IT Security Summit Milan
Trust, Resilience, and Control in the Autonomous Enterprise
The IT Security Summit Italia 2027 brings together CISOs, regulatory authorities, and cybersecurity leaders from across the country to explore AI-powered defense, cyber resilience, OT security, sovereign AI, and post-quantum readiness.
With NIS2 reshaping compliance obligations for more than 100,000 Italian entities and growing geopolitical tensions intensifying the threat landscape, Italian boards of directors are under increasing pressure to treat cybersecurity as a strategic governance priority. According to IDC research, AI investments have become Italy’s top IT priority, narrowly ahead of cybersecurity, as the two agendas increasingly converge in practice.
According to IDC, European security spending is expected to grow to nearly $97 billion by 2028. However, more than 40% of European organizations experienced security budget cuts in 2025, while cyberattacks increased by 22% year over year, the highest rate globally. This tension between rising risks and constrained investments defines the challenge facing security leaders across Europe in 2027.
The summit offers strategic insights and peer-to-peer networking opportunities for Italian enterprises navigating NIS2, DORA, the EU AI Act, and the most complex threat landscape in the country’s digital history.
Why Attend?
From Strategy to Action: Cybersecurity Priorities
Gain strategic insight into the security challenges transforming European enterprises, from AI-powered threats and digital sovereignty requirements to OT resilience and quantum-era readiness. Take away practical frameworks, insights gained through peer-to-peer exchange, and a concrete roadmap to navigate one of Europe’s most demanding cybersecurity landscapes.
- Govern AI agents while ensuring compliance with NIS2, DORA, and the EU AI Act.
- Detect and counter AI-powered threats, synthetic identities, and deepfakes.
- Strengthen OT security and critical infrastructure resilience across European operations.
- Prepare for post-quantum cryptography and EU and UK quantum migration roadmaps.
- Manage human, machine, API, and AI agent identities across hybrid environments.
- Align cybersecurity investments with regulatory exposure, board accountability, and business resilience.
Roberta Bigliani
Roberta Bigliani is a Group Vice President at IDC, and Global Lead for Energy Insights, Retail Insights, and the IDC Industry Hub.
She leads IDC’s global research, data, and custom delivery agendas for energy, utilities, and retail, and oversees the Industry Hub, which drives cross-industry initiatives and collaboration.
A recognized expert in industry and business transformation, with longstanding experience in energy and utilities, Roberta’s work centers on how AI and digital technologies are reshaping the industry – enabling new business and operating models, enhancing operations and customer experiences, and effectively integrating IT and operational technology.
Her work combines deep sector expertise with a cross-industry lens, helping organizations understand how disruption and innovation propagate across sectors and markets.
Roberta regularly advises senior managers and executives at both technology suppliers and end-user organizations, speaks at international conferences, and moderates executive-level discussions.
She is based in Milan, Italy.
Massimiliano Claps
Massimiliano (Max) Claps is the research director for the Worldwide National Government Platforms and Technologies research in IDC’s Government Insights practice. In this role, Max provides research and advisory services to technology suppliers and national civilian government senior leaders in the US and globally. Specific areas of research include improving government digital experiences, data and data sharing, AI and automation, cloud-enabled system modernization, the future of government work, and data protection and digital sovereignty to drive social, economic, and environmental outcomes for agencies and the public.
BACKGROUND
Max Claps has over 20 years of public sector experience. After starting his career as a management consultant, he joined IDC in 2002 as the lead analyst for the government, healthcare, and education industries in Europe. He has since held various analyst and management roles at IDC working as an advisor to technology suppliers, public sector senior leaders and policymakers throughout North America, Europe, the Gulf Region, Asia-Pacific, and Latin America. He focused on helping public sector organizations realize the benefits of artificial intelligence, edge computing, cloud computing, shared services, digital services, smart cities, and sustainable mobility and transportation. Max also worked at Gartner, where he was research director and agenda manager for the global government research analyst team. IMax spent two years at SAP, where he was the global solution lead for the SAP Future Cities, Citizen Experience and Postal Services programs.
