Cyber Security in Financial Services Summit 2025

Now in its 8th year, the renowned, Cyber Security in Financial Services Summit continues to be the go-to event in the BFSI sector and enables attendees to form many new meaningful business relations.

27

November

  • The Minster Building London
  • Free
  • Why attend?
  • Agenda
  • Speakers
  • Plan Your Visit
  • Event Gallery
  • Sponsors
  • Media Centre
  • Contact Us

Featured Speakers

Back

Sonia Luthra​

Managing Director, UK Data Protection Officer & Head of Data Protection, Société Générale

Next speaker
Back

Ioan Nascu​

GenAI Security Assurance, VP, Citi

Next speaker
Back

Federico Iaschi​

Information Security Director, Starling Bank

Federico Iaschi is a multilingual Information Security Director at Starling Bank, with over 20 years of experience in both the private and public sectors. He specialises in cyber security resilience and observability, focusing on building robust practices to proactively identify and mitigate risks across diverse systems. As a recognised speaker and author, Federico holds various certifications, including CISSP, CISM, and CCISO, highlighting his deep expertise in information security and risk management. His strategic insights are essential for navigating the evolving landscape of cybersecurity and resilience in the financial services sector.

Next speaker
Back

Luke Vile​

Cyber Technical Specialist, Technology, Resilience and Cyber, Specialist Supervision, FCA

Next speaker

    Featured Sponsors

    Back

    Company Information

    AmberWolf is a high-calibre cyber security consultancy for organisations that cannot afford to overlook real risks.

    Our team has deep expertise in offensive security and assurance. We deliver advanced red teaming, penetration testing, product assessments, risk consultancy and remediation support to some of the most demanding and targeted organisations worldwide. We are trusted by central banks, global banks, insurers, asset managers and others to uncover weaknesses before adversaries exploit them.
    AmberWolf is accredited to deliver CBEST, operated by the Bank of England through CREST, which also accredit our Penetration Testing and Attack Simulation services, including STAR-FS, designed specifically for the financial sector.

    When you need evidence rather than reassurance, we battle-test your security posture, translate findings into clear outcomes for both technologists and executives, and help reduce risk where it matters most. We operate with independence and integrity, ensuring our advice is objective, trusted and aligned with our clients’ best interests.

    Company Website

    To learn more, please visit our website - https://www.amberwolf.com/

    Next Sponsor
    Back

    Company Information

    Abnormal AI provides the leading AI-native human behaviour security platform, leveraging machine learning to stop email attacks that evade traditional solutions. Its anomaly detection engine understands identity and context to block socially engineered threats such as business email compromise, credential phishing, and account takeovers helping organisations reduce risk and respond faster with proven efficacy.

    Company Website

    To learn more, please visit our website - https://abnormal.ai/

    Next Sponsor
    Back

    Company Information

    BlueFort is the UK’s only Full-Service Security Integrator, specialising in identity and access management and advanced cloud security. Its expertise spans OT security, data protection, threat detection and response, compliance, and the safe adoption of AI. By combining deep knowledge with a curated suite of technologies, BlueFort enables CISOs and security teams to consolidate, optimise, and transform their environments delivering stronger protection, operational efficiency, and resilience in a cloud-driven world.

    Company Website

    To learn more, please visit our website - https://www.bluefort.com/

    Next Sponsor
    Back

    Company Information

    Bridge the secure software gap with the only continuously secure software foundation that enables your developers to start secure and stay secure. Eliminate risk and drive business growth with secure-by-default container images that prioritize speed for continuous monitoring and patching of vulnerabilities. Meet compliance requirements for vulnerability remediation faster and unlock business growth. Empower your developers to be developers, with software that delivers foundational security without compromising on flexibility.

    At Chainguard, we understand the world already runs on open source. We make it run securely.

    Chainguard. The Safe Source for Open Source.

    Company Website

    To learn more, please visit our website - https://www.chainguard.dev/

    Next Sponsor
    Back

    Company Information

    Wales is a thriving hub for Financial Services and Cyber Security organisations. As one of Europe’s leading cyber ecosystems, South East Wales is home to global players like Airbus, Thales, PwC, and CGI, alongside agile SMEs and world-class academic institutions.
    This strong cyber foundation complements a vibrant Financial Services and FinTech sector, with major names such as Starling Bank, Monzo, Admiral, Confused.com, Go.Compare, and Legal & General operating here. The result is a collaborative, innovation-driven environment ideal for FinTech and Financial Services companies seeking secure digital growth. The close synergy between cyber and finance sectors provides direct access to expertise and skilled talent, making Wales a strategic location for scaling in a tech-driven economy. The Welsh Government’s Trade and Inward Investment Team offers tailored support for businesses looking to expand in Wales, connecting you with key decision-makers and providing support to help make your investment in Wales a success.

