Agenda

Tuesday, 8 September 2026

“Trusted Autonomy & Machine-Speed Risk”

Please note that 1:1 meetings will be running throughout the day.

07:45 - 08:30

Registration & Check-In

Secure your seat and table of peers in the keynote room.

Jim Berry

CEO & Founder at ADAPT

About

Jim is well known in the local market for delivering on his promise and his entire career has been spent connecting the right people at the right time in roles across Europe, China and Australia.

He founded ADAPT to deliver quality outcomes with integrity and since 2011, growth has been consistent. Jim is still positioned across sales and account management where he delivers innovative results and programs and leads by example.

He also runs entrepreneurial product development and the evolution and clear differentiated value of ADAPT’s offerings. As well as a NSW Small Business Excellence nomination, ADAPT were 55th in BRW’s 2014 Top 100 Start Ups - Jim’s 3rd time there - previously as Founder of Strategic Path, an award-winning ICT publisher, he steered the company to make the list in both 2009 and 2010.

08:30 - 08:40

Welcome to the 13th Security Edge: "Trusted Autonomy & Machine-Speed Risk"

Jim Berry - CEO & Founder at ADAPT Read More

Cyber risk has entered a new era. The advent of frontier AI models creates opportunity, but also materially increases risk, with the ability to expose vulnerabilities far faster than many realise.

Our CEO, Jim Berry will not only share key benchmarking insights but will also unpack market signals we are hearing from ADAPT’s CISO community:

- The evolving AI risk landscape
- The impact of Mythos phenomenon
- AI-enabled workflows and governing myriad of agents
- Unpacking ASD’s call for cyber uplift and why enterprises need to act now
- Securing the autonomous enterprise

Gabby Fredkin

Head of Analytics & Insights at ADAPT

About

Gabby’s primary role is managing ADAPT’s overall strategy for Data Analytics. He has extensive experience in using data to identify trends in technology that help shape Australian organisations. Utilising modern Data Science techniques, he provides ADAPT and their customers with confidence in the accuracy and validity of the information used for ADAPT’s Research, Advisory, and Events.​

With a passion for creating stories with data, Gabby is consistently rated as one of the top speakers at ADAPT Events. In round table discussions, he specialises in using statistics to initiate thought-provoking discussions. Gabby is effective in translating information into insights, enabling ADAPT’s customers to become more data-driven.​

Gabby’s primary areas of expertise are: ​

- Advanced AI and ML practices, including AI ethics.​
- Building models to benchmark and predict IT performance.​
- End-user behaviour and human-centred design.​
- Cross-functional team design and value, such as DevSecOps.​

08:40 - 09:00

What Are the Top Performers Doing Differently?

Gabby Fredkin - Head of Analytics & Insights at ADAPT Read More

AI is scaling faster than most organisations can govern it.

Drawing on insights from 1,000+ Australian CIOs, CISOs, CFOs and data leaders, ADAPT’s Research & Advisory team explores how security leaders are balancing speed, governance and operational complexity as AI adoption accelerates.

This keynote benchmarks where organisations sit across data architecture and governance maturity, why some organisations struggle to operationalise AI safely at scale, and what top performers are doing differently.

Gabby will unpack the emerging operating models behind scalable AI, the governance challenges created by fragmented environments and agentic workflows, and the key questions CISOs should ask to turn trusted AI into competitive advantage.

09:00 - 09:05

Get an Edge: Making the Most of Your Day

Shannon Barry - Senior Community Success Manager at ADAPT Read More

Greg Rattray

Former Global CISO at JP Morgan Chase

About

Greg Rattray is Partner and Co-Founder of Next Peak LLC, a cybersecurity and risk management firm. He is also currently the Executive Director of the Cyber Defense Assistance Collaborative (CDAC), as well as the Chief Strategy and Risk Officer for Andesite. Dr. Rattray works closely with Andesite’s senior management team and Board to shape corporate objectives, guide product evolution, and drive go-to-market strategy. In addition, he is a senior advisor to the Red Cell Partners Cyber practice, supporting the evaluation of cyber start-ups for potential investments and providing strategic guidance on growth and management initiatives.

