European CISO Xchange
Agents, Quantum, Sovereignty: Balancing Change with Consistency is the New Security Agenda
Overview
Europe’s IT security landscape is undergoing a profound transformation, as organizations move beyond reactive defense to embrace proactive trust orchestration. This new paradigm centers on embedding governance, transparency, and resilience into every facet of digital strategy, ensuring that security is not just a technical safeguard but a foundational element of business value and stakeholder confidence. Leaders are reimagining their approach to risk, compliance, and innovation, recognizing that trust must be architected into systems, processes, and partnerships from the outset.
In this era of accelerating regulatory complexity and technological disruption, the role of the CISO is evolving from technical guardian to strategic enabler. Forward-thinking security leaders are leveraging agentic AI, advancing sovereignty and compliance initiatives, and extending zero trust principles across hybrid environments. By championing collaborative frameworks and data-driven decision-making, they are positioning their organizations to anticipate emerging threats, adapt to shifting market demands, and turn security into a source of competitive advantage and sustainable growth.
Duncan Brown
Duncan Brown is associate vice president, European Security Practice, at IDC EMEA and leads the firm’s security research program in Europe. He specializes in providing strategic advice to his clients, informing and validating their corporate, product, and marketing plans. Brown is an expert in analyzing the security market globally, and his list of security-related clients includes enterprises, central banks, government organizations, and security product suppliers and services providers. Brown’s expertise spans the gamut of security topics including incident response, threat intelligence, and global privacy issues. He established and leads IDC’s coverage of the global impact of the GDPR, the RPEC (ePrivacy Directive update) and NIS Directive on technology companies and their customers. His analysis and opinions are widely sought by industry leaders and investors, while his comments on industry trends and developments frequently appear in the leading business and trade publications.
You can find Duncan on Twitter here.
Joel Stradling
As research director for IDC’s European Security practice, Joel Stradling leads the content and analyst team for tracking the European security segment. His main focus area is the integration of network plus security and evolution of network architectures towards software-defined secure access.
Stradling has 20 years of experience as an analyst of international managed enterprise network and IT services. He is a regular speaker at major industry conferences talking about emerging technologies in B2B enterprise network and IT and wholesale carrier-to-carrier services. Joel is a well-known and highly regarded expert in the industry, offering insight and advice to C-level executives on technology competitive landscapes and emerging technologies, such as SD-WAN, 5G, SDN/NFV, and cyber-security.
Jennifer Thomson
Jen Thomson has more than 20 years’ experience advising IT Vendors, senior IT, and business execs on their digital business optimization and transformation strategies. She leads European Research for Accelerated App Delivery, Cloud, and Services. Her core goal is to drive synergies and growth across these research areas, with a central focus on thought leadership.
She specializes in providing insights on the investment strategies and decisions of European enterprises as they transition to modern application architectures. Her research explores app dev and delivery capabilities required to operate in a digital economy, and how this impacts enterprise organizational structures, culture, processes, tools, and skill sets. She leads the Future of Digital Innovation research for IDC Europe, exploring software innovation strategies and what this means in terms of end-user strategies, investment priorities, software sourcing, and KPIs. Thomson’s core research also explores enterprise maturity and strategies towards enterprise scale and empowered DevOps.
She is responsible for the execution of a broad range of consulting and advisory projects. As IDC’s European expert on application development and delivery strategies, Thomson is an experienced public speaker and regularly presents at conferences and IDC partner and end-user events.
She started her career at Compaq Computer EMEA as a senior research analyst. She has a bachelor’s degree in international business with German from Sheffield Hallam University (United Kingdom) and Pforzheim Fachhochschule (Germany).
Carla Arend
Carla Arend is a senior program director with the European software and infrastructure research team, and heads up IDC’s European cloud research. Arend provides industry clients with key insight into market dynamics, vendor activities, and end-user adoption trends in the European cloud market. As part of her research, she covers topics such as how European organizations are adopting cloud, how cloud drivers and inhibitors are evolving, cloud management, cloud security, data management in the cloud, IoT and cloud, AI and cloud, Devops and cloud, as well as GDPR impact on cloud and cloud code of conduct.
In addition to syndicated research, Arend has worked on many custom consulting projects identifying opportunities in the European cloud market and has authored white papers on subjects such as cloud management, cloud security, data management in the cloud.
Arend is regularly asked to speak at industry events, strategy workshops, sales kick-offs and training, partner events, and end-user events.
Arend holds a BA in business administration from University of Mannheim and an MSc in business administration and management of technology from Copenhagen Business School, in addition to course work at the Asian Institute of Technology (AIT) in Bangkok.
