Security Day | Sydney

Overview

As organisations head into 2027, the fastest-growing part of the enterprise workforce may not be human at all. AI agents, bots, service accounts and machine identities are gaining access to critical systems, moving data, executing tasks and increasingly acting on behalf of employees.

The challenge is no longer simply securing users. It is securing an expanding digital workforce that can operate at machine speed, across multiple platforms, often without direct human approval at every step.

For CISOs, this creates a new identity frontier. How do you know which machine identities exist, what they can access, who is accountable for them, and when their permissions have gone too far?

This session explores how security leaders can get ahead of the 2027 identity challenge, governing non-human identities with stronger visibility, least privilege, lifecycle controls and real-time policy enforcement before automation outpaces oversight.

What we will cover

• Cybersecurity Continuity Exploring strategies to ensure uninterrupted business operations by building resilient cybersecurity frameworks that protect against disruptions, while balancing risk and growth.
• Threat Detection Investigating the latest technologies and approaches for real-time threat detection and incident response, with a focus on minimising impact from sophisticated threats like ransomware and zero-day exploits.
• Zero Trust Examining the adoption of Zero Trust frameworks, where access is continuously verified across networks, devices, and users, as a critical defence strategy against modern cyber threats.
• Cloud Security Exploring key strategies for securing cloud environments, with an emphasis on data confidentiality, identity management, and compliance in a multi-cloud world.
• Digital Security Investigating how CISOs can support digital transformation initiatives without compromising security, focusing on integrating security protocols throughout the innovation lifecycle.
• Risk Management Evaluating strategies for managing risks associated with third-party vendors and supply chains, ensuring security practices extend to all external partners.
• AI in Cybersecurity Exploring the role of AI and machine learning in automating threat detection, predictive analytics, and incident response to enhance cybersecurity defences.
• Compliance Privacy Navigating the complex landscape of data protection regulations, including GDPR and Australia's privacy laws, while ensuring data security and avoiding penalties.
• Insider Threats Examining approaches to identify, monitor, and mitigate insider threats, including both malicious and unintentional data breaches within organisations.
• Cybersecurity Leadership Discussing strategies to attract, develop, and retain skilled cybersecurity professionals while fostering leadership that aligns security goals with business objectives.
• IoT Security Exploring how to secure IoT devices and networks, focusing on reducing vulnerabilities through segmentation, regular updates, and continuous monitoring.
• Cybersecurity Culture Fostering a company-wide culture of cybersecurity awareness, encouraging employee engagement in security practices, and reducing human-related risks across the organisation.

