Nordic CISO Executive Summit

Exclusive to Governing Body members and select guests, this dinner is a can’t-miss opportunity to connect with your peers prior to the Executive Summit. Please join your peers for an evening of good food, wine, and lively networking.

Hotel Berns is a historical boutique hotel and house of entertainment since 1863.

To join the Welcome reception, please RSVP to dariush.kashani@gartner.com

In today’s complex cyber threat landscape, understanding the speed of change and current trends is paramount. Collaboration between CISOs and CIOs and using data to support a threat-based approach to risk management is becoming essential for an effective security posture. By translating risk into a business need, IT and Security teams can enable leadership to make data-driven decisions that strengthen security resilience.

Join this session to learn how CISOs and CIOs can collaborate to:

• Utilise cyber trend data and quantitative risk metrics to evolve your security strategy and prioritise investments
• Apply Cyber Risk Quantification model to effectively manage risk
• Understand how to translate risk into a business need

New regulations coupled with an evolving geopolitical landscape are resulting in governments and regulatory bodies having more oversight of cybersecurity incidents than ever before. CISOs must balance competing priorities and lack of resources to remain compliant and ensure resiliency to attack.

Join this boardroom to discuss strategies on how to:

• Gather a complete view of the business environment to link regulatory milestones and KPIs to achieve compliance
• Streamline resources to create flexibility when acting on a threat and still remain compliant
• Leverage data to identify risk as early as possible to increase preparedness against attack

**This session is for CISOs only. Please contact Dariush.Kashani@gartner.com if you have any queries**

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 CISO attendees.

CIOs and CISOs may have different motives for pursuing digital transformation. Whether the ultimate goal is simplifying connectivity to critical business resources or protecting against cyber threats, it's important to frame discussions with boards and executives in terms of business needs.

Join this session and learn to:

• Calculate hard and soft costs
• Quantify risk reduction and business productivity gains
• Recruit business champions for zero trust transformations

Focusing on three critical pillars of any security programme: Security Operations, Third Party Risk Management and Digital Risk Protection, this session examines real-world examples of cybersecurity incidents and explores the practices that could have prevented or reduced the impact of the events. Join Dan Vasile, Vice President, Strategic Cyber Advisory at BlueVoyant as he delves into the opportunities presented by the convergence of internal and external cyber defence capabilities.

In this session you will learn how to:

• Leverage automation to alleviate pressure on SOCs and coordinate activities between different areas of cybersecurity
• Why stakeholders' alignment on objectives and operational practices is paramount for risk reduction
• Understand gaps in security operations, threat intelligence and third-party risk management practices

Despite efforts from phishing simulations and security awareness campaigns, the human factor remains a key vulnerability in organisations’ line of defence. CISOs must execute a cross-functional educational strategy to shift employee behaviour from reactive to preventive.

Join this conversation to explore:

• Implementing, managing and measuring a security-first mindset across the business
• Tailoring your awareness campaigns to prioritise prominent and complex threats  
• Upskill teams to improve cyber resiliency and demonstrate the value strong IT hygiene brings to an organisation

**This session is for CISOs. Please contact Dariush.Kashani@gartner.com if you have any queries**

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 CISO attendees.

In today’s competitive environment, an organisation’s ability to execute successful mergers and acquisitions (M&A) has become a key differentiator. Yet the public nature of an M&A increases the potential for ransomware attacks. An organisation's ability to consolidate identity and access management (IAM) quickly during an M&A process can be a key tool in increasing the agility of an M&A and therefore reducing exposure to attacks.

Join this boardroom to discuss:

• M&A identity tales – best practices and lessons learnt
• Simplifying joiners, movers and leavers from two organisations
• Addressing Shadow IT and third-party access during an M&A

**This session is for CISOs only. Please contact Dariush.Kashani@gartner.com if you have any queries**

Executive boardrooms are intimate and interactive sessions designed to foster dynamic dialogue around a specific, strategic topic. These private, closed-door discussions encourage attendee participation and are limited to 15 CISO attendees.

For CIOs and CISOs, there’s nothing new about managing internal expectations on emerging technologies. With the spotlight focused on generative AI, it is more important than ever to understand the regulatory landscape, ethics and appropriate use of new tools. How can CIOs and CISO collaborate to ensure the IT function and wider organisation is prepared for a new frontier in automation?

Join this session to learn more about how to:

• Balance AI governance with existing IT and security regulations
• Embed a data ethics policy to mitigate misuse of information and importance of validating third parties who use AI
• Complement business decisions with AI to detect threats early, often and automatically

It’s time to play!

Preparing for a cyber crisis is imperative and can determine whether it becomes a major catastrophe or a manageable incident. What needs to be done in the first hours of a highly disruptive incident? What are the common options, dilemmas and pitfalls? And how can we get it right?

Join our interactive incident simulation, based on a true story. Your decisions as executives will be presented and help shape the future of the victim organisation.

During this session, we will:

• Leverage the wisdom in the room to tackle complex challenges and get ahead of the attackers
• Understand the impact of technical and stakeholder management decisions on the business
• Discuss key pitfalls commonly overlooked by security teams

Cybercriminals are acting faster and smarter than ever before. CISOs know they must prioritise vulnerabilities based on an organisation’s critical needs but cannot do it alone. CISOs must also keep endpoints continually secure and compliant. How can CISOs communicate with the wider business to protect an organisation’s endpoints?

In this boardroom, you will discuss strategies to:

• Streamline communication between security and IT operations to minimise cyber risk
• Automate remediation of your vulnerabilities to reduce the attack surface
• Create and manage Protection Level Agreements (PLAs) to facilitate interdepartmental communication

CIOs play a critical role in enabling organisations to meet sustainability commitments. How do you ensure you measure what matters? How do you treat used IT equipment to ensure as little e-waste as possible? Join Helena Babelon, Head of IT Sustainability and JP Iversen, CIO at Electrolux as they share how the IT function is driving sustainability across the wider business.

In this keynote Helena and JP will discuss how to:

• Embed sustainability in an organisation’s IT strategy
• Support organisations to make sustainability part of decision making across IT operations and the supply chain
• Empower and engage employees to integrate sustainability in company culture and part of their behaviours around IT