Dr. Rattray previously served as the Global Chief Information Security Officer (CISO) at JPMorgan Chase and established their cyber defense strategy and program. As head of Global Cyber Partnerships, he led key industry initiatives including the establishment of the Financial Systemic Analysis and Resiliency Center (FSARC) and the Financial Cybersecurity Profile. Prior to JPMC, Dr. Rattray was founding partner and CEO of Delta Risk LLC, a cybersecurity risk management. He served as the ICANN Chief Internet Security Advisor from 2007-2010. He has also served as Director for Cybersecurity in the White House, commanded the Operations Group of the Air Force Information Warfare Center, pioneered the Department of Defense (DoD) and US national cyber exercise programs, and initiated Air Force and DoD partnership with defense industry.

Matt Boon

Senior Research Director at ADAPT

About

As Director of Strategic Research at ADAPT Matt Boon, is responsible for directing and developing ADAPTs research content and positions. In his role at ADAPT Boon advises C-Suite executives across the end-user and technology provider landscape. Boon is also responsible for bringing together groups of C-Suite leaders to discuss and prepare for the myriad of challenges and opportunities they face.

ADAPT host’s numerous industry leading IT focused events annually and Boon is responsible for hosting, chairing and delivering ADAPT independent content and positions to help attendees make informed IT decisions.

09:05 - 09:45

Armchair Interview: From Defending the Nation to Securing the World’s Largest Bank

Greg Rattray - Former Global CISO at JP Morgan Chase Matt Boon - Senior Research Director at ADAPT Read More

Dr. Rattray is a cybersecurity heavyweight who has shaped digital defense strategies across Wall Street, the White House, and the Department of Defense. As Global CISO at JPMorgan Chase, he architected the bank’s cyber defense program and spearheaded industry-defining resilience initiatives like the FSARC. A distinguished military and policy veteran, he served as the White House Director for Cybersecurity, commanded the Air Force Information Warfare Center, and pioneered the nation’s first cyber exercise programs. Beyond the public sector, he founded Delta Risk LLC and guided global policy as ICANN’s Chief Internet Security Advisor.

09:45 - 10:15

Make Your Business a Hard Target for Cybercriminals

Nick Eastcott - Senior Solutions Engineer at ThreatLocker Read More

When it comes to potential targets for cyberattacks, easier to breach means more likely to fall victim. While you might not be able to influence your perceived value, there are changes that can eliminate your organisation from being seen as an easy target. We’ll explore practical tactics to reduce your surface area of attack and controls to prevent lateral movement, should a breach occur.

10:15 - 10:35

Morning Break: Refreshments, Snacks & Connections

Maryam Shoraka

Award-Winning Cybersecurity Leader (IT/OT)

About

I am an award-winning cybersecurity leader and board advisor with more than 20 years of experience across IT and OT security, critical infrastructure, government, and enterprise transformation.

My work sits at the intersection of cyber resilience, operational technology, supply chain risk, and responsible AI governance. I have led in complex environments where cyber decisions carry operational, regulatory, and societal consequences. That experience has shaped how I see leadership. Security is never only about technology. It is about judgement, accountability, resilience, and the ability to build trust when it matters most.

Over the course of my career, I have helped organisations strengthen resilience, navigate disruption, and manage risk in increasingly interconnected systems. My background across both IT and OT has given me a practical understanding of how cyber risk affects operations, governance, public trust, and long-term organisational stability.

I am particularly interested in the broader implications of cybersecurity leadership, including critical infrastructure resilience, digital trust, responsible AI adoption, and the governance challenges emerging from connected systems. Through leadership roles, public speaking, mentoring, and my work with TISP, The Innocent Souls Project, I continue to contribute to conversations that connect security, trust, and social responsibility.