Agenda

• 8:00 am Networking Breakfast(Security Day | Sydney) An informal start to the day where delegates can meet peers, share expectations and prepare for the sessions ahead. Exchange experiences and discuss current challenges with fellow CISOs. Outline objectives for the day’s programme. Build connections that could lead to future collaboration.
• 9:00 am Opening Remarks - The State of Cyber Risk(Security Day | Sydney) A concise overview of current threat trends, including the rise of data loss and insider incidents revealed by recent CISO surveys, and the regulatory and economic factors shaping cybersecurity in Australia.
• 9:05 am 2026. A New Wave of Leadership(Security Day | Sydney) As organisations navigate 2026, CISOs are redefining security leadership to enable resilience, trust, and sustained growth in an increasingly volatile threat landscape. No longer confined to technical defence, today’s security leaders are shaping enterprise strategy, balancing cyber risk with business priorities, embedding security into digital transformation, and strengthening organisational trust. With rising regulatory pressure, AI-driven threats, and expanding attack surfaces, CISOs are prioritising proactive risk management, cyber resilience, and security-by-design to safeguard the enterprise while enabling innovation. This session will explore how forward-thinking CISOs are evolving security from a control function into a strategic driver of enterprise value. Discussion Points: Embedding security-by-design across platforms, data, and digital initiatives to reduce risk while enabling speed and agility. Elevating the CISO’s role as a strategic partner to the C-suite, aligning cyber risk with business, regulatory, and operational priorities. Leveraging AI, automation, and advanced threat intelligence to proactively detect, respond to, and mitigate emerging threats at scale.
• 9:20 am The Trust Imperative: Overcoming Barriers to Enterprise AI Success(Security Day | Sydney) As organisations move from AI experimentation to full-scale deployment, the initial excitement is often met with significant friction. This keynote explores the primary blockers—ranging from data security and reliability concerns to organizational culture and technical debt—that prevent companies from realizing the full potential of AI. These insights will enable leaders to navigate these challenges, focusing on building an "AI-ready" foundation rooted in observability, robust governance, security by design and a human-centric approach. Attendees will leave with a clear understanding of how to transform skepticism into confidence and move toward a future where AI acts as a trusted partner.
• 9:40 am Who Owns Resilience? Aligning the C-Suite on Secure Transformation(Security Day | Sydney) Transformation is no longer about moving to the cloud; it is about the sovereign resilience of the organisation. This panel addresses the uncharted ownership gap that exists in many of Australia’s largest enterprises. While the CIO manages uptime and the CISO manages cyber, the actual business resilience, the ability of the company to function during a systemic AI or machine-driven failure often falls between the cracks. This session brings together cross-functional leaders to debate who truly owns the outcome when the invisible machine workforce fails or when a regulatory breach under the SOCI Act threatens the license to operate. Discussion Points: Securing Transformation Outcomes over Isolated Projects: Moving from digital projects to secure, value-driven enterprise investments that avoid technical debt. Balancing Agentic Innovation with Enterprise Risk : Navigating the specific 2026 risks of autonomous AI agents and the Invisible Workforce while staying bold. The Resilience Accountability Gap, Building a Unified C-Suite Front: A direct debate on the ownership of a crisis. If the CIO owns uptime and the CISO owns cyber, this session defines the Team Australia approach needed to bridge the gap between silos and ensure sovereign survival.
• 10:20 am The Contested Supply Chain: AI, Intelligence and National Resilience(Security Day | Sydney) AI has changed how fast adversaries can move. Hostile states and their proxies now find weaknesses sooner, run operations at greater scale, and use trusted suppliers as a way into government, critical infrastructure and essential services. As strategic competition sharpens, the supply chain has become one of the main routes in, and Australia's resilience increasingly depends on defending it. Dan Elliott spent two decades in intelligence and threat analysis, including as a Canadian intelligence officer, before becoming Field CISO at Recorded Future. In this session he sets out what an intelligence-led approach makes possible: earlier warning of emerging threats, a clearer read on which vulnerabilities adversaries are most likely to weaponise, and visibility into the third- and fourth-party dependencies attackers rely on. Attendees will leave knowing why intelligence, not technology on its own, sits at the core of sovereign resilience, and what it takes to move before a threat lands rather than after.
• 10:40 am Networking Break & Morning Tea Morning Team Strategy and Collaboration Session