    Next Sponsor
    Back

    Company Information

    Edgescan is a cloud-based cybersecurity platform offering continuous vulnerability management and penetration testing as a service (PTaaS). It unifies five key solutions: External Attack Surface Management (EASM), Risk-Based Vulnerability Management (RBVM), Application Security Testing (AST), API Security Testing, and PTaaS. By combining automation with human validation, Edgescan eliminates false positives, delivering actionable, risk-prioritized intelligence. Its proprietary Edgescan Validated Security Score (EVSS), alongside EPSS, CISA KEV, and CVSS, helps organizations focus on critical threats. The platform provides full-stack visibility, identifying assets, rogue APIs, and shadow IT across networks, web applications, and mobile environments. Designed for scalability, it integrates with tools like AWS and Jira, reducing tool sprawl and operational costs by up to 60%. Serving diverse industries globally, Edgescan enhances security posture through comprehensive reporting, on-demand retesting, and AI-driven insights, ensuring robust protection against evolving threats.

    Company Website

    To learn more, please visit our website - https://www.edgescan.com/

    Next Sponsor
    Back

    Company Information

    eSentire is The Authority in Managed Detection and Response Services, protecting the critical data and applications of 2000+ organisations in 80+ countries from known and unknown cyber threats. Founded in 2001, the company’s mission is to hunt, investigate and stop cyber threats before they become business disrupting events.

    Company Website

    To learn more, please visit our website - https://www.esentire.com/

    Next Sponsor
    Back

    Company Information

    Invicti Security leads in modern application security with best-in-class DAST at the core of a platform built for risk posture management. Proof-Based Scanning™ delivers 99.98% accuracy by validating real, exploitable vulnerabilities—cutting false positives and streamlining remediation. AI innovations and engine upgrades make the world’s best DAST even better, helping teams uncover more critical issues across web apps and APIs—faster and with less noise.

    Next Sponsor
    Back

    Company Information

    Nethermind is a leading research and engineering firm specializing in privacy, zero-knowledge (zk) technology, and security. We support financial institutions in addressing critical priorities such as regulatory compliance, data protection, identity, and risk management – areas where trust and confidentiality are essential.

    Our expertise lies in applying advanced cryptography to real-world challenges. By harnessing zk proofs, privacy-preserving computation, and verifiable execution, we enable institutions to validate and share information securely, without exposing sensitive data. These capabilities are increasingly fundamental for meeting evolving regulatory requirements, strengthening identity frameworks, and enabling collaboration across jurisdictions and counterparties.

    Nethermind brings together cutting-edge research with production-grade engineering, ensuring that solutions are not only theoretically sound but also operationally robust. Our mission is to build the secure cryptographic foundations on which the future of financial services will operate – where compliance, privacy, and innovation can advance together with confidence.

    Company Website

    To learn more, please visit our website - https://www.nethermind.io/

    Next Sponsor
    Back

    Company Information

    NormCyber is a multi-award-winning security operations specialist giving organisations clarity and control in an era of relentless cyber risk. Where traditional models rely on tool sprawl and overstretched teams, Norm delivers a hybrid approach: deep expertise, advanced tooling, and 24/7 monitoring and response that integrate seamlessly with in-house governance. The result is resilience that withstands threats, accelerates response, and embeds compliance at the core – turning security from a cost burden into a source of competitive strength.

    What sets Norm apart is the experience we deliver: a world-leading NPS of 80+, long-standing customer relationships, and a reputation for making security straightforward and human. Trusted by financial services, banking, and insurance leaders, as well as enterprises in logistics, supply chain and retail, we provide measurable outcomes that protect business value, reduce complexity, and free capital for growth.

    Next Sponsor
    Back

    Company Information

    ProcessUnity is the Third-Party Risk Management (TPRM) company. Our software platforms and data services protect customers from cybersecurity threats, breaches, and outages that originate from their ever-growing ecosystem of business partners. By combining the world’s largest third-party risk data exchange, the leading TPRM workflow platform, and powerful artificial intelligence, ProcessUnity extends third-party risk, procurement, and cybersecurity teams so they can cover their entire vendor portfolio. With ProcessUnity, organizations of all sizes reduce assessment work while improving quality, securing intellectual property and customer data so business operations continue to operate uninterrupted.

    Company Website

    To learn more, please visit our website - https://www.processunity.com/

    Next Sponsor
    Back

    Company Information

    Risk Ledger is the cutting-edge platform for third-party risk management, transforming how organisations secure their supply chains. By empowering security and procurement teams with real-time insights, Risk Ledger ensures complete visibility and control over third-party risks.

    Our Defend-as-One approach fosters collaboration, reduces compliance burdens, and strengthens your cyber defences with evidence-based, up-to-date risk assessments. With Risk Ledger, every link in your supply chain is fortified, ensuring your organisation is protected against emerging threats in the supply chain. Together, we are building a more secure future because every link matters in cybersecurity.

    Company Website

    To learn more, please visit our website - https://riskledger.com/

    Next Sponsor
    Back

    Company Information

    Socura reduces cyber risk by proactively detecting and responding to threats, 24/7. Our Managed Detection and Response service forms an extension of an organisation’s security team – bolstering resilience and easing the complexity of security operations with experienced SOC experts, best-in-class controls and curated threat intelligence.