I value clarity, integrity, and calm decision-making under pressure. I believe the purpose of security is not only to protect systems, but to protect people, organisations, and the conditions that allow communities to function safely and confidently in a digital world.

Colin Renouf

CISO at Healius

About

Skills: CISO, Cloud and Platform Architect (AWS and Azure), Principal Cyber Security Architect, Operational Technology, Critical Infrastructure, Machine Learning, AI, Cyber Threat Intelligence, Pathology Systems Architecture, Enterprise/Solution Architecture, Security Architecture, Infrastructure Architecture, AWS Outpost, Integration, Security Consulting, Threat Modelling, Mergers and Acquisitions, Divestitures, Digital Transformation, Unix, Linux, Windows, Networks, Healthcare, Defence, Government, ISACs, Public Speaking, Published author of text books and several articles, referenced on a key industry patent, certifications for security, cloud, etc.

Most recently I have been focussing on innovation using distributed cloud architectures in the healthcare, defence, critical infrastructure and security spaces, and building on AI and machine learning techniques for rapid response and adaptive use cases. Cyber threat intelligence allows adaptation of controls faster than a human. Defence, critical and operational technologies make use of my original Aeronautical Engineering background.

I also write books and magazine articles, such as in Pen Testing and Hakin9 magazines; and Pro WebSphere Application Server 7 Internals. I contributed to several industry architecture text books.

Most recently I have worked with government, large vendors and industry bodies to consult on critical infrastructure security and resilience, setting up cyber threat intelligence capabilities and ISAC integration, and a resilient distributed cloud model so large organisations and government can recover key services locally when a region is lost. I have delivered remote AWS Outpost capabilities, and designed the equivalent using Azure.

Peter Hind

Principal Research Analyst at ADAPT

About

Peter Hind has spent the last 25 years as an analyst and commentator on the ICT industry. He says his primary areas of interest are the potential of technology to transform the way organisations operate, the change management obstacles executives encounter in realising this potential and the tactics and techniques leaders have deployed to overcome these difficulties.

Peter now takes on multiple roles within ADAPT including the moderation of private events and roundtables, interviewing business executives about the strategies they are pursuing and assisting with the structuring of our delegate surveys and the interrogation and analysis of ADAPT’s treasure trove of end-user and C-level data

10:35 - 11:05

Autonomous Risk: How Fast Can Security Really Move?

Maryam Shoraka - Award-Winning Cybersecurity Leader (IT/OT) Colin Renouf - CISO at Healius Peter Hind - Principal Research Analyst at ADAPT Read More

Boards want speed, but AI controls are still catching up, forcing leaders to ask what their real AI risk position is, what should be in inventory, and what good actually looks like.

Discussion points

- Is your AI security model keeping pace with autonomous systems?
- As foundation models multiply, how are leaders assessing their AI risk position?
- Where accountability sits when third-party AI decisions shape enterprise outcomes
- How organisations define “good” for AI control, resilience, and sovereignty in practic
- How should organisations think about sovereignty and identity control in a more volatile environment?

11:05 - 11:25

Building Cloud Security Programs That Can Shift Left

Thought Leader at Wiz

Read More

For organisations born in the cloud or seeking to adopt modern technologies like containers, Kubernetes, and Serverless Architectures, shifting security left is foundational. It empowers engineering teams to collaborate effectively with security teams, and effectively prevent common risks associated with the cloud. But how can this be achieved when security and engineering teams often have transactional relationships? Join this session for real-world examples of how Australian organisations are bringing DevSecOps together with practical guidance from Australian security leaders.

Matt Boon

Senior Research Director at ADAPT

About

As Director of Strategic Research at ADAPT Matt Boon, is responsible for directing and developing ADAPTs research content and positions. In his role at ADAPT Boon advises C-Suite executives across the end-user and technology provider landscape. Boon is also responsible for bringing together groups of C-Suite leaders to discuss and prepare for the myriad of challenges and opportunities they face.