• 10:40 am Agentic AI Safety: Accountable, Governed, Board-Ready.(Executive Roundtable) In most large organisations, agents are already at work, whether or not they've been approved by security. This roundtable brings together senior technical leaders, including security leaders, to compare notes on the problem, what agents are accessing,whose identity they act under, what evidence would make sign-off possible, and what recent public incidents mean for their own exposure. The session is a facilitated peer conversation, hosted by a Docker executive. The session is built for leaders who are being asked to approve controls they can't yet verify, and who want to hear how their peers are handling the same question.
• 11:40 am Peer-Driven Debates(Security Day | Sydney) A. AI-Driven Attack Surface vs Security Control Maturity Is AI expanding capability faster than security can adapt? Discussion Points: Where are you already seeing AI being used by attackers in meaningful ways? How are you governing internal AI use without slowing innovation? What security controls are most outdated in the context of AI-augmented threats? B. Cyber Resilience vs Prevention-Only Investment Models Are organisations still over-indexed on prevention at the expense of recovery? Discussion Points: How balanced is your investment between prevention, detection, and recovery? Where would recovery capability break down in a large-scale outage today? What does “acceptable downtime” actually look like in your organisation? C. Regulatory Pressure vs Real Security Outcomes Are compliance requirements improving security or distorting priorities? Discussion Points: Where are regulatory obligations driving meaningful uplift in resilience versus checkbox activity? How do you balance mandatory reporting timelines with incomplete incident data? What compliance requirement adds the least real security value today? D. Identity as the New Perimeter vs Fragmented Access Models Has identity security kept pace with cloud and hybrid complexity? Discussion Points: Where do you still lack true visibility of privileged access across environments? How effective are your current controls around non-human identities (APIs, agents, workloads)? What’s your biggest blind spot in identity governance today? E. Third-Party Risk vs Supply Chain Visibility Do you actually understand your extended digital ecosystem risk? Discussion Points: Where are you still overly reliant on self-attestation from vendors? How do you continuously monitor third-party risk beyond onboarding assessments? What would surprise you most about your supply chain exposure today? F. SOC Overload vs Detection Effectiveness Is increased telemetry improving security outcomes or creating noise? Discussion Points: Where is alert volume now actively reducing your ability to respond effectively? How are you measuring detection quality versus detection quantity? What changes would meaningfully reduce SOC fatigue without increasing risk?
• 0:10 pm Cyber Talent Reality and Scaling Resilience(Security Day | Sydney) As AI accelerates the velocity and complexity of the cyber threat landscape, the defining challenge for security leaders is building organisations that can continuously adapt. In an era where sophisticated attacks evolve faster than traditional defences, sustainable resilience depends on capable people, strong leadership and a culture where security is embedded across the enterprise. In this session, James Ng, CISO at Insignia Financial, explores the human dimension of cyber resilience, examining how leaders can move beyond addressing skills shortages to build enduring capability, strengthen organisational readiness and empower their workforce to navigate an increasingly complex risk environment. Discussion Points: The Human Cost of AI-Driven Threats: Understanding how the increasing speed and sophistication of cyber threats are reshaping workforce capability, decision-making and organisational resilience. Designing for the Human Element: Moving beyond compliance-led awareness programs to build a culture of accountability, continuous learning and security-conscious behaviours across the enterprise. Leadership Accountability for Enterprise Resilience: Practical strategies for embedding cyber resilience as a shared organisational capability, empowering leaders and teams to strengthen security without slowing innovation.
• 0:30 pm Mission-Critical Operations: Cloud, Edge, and Resilience(Security Day | Sydney) When national security operations cannot fail, technology design, resilience, and decision-making reach new heights. Krissie Auld, CTO of the Australian Federal Police, shares how the AFP builds secure, distributed, cloud-enabled, and edge-capable systems that stay operational under extreme conditions. Attendees will take away practical strategies for designing resilient, scalable, and future-ready infrastructure. Discussion Points: Designing for Continuous Operations: How to build infrastructure that stays resilient under pressure, from system failures to high-demand, mission-critical workloads. Hybrid Cloud and Edge in Action: Practical insights on leveraging distributed architectures to support real-time decision-making and operational agility. Translating National Security Lessons to Enterprise: Frameworks and strategies to secure, resilient, and high-value enterprise systems.