    Recognised as one of the top 250 managed security service providers globally, Socura is a trusted partner of public and private sector organisations. This includes leading firms across the financial services sector and the national SOC of Wales.

    Security teams love that we work with them shoulder-to-shoulder, are always ready to respond in critical moments, and provide additional expertise to achieve a proactive approach. They also appreciate that we don’t blindly pass on alerts; we contain and disrupt them and resolve 96% of incidents without customer escalation.

    Headquartered in Cardiff, Socura is CREST-accredited for Security Operations. Our UK-based team is also SC cleared.

    Company Website

    To learn more, please visit our website - https://socura.co.uk/

    Next Sponsor
    Back

    Company Information

    In cyber security, you can’t fix what you can’t see. The very nature of Active Directory, Entra ID and Azure create invisible attack paths that risk escalations to nearly everything in your stack. Guided visibility of your identity attack paths and directory hygiene are critical.

    BloodHound Enterprise is the go-to platform for Attack Path Management, empowering identity and security teams with continuous prioritisation, remediation guidance and verification and reporting metrics that let you see improvement over time in reducing identity attack paths. Beloved by hundreds of global corporations and government departments, BloodHound Enterprise dramatically reduces the risk of lateral movement and privilege escalation in Active Directory, Azure AD / Entra ID, and hybrid Azure environments. BloodHound Enterprise is made by SpecterOps, is designated FedRAMP High by the U.S. FedRAMP program, and complies with SOC 2 Types 1 & 2 and ISO 27001 & 27017.

    Company Website

    To learn more, please visit our website - https://specterops.io/bloodhound-overview/

    Next Sponsor
    Back

    Company Information

    Tenable® is the exposure management company, exposing and closing the cybersecurity gaps that erode business value, reputation and trust. The company’s AI-powered exposure management platform radically unifies security visibility, insight and action across the attack surface, equipping modern organizations to protect against attacks from IT infrastructure to cloud environments to critical infrastructure and everywhere in between. By protecting enterprises from security exposure, Tenable reduces business risk for more than 44,000 customers around the globe.

    Company Website

    To learn more, please visit our website - https://www.tenable.com/

    Next Sponsor
    Back

    Company Information

    Simplifying technology, amplifying success

    Formed in 2000, Wavenet is the UK’s most trusted managed service and security provider.

    Through its broad portfolio in cyber security, connectivity, cloud and communications, blended with the power of AI and automation, Wavenet’s award-winning solutions help customers drive digital transformation.

    Company Website

    To learn more, please visit our website - https://www.wavenet.co.uk/

    Next Sponsor

      Why attend?

      Celebrating its eighth year, the Cyber Security in Financial Services Summit is the must-attend event for senior executives from the financial services industry.

      The summit will deep-dive into the current state of cyber security in Financial Services and what to expect for 2025 and beyond. Cyber Security is playing an increasingly strategic role for financial firms, with cyber security teams now firmly focused on business risks and impacts. Generative AI, and its potential for harm, as well as for good, remains a key concern across the industry as the range and sophistication in the use of this technology by cyber criminals, including deepfakes and ‘misinformation-as a service’ become more commonplace. Meanwhile, the ability of financial service firms to manage cyber risk and respond effectively to a cyber incident should it occur – with effective risk measurement and disclosure – is increasingly coming under the scrutiny of regulators, rating agencies and investors.

      Cyber leaders and experts will discuss how AI is rewriting the cyber security playbook, and the strategies cyber teams are using to tackle the rising tide of deepfakes and emerging cyber threats. Join us in-person as we explore the next frontiers in cyber governance and how measuring, disclosing and managing cyber risk can add business value.

      Audience includes:

      • Retail & Commercial Banks
      • Digital Banks
      • Insurance Companies
      • Building Societies & Credit Unions
      • Investment Banks
      • Savings and Loan (S&L) Associations
      • Mortgage & Pension Fund Companies
      • Brokerage Firms

       

      Delegates

      • This is an opportunity to network with like-minded peers who share your challenges
      • Stay ahead with the cutting-edge presentations and Q&A sessions
      • Find innovative services, solutions and insight
      • Have your questions answered – exclusive presentations and Q&A sessions
      • Share ideas and best practices within the industry

       

      Sponsors/Exhibitors

      • This is an opportunity to network with potential clients and partners
      • Get face-to-face time with your target audience Promote your brand as an innovator and thought leader
      • Showcase your product to, decision-makers, and industry leaders to encourage delegates to use your services

       

      Highlights of the 2024 Cyber Security event

      Agenda

      • 27 Nov 2025
      Expand All

      8 AM

      Networking and registration

      8:55 AM

      Chair’s opening remarks

      Speakers

      Jon Bernstein
      Freelance Writer, Moderator and Digital Media Consultant

      9 AM

      Regulatory expectations in a digitally-driven threat landscape – FCA’s perspective on cyber resilience

