

CISO, Intrum

Moderator

Engage teams with hands-on learning and gamification to improve skill retention.

  • Simulation-based exercises and scenarios.
  • Incentives, leaderboards, and measurable engagement.
  • Track knowledge retention and skill improvement.
Javvad Malik

Lead CISO Advisor, KnowBe4

Moderator

Reljo Saarepera

Programme Director, Estonian Public Procurement Center

Moderator

Effective collaboration depends on streamlined tools and processes. Explore strategies to reduce tool fatigue, enable real-time coordination, and enhance teamwork.

  • Evaluate ticketing, SIEM, and collaboration platforms.
  • Avoid tool fatigue and duplication.
  • Enable real-time coordination and alerting.
Smeden Svahn

CISO,
Adda

Moderator

Niclas Kjellin

Cybersecurity Expert, Cloud Security Alliance

Moderator

Knowledge sharing strengthens resilience. Learn how to exchange actionable intelligence securely, standardize reporting, and maintain trust across organizations.

  • Threat intelligence and mitigation strategies.
  • Standardized reporting formats for partners.
  • Ensure confidentiality and trust frameworks.
Sümeyra Arda Çirpili

Cyber Security Project Manager, Rabobank

Moderator

Burakhan Tahmaz

European Group Information Security Officer, KYOCERA Document Solutions Europe

Moderator

Aligning security initiatives improves impact and efficiency. This session covers prioritization, coordination, and shared accountability across teams and sectors.

  • Coordinate timelines and goals across teams.
  • Identify overlapping initiatives and redundancies.
  • Establish shared accountability structures.