• 0:50 pm Security at Velocity: Building a Cyber Function That Scales with Enterprise Transformation(Security Day | Sydney) As organisations accelerate digital transformation, CISOs face the challenge of enabling business velocity while maintaining the governance, resilience, and trust required in complex environments. In this fireside chat, Martin Doherty will explore how modern security leaders are evolving their operating models to move beyond traditional gatekeeping, embed security into the way organisations operate, and build scalable capabilities that support innovation without compromising risk management. Discussion Points: Redefining the Role of Security: How CISOs are shifting from approval points to strategic partners by embedding security into business and technology decision-making. Scaling Security Without Losing Control: How large, complex organisations balance agility with governance by creating operating models, processes, and accountability structures that enable teams to move faster while maintaining a consistent risk posture. Building a High-Performance Security Function: The capabilities, culture, and partnerships required to evolve cybersecurity from a reactive function into an integrated business capability that scales with transformation.
• 1:10 pm Lunch Break & Peer Connect
• 2:10 pm CISO Exchange(Security Day | Sydney) In this fast-paced session, CISOs share candid perspectives on initiatives that strengthened security posture and those that fell short. Through a rotating one-on-one format, participants connect directly with peers to unpack common cyber, operational, and governance challenges, and explore what truly strengthens or undermines enterprise resilience.
• 2:40 pm The Security Investment Question: Are We Funding the Risks That Matter?(Security Day | Sydney) Cybersecurity investment is under greater scrutiny as organisations balance escalating threats, emerging technologies and finite resources. This session explores how CISOs can translate cyber exposure into clear investment priorities, align security spending with organisational risk appetite, and give boards the confidence to understand what they are funding, what risks remain accepted and where investment will have the greatest impact. Discussion Points: Moving From Threats to Investment Priorities: How CISOs can distinguish material business risk from the noise of an increasingly complex threat landscape and direct investment towards what matters most. Making the Trade-Offs Visible: How security leaders can have more meaningful conversations with boards about competing priorities, accepted risk and the consequences of choosing where not to invest. Measuring Whether Investment Is Reducing Risk: Moving beyond spend, control counts and compliance metrics to demonstrate whether security investment is actually improving the organisation’s risk position.
• 3:00 pm Decentralising Security for the Age of AI Agents(Security Day | Sydney) As business units rapidly adopt autonomous AI to automate complex workflows, centralised security teams cannot keep pace with every deployment, decision and emerging risk. Daminda Kumara explores how security must move closer to the teams building and using AI, embedding expertise, controls and accountability directly into the business without losing enterprise-wide oversight. Discussion Points: Breaking the Central Bottleneck: Why traditional security approval models cannot keep pace with the speed of AI adoption and how CISOs can enable business-led innovation without becoming the bottleneck. Embedding Security Where AI Is Built: How security professionals can work directly within customer, people and product teams to design AI solutions securely rather than reviewing them after the fact. Governing Without Centralising: How CISOs can maintain consistent security standards and visibility while distributing decision-making and accountability across teams deploying autonomous AI.
• 3:20 pm Leading Through the Inevitable: Securing the AI-Driven Enterprise in 2027(Security Day | Sydney) By 2027, the traditional security perimeter is increasingly giving way to interconnected systems, autonomous threats and a rapidly expanding non-human workforce. As attacks evolve and AI capabilities spread across the enterprise, traditional playbooks are being tested. This panel cuts through the hype to tackle what matters most: strengthening foundational defences, making high-stakes decisions under pressure, and protecting market trust when prevention alone is no longer enough. Discussion Points: Securing the AI-Driven Enterprise: How do organisations strengthen foundational controls and manage risk as non-human identities and autonomous AI tools multiply across increasingly complex environments? Leading Through Incidents and Uncertainty: When an incident unfolds and the technical picture remains incomplete, how do security leaders make defensible decisions, coordinate responses and contain operational disruption? Building Trust and Accountability for 2027: How do CISOs demonstrate reasonable steps, communicate credibly with boards and regulators, and maintain market confidence when prevention fails?
• 4:00 pm Analyst Wrap – Strategic Imperatives for CISOs(Security Day | Sydney) Summarises the day’s key insights into four board‑level priorities: building true resilience, maturing identity and zero‑trust capabilities, adopting adaptive AI‑enabled defence, and fostering a security‑first culture that balances innovation and compliance
• 4:05 pm End of Day | Networking Drinks(Security Day | Sydney)