      • Key cyber resilience outputs from the FCA in 2025 and what they mean for the financial sector
      • The growing importance of collective action to strengthen sector-wide resilience
      • Emerging technologies reshaping the cyber landscape, including AI and quantum
      • The evolving role of boards in cyber oversight, accountability, and resilience governance

      Speakers

      Luke Vile
      Cyber Technical Specialist, Technology, Resilience and Cyber, Specialist Supervision, FCA

      9:20 AM

      Keynote Presentation – Inside the Inbox: Real Attacks Hitting Financial Services in 2025

      Attackers are bypassing legacy tools with business email compromise (BEC), account takeover (ATO), QR code phishing, and OAuth consent scams at increasing scale. We will share anonymized, recent cases from financial services environments, including how a global firm saw advanced attacks bypass a traditional secure email gateway and what actually stopped them. Co-presented by Abnormal AI and BlueFort, attendees leave with a practical playbook: the signals to look for, the controls that work, and how to achieve time-to-value without added friction.

      Speakers

      John Flatley
      Solutions Engineer, Abnormal AI, Abnormal.ai
      Josh Neame
      Chief Technology Officer, BlueFort Security Ltd

      9:45 AM

      PANEL DISCUSSION: What’s keeping CISOs awake in 2025?

      As financial institutions navigate an era defined by AI-driven change, evolving regulation, and increasingly complex threats, this panel explores the hopes, expectations, and fears of security leaders as they look ahead to 2026.

      Key discussion points include:

      • The evolving role of GenAI in cybersecurity and its influence on threat detection
      • Identity, social engineering, and the rise of behavioural anomaly detection
      • Balancing risk, regulation, and reputation across financial services
      • Defining best practice for modern security operations

      Moderator: Jon Bernstein, Freelance Writer, Moderator and Digital Media Consultant

      Speakers

      Jon Bernstein
      Freelance Writer, Moderator and Digital Media Consultant
      Adrian Warman
      Former Head of Security Operations at Ministry of Justice UK, Senior Cyber Threat Intelligence Analyst, Bournemouth University
      Jamie Brummell
      Founder and CTO, Socura
      Darren Swift
      Security Sales Engineer FSI, Google Cloud
      Nicole Fowler
      CISO, Bank of Ireland

      10:30 AM

      DRAGONS DEN

      A dynamic quick-fire session where selected innovators have one minute each to present a cutting-edge idea or solution shaping the future of cybersecurity in financial services.

      This high-energy segment offers delegates a rapid insight into emerging technologies, new approaches, and creative thinking driving progress across the sector setting the stage for deeper conversations during the networking break that follows.

      Speakers

      Michael Brooks
      Senior Enterprise Account Executive, Abnormal AI, Abnormal.ai
      Chris Weston
      Co-Founder and Chief Revenue Officer, Amberwolf
      Ryan Sheldrake
      Field CTO, Chainguard
      Justin Kuruvilla
      Chief Cyber Security Strategist at Risk Ledger
      Dele Adu
      Business Development Manager, NormCyber
      Colin Makin
      Spector ops
      Neil Langridge
      Product Marketing Manager, Cato Networks (Wavenet Partner)
      Ryad Jawaheer
      Senior Solutions Architect, eSentire
      Rodney Jess
      Account Director at Edgescan
      Jamie Brummell
      Founder and CTO, Socura
      Stuart Durrant
      Regional Manager, Tenable

      10:40 AM

      Networking coffee break

      11:10 AM

      Managing risk in a shared responsibility model

      As financial institutions deepen their reliance on cloud infrastructure, managing cyber risk becomes a shared responsibility, but where does the provider’s role end and the institution’s begin? This discussion explores how to cut through the noise of data and alerts to focus on what truly matters for business resilience.

      • Too much data, not enough clarity and how that overload hides real financial and operational exposure.
      • Cutting noise down to the risks that actually matter to revenue, operations, and regulators.
      • Exposing the unknown estate shadow IT, shadow APIs, and forgotten cloud services driving unseen risk.
      • Turning thousands of technical “criticals” into one clear, defensible, business-level risk picture.
      • Measuring what truly improves resilience: reduced exposure, faster remediation, better prioritisation, clearer audit trails.

      Moderator: Jon Bernstein, Freelance Writer, Moderator and Digital Media Consultant

      Speakers

      Jon Bernstein
      Freelance Writer, Moderator and Digital Media Consultant
      Joel Barnes
      Senior Director EMEA - Tenable
      Nicole Fowler
      CISO, Bank of Ireland

      11:40 AM

      The Confidence Illusion: Rethinking How We Assess Technical Risk

      The financial services market has driven major security improvements through frameworks such as CBEST and TIBER, with its behaviour helping raise standards across other sectors. But does confidence still outpace reality? This session explores the blind spots that remain, including fragile supply chains, hidden attack paths, and vendor risks, while challenging what resilience and true assurance mean in complex, real-world environments

