Agenda

Tuesday, 8 September 2026

“Trusted Autonomy & Machine-Speed Risk”

Please note that 1:1 meetings will be running throughout the day.

07:45 - 08:30

Registration & Check-In

Secure your seat and table of peers in the keynote room.

Jim Berry

CEO & Founder at ADAPT

About

Jim is well known in the local market for delivering on his promise and his entire career has been spent connecting the right people at the right time in roles across Europe, China and Australia.

He founded ADAPT to deliver quality outcomes with integrity and since 2011, growth has been consistent. Jim is still positioned across sales and account management where he delivers innovative results and programs and leads by example.

He also runs entrepreneurial product development and the evolution and clear differentiated value of ADAPT’s offerings. As well as a NSW Small Business Excellence nomination, ADAPT were 55th in BRW’s 2014 Top 100 Start Ups – Jim’s 3rd time there – previously as Founder of Strategic Path, an award-winning ICT publisher, he steered the company to make the list in both 2009 and 2010.

08:30 - 08:50

Welcome to the 13th Security Edge: "Trusted Autonomy & Machine-Speed Risk"

Jim Berry - CEO & Founder at ADAPT Read More

Cyber risk has entered a new era. The advent of frontier AI models creates opportunity, but also materially increases risk, with the ability to expose vulnerabilities far faster than many realise.

Our CEO, Jim Berry will not only share key benchmarking insights but will also unpack market signals we are hearing from ADAPT’s CISO community:

– The evolving AI risk landscape
– The impact of Mythos phenomenon
– AI-enabled workflows and governing myriad of agents
– Unpacking ASD’s call for cyber uplift and why enterprises need to act now
– Securing the autonomous enterprise

Gabby Fredkin

Head of Analytics & Insights at ADAPT

About

Gabby’s primary role is managing ADAPT’s overall strategy for Data Analytics. He has extensive experience in using data to identify trends in technology that help shape Australian organisations. Utilising modern Data Science techniques, he provides ADAPT and their customers with confidence in the accuracy and validity of the information used for ADAPT’s Research, Advisory, and Events.​

With a passion for creating stories with data, Gabby is consistently rated as one of the top speakers at ADAPT Events. In round table discussions, he specialises in using statistics to initiate thought-provoking discussions. Gabby is effective in translating information into insights, enabling ADAPT’s customers to become more data-driven.​

Gabby’s primary areas of expertise are: ​

– Advanced AI and ML practices, including AI ethics.​
– Building models to benchmark and predict IT performance.​
– End-user behaviour and human-centred design.​
– Cross-functional team design and value, such as DevSecOps.​

08:50 - 09:10

What Are the Top Performers Doing Differently?

Gabby Fredkin - Head of Analytics & Insights at ADAPT Read More

AI is scaling faster than most organisations can govern it.

Drawing on insights from 1,000+ Australian CIOs, CISOs, CFOs and data leaders, ADAPT’s Research & Advisory team explores how security leaders are balancing speed, governance and operational complexity as AI adoption accelerates.

This keynote benchmarks where organisations sit across data architecture and governance maturity, why some organisations struggle to operationalise AI safely at scale, and what top performers are doing differently.

Gabby will unpack the emerging operating models behind scalable AI, the governance challenges created by fragmented environments and agentic workflows, and the key questions CISOs should ask to turn trusted AI into competitive advantage.

Shannon Barry

Senior Community Success Manager at ADAPT

About
09:10 - 09:15

Get an Edge: Making the Most of Your Day

Shannon Barry - Senior Community Success Manager at ADAPT Read More

Greg Rattray

Former Global CISO at JP Morgan Chase

About

Greg Rattray is Partner and Co-Founder of Next Peak LLC, a cybersecurity and risk management firm. He is also currently the Executive Director of the Cyber Defense Assistance Collaborative (CDAC), as well as the Chief Strategy and Risk Officer for Andesite. Dr. Rattray works closely with Andesite’s senior management team and Board to shape corporate objectives, guide product evolution, and drive go-to-market strategy. In addition, he is a senior advisor to the Red Cell Partners Cyber practice, supporting the evaluation of cyber start-ups for potential investments and providing strategic guidance on growth and management initiatives.