Speakers

• Josh Heid · Chief Executive Officer, Factor
• Monique Dignan-Smith · VP Analyst, Factor Monique Dignan-Smith is Editor – Research & Content at Factor and a versatile host and presenter with more than a decade of experience across corporate, sports, lifestyle, travel, health and automotive sectors. With a strong background in journalism, content creation and social media marketing, Monique brings a sharp editorial lens and audience-first mindset to every conversation she leads. She has delivered across live events, advertorial, interviews, UGC and digital platforms including TikTok Live, combining professionalism with an energetic, engaging on-stage presence.
• Shelley Rigg · VP Analyst, Factor Shelley Rigg is Executive Producer, Research & Content at Factor, where she draws on over two decades of experience producing commercially driven campaigns, broadcast content, and executive events for some of the world’s leading brands. An award-winning producer and BAFTA recipient, Shelley has overseen more than 30 primetime shows in the UK and US, led strategic campaigns for Netflix, BBC, Amazon Prime, Rio Tinto, and Optus, and executive produced major live events, including Optus’s award-winning coverage of the FIFA Women’s World Cup 2023. At Factor, she brings her expertise as a talk show host, moderator, and content strategist, supporting broadcast, editorial, and e-learning initiatives while shaping engaging conversations with senior leaders across industries.
• James Ng · Chief Information Security Officer, Insignia Financial James is currently the General Manager Cyber Security (CISO) at Insignia Financial leading the overall cyber strategy and capability across the organisation with experience across technology and information security-focused roles in several organisations, including Telstra, Belong, Tabcorp and Deloitte. Prior to Insignia Financial, James was most recently the General Manager Security Operations at AARNet (Australia Academic and Research Network), where he led teams responsible for establishing cyber governance and providing security operations services.
• Lee Barney · Chief Information Security Officer, Ventia
• Krissie Auld · Chief Technology Officer, Australian Federal Police Krissie Auld is the Chief Technology Officer and Acting National Manager Forensics at the Australian Federal Police, leading technology strategy and digital transformation initiatives. She previously held senior technology roles at IMB Bank and spent over 20 years in the New South Wales State Government driving major ICT projects. Krissie holds multiple certifications including ISO27001 and is a Graduate Certificate holder in Public Sector Innovation.
• Martin Doherty · Chief Information Security Officer, Australia & New Zealand, HSBC Martin Doherty is Chief Information Security Officer, Australia & New Zealand at HSBC, bringing more than 20 years of international cybersecurity leadership experience. In his role, Martin leads security strategy and cyber risk across a complex, highly regulated financial services environment, working across technology, business and executive stakeholders to strengthen resilience and manage evolving cyber threats. Martin’s expertise spans cybersecurity strategy, risk management, security operating models and organisational resilience, with a particular focus on helping security functions evolve alongside business transformation. He brings a pragmatic perspective on balancing strong security governance with the need for organisations to remain agile, enabling security teams to move beyond traditional gatekeeping and operate as strategic partners to the wider business.
• Morgan Storey · Chief Information Security Officer, Sonic Healthcare Morgan Storey is the Chief Information Security Officer (CISO) at Sonic Healthcare, where he leads the organisation’s global cybersecurity strategy across its extensive pathology, radiology, and laboratory network. In this role, he is responsible for protecting highly sensitive patient data and ensuring the resilience of critical clinical and diagnostic systems across Sonic’s international operations, including Australia, the UK, Europe, and the US. With a long tenure in the organisation and over a decade of experience in cybersecurity leadership, Morgan has been instrumental in strengthening Sonic Healthcare’s security maturity, including its transition toward zero trust architectures and modernised cyber resilience frameworks. He is recognised for combining deep technical expertise with a strong understanding of healthcare operations, enabling secure digital transformation in one of the most data-sensitive industries globally.
• Jane Couchman · Chief Risk Officer, and Group Executive, Sustainability, Aware Super Jane Couchman is a senior executive in the banking and financial services sector, with over 30 years of leadership experience across Legal, Risk, and Governance disciplines. She currently serves as the Chief Risk Officer and Group Executive, Sustainability at Aware Super. Her career spans pivotal executive roles, including Executive General Manager, Compliance at the Commonwealth Bank of Australia (CBA); Global Chief Operating Officer, Compliance and Head of Enterprise Compliance at Macquarie Bank; Chief Risk Officer at BT Financial Group; and General Counsel at Perpetual. Jane has led major governance, culture, and accountability transformation programs at Macquarie Bank, CBA, and Aware Super. She has also spearheaded strategic initiatives such as the risk integration of Asgard and BT Financial Group during the St George–Westpac merger, and the digital transformation of Aware Super’s internal administration platform.
