2026 Edition
The IDC IT Security Summit Sweden 2026 in Stockholm brought together cybersecurity, technology and business leaders to explore how to secure an AI-powered organisation. The programme addressed Zero Trust, identity security, regulatory compliance and AI’s dual role as a security tool and an emerging threat. Expert presentations and discussions also examined deepfake-enabled fraud, ransomware protection and recovery, highlighting the importance of digital trust and cyber resilience in supporting business innovation.
Photogallery
Speakers
Duncan Brown
Duncan Brown is associate vice president, European Security Practice, at IDC EMEA and leads the firm’s security research program in Europe. He specializes in providing strategic advice to his clients, informing and validating their corporate, product, and marketing plans. Brown is an expert in analyzing the security market globally, and his list of security-related clients includes enterprises, central banks, government organizations, and security product suppliers and services providers. Brown’s expertise spans the gamut of security topics including incident response, threat intelligence, and global privacy issues. He established and leads IDC’s coverage of the global impact of the GDPR, the RPEC (ePrivacy Directive update) and NIS Directive on technology companies and their customers. His analysis and opinions are widely sought by industry leaders and investors, while his comments on industry trends and developments frequently appear in the leading business and trade publications.
Event Sessions
One Day Event 3:25 pm
Final Remarks & Key Takeaways
One Day Event 2:15 pm
Fireside chat: AI and Security: Tool, Threat, Trust
As AI reshapes how fast the business wants to move, security teams are left holding the line between opportunity and exposure. In this fireside chat, IDC’s Duncan Brown sits down with Filip Wennerhult, CISO of Avonova, to talk about what staying in control actually looks like when every team wants to move faster than security can assess.
One Day Event 9:05 am
Securing an AI-Powered Business – Navigating the New Frontier of Trust, Compliance & Innovation
Europe is at a strategic inflection point. According to IDC’s latest research, security spending in Europe is forecast to reach nearly $60 billion by 2028, growing at a compound annual growth rate of around 9.4% from 2025 to 2029. Organizations are responding to intensifying cyber threats, expanding regulatory frameworks such as the EU AI Act, NIS2, GDPR, and DORA, and a surge in stakeholder demand for digital trust and sovereignty. IDC also reports that software and cloud-native security solutions are expected to account for a majority of global security spend by 2028, as enterprises accelerate their adoption of integrated, analytics-driven protection.
At the same time, AI is reshaping the security landscape in Europe. IDC research shows that 38% of European organizations are already investing in AI or Agentic AI, and 43% are actively testing or running proofs of concept, while nearly 70% expect AI-driven disruption within the next 18 months. For European security leaders, this represents both a strategic opportunity and a growing area of risk. AI is enhancing threat detection, automation, and decision-making, yet it is also being exploited by adversaries to scale attacks and manipulate data. As a result, European organizations are prioritizing investments in AI-powered security analytics, identity and access management (IAM), and managed detection and response (MDR) to stay ahead of threats while maintaining transparency, compliance, and ethical governance.
Joel Stradling
As research director for IDC’s European Security practice, Joel Stradling leads the content and analyst team for tracking the European security segment. His main focus area is the integration of network plus security and evolution of network architectures towards software-defined secure access.
Stradling has 20 years of experience as an analyst of international managed enterprise network and IT services. He is a regular speaker at major industry conferences talking about emerging technologies in B2B enterprise network and IT and wholesale carrier-to-carrier services. Joel is a well-known and highly regarded expert in the industry, offering insight and advice to C-level executives on technology competitive landscapes and emerging technologies, such as SD-WAN, 5G, SDN/NFV, and cyber-security.
Gian Carlo De La Paz
gdelapaz@idc.com
Event Sessions
One Day Event 3:25 pm
Final Remarks & Key Takeaways
One Day Event 9:00 am
Welcome by IDC
Jake Moore
Jake Moore, Crime Enthusiast and Cybersecurity Advisor, brings a unique edge to the digital security realm. As well as conducting research and analysis into the latest cybersecurity and AI threats, he also regularly comments on a range of cybersecurity and AI stories in the press for outlets such as BBC, Sky News and CNN. Jake previously worked in the police force for 14 years in the Digital Forensics and Cyber Crime Unit. He investigated 100s of crimes and spent much of his time in Crown Court producing digital evidence for an abundance of different offences ranging from fraud to murder. Leveraging this experience, he now guides businesses and employees in bolstering their cybersecurity by blending real-world crime-fighting insights, using artificial intelligence and social engineering techniques with advanced digital security strategies to combat evolving cyber threats.