ADAPT host’s numerous industry leading IT focused events annually and Boon is responsible for hosting, chairing and delivering ADAPT independent content and positions to help attendees make informed IT decisions.

11:25 - 11:35

ADAPT Insights

Matt Boon - Senior Research Director at ADAPT Read More
11:35 - 11:55

Secure the AI Future Now

Thought Leader at Cyera

Read More

The Cyera team reveals the mindset shift forward-looking enterprises are making to thrive in the AI era.

- Why it is no longer enough for leaders to simply lock information down given that AI runs on data.
- Scaling AI responsibly without treating protection and progress as opposing forces.
- Understanding why only 14% of security leaders currently report success in unifying protection and progress.

11:55 - 12:55

ADAPT Executive Insight Roundtables - Share with Confidence Under the Chatham House Rule

Attend your pre-selected roundtable to participate in a peer discussion with confidence under Chatham House Rule moderated by an ADAPT analyst with subject matter experts.

Serkan Cetin

Head of Solutions Engineering, ANZ at Tenable Security

About

Serkan is the Head of Solutions Engineering for Tenable Australia & New Zealand. Serkan has worked globally across various industries to help organisations in achieving their objectives to improve their overall security posture, reduce risk, achieve compliance and gain operational efficiencies. His experiences include designing, advising, and consulting on projects, frameworks, and architectures across multiple cybersecurity disciplines, including exposure management, identity security platforms, and security information & event management solutions. 

Roundtable 1

Rapid Evolution of the Threat Landscape: Keeping Up or Staying Ahead?

A boardroom session moderated by an ADAPT Analyst with Serkan Certin, Head of Solutions Engineering, ANZ at Tenable Security

Read More

The role of the CISO has fundamentally shifted - managing ‘security debt’ to managing systemic business risk. Are you adapting and keeping pace?

Lets debate:

- How do security teams keep pace when adversaries move at machine speed?
- What does smart risk prioritisation look like in an AI-driven environment?
- How can teams cut through noise across fragmented tools and alerts?
- Which assumptions about identity and perimeter still hold, and which no longer do?
- How do CISOs explain risk clearly to executives without overcomplicating it?

Brione Smink

CISO Advisor at Cisco

About

Brione Smink is a CISO Advisor and cybersecurity specialist at Cisco, where he works with enterprise and government organisations to strengthen cyber resilience and navigate an increasingly complex threat landscape.

With more than two decades of experience in cybersecurity and enterprise technology, Brione helps security leaders develop practical strategies across cloud security, threat protection, identity, networking, and secure digital transformation. He is known for his collaborative approach, building trusted relationships with executives and translating complex security challenges into actionable outcomes.

Drawing on extensive experience supporting large organisations across Australia and New Zealand, Brione brings a pragmatic perspective on balancing innovation, risk, and resilience in today’s evolving security environment.

Jatin Sachdeva

Chief Security Architect, Cisco Asia Pacific, Japan and China

About

Jatin Sachdeva is currently the Chief Security Architect for Cisco APJC. He has been working at Cisco as a Security Specialist for the last 22 years. In his current role, he works with Cisco’s large and strategic clients, advising on security solutions and architectures, with a focus on cross-architectural, business as well as deep technology outcomes. As Field Advisor, Jatin is actively involved with Cisco’s product teams providing guidance on the security strategy and product futures and also regularly provides guidance and technical enablement to Cisco’s Systems Architects. Jatin is an avid speaker at Cisco Live and other security industry events as well as local professional groups. He has been in the security industry for a total of 25 years. Prior to joining Cisco, Jatin has worked in security consulting, design, implementation and auditing. Jatin holds an engineering degree and maintains several respected industry security certifications to have a vendor neutral view on all things security. 

Nathan Smith

Head of Security APJC, Splunk (a Cisco Company)

About

With over 24 years in the IT industry, Nathan has worked with some of the leading security vendors in the industry. With experience across Financial Services, Insurance, Government, Critical Infrastructure, Retail, Health and Education. Nathan is a regional thought leader with involvement across many events where he discussed the importance of cyber security and how it helps to drive business outcomes.