Dr. Rattray previously served as the Global Chief Information Security Officer (CISO) at JPMorgan Chase and established their cyber defense strategy and program. As head of Global Cyber Partnerships, he led key industry initiatives including the establishment of the Financial Systemic Analysis and Resiliency Center (FSARC) and the Financial Cybersecurity Profile. Prior to JPMC, Dr. Rattray was founding partner and CEO of Delta Risk LLC, a cybersecurity risk management. He served as the ICANN Chief Internet Security Advisor from 2007-2010. He has also served as Director for Cybersecurity in the White House, commanded the Operations Group of the Air Force Information Warfare Center, pioneered the Department of Defense (DoD) and US national cyber exercise programs, and initiated Air Force and DoD partnership with defense industry.

09:15 - 09:55

Armchair Interview: From Securing World's Largest Bank to Defending the White House

Greg Rattray - Former Global CISO at JP Morgan Chase Read More

Dr. Rattray is a cybersecurity heavyweight who has shaped digital defense strategies across Wall Street, the White House, and the Department of Defense. As Global CISO at JPMorgan Chase, he architected the bank’s cyber defense program and spearheaded industry-defining resilience initiatives like the FSARC. A distinguished military and policy veteran, he served as the White House Director for Cybersecurity, commanded the Air Force Information Warfare Center, and pioneered the nation’s first cyber exercise programs. Beyond the public sector, he founded Delta Risk LLC and guided global policy as ICANN’s Chief Internet Security Advisor.

09:55 - 10:25

Make Your Business a Hard Target for Cybercriminals

with Thought Leader at ThreatLocker Read More

When it comes to potential targets for cyberattacks, easier to breach means more likely to fall victim. While you might not be able to influence your perceived value, there are changes that can eliminate your organization from being seen as an easy target. We’ll explore practical tactics to reduce your surface area of attack and controls to prevent lateral movement should a breach occur.

10:25 - 10:45

Morning Break: Refreshments, Snacks & Connections

Maryam Saroka

Award-Winning Cybersecurity Leader (IT/OT)

About

I am an award-winning cybersecurity leader and board advisor with more than 20 years of experience across IT and OT security, critical infrastructure, government, and enterprise transformation.

My work sits at the intersection of cyber resilience, operational technology, supply chain risk, and responsible AI governance. I have led in complex environments where cyber decisions carry operational, regulatory, and societal consequences. That experience has shaped how I see leadership. Security is never only about technology. It is about judgement, accountability, resilience, and the ability to build trust when it matters most.

Over the course of my career, I have helped organisations strengthen resilience, navigate disruption, and manage risk in increasingly interconnected systems. My background across both IT and OT has given me a practical understanding of how cyber risk affects operations, governance, public trust, and long-term organisational stability.

I am particularly interested in the broader implications of cybersecurity leadership, including critical infrastructure resilience, digital trust, responsible AI adoption, and the governance challenges emerging from connected systems. Through leadership roles, public speaking, mentoring, and my work with TISP, The Innocent Souls Project, I continue to contribute to conversations that connect security, trust, and social responsibility.

I value clarity, integrity, and calm decision-making under pressure. I believe the purpose of security is not only to protect systems, but to protect people, organisations, and the conditions that allow communities to function safely and confidently in a digital world.

Sarv Girn

Former CIO at RBA & Westpac

About

Sarv is a Non Executive Director and Advisor for a portfolio of organisations in the financial services, health, and technology sectors. His career spans over 30 years across the UK, Australia, and Asia.

Sarv’s senior executive roles have included, CIO of Reserve Bank of Australia (2012–18), CTO of Westpac (2008-12), CTO/CISO of Commonwealth Bank (2001-08), and more recently CIO at I-MED Radiology.

Sarv is currently Non Executive Director for Commonwealth Bank Health Society, Police Bank and auDA. Previously he served on the Boards of Reserve Bank Health Society and the Can Too Foundation for a period of 9 years.

He has extensive experience during periods of business and regulatory change as a Non-Executive Director and Chair of Audit, Risk and Technology subcommittees.