      Speakers

      Julian Storr
      Co-Founder, AmberWolf

      12:05 PM

      AI Security: Between Science Fiction and Reality

      • Understanding how to frame AI security – novel challenges, similarities, and differences with traditional cybersecurity
      • Practical insights for designing safer, more trustworthy AI systems

      Speakers

      Ioan Nascu
      GenAI Security Assurance, VP, Citi

      12:25 PM

      Untangling the Supply Chain Problem in Financial Services

      • Explore how systemic supply chain risks are reshaping the financial services landscape, from corporate dependencies to software and logistical vulnerabilities.
      • Understand why traditional TPRM no longer protects interconnected financial ecosystems, and how collaboration is becoming the new resilience strategy.
      • Hear real-world insights from government and financial communities on tackling concentration risk and achieving shared visibility across suppliers.
      • Discover how network-based
      •  security models can strengthen regulatory compliance and operational resilience under frameworks like DORA.
      • Learn how to move beyond fragmented risk management and Defend-as-One against evolving third-party threats.

       

      Speakers

      Justin Kuruvilla
      Chief Cyber Security Strategist at Risk Ledger

      12:45 PM

      PANEL DISCUSSION: Navigating the regulatory maze – global compliance for cybersecurity leaders

      • Overview of key cybersecurity regulations
      • Managing compliance across jurisdictions
      • How to be prepared for evolving data privacy standards?

       

      Speakers

      Jon Bernstein
      Freelance Writer, Moderator and Digital Media Consultant
      Sonia Luthra
      Managing Director, UK Data Protection Officer & Head of Data Protection, Société Générale
      Josh Neame
      Chief Technology Officer, BlueFort Security Ltd

      1:15 PM

      Lunch

      2:10 PM

      The Future of Digital Risk Protection in Financial Services

      As financial services firms continue to digitise, their exposure now stretches far beyond the traditional perimeter. From the dark web to domain impersonation and unpatched vulnerabilities, risks can emerge anywhere your brand or data appear online.

      This session explores how organisations can harness diverse intelligence sources – including the dark web – to uncover hidden risks and strengthen their digital resilience. Through real-world examples, we’ll show how Digital Risk Protection (DRP) turns threat data into clear, actionable insight that helps financial institutions stay ahead of attackers

      Speakers

      Paul Wilford
      Solutions Consultant, NormCyber

      2:30 PM

      How to Sweep Vulnerabilities under the Rug – How to Properly manage vulnerabilities and effectively prioritize remediation

      Edgescan delivers risk-prioritized vulnerability intelligence across applications, APIs, and infrastructure with manual validation baked in.

      Let’s take a step back to some fundamentals.

      • A reality check and recap on the basics (Find, Prioritize, Fix).
      • How to deal with “Too Many Risk Scores”. Edgescan’s effort to simplify an approach to Risk.
      • Asset Context - how it plays into Risk and how AI and Metadata can help vulnerability prioritization.
      • How to quantify Risk and present options not just problems.

      Speakers

      Keith Geraghty
      Director of Solutions Engineering, Edgescan

      2:40 PM

      Beyond the Perimeter: Proactive threat hunting for finance leaders

      Financial organisations face relentless and increasingly sophisticated cyber threats. Reactive security measures aren’t enough to stop them. In this tech spotlight, Ryad Jawaheer from eSentire explains how finance IT leaders can stay ahead of attackers through managed detection and response (MDR), continuous threat management, and active threat hunting.

       

      You’ll hear how eSentire’s team of experts detects and stops attacks in real time, helping financial institutions protect critical systems, meet regulatory demands, and strengthen resilience against disruption.

       

      Speakers

      Ryad Jawaheer
      Senior Solutions Architect, eSentire

      2:50 PM

      Cybersecurity in Financial Services: What Does the 2026 Landscape Look Like?

      This forward-looking session explores how cybersecurity in financial services will evolve over the next 12–18 months. Drawing on GlobalData’s latest research, it will examine: 

      • The adoption and security implications of emerging technologies – including cloud, AI, 5G, IoT, and quantum computing.
      • How evolving business models and ecosystems in banking and financial services are reshaping cyber risk.
      • The balance between innovation, risk, and operational resilience in an increasingly complex digital environment.

      Speakers

      David Bicknell
      Principal Analyst, Thematic Research, GlobalData

      3:10 PM

      Secure by Default: Why the Future of Open Source Demands it

      • The real cost of “free” software and the security gaps it creates
      • How technical debt in open-source stacks becomes a growing risk for financial institutions
      • Why traditional “shift left” approaches are no longer enough
      • What a secure-by-default model looks like and what organisations should expect from their tools and teams

      Speakers

      Ryan Sheldrake
      Field CTO, Chainguard

      3:35 PM

      The Extended Enterprise: managing cybersecurity risk beyond your walls

      This presentation provides a strategic blueprint for guarding the digital gates organisations no longer directly control, a necessity given the increasing prevalence and systemic nature of third party cyber threats.

      ●      Systemic threat requires a new architecture.

      ●      Single vendor compromise impacts thousands.

      ●      DORA mandates shared vendor accountability.