As Splunk’s Head of Security (APJC) Nathan Smith leads a team of Security Specialists across APJC, dedicated to helping organisations in the public and private sectors address Security Operations challenges with the ever evolving threat landscape.

Working with organisations on modernising Security operations, elevating Cyber Defense and response capabilities with the goal of achieving an elevated level of Cyber and Digital resilience.

Roundtable 2

The Complexity Tax: Consolidating Security at Machine Speed

A boardroom session moderated by an ADAPT Analyst with Brione Smink - CISO Advisor for Cisco Australia & New Zealand, Jatin Sachdeva - Chief Security Architect, Cisco Asia Pacific, Japan and China, Nathan Smith - Head of Security APJC, Splunk (a Cisco Company) and your peers

Read More

Name every tool in your stack - out of breath yet? The average enterprise runs 76, and with 76 disconnected tools average per enterprise, CISOs must trade point solutions for platforms that close the gap between signal and action.

Discussion points:

- Where is tool sprawl really costing you: budget, response time, or sanity?
- What’s holding you back from consolidation, and what would make the leap worthwhile?
- How do you close the AI trust gap without betting the business?
- How do you grant and revoke trust as machine identities outnumber humans?
- How are you protecting decade-secret data as quantum decryption looms by 2029?
- How do you brief the board on risk you can’t fully predict?

Pierre-Alain Gran

Business Information Security Officer Sovereign Cloud Technology & Delivery at SAP

About

Pierre-Alain Gran is the Business Information Security Officer (BISO) for Sovereign Cloud Services, Sovereign Cloud Technology & Delivery at SAP, and a recognized member of SAP’s international security and compliance leadership community.

Pierre-Alain’s organization is responsible for defining and enforcing the information security governance and compliance posture across SAP’s Sovereign Cloud Services global portfolio. The organization develops and maintains end-to-end ISMS frameworks, compliance programs, and audit readiness capabilities that underpin SAP’s regulated cloud offerings for the public sector and highly regulated industries.

Pierre-Alain joined SAP in 2012 as an Enterprise Architect in Presales in Paris, where he quickly evolved from solution and technical architecture advisory into enterprise and security architecture. He became a recognized security presales specialist, community hub leader, and an active evangelist for cloud innovation, including SAP S/4HANA and SAP Business Technology Platform, building strong relationships with customers and internal stakeholders across multiple countries.

In 2016, Pierre-Alain relocated to Zürich to join the HR Technology Advisory practice, serving as a Cybersecurity and Privacy Advisor working directly with customer legal, privacy, and security departments. In 2021, Pierre-Alain joined SAP Global Security & Cloud Compliance (SGSC), where he drove the Financial Services Agreement framework and managed global C-level negotiations on cybersecurity and privacy risk mitigation. Soon thereafter, he transitioned to managing security audits for major banking and life science customers, advising on regulated industry obligations.

Since July 2023, Pierre-Alain has led compliance for the newly created Sovereign Cloud Technology & Delivery. Within his first nine months, he built and implemented a complete ISMS and Information Security Risk Management framework from the ground up. His leadership directly resulted in the successful achievement of ISO 27001 (including ISO 27017 and 27018) certification and SOC2 Type I and II audit reports with zero findings in 2024, 2025, and 2026—a landmark achievement for a newly established line of business operating across highly regulated sovereign environments.

With more than 13 years of experience in cybersecurity, compliance, and data privacy—and over 19 years as a trusted advisor to customers across finance, life sciences, public sector, and defense—Pierre-Alain brings rare breadth to the intersection of business and security.

Pierre-Alain holds a Diplôme d’Ingénieur (Master of Science) in Computer Science from the École Supérieure d’Informatique Électronique Automatique (ESIEA, France), with a final year completed at Concordia University and John Molson Business School in Montréal, Canada. He is fluent in French, English, Spanish, and German, and holds professional proficiency in Italian.