EDUCATION/INDUSTRY ACCOMPLISHMENTS
Claps holds a degree in international business from Bocconi University in Italy.
Throughout his career at IDC, Max Claps has been a co-author of several studies published on behalf of the European Commission on topics like eGovernment, location data and intelligence, cloud computing, and data spaces.
Max Claps has actively contributed to ITU working groups, such as the United for Smart Sustainable Cities (U4SSC) global UN initiative coordinated by ITU, UNECE and UN-Habitat, and the ITU focus group on Metaverse.
Martina Longo
Martina Longo is a research manager in the IDC EMEA Digital Business and AI Transformation Strategy Research Group. In her role she advises ICT players on how organizations create business value using digital technologies. She also leads the IDC EMEA Digital Native Business research, focused on a mix of start-ups, scaleups, and more mature digital natives. She also collaborates with the EMEA C-Suite Tech Agenda research, analyzing technology investments and buyer preferences across C-suites in the EMEA region. She also examines how C-suite leaders are evolving as a result of key market trends and technology innovations (e.g., AI).
Andrea Siviero
Andrea Siviero leads IDC’s European Digital Business and Future of Work Research group. The group provides market research insights to foster a purposeful and fair adoption of technologies supporting digital societies, businesses and workforce and empower tech providers in strategic decision making, planning and go-to-market activities. Siviero also co-leads the IDC Worldwide MacroTech Research program, focused on the intertwined connection between the Economical and Digital worlds – analyzing the impact key MacroEconomic factors have on the digital landscape and viceversa, how technologies are impacting economies around the world.
Siviero advises IT players on building a forward-looking digital business and workforce strategy, while providing an in-depth view on future of work technology adoption, key digital use cases, macroeconomic digital impact, and digital regulations and emerging technology, via qualitative subscriptions and custom consulting projects. He has extensive experience with large strategy and go-to-market projects with IT providers. He is a member of IDC’s global Tech Storytellers taskforce and he is passionate about public speaking and customer engagement opportunities.
He joined IDC’s European team in 2014 and has become a recognized independent analyst across Europe and beyond in the vertical markets and digital business space. He is based in Italy and he holds a joint PhD in mathematics between the Université Bordeaux I (France) and the Universiteit Leiden (the Netherlands). During his PhD, he covered scientific research, academic teaching, and vocational training. He is a native Italian speaker and he is fluent in English and French.
Joel Stradling
As research director for IDC’s European Security practice, Joel Stradling leads the content and analyst team for tracking the European security segment. His main focus area is the integration of network plus security and evolution of network architectures towards software-defined secure access.
Stradling has 20 years of experience as an analyst of international managed enterprise network and IT services. He is a regular speaker at major industry conferences talking about emerging technologies in B2B enterprise network and IT and wholesale carrier-to-carrier services. Joel is a well-known and highly regarded expert in the industry, offering insight and advice to C-level executives on technology competitive landscapes and emerging technologies, such as SD-WAN, 5G, SDN/NFV, and cyber-security.
Thomas Mascioli Colavecchi
Appassionato di Security Governance con esperienza pluriennale, è stato consulente ed imprenditore nel settore fino al 2011. Nel 2012 entra in CDP, dove nell’arco di 10 anni ha posto le fondamenta della governance di sicurezza allineandola alle migliori pratiche di settore. Dal gennaio 2023 ha assunto il ruolo di Chief Information Security Officer di Polo Strategico Nazionale, che ha portato in poco più di un anno a certificarsi ISO 27001, ISO 23301 e CSA STAR LEVEL 2, ed a qualificare i servizi e l’infrastruttura PSN al massimo livello consentito dalle normative applicabili (Q*4).
