Agenda

08.30 - 09.05: Registration & Refreshments

09.15 - 09.20: Chairman's Welcome

09.20 - 09.50: Keynote – Operational Resilience, Critical Third Parties and Frontier AI: Strengthening the UK Financial System

09.50 - 10.20: Presentation – Building trust in Open Source: How Lightwell is changing enterprise security

Open Source underpins the vast majority of enterprise technology, but the security model built around it is under serious strain. Published CVEs have grown by more than 520% since 2016, AI-powered tools can now identify critical zero-day vulnerabilities in hours rather than months, and fewer than one percent have been patched. Most large institutions are independently discovering the same flaws and fixing them in isolation, duplicating effort at significant cost while the broader ecosystem stays exposed.

In this presentation, Julio Guijarro argues that this coordination failure sits at the heart of enterprise security risk today, and examines what a more effective model looks like in practice. He introduces Lightwell, IBM and Red Hat's $5 billion software supply chain initiative, which is designed to break that cycle by delivering fixes that are production-ready, cryptographically signed, and contributed back to the originating Open Source projects rather than held as private forks that compound over time.

10.20 - 11.00: Panel – From code to cloud: Rethinking application security in financial services (Sponsored by OpenText)

Financial institutions are developing and deploying applications faster than ever, while cloud adoption, APIs, open-source dependencies and AI-assisted development are creating new layers of security risk. The challenge is no longer simply identifying vulnerabilities, but understanding which weaknesses create genuine business exposure and acting before they can be exploited. This panel will explore how financial institutions can build application security into the software development lifecycle, bringing security and engineering teams closer together while maintaining development speed. Experts will examine how AI, automation and greater software supply-chain visibility can help organisations prioritise risk, strengthen resilience and respond to emerging threats.

11.00 - 11.30: Coffee Break

FULL AGENDA TO BE ANNOUNCED SOON...

Check out 2025 agenda here.