Sarv holds a doctorate in Board Cybersecurity Governance, with a focus on how Directors can better attain assurance on cybersecurity and then optimise investments in line with their risk appetite.

Renowned for expertise in formulation of strategy and architecture of digital platforms — with attention on risk management and speed to market.

Proven track record in leading cultural change, building high-performing teams, and delivering large-scale transformation programs.

Peter Hind

Principal Research Analyst at ADAPT

About

Peter Hind has spent the last 25 years as an analyst and commentator on the ICT industry. He says his primary areas of interest are the potential of technology to transform the way organisations operate, the change management obstacles executives encounter in realising this potential and the tactics and techniques leaders have deployed to overcome these difficulties.

Peter now takes on multiple roles within ADAPT including the moderation of private events and roundtables, interviewing business executives about the strategies they are pursuing and assisting with the structuring of our delegate surveys and the interrogation and analysis of ADAPT’s treasure trove of end-user and C-level data

10:45 - 11:15

Autonomous Risk: How Fast Can Security Really Move?

Maryam Saroka - Award-Winning Cybersecurity Leader (IT/OT) Sarv Girn - Former CIO at RBA & Westpac Peter Hind - Principal Research Analyst at ADAPT Read More

Boards want speed, but AI controls are still catching up, forcing leaders to ask what their real AI risk position is, what should be in inventory, and what good actually looks like.

Discussion points

– Is your AI security model keeping pace with autonomous systems?
– As foundation models multiply, how are leaders assessing their AI risk position?
– Where accountability sits when third-party AI decisions shape enterprise outcomes
– How organisations define “good” for AI control, resilience, and sovereignty in practic
– How should organisations think about sovereignty and identity control in a more volatile environment?

11:15 - 11:35

Building Cloud Security Programs That Can Shift Left

with Thought Leader at Wiz Read More

For organisations born in the cloud or seeking to adopt modern technologies like containers, Kubernetes, and Serverless architectures, shifting security left is foundational. It empowers engineering teams to collaborate effectively with security teams, and effectively prevent common risks associated with the cloud. But how can this be achieved when security and engineering teams often have transactional relationships? Join this session for real-world examples of how Australian organisations are bringing DevSecOps together with practical guidance from Australian Security leaders.

11:35 - 11:55

Secure the AI Future, Now

with Thought Leader at Cyera Read More

The Cyera team reveals the mindset shift forward-looking enterprises are making to thrive in the AI era.

– Why it is no longer enough for leaders to simply lock information down given that AI runs on data.
– Scaling AI responsibly without treating protection and progress as opposing forces.
– Understanding why only 14% of security leaders currently report success in unifying protection and progress.

13:00 - 13:55

Peer Networking Seated Lunch

14:55 - 15:05

Afternoon Break

An opportunity to meet with other attendees and build your network

Catherine Rowe

CISO at RBA

About

Catherine is an accomplished senior executive with extensive expertise in cyber security, risk management, technology, law, and governance. She has a proven track record of leading cyber security operations and transformation initiatives, specialising in protecting businesses from evolving cyber threats and implementing effective risk management strategies.

As a trusted advisor to senior leaders, Catherine works closely with executives, boards and regulators to drive strong customer and business risk outcomes.

Most recently, she served as the Global CISO for QBE Insurance Group. Prior to that, she held senior leadership roles in the finance industry, where she led the delivery and transformation of enterprise-wide critical cyber security controls, as well as programs of work to uplift non-financial risk governance across board and senior executive teams.

Catherine began her career as a lawyer, spending 15 years in both private practice and in-house roles, advising major corporations and government entities on technology, cyber security, outsourcing and compliance.

Her unique blend of legal, technical, and strategic expertise positions her as a dynamic and influential leader in the ever-evolving cyber security landscape.