Roundtable 3

Building Trust in AI: Digital Sovereignty as the Control Plane for Responsible Innovation

A boardroom session moderated by an ADAPT Analyst with Pierre-Alain Gran, Business Information Security Officer Sovereign Cloud Technology & Delivery at SAP

Read More

AI adoption is accelerating faster than most organisations can govern it. Much of it now runs on models, data, and infrastructure they don’t control or can’t see into. Join Pierre Alain Gran, Global BISO for SAP’s Sovereign Cloud, flying from Switzerland for this closed-door session with your peers.

- Balance AI velocity against strict sovereignty, security, and compliance obligations
- Know exactly where the shared-responsibility line falls for AI and SaaS workloads
- Explore how a sovereign cloud lets CISOs innovate with AI while keeping control of their data
- Decide where data lives, who can access it, and under whose jurisdiction.

The goal: trusted, responsible AI that strengthens resilience rather than quietly expanding the attack surface.

Candice Smith

Solutions Engineer at DigiCert

About

Candice Smith is a Solutions Engineer at DigiCert, where she works closely with customers to help them navigate the practical and strategic challenges of digital trust. With a background in Account Management before moving into Sales Engineering, Candice brings a strong understanding of how security decisions impact both technology teams and the wider business.Candice is passionate about translating complex concepts into clear, meaningful conversations, building trusted partnerships, and supporting customers through change. She is an active contributor to customer events, webinars, and cross-functional initiatives, and is particularly focused on creating inclusive, supportive environments where people can learn, connect, and grow together. 

Roundtable 4

The End of Manual Trust: How Automation, Quantum Readiness, and AI Integrity will Redefine Digital Security this Year

A boardroom session moderated by an ADAPT Analyst with Candice Smith - Solutions Engineer at DigiCert and your peers

Read More

As machine identities surge, certificate lifecycles shrink, and quantum computing threatens today’s cryptographic foundations, Australian organisations are rethinking how intelligent trust is established, managed, and future-proofed. With traditional algorithms facing deprecation and automation becoming essential rather than optional, security leaders are at an inflection point.

Be part of the discussion and answer questions such as:

- What does “manual trust” look like in today’s enterprise? Is it sustainable in practice?
- How are leading ANZ organisations prioritising automation in certificate lifecycle and crypto asset management?
- What practical steps are security leaders taking now to prepare for post-quantum cryptography? And where is the overlap with general security best practice?
- How can crypto-agility be embedded as a design principle rather than a retrofit?
- With AI systems becoming trust intermediaries, how do we ensure integrity at scale?

We look forward to hearing your point of view.

12:55 - 1:50

Peer Networking Seated Lunch

12:55 - 1:50

Governing the Agentic Enterprise: Trust, Risk & Accountability in Autonomous AI

A boardroom session moderated by an ADAPT Analyst with Accenture and your peers

Read More

As organisations move from experimenting with generative AI to deploying autonomous agents that take action on their behalf, a new category of risk, governance, and operational challenge is emerging. This closed-door executive roundtable brings together senior technology and security leaders to discuss the practical realities of adopting Agentic AI - independent of any single vendor or platform.

Discussion will explore: how organisations are establishing trust, identity, and access controls for non-human agents; the governance and accountability models required when agents act autonomously; balancing innovation velocity with risk appetite; the skills and cultural shifts needed within security and IT teams; and how boards and executives are thinking about oversight as agentic systems scale across the enterprise.

13:55 - 14:55

ADAPT Executive Insight Roundtables - Share with confidence under the Chatham House Rule

Attend your pre-selected roundtable to participate in a peer discussion with confidence under Chatham House Rule moderated by an ADAPT analyst with subject matter experts.