• Huw Sergeant · CISO (Group GM Cybersecurity and Compliance), Mirvac Huw Sergeant is an experienced cybersecurity, technology, and risk executive with over 30 years’ experience across Technology, risk, cybersecurity and compliance. As Group GM Cybersecurity and Digital Services at Mirvac, he leads the company’s cyber strategy, risk management, and digital governance, ensuring robust protection of critical assets. He also leads the cloud, network and support functions, ensuring that security is at the forefront of all technology. With prior leadership roles at Smartgroup, Allianz, Macquarie Bank and Herbert Smith Freehills, Huw has a proven track record of building and leading high-performing teams, driving security posture enhancements, and engaging closely with executive leadership and boards. His expertise spans cyber risk, technology, data governance, and financial management, making him a trusted advisor in the ever-evolving security landscape. A strategic thinker with deep technical understanding, he excels in delivering pragmatic solutions that balance security, compliance, and business growth.
• Sam Mackay · Executive Director | Chief Information Security Officer, NSW Department of Customer Service Sam Mackay is Chief Information Security Officer at the NSW Department of Customer Service, where he leads cyber security across a complex and highly decentralised government environment. His focus spans cyber resilience, incident management, risk, security operations and strengthening security outcomes across diverse technology environments. With extensive experience across government, financial services and national security, Sam brings a practical perspective on how organisations can respond to an increasingly complex threat landscape while continuing to deliver critical services. His work increasingly sits at the intersection of cyber security, operational resilience and crisis management, with a particular focus on how executives can make informed decisions when technology and business continuity become inseparable.
• Sriharsha Hiremath · CISO - GM Information Security & Risk, TelstraSuper Sriharsha Hiremath is General Manager Information Security (CISO) & Risk at CareSuper, bringing more than 24 years of experience across cybersecurity, technology risk, governance, assurance and operational leadership. Prior to joining CareSuper, Sri served as Chief Security Officer at TelstraSuper, where he was responsible for cybersecurity strategy, technology and operational risk, cyber resilience, assurance and information security across the organisation. His career spans financial services, professional services, mining, oil and gas, and government environments, with extensive experience working with executive teams, boards and audit and risk committees. A Fellow of the Governance Institute of Australia and Certified in Risk and Information Systems Control (CRISC), Sri specialises in translating complex technology and cyber risks into clear governance and business decisions. His experience includes driving technology and vendor rationalisation, reducing total cost of ownership, strengthening control environments and using automation, AI and cloud technologies to improve operational efficiency while managing risk. He brings a strong board-level perspective to the evolving cybersecurity landscape, with particular expertise in risk management, assurance, investment prioritisation and aligning security decisions with organisational objectives.
• Sanja Petrovic · CISO (GM, Cyber Security & Governance), Hub24 Sanja Petrovic is General Manager, Cyber Security & Governance at HUB24, bringing extensive experience in cybersecurity, governance and risk management across the financial services sector. In her role, Sanja leads cybersecurity and governance initiatives focused on protecting digital assets, managing cyber risk and meeting regulatory requirements while supporting the organisation’s strategic growth. Sanja brings a pragmatic perspective on building security into the wider organisation, with expertise spanning cyber governance, risk management, regulatory compliance and security operations. She is particularly focused on strengthening collaboration between security, technology and business teams, helping organisations move beyond siloed approaches to create a more integrated and resilient approach to cybersecurity.
• Daminda Kumara · Chief Information Security Officer, Commonwealth Superannuation Corporation Daminda Kumara is Chief Information Security Officer at Commonwealth Superannuation Corporation (CSC), bringing more than 25 years of experience across technology, cybersecurity and enterprise transformation. His career has spanned financial services, government, manufacturing, supply chain, construction and safety, with extensive experience leading mission-critical technology and security environments. Prior to becoming CISO, Daminda served as Head of Security at CSC, where he focused on strengthening the organisation’s cyber capability and resilience. Daminda brings a strategic perspective to cybersecurity, with expertise spanning cyber resilience, risk management, governance and the security implications of emerging technologies. He has contributed to board-level discussions on cyber risk and has a particular interest in how organisations can adapt their security models as AI and automation reshape the way work is performed. He has also held academic and industry leadership roles, including as a Visiting Associate Professor with Macquarie University’s Cyber Security Hub and as a former non-executive director of CREST Australia and New Zealand.