      ●      Need Visibility, Collaboration, Automation.

      ●      Be the architect, not the gatekeeper.

      Speakers

      Federico Iaschi
      Information Security Director, Starling Bank

      3:55 PM

      Networking coffee break

      4:15 PM

      Lessons on Identity – the new battleground for enterprise security

      In recent years, some of the most damaging cyberattacks in Europe share a common thread – identity. As traditional defences strengthen, attackers have shifted tactics, moving away from malware and exploits toward abusing legitimate credentials, permissions, and trust relationships within enterprise environments.

      This session considers how attackers use identities to navigate industry-standard defences. We’ll explore the anatomy of an identity-based attack – from initial access through to organisational-wide takeover – and highlight recurring patterns seen across European enterprises.

      Today’s breaches aren’t the result of poor security but of unseen complexity. Hidden identity attack paths buried deep in Active Directory and Entra ID provide adversaries with millions of routes to critical systems.

      We’ll conclude with a strategy to move from reactive defence to proactive identity risk management. By continuously mapping and removing identity attack paths, organisations can eliminate the bridges adversaries depend on.

      Speakers

      Mark Wilson
      Solutions Engineer, SpecterOps
      Adam Chester
      Services Architect and Red Teamer, SpecterOps

      4:35 PM

      The cost of cyber complexity

      Description: The session explores how organisations need to manage cyber risk and complexity. We’ll explore the current landscape, and how digital transformation, business pressures and compliance requirements are driving ever more complex networks. We’ll look at the cost and impact of that complexity, and then how organisations can consolidate their technology stack and simplify their security through unified platforms to solve those challenges, including exploring some real world customer stories.

      Speakers

      Neil Langridge
      Product Marketing Manager, Cato Networks (Wavenet Partner)

      4:50 PM

      Interview: AI, Governance, and Cyber Security

      • Designing effective governance frameworks  from policy to implementation  for institutions at different stages of maturity
      • How security strategy, governance thinking and policy development is adapting to Ai functionality across major financial institutions
      • Practical lessons from early internal adoption, including colleague-facing change, operational readiness and evolving approaches to risk assessment
      • The key concerns shared by regulators and large institutions, such as safety, accountability, model transparency and systemic risk
      • The organisational impact of AI, from workforce considerations to skills, decision-making processes and oversight structures
      • The balance between innovation and regulatory expectations, and what responsible adoption looks like in real operational environments

      Speakers

      Dr Deeph Chana
      Director, Institute for Security Science and Technology, Imperial College London
      Dr Claire Greene
      Senior Policy Technical Specialist, Bank of England
      Jennifer Holmes
      Colleague Journey Lead - Natwest Group

      5:20 PM

      Chair’s closing remarks followed by networking drinks

      Speakers

      Jon Bernstein
      Freelance Writer, Moderator and Digital Media Consultant

      Speakers

      Select a speaker to learn more

      Back
      Sonia Luthra
      Managing Director, UK Data Protection Officer & Head of Data Protection, Société Générale

      Session Details:

      PANEL DISCUSSION: Navigating the regulatory maze – global compliance for cybersecurity leaders

      2025-11-27, 12:45 PM

      View In Agenda
      Next speaker
      Back
      Ryad Jawaheer
      Senior Solutions Architect, eSentire

      Session Details:

      DRAGONS DEN

      2025-11-27, 10:30 AM

      Session Details:

      Beyond the Perimeter: Proactive threat hunting for finance leaders

      2025-11-27, 2:40 PM

      View In Agenda
      Next speaker
      Back
      Ioan Nascu
      GenAI Security Assurance, VP, Citi

      Session Details:

      AI Security: Between Science Fiction and Reality

      2025-11-27, 12:05 PM

      View In Agenda
      Next speaker
      Back
      Adrian Warman
      Former Head of Security Operations at Ministry of Justice UK, Senior Cyber Threat Intelligence Analyst, Bournemouth University

      Session Details:

      PANEL DISCUSSION: What’s keeping CISOs awake in 2025?

      2025-11-27, 9:45 AM

      View In Agenda
      Next speaker
      Back
      Federico Iaschi
      Information Security Director, Starling Bank

      Federico Iaschi is a multilingual Information Security Director at Starling Bank, with over 20 years of experience in both the private and public sectors. He specialises in cyber security resilience and observability, focusing on building robust practices to proactively identify and mitigate risks across diverse systems. As a recognised speaker and author, Federico holds various certifications, including CISSP, CISM, and CCISO, highlighting his deep expertise in information security and risk management. His strategic insights are essential for navigating the evolving landscape of cybersecurity and resilience in the financial services sector.

      Session Details:

      The Extended Enterprise: managing cybersecurity risk beyond your walls

      2025-11-27, 3:35 PM

      View In Agenda
      Next speaker
      Back
      Darren Swift
      Security Sales Engineer FSI, Google Cloud

      Darren Swift is a Senior Customer Engineer at Google Cloud Security, based in Manchester, United Kingdom. With a 17-year career as a highly technical pre-sales professional, he has a proven track record of establishing and growing the UKI presence for emerging technologies at companies including Google, Rubrik, Zerto, EMC, and Autodesk.