Giovanni Zanetti
Giovanni is a senior manager and consultant specializing in cybersecurity, security governance, and digital risk management. He currently serves as Vice President of AIPSI (Italian Association of Information Security Professionals, ISSA Italian Chapter) and as Cyber Operations Manager at the Milano Cortina 2026 Foundation. Throughout his career, he has worked as a Security Advisor for leading European telecommunications operators and has gained significant international experience in information security, compliance, and operational resilience, including serving as a Senior Security Consultant at Ericsson. An internationally certified professional and speaker at numerous industry events, he actively contributes to the dissemination of cybersecurity awareness and the promotion of best practices in cyber protection for both public and private organizations.
Stefano Righetti
Luca Della Giovanna
Key Topics
Securing AI in a Regulated Continent
Exploring how European enterprises can govern AI agents and autonomous systems within the constraints of NIS2, DORA, and the EU AI Act, while maintaining operational trust, accountability, and compliance across increasingly AI-driven environments
Europe’s Cyber Arms Race
Examining how AI is intensifying both cybercrime and cyber defense across Europe, as adversaries exploit synthetic identities and deepfake technology while European SOC teams race to deploy AI-powered detection, response, and dynamic playbook generation.
Identity and Access in the Post-Perimeter Enterprise
Exploring how identity has become the critical control layer for European enterprises navigating hybrid cloud, NIS2 access governance requirements, and the explosive growth of non-human identities including AI agents and machine-to-machine access.
Securing the European Digital Supply Chain
Supply chain attacks have become one of the most significant cybersecurity vectors in Europe. This theme explores how European organizations are strengthening software assurance, third-party risk management under NIS2, and AI bill-of-materials practices as 65% of European agentic AI deployments move toward BOM requirements by 2027.
Cyber Risk, Boards, and the Compliance Imperative
European boards face unprecedented accountability as NIS2 and DORA impose direct executive liability for cyber-risk management. This theme examines how European leaders and boards are quantifying risk, aligning security investment with financial exposure, and navigating the most demanding regulatory environment globally.
Sovereignty, Regulation, and Digital Trust
Analyzing how the EU AI Act, data residency mandates, NIS2, DORA, and sovereign cloud requirements are reshaping enterprise architecture and governance across Europe. With 40% of European governments expected to mandate sovereign AI by 2028, the stakes for strategic planning have never been higher.
2027 Prediction
By 2028, 25% of European enterprises will use autonomous agent-powered cyber-risk quantification platforms to turn security metrics into financial exposure, guiding budgets, controls, and M&A risk assessments
How to Attend
Attendance is free of charge, subject to completion of the registration form, for professionals working in the following sectors: Manufacturing, Automotive, Fashion, Finance, Banking and Insurance, Retail, Energy and Utilities, Media, Government, Healthcare, Education, Transport, Logistics, Telecommunications, and Personal and Professional Services.
The event will take place on May 11, 2027, starting at 9:00 AM.
Access is restricted to eligible industry professionals. Registration is not open to non-sponsoring ICT companies (vendors, distributors, resellers, VARs, and system integrators), ICT consulting and services firms, private individuals, or freelancers.
The official language of the event is Italian.
Knowledge Hub
The NIS 2 directive – where are we now?
The deadline for the transposition of the EU’s second Network and Information Systems Security directive (NIS 2) came and went in October 2024 with only a handful of member states having completed the task.
European ICT spending implications of NATO’s 5% GDP spending target
At the 2025 NATO Summit in The Hague a few weeks ago, member states pledged to allocate 5% of their annual GDP to core defense requirements and defense- and security-related expenditures by 2035.
IAM 2025: The Rise of the Machines
Identity and access management (IAM), and by extension, identity security, is one of the most pervasive and impactful challenges facing all European organizations today, from an operational and risk management perspective.
Not the right event for you?
Don’t worry! We organize a variety of events designed to inspire original ideas, share the latest industry insights, and connect professionals like you. Simply sign up for event invitations, and we’ll notify you whenever a new event matches your interests.
Sign up