• David Rea · Leader, Solutions Engineer, Splunk David Rea is a technology and solutions engineering leader at Splunk, bringing extensive experience across cybersecurity, IT operations, infrastructure and enterprise technology. With a career spanning solutions engineering, systems architecture and technical leadership, David has worked closely with organisations to address complex technology challenges and improve visibility, performance and operational resilience across their environments. In his current role, David works with organisations across the region to help translate complex technology and security requirements into practical solutions. His areas of expertise include security operations, observability, detection and response, infrastructure and enterprise technology, with a particular focus on helping teams gain greater visibility across their environments and respond more effectively to emerging operational and security challenges.
• Annmaree Bell · Head of Enterprise Governance and Resilience / Chief Customer Officer, Zurich Insurance Annmaree Bell is Head of Enterprise Governance and Resilience at Zurich Australia and New Zealand, bringing more than 20 years of experience in project and change management across the financial services sector. Since joining Zurich in 2010, she has led major organisational, technology and strategic transformation programs, developing deep expertise across governance, distribution, customer strategy and technology-enabled change. Annmaree brings a customer-focused perspective to enterprise transformation and resilience, with a strong emphasis on navigating organisational change while maintaining trust, accountability and effective governance. Her experience spans large-scale transformation, customer experience, technology and strategic change, giving her a broad view of how organisations can build resilience while continuing to evolve and respond to changing customer and business expectations.
• Dan Elliott · Field CISO, Asia Pacific & Japan, Recorded Future Dan Elliott is Field CISO, Asia Pacific & Japan at Recorded Future, where he works with security leaders and organisations across the region to translate threat intelligence into actionable cyber risk and security strategy. With a background in intelligence and cybersecurity, Dan brings a strong understanding of the evolving threat landscape and the challenges organisations face in identifying and prioritising the threats that matter most to their business. His expertise spans threat intelligence, vulnerability prioritisation, cyber risk, supply chain security and the impact of emerging technologies on the threat landscape. Dan works closely with security and executive teams to connect technical intelligence with business context, helping organisations make more informed decisions about where to focus their security efforts and how to build resilience against increasingly sophisticated and rapidly evolving threats.
• Jackie Orchard · Head of Information and Data Security Advisory, Team Global Express Jackie Orchard is Head of Information and Data Security Advisory at Team Global Express, with expertise spanning information security, data security, security architecture and strategic cyber advisory. Her role focuses on helping the organisation navigate evolving security risks while ensuring security and governance remain aligned with business and technology priorities. Jackie brings a practical perspective to emerging security challenges, with particular expertise in enterprise AI governance, autonomous systems and the security implications of increasingly data-driven organisations. She has contributed to industry discussions on governing AI-driven technologies and the intersection of security, data and legal requirements, bringing a strong focus on turning emerging risks into practical governance and security approaches.

Partners

• Splunk · Platinum Splunk, the cybersecurity and observability leader, makes organizations more digitally resilient in the AI era. Organizations use our platform to transform machine data at massive scale into actionable insights so they can prevent infrastructure, application and security incidents from becoming major issues, remediate threats and disruptions faster, and adapt quickly to new opportunities. Splunk helps SecOps, ITOps and engineering teams deliver these outcomes with comprehensive visibility, rapid detection and investigation, and optimized response, all accelerated by AI and at the scale necessary for the world's largest organizations.
• Recorded Future · Bronze
• Filigran · Bronze
• Docker, Inc · Gold
• HPE · Decisions

More events from this host

• Security Day | Singapore October 2026, Singapore
• Security Day | Dubai April 2027
• Security Day | Singapore June 2027, Barangaroo
• Security Day | Singapore June 2027
• Security Day | Singapore October 2026, Singapore
• Security Day | Singapore | Sponsor | Invitations July 2026
• Security Day | Singapore June 2026, Singapore
• Security Day | Sydney February 2027, Singapore