Stay Tuned as Security Leader

February 9 – Park Inn by Radisson Brussels Airport

• Securing AI based solutions | Stefaan Van daele & Koen Simoens

As security architect it could be challenging to cope with the fast-evolving AI based solutions though the classic checks and balances still apply.

In this session we provide a methodological approach to analyse and design security for the AI solutions used in your organisation. The approach is built on the OWASP GenAI Security Project and will provide you step by step guidance. Also, some common attack vectors to GenAI solution are reviewed together with possible mitigations. Also, some extra focus will be put on securing AI agents as seems to be both the most common solution approach as well one of most important attack surfaces of the AI solutions.

• Post‑Quantum Cryptography: Why CISOs Must Act Now | Sarah Ampe

Quantum computing will break today’s cryptography, and attackers are already aiming to exploit this today. This session explains the threat, why it matters and what the solution can be. Post-quantum cryptography mitigates the risks introduced by quantum computing but brings its own challenges. Hence, we will focus during this session on practical steps for CISOs to build a quantum‑safe roadmap.

• CISO legal frameworks | Peter Van Dyck

Join this interactive Case-Based Learning Lab, where participants work hands-on with Peter Van Dyck to explore the practical application of legal-tech frameworks.

Starting from real-life cases as they might be presented to a CISO, participants collaboratively analyse challenges and develop concrete solutions.

The session focuses on translating theory into actionable practice.
By the end of the workshop, participants will leave with clear guidelines, practical insights, and tools to support the daily work of a CISO.

May 21 – Park Inn by Radisson Brussels Airport

OWASP ASVS for CISOs | Daniel Cuthbert The OWASP Application Security Verification Standard (ASVS) is a cornerstone for web application security, yet its strategic value for leadership is often overlooked. In this session, Daniel Cuthbert explores how CISOs can leverage ASVS to define security requirements, improve software supply chain resilience, and establish a measurable framework for application security. Moving beyond the technical checkboxes, we focus on how to integrate ASVS into your security strategy to drive consistent and verifiable results.

Legal Cyber Landscape: 10 Years of GDPR, NIS2 & The Cybersecurity Act | Hans Graux As we mark the 10th anniversary of the GDPR, the regulatory landscape for CISOs continues to mature and expand. Hans Graux provides a strategic update on this evolving framework, reflecting on a decade of data protection enforcement and current case law trends. We then shift focus to the European Commission’s “cybersecurity package” of January 2026: the revision of the EU Cybersecurity Act—strengthening supply chain resilience and certification—and the new proposal to refine NIS2 for better alignment and simplified compliance. This session offers practical insights on how to integrate these diverse legal requirements into a single, cohesive security strategy.

Physical Security & IoT in a Cyber World | Stefaan Bolle While digital threats often dominate the headlines, the physical security of infrastructure remains the first line of defense. Stefaan Bolle discusses the critical convergence between physical security, hardware integrity, and the rapidly expanding Internet of Things (IoT) ecosystem. This session covers the modern threat landscape for data centers and corporate sites, the specific vulnerabilities introduced by connected IoT devices, and why a CISO’s strategy is incomplete without robust physical access controls. We conclude with practical insights on how to bridge the gap between “bits, bricks, and sensors.”

September 17 – Park Inn by Radisson Brussels Airport

Communication & Metrics for CISOs | Tom Gilis Effective cybersecurity is as much about clear reporting as it is about technical controls. In this session, Tom Gilis, Global CISO at UCB, explores how leadership can bridge the gap between complex security data and strategic business objectives. Leveraging his extensive experience in both technical research and executive governance, Tom shares how to move beyond “gut feeling” to a data-driven security posture that resonates at the board level. Building on his work with international expert groups, Tom deepens the discussion during the Metrics Workshop. This hands-on segment focuses on defining impactful Key Risk Indicators (KRIs) and KPIs that track improvement over time, rather than just static compliance. From navigating NIS2 requirements to measuring the resilience of OT and AI environments, participants will learn how to build a communication framework that fosters trust, justifies investment, and drives a proactive security culture across the entire organization.

Update on Regulation & Standards | Karl Dobbelaere As the digital regulatory landscape matures into a phase of active enforcement, CISOs must navigate an increasingly complex web of European and national mandates. In this session, Karl Dobbelaere provides a strategic deep dive into the practical implications of the latest standards and the evolving oversight by the Belgian authorities. Drawing on his extensive experience in governance, Karl explores how organizations can transition from mere compliance to a robust, standards-based resilience model.

IR: Ransomware Playbooks and the Dynamic DAIR Model | Robin Bruynseels When a ransomware attack hits, the technical response is only half the battle. The real challenge lies in making rapid, high-impact decisions while new information continues to emerge and the situation changes by the hour. Traditional incident response plans often describe a fixed sequence of phases, but modern incidents rarely unfold in a predictable or linear way.

In this afternoon session, Robin Bruynseels introduces the new DAIR incident response model, which makes incident response plans more dynamic and adaptive by default. Rather than treating detection, analysis, containment, eradication and recovery as isolated steps, DAIR uses continuous feedback loops that allow teams to reassess decisions, adjust priorities and coordinate activities across multiple response phases.

Ransomware serves as a key example throughout the session, as these incidents clearly demonstrate the need to align technical response efforts with legal, communication, business continuity and executive requirements. Robin explores how organizations can use structured playbooks without becoming constrained by rigid procedures, enabling them to respond effectively as new facts, risks and business priorities emerge.

Drawing on frontline experience, Robin shows how organizations can move from reactive firefighting to a coordinated, playbook-driven response that reduces downtime and protects their reputation. Participants will leave with a practical framework for reviewing and improving their own incident response playbooks, helping them respond with greater speed, flexibility and control when a real crisis occurs.