IDC Security Summit

The need for greater cyber resilience underpins much of the cybersecurity legislation that the EU has passed in recent years. It is also recognised by most organizations as business-critical in the digital era. Yet it remains a hard bar to clear: Secure the perimeter and then cloud comes along; Get on top of shadow IT only to be faced by shadow AI; Optimise data security controls only to be undone by compromised credentials.

Building cyber resilience for the long-term requires a detailed assessment of current and emerging risks. Organizations need to stay abreast of the geopolitical situation, the threat landscape, and developing and expanding regulatory requirements. Security strategies need to be future-ready to enable the organizations to capitalize on innovation and AI without exposing themselves to greater risk.

In today’s rapidly evolving cybersecurity landscape, traditional perimeter-based security is no longer sufficient. This session explores Zero Trust, a modern security framework based on the principle that no entity. inside or outside the network should be inherently trusted.

Join Jaye Tillson as he examines the evolution of Zero Trust, why it’s more critical than ever, and how organizations can successfully implement it using HPE Aruba Networking’s cutting-edge solutions. Learn how advanced networking and security technologies can reinforce Zero Trust principles, enhance visibility, and mitigate risk.

With increasing regulatory requirements such as NIS2 mandating stronger cybersecurity measures, adopting a Zero Trust approach is no longer optional; it's essential. 

Whether you're just beginning your Zero Trust journey or looking to refine your existing strategy, this session will provide valuable insights, key regulatory considerations, and actionable steps to strengthen your security posture.

In this session, Jose Carlos Goncalves, CISO at IP Telecom, will share his firsthand experience with Automated Security Validation. Discover the challenges he faced in reducing exposure, the strategies that proved effective, and the positive outcomes for his organization’s security posture.

If there is something constant in the universe, that’s speed of light. And change. Change is a constant in today’s world. We are living through times where the present is leaving us... every single second. These are times where present is already past and the need to adapt and adopt new and emerging technologies has become instrumental for success. The Auditing function is no stranger to all this and organizations are being pressed with time-to-market issues while, in reality, they should a have time-to-value perspective. In an epoch where technology is pervasive and you can hardly find businesses that do not depend on technology, Auditing has to face change as one critical variable in the planning of enterprise strategy. Because we have something crystal clear: that the future...is going to change. We have to capture the present realizing that it has already become past and that the next business iteration has already happened, whether we like it or not.

By attending this session, the attendee will enhance her/his perception on the importance of time when designing, planning and executing a business strategy. The difference between strategy and tactics will be mentioned as well as the need of adapting to change in a world with no secrets, no barriers, no frontiers. The attendee will gain a deeper understanding on the issues of adaptability, trustability and reliability and, more importantly, will discover that we are living in the future. Welcome to Cybersecurity 2048: Days of Future Past.

As business infrastructures evolve towards decentralized models, the need for segmentation and strict access policies becomes critical. Modern threats are no longer limited to preventing initial intrusion but focus on an attacker's ability to move laterally within the network after gaining access. Implementing strategies such as Zero Trust Network Access (ZTNA) and micro-segmentation enables a more precise and adaptable approach to protecting critical data and applications, regardless of their location (whether on-premises, in the cloud, or hybrid environments). 

In this panel, industry leaders and an Akamai expert will share challenges, best practices and concrete cases demonstrating how combining detailed visibility into network flows, segmentation based on dynamic attributes, and agile threat response transforms security management. The session aims to provide valuable insights on implementing these approaches effectively, ensuring regulatory compliance, protecting against ransomware, and aligning cybersecurity strategies with the demands of the AI era.  

Agenda:   

13h15: Check-in   

13h20: Mensagem de boas-vindas  

13h25: Building Successful Conversations About Cybersecurity Posture, Bruno Horta Soares, Executive Senior Advisor, IDC 

Overview:

This presentation will explore how security leaders can structure effective conversations, ensuring that key stakeholders understand the organization's true risk posture and its alignment with the organization's risk appetite. Strategies will be discussed to translate technical metrics into actionable insights, providing decision-makers with a clear view of the cybersecurity program's performance and the evolution of its security posture. 

13h40: Beyond Traditional SOC: A Proactive Approach to Security with Crayon Managed Security Posture, Alexander Värä, Global Security Technical Services Sales Director, Crayon  

Overview:

This session will explore the need for a new cybersecurity paradigm, where security posture shifts from being purely defensive to becoming a continuous process of improvement and proactive risk mitigation. We will present how a structured approach based on security hardening, continuous configuration monitoring, and incident response preparedness can significantly reduce exposure to threats. Crayon will demonstrate how a Security Posture Management model enables organizations to avoid operational overload, reduce false positives, and maximize security investments, ensuring that available tools are fully utilized and properly configured. With a strong focus on prevention and continuous optimization, this approach ensures not only compliance and protection against ransomware but also true cybersecurity resilience aligned with business needs. 

13h55: Almoço e debate   

14h30: Encerramento 

Cisco Security delivers cutting-edge solutions to safeguard the AI-driven future. With a focus on innovation, Cisco empowers organizations to protect workloads, embrace zero-trust architectures, secure AI development, and build digital resilience—all while seamlessly integrating security and observability for a smarter, safer tomorrow.

As a former government CIO, Taavi Kotka will humorously provide a rapid overview of the latest successes and failures of Estonia in cybersecurity, AI, startups, and the defense industry. We will also discuss a confidential topic that Estonia hopes will become the next big international sensation. Can a government official become a millionaire in a democratic country without corruption?