From NIS2 to the EU AI Act: Turning Regulatory Pressure into Strategic Advantage

How Italian organizations are converging NIS2, DORA, and EU AI Act obligations into a single security architecture, and treating compliance as a board-level governance priority rather than a cost centre.

The New Cyber Arms Race: AI-Powered Defense vs. AI-Powered Threats

How AI is intensifying both attack and defense, from synthetic-identity phishing and deepfakes to AI-powered detection, response, and dynamic playbook generation across the SOC.

Modernizing the SOC with AI-Driven Detection and NIS2-Compliant Response

How AI-powered analytics, automation, and dynamic playbooks are transforming security operations while supporting NIS2 incident reporting and DORA resilience requirements.

Sovereign AI and Digital Trust: Italy’s Strategic Imperative

How sovereign AI mandates, data residency requirements, and geopolitical tensions are reshaping enterprise security architecture, cloud strategy, and digital trust.

Identity Governance as the Security Control Plane

How organizations are securing workforce, machine, and non-human identities, including AI agents, under NIS2 access governance and DORA ICT risk-management requirements.

Securing Agentic AI at Enterprise Scale: Governance, Visibility & EU AI Act Compliance

How organizations can secure AI models, agents, and autonomous workflows while meeting the EU AI Act’s transparency, auditability, and human-oversight requirements.

Managing Supply Chain and Third-Party Cyber Risk Under NIS2 and DORA

Strengthening software assurance, vendor risk management, and AI bill-of-materials practices as third-party and supply chain risk becomes a primary regulatory focus.

Ransomware Resilience in Critical Infrastructure

How organizations in energy, transport, finance, and the public sector are strengthening operational recovery and business continuity under NIS2 obligations.

Securing OT and Critical Infrastructure: From NIS2 to IEC 62443

Advancing OT security maturity and closing the IT/OT convergence gap, with only 16% of European organizations having fully integrated IT/OT security today.

Each table is led by a moderator and includes a small group of pre-registered participants. All sessions take place simultaneously and focus on fostering interaction, sharing experiences, and peer discussion on topics relevant to various companies and industries.

• IDC Connect 1: API Security: The New Front Line in an Agentic World
• IDC Connect 2: Cybercrime as a Service: The Underground Economy in 2026
• IDC Connect 3: The Business of Breach: Reputational Risk and Shareholder Trust
• IDC Connect 4: Strategic Security Spending: Justifying and Optimizing Budgets
• IDC Connect 5: Identity, Access and Trust: From IAM to CNAPP
• IDC Connect 6: Security Operations & Analytics: Detect, Respond, Recover
• IDC Connect 7: AI, Agentic AI and Security: Tools, Threats and Trust
• IDC Connect 8: Emerging Architectures: Zero Trust, IT/OT Convergence, SASE… Building for the Future
• IDC Connect 9: Digital Sovereignty and Supply Chain Risk: Protecting the Extended Ecosystem

The Strategic Security Spend: Justifying Investment Amid Budget Pressure

With 48% of Italian organizations seeing security budgets cut in 2025, how leaders are rationalizing vendors, consolidating platforms, and aligning investment with risk and business value.

Who Owns Cyber Risk in the Italian Boardroom?

A cross-functional discussion on NIS2 and DORA executive liability, cyber-risk quantification, and how boards are approaching direct accountability for security strategy and investment.

Preparing for the Post-Quantum Security Transition

EU and UK quantum migration timelines, cryptographic inventory challenges, and why enterprises must begin quantum risk assessments and crypto-agile planning now.

IBEX 35

A closing reflection on how AI, NIS2 enforcement, sovereign mandates, and quantum risk are reshaping the role of the Italian CISO across the 2027-2030 horizon.