Agenda

08.30 - 09.15: Registration & refreshments

09.15 - 09.20: Chairman's Welcome

09.20 - 09.50: Keynote – Building resilience in a changing threat landscape: A regulatory perspective

Cyber risk in financial services is evolving rapidly. AI, frontier AI and other emerging technologies are reshaping the threat landscape, while firms' growing reliance on suppliers, technology providers and shared services means a single incident can quickly affect customers, markets and confidence. In this keynote, Claire MacArthur, Head of Technology, Resilience and Cyber at the Financial Conduct Authority, will share the regulator's perspective on what it takes to build resilience in this environment. She will explore why firms need to move beyond future plans and evidence what they can withstand and recover from today, how to understand resilience across critical dependencies and third parties, and how to manage cyber incidents that become operational events rather than purely technology issues. Drawing on what the FCA is seeing across the sector, Claire will highlight common challenges and emerging good practice, and consider the role of boards and senior leaders in building and sustaining strong cyber resilience.

09.50 - 10.20: Presentation – Building trust in Open Source: How Lightwell is changing enterprise security

Open Source underpins the vast majority of enterprise technology, but the security model built around it is under serious strain. Published CVEs have grown by more than 520% since 2016, AI-powered tools can now identify critical zero-day vulnerabilities in hours rather than months, and fewer than one percent have been patched. Most large institutions are independently discovering the same flaws and fixing them in isolation, duplicating effort at significant cost while the broader ecosystem stays exposed. In this presentation, Julio Guijarro argues that this coordination failure sits at the heart of enterprise security risk today, and examines what a more effective model looks like in practice. He introduces Lightwell, IBM and Red Hat's $5 billion software supply chain initiative, which is designed to break that cycle by delivering fixes that are production-ready, cryptographically signed, and contributed back to the originating Open Source projects rather than held as private forks that compound over time.

10.20 - 10.50: Panel – From code to cloud: Rethinking application security in financial services (Sponsored by OpenText)

Financial institutions are developing and deploying applications faster than ever, while cloud adoption, APIs, open-source dependencies and AI-assisted development are creating new layers of security risk. The challenge is no longer simply identifying vulnerabilities, but understanding which weaknesses create genuine business exposure and acting before they can be exploited. This panel will explore how financial institutions can build application security into the software development lifecycle, bringing security and engineering teams closer together while maintaining development speed. Experts will examine how AI, automation and greater software supply-chain visibility can help organisations prioritise risk, strengthen resilience and respond to emerging threats.

10.50 - 11.20: Coffee break

11.20 - 11.50: Fireside chat – Securing Digital at Scale: Lessons from the Frontline of Global Banking

In this fireside conversation with FStech, Nadya Hijazi draws on more than 30 years in financial services to explore what it really takes to protect digital banking at global scale. Responsible for services used by over a million corporate and institutional clients across 65+ markets, Nadya carried direct accountability for cyber, fraud, regulatory and financial crime risk in digital channels. She shares candid, practical lessons on embedding security into large-scale digital transformation, strengthening the resilience of critical services, and navigating the growing role of AI across both attack and defence. Expect an honest discussion on board-level accountability, building trust under pressure, and the leadership mindset needed to stay in control as threats evolve. A frank, experience-led session for leaders balancing innovation with resilience.

11.50 - 12.20: Presentation – The agentic endpoint: Securing the last mile of enterprise AI

The agentic AI era has already arrived. According to OpenAI, agentic tools accounted for more than half of the output generated by its EU enterprise and business customers by the end of September 2026. Many of these agents will take on the identity, permissions and access of the person they work for, and a single compromised device risks handing an attacker access to every agent, credential and session on the device – and a window to the broader network. In this session, Omnissa EMEA CTO Matt Coppinger will explain why the endpoint is becoming the last mile of enterprise AI security and the most valuable control point on the network. Using a framework built on four steps (discover, decide, contain and prove), Matt will explore how security and technology leaders can find every AI agent running across their estate – including those nobody approved – limit what each can access before it acts, contain agents that stray, and keep a clear record of every action that boards and auditors can rely on. With agentic AI taking hold of business workflows, this is an essential session for decision makers who want to put the right controls in place before use of agents becomes fully spread across their organisation.

12.20 - 12.50: Panel – Building tomorrow's defences today: Zero Trust, quantum readiness and the path to cyber resilience (Sponsored by Foreguard Advisory Group)

Financial institutions face a security landscape growing more complex by the day. Cloud adoption, AI, hybrid working and expanding third-party ecosystems have widened the attack surface, while regulators are demanding stronger controls and greater operational resilience. Zero Trust has emerged as a practical framework for reducing risk – verifying every user, device and connection, and limiting access to only what is needed. Yet scaling it across an enterprise is no straightforward task. Looking further ahead, quantum computing introduces a new dimension to that challenge. Practical quantum attacks may still be years away, but the window for preparation is narrowing. This panel will examine how firms can close today's security gaps while laying the groundwork for tomorrow's threats – and why long-term cyber resilience depends on starting both conversations now.

12.50 - 13.20: Keynote – 10 Top tips for CISO teams in 2027

Join Ben Peet, from Standard Chartered Bank to find out about the international bank’s CISO function and capabilities, and explore 10 Top Tips for CISO teams to be looking at in 2027 (Hint: it’s not all about AI).

13.20 - 13.30: Chairman's closing remarks, quiz and end of conference

13.30 - 14.30: Lunch and networking drinks reception