A successful cloud security strategy must adapt to the requirements of the business and the growth of the cloud. 
As the cloud usually grows faster than the budget and size of the security team, it is important to find new approaches to cloud security that scale with growth. In this masterclass, you will learn how to overcome the point solutions for security and the different data models of the individual cloud platforms and establish a uniform operating model for cloud security. 

Discussions about the use of generative artificial intelligence (AI) are currently omnipresent. What are the risks posed by AI for cyber security? And how can we turn the tables and use AI to protect against cyber attacks?
In the lecture, we will explain the basics of generative AI and show how AI algorithms recognise threats at an early stage. We will shed light on the advantages and challenges of this technology and provide tips on how generative AI can protect companies and data despite all the risks.

This masterclass presents the security risk assessment method commonly used at Airbus, which can also be used in other areas for comprehensive threat analysis.
Aviation is subject to special requirements in terms of the reliability and availability of functions and systems. Applied to digital systems, this results in the highest requirements for integrity and availability in terms of information security. These are countered by the need for weight reduction and limited connectivity. As a result, the usual methods of cyber risk management cannot be applied without violating at least one of the criteria.
The solution lies in the combination of functional consideration, impact assessment and individual threat analysis.
A weighted quantitative calculation method based on an effectiveness principle enables a comprehensive assessment of the risk. The method is scalable, can be readjusted and supports both actual and target analyses of the residual risk.
This approach is presented using an example, showing how the same method can be used for all levels of detail.

In an age of increasingly complex security threats and growing compliance risks, attackers are targeting your most valuable asset: Your employees! Recognising that people play a central role in the success or failure of security measures, a people-centric approach to your security strategy is crucial to mitigating risk. Using current threats as examples, we will show you the dimensions of human risk and provide guidance on how to place employees at the centre of your security strategy in the long term.

In a world where anyone can create successful malware or have AI generate it for them, it's important to know how malware can be successful so you can better defend. Starting from a default-deny posture, learn how adopting Zero Trust principles can keep your data safe and operations running regardless of hacking attempts by man or machine.

Data has been the fuel of our business for a long time. Over the last few years, companies have been working hard to build up the castle walls around their most valuable asset. Nevertheless, we still have to ask ourselves why we still have a blind spot on data in security? Why are we not focusing on what we really want to protect? In this presentation you will learn how to close this blind spot with the automated Varonis Data Security Platform to find risks, automatically eliminate them and react to threats at an early stage. Find! Fix! Alert!

Security in the area of operational technology (OT) is becoming increasingly important. While the concepts for securing this technology are generally the same as in IT, there are significant differences between the two worlds that lead to a number of challenges. This presentation provides a comprehensive overview of the differences between IT and OT and the different phases of an OT security programme. It describes the basic steps, continuous improvement and the implementation of risk-based and proactive measures. Special attention is given to the specific challenges and effective solutions at each stage to ensure the security and resilience of OT environments.

Cyber resilience has been an important aspect of cybersecurity for many years, yet most organizations struggle with building effective cyber security operations. During this presentation we will look at the reasons of this situation and show how to effectively manage your cybersecurity infrastructure using automated risk management, AI and a consolidated platform to get the full visibility of your cyber posture and the ability to automate your SOC operations. With NIS2 and DORA around the corner, we will present how to effectively tackle compliance requirements without sacrificing security.

Forget individual security solutions. You deserve better: ONE cybersecurity solution that can do (almost) everything. This allows you to maintain transparency and control in your network while also covering the technical requirements of NIS2. With All-in-one you save up to 80% time on implementation, training and operation.
Get comprehensive control and security for your IT with Enginsight:
ü Visualise IT infrastructures
ü Monitor networks
ü Detect attacks incl. alarms & automatic response
ü Simulate attacks
ü Document & analyse event logs
ü Create reports
Max Tarantik shows you how much more cybersecurity you can achieve in just 15 minutes with Enginsight.  
Hack your IT before someone else does!

This session will look at how AI will evolve in the SOC and how the technology will help, not replace, analysts. You'll learn how AI will evolve from using automation to build a base knowledge layer that AI agents will learn from to ultimately providing humans with information on how to effectively and successfully respond to threats. The session will present the three phases of AI's evolution and explore how the technical features of each phase will ultimately create a SOC that's human-driven and AI-powered.

The transition from DevOps to DevSecOps is crucial for security, but often suffers from a lack of communication. This is a major obstacle on this important journey. Where DevOps focussed on speed and efficiency, DevSecOps seamlessly integrates security practices into the entire development cycle.

Speaker Andreas Dondera will provide additional material (Banko emergency plan, emergency map) and answer questions from the audience. 

The NIS2 Directive sets new standards in the classification of companies within the EU and categorises them according to their economic criticality. Many companies that were not previously affected are now covered - what can a company do to comply with this directive? Who is the EU Cyber Resilience Act aimed at, what does it describe and what standards can be used to fulfil the requirements? Which products are affected and is there a state of the art in cybersecurity? We will shed light on these questions using individual examples in the presentation on standardisation in cybersecurity.

The top three speakers from our Masterclasses will be honored. You decide which speakers you found particularly inspiring, charismatic and innovative. Voting will take place using our app. Access is via your ticket code.