David Clemente
Dave Clemente leads IDC’s C-Suite Tech Agenda research in Europe, with a primary focus on analyzing and assessing tech spending and buyer preferences. His research covers emerging trends around C-Suite technology objectives, priorities and investments.
Dave is a research professional with more than thirteen years’ experience in think tanks (Chatham House and the International Institute for Strategic Studies) and professional services (including PwC and Deloitte). He started his career in cyber security and risk management, and is a regular conference speaker and broadcast media contributor (including BBC, CNN, and Sky).
Dave has authored numerous publications on topics including C-suite technology priorities, digital transformation, risk management, and data protection.
Dave holds degrees from Ohio State University (BA Political Science and International Relations) and the School of Oriental and African Studies (MA Near and Middle Eastern Studies).
Follow Dave on Twitter @Dave_Clemente
Mark Child
Associate Research Director Mark Child of IDC’s European Security Group leads the group’s Endpoint Security and Identity & Digital Trust (IDT) research for both Western Europe and Central & Eastern Europe. He monitors developments in security technologies and strategies as organizations address the challenges of evolving business models, IT infrastructure, and cyberthreats. Mark’s coverage includes in-depth security market studies, end-user research, white papers, and custom consulting.
Mark supports IDC’s global products, including Security Trackers, Security Spending Guides, and Security FutureScapes. He is a regular speaker at IDC events across Europe, including European Security Road Shows and the CISO Summit. Mark also presents at custom events and webinars for security vendors.
Prior to joining IDC in 2004, Mark worked at the Prague Business Journal and as a research analyst for market research firm NFO AISA. Mark Child earned a Bachelor of Science from the University of Brighton.
Courtney Holm
Courtney Holm is an award-winning senior leader in sustainable business development and climate adaptation, with over 20 years’ experience working across global sustainability disciplines. A respected executive and advisor, she is recognised for helping organisations and individuals navigate risk, complexity, and uncertainty in a rapidly changing world.
She is the Managing Director and Founder of The Holm Edit, Honorary Professor at the University of Exeter Business School (Environment, Science and Economy), Chair of the Board at The Orchard Project, and a Board Director and Co-Chair of the Standards Steering Committee at Green Seal.
Courtney specialises in driving systemic change, shaping sustainable markets, addressing geopolitical and climate risk, and transforming consumer and organisational behaviour. She views climate change as a threat multiplier and works with leaders to develop practical adaptation strategies that move beyond resilience to long-term protection and future-proofing of livelihoods and enterprises.
A leading advocate for Tech for Good, Courtney brings more than 15 years’ expertise in upstream supply-chain traceability strategy and solution design. She has delivered hundreds of global programmes focused on transparency, accountability, and sustainable growth across complex value chains.
A sought-after public speaker and commentator, Courtney has spoken at COP26 and COP27, the World Climate Summit, Sustainability LIVE, GO TECH World, SAP Sapphire, Dreamforce, Nyenrode University, and the University of Exeter. Her work and insights have been featured by Bloomberg News and published in the Financial Times, Edie Sustainability Magazine, The Grocer, and Your Business with James Caan. She also serves as a trusted board-level advisor, mentor, and executive coach
Praveen Singh
Agenda
European CISO Xchange
Day 1
IDC Welcome & Official Opening
Venue
Sitges, Barcelona, Spain
Eurostars Sitges
Av. Camí de Miralpeix, 12, 08870, 08870 Sitges, Barcelona, Spain
Knowledge Hub
The NIS 2 directive – where are we now?
The deadline for the transposition of the EU’s second Network and Information Systems Security directive (NIS 2) came and went in October 2024 with only a handful of member states having completed the task.
Shadow AI: How stealth productivity is strangling enterprise AI adoption. And creating a security nightmare…
Remember the good old days when “Shadow IT” was just about rogue Excel spreadsheets and unauthorized Dropbox accounts? But the times they are a-changing! Now we’re dealing with something far more insidious: Shadow AI. And no, it’s not just lurking in the corners of your or anyone’s organization anymore. Now, it’s driving productivity gains while simultaneously creating security nightmares that, hopefully, keep CISOs wide awake at night.
IAM 2025: The Rise of the Machines
Identity and access management (IAM), and by extension, identity security, is one of the most pervasive and impactful challenges facing all European organizations today, from an operational and risk management perspective.
Not the right event for you?
Don’t worry! We organize a variety of events designed to inspire original ideas, share the latest industry insights, and connect professionals like you. Simply sign up for event invitations, and we’ll notify you whenever a new event matches your interests.
SIGN UP