Roundtable 5

When Agentic AI Works Around Your Security Controls

A boardroom session moderated by an ADAPT Analyst with Airlock Digital and your peers

Read More

Agentic AI tools do more than provide information: they plan, act, retry and adapt with the privileges of the user who launched them. This session examines how agentic AI tools behave when controls are put in place and presents a practical governance model organisations can apply: discover the tools in use, standardize approved platforms, govern permissions, restrict unnecessary capabilities, and monitor activity. The goal is not to predict every workaround. It is to make trust explicit: define and coach agents so they stay in their lane, while enforcing endpoint controls around them.

Alex Harmer

APJ Sales Development at Vanta

About

Alex Harmer has spent over a decade working across the Asia Pacific technology sector, with experience spanning data infrastructure, enterprise architecture, IT governance, and cybersecurity. He holds certifications in COBIT 5, TOGAF, and ITIL, reflecting a long-standing interest in how organisations govern and improve their technology environments.

Before joining Vanta, Alex held senior management roles at some of the region’s most recognised cybersecurity vendors, leading large APJ teams and partnering with security leaders to help organisations strengthen their security posture and stay ahead of an evolving threat landscape.

Today, Alex leads APJ Commercial Sales Development at Vanta, where his focus is helping security and GRC teams move from fragmented, manual compliance toward continuous automated assurance. He is passionate about the role technology can play in turning compliance from an overhead into a genuine foundation for good security.

Roundtable 6

GRC Engineering: From Overhead to Cyber Value Driver

A boardroom session moderated by an ADAPT Analyst with Alex Harmer, APJ Sales Development at Vanta

Read More

ADAPT’s 2025 surveys show governance and compliance now top the priority list for security leaders, with limited time, resources, and talent cited as the biggest barriers to core outcomes. As regulation and AI threats accelerate, CISOs are rethinking compliance as a strategic enabler rather than administrative drag.

Discussion points:

- How can automation shift time from compliance tasks back to security uplift?
- Where can consolidated platforms simplify tooling and reduce legacy drag?
- How do you frame continuous compliance as business value, not cost?
- What does smart cyber investment look like amid AI and regulatory pressure?

Roundtable 7

Closing the AI Preparedness Gap

A boardroom session moderated by an ADAPT Analyst with Securiti.Ai and your peers

Read More
Enterprises are racing to deploy AI with security foundations that were built for a different era. The result is a widening gap: security organisations must ensure that enterprise data is safe and compliant but are still architected to secure perimeters, not the data and AI systems that now define risk. Closing this gap requires new context to identify risk and a shift from policy-as-guidance to enforceable controls.
This roundtable brings together cybersecurity leaders to compare notes on a challenge everyone is facing. Rather than a presentation, this is a working discussion - leaders sharing what’s actually worked, what hasn’t, and where the hardest trade-offs still live.
One perspective we’ll bring to the table: the data layer may be the highest leverage point of control. Data controls sit upstream of AI controls, govern a resource every AI system depends on, and can offer deterministic guarantees in an otherwise unpredictable landscape.
Join peers navigating the same pressures to trade insights on closing the gap - safely, and at scale.
14:55 - 15:05

Afternoon Break

Refreshments + Snacks served in lobby

Maryam Bechtel

CISO at TAL Australia

About

Maryam Bechtel is the General Manager of Cyber Security at TAL Australia, where she leads TAL’s cyber protection strategy and security operations. With more than 19 years of experience in the Cyber Security sector, she has worked across multiple continents and held senior roles with organisations including Deutsche Telekom, Deloitte, and AGL.

Ms Bechtel also serves as a board member of the Australian Women in Security Network and is a committed advocate for advancing the participation of women in the
security industry. She holds a Master’s degree in Information Security from Stockholm and a Bachelor of Software Engineering.