      Session Details:

      PANEL DISCUSSION: What’s keeping CISOs awake in 2025?

      2025-11-27, 9:45 AM

      View In Agenda
      Next speaker
      Back
      Jamie Brummell
      Founder and CTO, Socura

      Jamie is a cyber security professional with more than two decades of experience in the sector. As CTO and Co-founder at Socura, he oversees the technology architecture of Socura’s Managed Detection and Response service. He works closely with security teams across industries to continuously enhance security operations and achieve outcomes at scale.

      Session Details:

      PANEL DISCUSSION: What’s keeping CISOs awake in 2025?

      2025-11-27, 9:45 AM

      Session Details:

      DRAGONS DEN

      2025-11-27, 10:30 AM

      View In Agenda
      Next speaker
      Back
      Keith Geraghty
      Director of Solutions Engineering, Edgescan

      As Senior Solutions Director at Edgescan, Keith plays a key role throughout the entire customer journey—from leading the technical side of business development to ensuring measurable value is delivered long after implementation. With over a decade of experience in technical security roles, including penetration testing, Keith now focuses on helping clients solve complex security challenges and maximizing the impact of the Edgescan platform.

      When he’s not identifying and helping to mitigate vulnerabilities in systems, you’ll find him on the mats, trading exploits for takedowns with his sparring partners.

      Session Details:

      How to Sweep Vulnerabilities under the Rug – How to Properly manage vulnerabilities and effectively prioritize remediation

      2025-11-27, 2:30 PM

      View In Agenda
      Next speaker
      Back
      Luke Vile
      Cyber Technical Specialist, Technology, Resilience and Cyber, Specialist Supervision, FCA

      Session Details:

      Regulatory expectations in a digitally-driven threat landscape – FCA’s perspective on cyber resilience

      2025-11-27, 9:00 AM

      View In Agenda
      Next speaker
      Back
      Julian Storr
      Co-Founder, AmberWolf

      Julian Storr is a Director and co-founder at AmberWolf, a specialist security consultancy helping organisations understand and manage real-world technical risk. With over a decade of experience in offensive and assurance roles, Julian was one of the first to hold dual CREST CCSAS and CCSAM certifications, enabling him to lead and deliver more than 18 regulatory red-team engagements under frameworks such as CBEST, TIBER, and ICAST for major financial and telecoms firms. Today, Julian focuses on helping clients bridge the gap between testing, detection, and true resilience.

      Session Details:

      The Confidence Illusion: Rethinking How We Assess Technical Risk

      2025-11-27, 11:40 AM

      View In Agenda
      Next speaker
      Back
      Paul Wilford
      Solutions Consultant, NormCyber

      Paul Wilford has 25 years of experience in the IT industry, 10 of which have been in cyber security; in a mixture of detection & response and security posture analysis roles. He is now a Solutions Consultant for NormCyber - an award-winning provider of security operations.

      Session Details:

      The Future of Digital Risk Protection in Financial Services

      2025-11-27, 2:10 PM

      View In Agenda
      Next speaker
      Back
      David Bicknell
      Principal Analyst, Thematic Research, GlobalData

      David Bicknell has over 30 years’ experience in writing about and analysing the technology sector, both from the vendor and the user perspective, both in the UK and the US. His career in technology journalism and analysis has included detailed research into IT projects and he has co-authored a book, ‘Crash’, which explored why and how IT projects go wrong. He has also co-authored a novel on the life of computer pioneer Charles Babbage. Prior to joining Thematic Research, David spent six years editing a GlobalData title exploring the use of technology in the UK public sector. He is currently also studying part-time for an Undergraduate Certificate in the History of Art at the University of Oxford.

      Session Details:

      Cybersecurity in Financial Services: What Does the 2026 Landscape Look Like?

      2025-11-27, 2:50 PM

      View In Agenda
      Next speaker
      Back
      Jon Bernstein
      Freelance Writer, Moderator and Digital Media Consultant

      Session Details:

      Chair’s opening remarks

      2025-11-27, 8:55 AM

      Session Details:

      PANEL DISCUSSION: What’s keeping CISOs awake in 2025?

      2025-11-27, 9:45 AM

      Session Details:

      Managing risk in a shared responsibility model

      2025-11-27, 11:10 AM

      Session Details:

      PANEL DISCUSSION: Navigating the regulatory maze – global compliance for cybersecurity leaders

      2025-11-27, 12:45 PM

      Session Details:

      Chair’s closing remarks followed by networking drinks

      2025-11-27, 5:20 PM

      View In Agenda
      Next speaker
      Back
      Rodney Jess
      Account Director at Edgescan

      As Account Director at Edgescan, Rodney partners with organizations to strengthen their security posture, reduce risk, and simplify vulnerability management. He focuses on building trusted, long-term relationships and helping clients achieve measurable improvements in their cybersecurity resilience.