Keith Howard

CISO at Suncorp Group

About

David Gee

Author, CISO and ADAPT Advisor

About

David has just retired in July 2024 and is building out his portfolio. He is an Advisor with Bain Advisory Network and also an Advisor to JS Careers (Cyber Recruitment) and Emertel (Software Commercialization). ​

He is a seasoned technology executive with significant experience and has over 25 years’ experience in CIO and CISO roles across different industries and countries. At Macquarie Group David served as Global Head Technology, Cyber and Data Risk. Previously was CISO for HSBC Asia Pacific. His career as a CIO spans across multiple industries and geographies including – Metlife, Eli Lilly and Credit Union Australia. He was winner CIO of the Year 2014, at CUA where he successfully completed a significant Transformation of Core Banking, Online and Mobile Banking systems.​

David is past Chairman for the FS-ISAC Strategy Committee and awarded Global Leaders Award in 2023 for his contributions to the cybersecurity industry. A regular conference keynote speaker and 150+ published articles for CIO Australia, Computerworld, ITNews and CSO (Cyber Security), David now writes for Foundry CIO.com and AICD.​

His most recent book – the Aspiring CIO & CISO was published in June 2024 and David is writing his second – A Day in the Life of a CISO with a number of CISOs from around the world for 2025.​

15:05 - 15:35

Fireside Chat - A Day in the Life of a CISO

Catherine Rowe - CISO at RBA Keith Howard - CISO at Suncorp Group David Gee - Author, CISO and ADAPT Advisor Read More

David Gee’s new best-selling book distils more than 740 years of collective CISO wisdom and battle scars offering invaluable guidance for current and aspiring cyber leaders.

In this keynote fireside chat, David is joined by two of Australia’s most distinguished cybersecurity leaders: Keith Howard, CISO at Suncorp and Catherine Rowe at Reserve Bank of Australia.

This engaging and interactive session explores the pivotal moments, practical insights, and hard-earned lessons that have shaped both leaders’ careers. Keith and Catherine reflect on their own career journey and outlines the essential considerations every CISO should keep front of mind when stepping into these roles.

Key discussion highlights include:

– Diverse paths to Cybersecurity Leadership
– Priorities for the New CISO

This is a must-attend session for CISOs, cybersecurity practitioners, and emerging leaders seeking real-world guidance from two of the industry’s most respected voices.

Alex Loizou

Cybersecurity Leader/MD at Intrinsic Security

About

Alex Loizou is a seasoned cybersecurity leader with a proven track record of building and leading high-performing security teams. He has extensive experience as a Chief Information Security Officer (CISO) for major organisations such as Medibank, Flybuys, and Bupa. Notably, he served as the CISO at Medibank during their 2022 cyber incident, where he played a crucial role in leading the response and recovery efforts. Since departing Medibank in January 2025, Alex has founded Intrinsic Security, a boutique cybersecurity consultancy with the goal of improving security practices in Australian companies.

15:35 - 16:05

Inside a Breach: Raw Lessons from the Frontlines from Alex Loizou

Alex Loizou - Cybersecurity Leader/MD at Intrinsic Security Read More

Every CISO has a playbook, but few have had to use the whole thing. Alex Loizou joined Medibank in early 2022, leading the security function through one of the most significant and public cyber incidents in Australian history. In this opening keynote, Alex moves beyond the technical post-mortem to share the raw, practical lessons learned from the centre of the storm.

This is an honest discussion about the realities of managing a major breach focussing on the challenges of supporting your organisation, your board, and your team when the playbooks run out of pages. Alex shares his perspective on the structural and personal shifts required to navigate a crisis and, more importantly, how to lead through the aftermath.

Alex Loizou is a seasoned cybersecurity leader with a proven track record of building and leading high-performing security teams. He has extensive experience as a Chief Information Security Officer (CISO) for major organisations such as Medibank, Flybuys, and Bupa. Notably, he served as the CISO at Medibank during their 2022 cyber incident, where he played a crucial role in leading the response and recovery efforts. Since departing Medibank in January 2025, Alex has founded Intrinsic Security, a boutique cybersecurity consultancy with the goal of improving security practices in Australian companies.

16:05 - 16:10

Closing Comments by ADAPT

16:10 - 17:00

Security Edge Peer Networking Drinks

Read More

An opportunity to stay, mingle and meet other attendees over drinks and food and discuss the day.

Register your interest

Security Edge