David Gee

Author, CISO and ADAPT Advisor

About

David has just retired in July 2024 and is building out his portfolio. He is an Advisor with Bain Advisory Network and also an Advisor to JS Careers (Cyber Recruitment) and Emertel (Software Commercialization). ​

He is a seasoned technology executive with significant experience and has over 25 years’ experience in CIO and CISO roles across different industries and countries. At Macquarie Group David served as Global Head Technology, Cyber and Data Risk. Previously was CISO for HSBC Asia Pacific. His career as a CIO spans across multiple industries and geographies including - Metlife, Eli Lilly and Credit Union Australia. He was winner CIO of the Year 2014, at CUA where he successfully completed a significant Transformation of Core Banking, Online and Mobile Banking systems.​

David is past Chairman for the FS-ISAC Strategy Committee and awarded Global Leaders Award in 2023 for his contributions to the cybersecurity industry. A regular conference keynote speaker and 150+ published articles for CIO Australia, Computerworld, ITNews and CSO (Cyber Security), David now writes for Foundry CIO.com and AICD.​

His most recent book - the Aspiring CIO & CISO was published in June 2024 and David is writing his second - A Day in the Life of a CISO with a number of CISOs from around the world for 2025.​

15:10 - 15:35

Fireside Chat - A Day in the Life of a CISO

Maryam Bechtel - CISO at TAL Australia Keith Howard - CISO at Suncorp Group David Gee - Author, CISO and ADAPT Advisor Read More

David Gee’s new best-selling book distils more than 740 years of collective CISO wisdom and battle scars offering invaluable guidance for current and aspiring cyber leaders.

In this keynote fireside chat, David is joined by two of Australia’s most distinguished cybersecurity leaders: Keith Howard, CISO at Suncorp and Maryam Bechtel, CISO at TAL.

This engaging and interactive session explores the pivotal moments, practical insights, and hard-earned lessons that have shaped both leaders’ careers. Keith and Maryam reflect on their own career journey and outlines the essential considerations every CISO should keep front of mind when stepping into these roles.

Key discussion highlights include:

- Diverse paths to Cybersecurity Leadership
- Priorities for the New CISO

This is a must-attend session for CISOs, cybersecurity practitioners, and emerging leaders seeking real-world guidance from two of the industry’s most respected voices.

Alex Loizou

Cybersecurity Leader/MD at Intrinsic Security

About

Alex Loizou is a seasoned cybersecurity leader with a proven track record of building and leading high-performing security teams. He has extensive experience as a Chief Information Security Officer (CISO) for major organisations such as Medibank, Flybuys, and Bupa. Notably, he served as the CISO at Medibank during their 2022 cyber incident, where he played a crucial role in leading the response and recovery efforts. Since departing Medibank in January 2025, Alex has founded Intrinsic Security, a boutique cybersecurity consultancy with the goal of improving security practices in Australian companies.

15:40 - 16:10

Inside a Breach: Raw Lessons from the Frontlines

Alex Loizou - Cybersecurity Leader/MD at Intrinsic Security Read More

Every CISO has a playbook, but few have had to use the whole thing. Alex Loizou joined Medibank in early 2022, leading the security function through one of the most significant and public cyber incidents in Australian history. In this opening keynote, Alex moves beyond the technical post-mortem to share the raw, practical lessons learned from the centre of the storm.

This is an honest discussion about the realities of managing a major breach focussing on the challenges of supporting your organisation, your board, and your team when the playbooks run out of pages. Alex shares his perspective on the structural and personal shifts required to navigate a crisis and, more importantly, how to lead through the aftermath.

Alex Loizou is a seasoned cybersecurity leader with a proven track record of building and leading high-performing security teams. He has extensive experience as a Chief Information Security Officer (CISO) for major organisations such as Medibank, Flybuys, and Bupa. Notably, he served as the CISO at Medibank during their 2022 cyber incident, where he played a crucial role in leading the response and recovery efforts. Since departing Medibank in January 2025, Alex has founded Intrinsic Security, a boutique cybersecurity consultancy with the goal of improving security practices in Australian companies.

16:10 - 16:15

Closing Comments by ADAPT

16:15 - 17:00

Security Edge Peer Networking Drinks

Read More

An opportunity to stay, mingle and meet other attendees over drinks and food and discuss the day.

Register your interest

Security Edge