      A petrol head at heart, Rodney can often be found around anything with two or four wheels and speed. When not working or enjoying motorsport, he’s a keen cyclist who values the challenge and freedom of the open road.

      Session Details:

      DRAGONS DEN

      2025-11-27, 10:30 AM

      View In Agenda
      Next speaker
      Back
      Justin Kuruvilla
      Chief Cyber Security Strategist at Risk Ledger

      Session Details:

      DRAGONS DEN

      2025-11-27, 10:30 AM

      Session Details:

      Untangling the Supply Chain Problem in Financial Services

      2025-11-27, 12:25 PM

      View In Agenda
      Next speaker
      Back
      Adam Chester
      Services Architect and Red Teamer, SpecterOps

      Session Details:

      Lessons on Identity – the new battleground for enterprise security

      2025-11-27, 4:15 PM

      View In Agenda
      Next speaker
      Back
      Mark Wilson
      Solutions Engineer, SpecterOps

      Session Details:

      Lessons on Identity – the new battleground for enterprise security

      2025-11-27, 4:15 PM

      View In Agenda
      Next speaker
      Back
      Nicole Fowler
      CISO, Bank of Ireland

      Session Details:

      PANEL DISCUSSION: What’s keeping CISOs awake in 2025?

      2025-11-27, 9:45 AM

      Session Details:

      Managing risk in a shared responsibility model

      2025-11-27, 11:10 AM

      View In Agenda
      Next speaker
      Back
      Chris Weston
      Co-Founder and Chief Revenue Officer, Amberwolf

      Session Details:

      DRAGONS DEN

      2025-11-27, 10:30 AM

      View In Agenda
      Next speaker
      Back
      Ryan Sheldrake
      Field CTO, Chainguard

      Session Details:

      DRAGONS DEN

      2025-11-27, 10:30 AM

      Session Details:

      Secure by Default: Why the Future of Open Source Demands it

      2025-11-27, 3:10 PM

      View In Agenda
      Next speaker
      Back
      Dele Adu
      Business Development Manager, NormCyber

      Session Details:

      DRAGONS DEN

      2025-11-27, 10:30 AM

      View In Agenda
      Next speaker
      Back
      Colin Makin
      Spector ops

      Session Details:

      DRAGONS DEN

      2025-11-27, 10:30 AM

      View In Agenda
      Next speaker
      Back
      Neil Langridge
      Product Marketing Manager, Cato Networks (Wavenet Partner)

      Session Details:

      DRAGONS DEN

      2025-11-27, 10:30 AM

      Session Details:

      The cost of cyber complexity

      2025-11-27, 4:35 PM

      View In Agenda
      Next speaker
      Back
      Dr Deeph Chana
      Director, Institute for Security Science and Technology, Imperial College London

      Session Details:

      Interview: AI, Governance, and Cyber Security

      2025-11-27, 4:50 PM

      View In Agenda
      Next speaker
      Back
      Stuart Durrant
      Regional Manager, Tenable

      Session Details:

      DRAGONS DEN

      2025-11-27, 10:30 AM

      View In Agenda
      Next speaker
      Back
      Dr Claire Greene
      Senior Policy Technical Specialist, Bank of England

      Dr Claire Greene is a Senior Policy Technical Specialist at the Bank of England’s Prudential Regulation Authority, where she develops policy on ICT and cyber resilience. Previously, she worked in UK Government on the implementation of the Network and Information Systems Regulations, focusing on strengthening national cyber security. Claire brings extensive experience in financial services regulation and public policy. She is a CISSP-certified professional, a Chartered Accountant and a Fellow of the ICAEW.

      Session Details:

      Interview: AI, Governance, and Cyber Security

      2025-11-27, 4:50 PM

      View In Agenda
      Next speaker
      Back
      Jennifer Holmes
      Colleague Journey Lead - Natwest Group

      Session Details:

      Interview: AI, Governance, and Cyber Security

      2025-11-27, 4:50 PM

      View In Agenda
      Next speaker

      Plan Your Visit

      Venue

      The Minster Building, 21 Mincing Ln., London EC3R 7AG

      Sponsors

      Select a sponsor to learn more

      Headline Sponsors

      Gold Sponsors

      Silver Sponsors

      Bronze Sponsor

      Tech Spotlight Sponsors

      Panel Sponsor

      Exhibitors

      Co-Sponsor

      Partners

      Media Centre

      Knowledge Partners

      Become a media partner today

       

       

      Highlights of the 2024 Cyber Security event

      Enquiry

      Contact Us

      SPONSORSHIP OPPORTUNITIES

      Nadine Edwards

      +44 (0)204 540 7672

      SPEAKING OPPORTUNITIES

      Carlos Fernandes

      Marketing Enquiry

      Kellee Halliburton

      SPONSORSHIP OPPORTUNITIES

       

      Nadine Edwards:

      Commercial Director Events


      +44 0204 540 7672

      SPEAKER OPPORTUNITIES

       

      Emily Martyr

      Head of Event Content