Event Sessions
One Day Event 2:35 pm
The Deepfake Interview: Breaking In From the Inside
Jake lifts the lid on the darker side of artificial intelligence, taking you deep into the criminal underworld powered by today’s most advanced technology. In the name of research, he used AI driven face-swapping tools to pass a live video job online interview under a completely false identity. Not once, but repeatedly. Through these real-world experiments, Jake reveals how powerful AI tools are already being weaponised by criminals to infiltrate organisations from the inside, bypassing traditional security and exploiting human trust.
But it doesn’t stop there. With the same tools now widely available, Jake demonstrates how AI can clone voices, generate convincing documents and create fake identities in seconds, giving cybercriminals everything they need to scale deception like never before. Nothing is real anymore. The question is, would you spot it?
Sofia Edvardsen
With a deep interest in law, technology and business strategy, Sofia Edvardsen engages passionately in understanding and explaining the world’s emerging legal regulatory landscape for technologies. How can businesses prepare today for the regulations of the future? What should be done short term to position the industry for the long term considering what rules that then will apply?
With extensive experience as an attorney, she has worked closely with a wide range of organisations. That enables her to provide practical and realistic solutions to emerging legal challenges, also aiming to help make the right decisions based on an understanding of what is possible today and what the future might bring. She is the founding partner of Sharp Cookie Advisors (https://www.sharpcookie.se/en), a technology and digitization law firm based in Stockholm, Sweden. In her role there she represents sellers and buyers of cloud computing (IaaS, PaaS, and SaaS models), software licensing and other technology transactions.
She also holds the role as Data Protection Officer for several global companies as well as start-ups. In addition, she provides services to Data Protection Programs for health care providers and companies in media, marketing, retail and tech. Sofia also leads the Swedish chapter of the International Association of Privacy Professionals (IAPP). In that role, she facilitates the development of privacy-enhancing practices for the Swedish industry and the public sector.
Sofia Edvardsen graduated from School of Business, Economics and Law at the University of Gothenburg and has a degree from Chalmers University of Technology. She is a certified privacy professional and holds a CIPP/E certification. She has served as in-house legal counsel of a global telecom company, in-house legal counsel at a technology investment fund and as a lawyer in the Stockholm and London offices of Baker McKenzie law firm.
Event Sessions
One Day Event 3:00 pm
Regulation & Resilience: NIS2, DORA, EU AI Act & Beyond
Jaye Tillson
Jaye Tillson is the CTO Security and a Distinguished Technologist at HPE, recognized as a leading voice in cybersecurity with a focus on Zero Trust, AI, and SASE strategy. He is renowned for translating complex security architectures into business outcomes that resonate with C-level executives.
With more than 25 years of experience driving global technology transformations, Jaye has guided countless organizations through their Zero Trust journeys, helping them accelerate digital transformation, strengthen resilience, and thrive in today’s dynamic landscape. He brings executive credibility and a rare ability to bridge conversations across IT, OT, and business leadership.
Within HPE, Jaye drives go-to-market success by coaching sales teams to position Zero Trust as a catalyst for cloud adoption, hybrid work, and regulatory compliance. By reframing security as a competitive advantage rather than a cost center, he serves as a force multiplier in winning strategic opportunities. Recognized as a trusted advisor both internally and externally, Jaye partners closely with marketing and PLM teams while also serving as the voice of the customer. He brings field insights back into HPE to shape product strategy, refine sales motions, and fuel innovation.
A recognized thought leader, Jaye speaks regularly at leading industry events including Gartner, VMWorld, Evanta, IDC, and .Next. He has served on advisory boards for VMware, Nutanix, CIOnet, and Proofpoint, and is co-founder of the Zero Trust Forum and co-host of the No Trust podcast, where he engages audiences on Zero Trust, SASE, SSE, AI, and the evolving role of the CISO.
Jaye is also an active contributor to the Cloud Security Alliance Zero Trust Working Group, a board member of the CSA UK Chapter, and an advisor to Infosec.live. Beyond work, he pursues his passions for motor racing, fine cuisine, and global travel.
More at: jayetillson.tech
Event Sessions
One Day Event 9:30 am
Zero Trust or Bust: Why Half Measures Create Full Risk
Most organisations haven’t failed at Zero Trust because they chose the wrong technology. They’ve struggled because they’re trying to bolt Zero Trust onto architectures that were never designed for it.
At the same time, AI is changing the pace of cybersecurity. Vulnerabilities are discovered faster, exploits are developed faster, and attackers are moving faster than ever before. Complexity has become one of the biggest risks facing security teams.
In this session, Jaye Tillson explains why Zero Trust is an operating model rather than a product, why consistency is the foundation of modern security, and how organisations can simplify their architecture by bringing identity, networking and security together.
You’ll leave with practical ideas for reducing complexity, improving resilience and building a Zero Trust strategy that’s designed for the realities of today’s hybrid and AI-driven world.
Paul Estep
Event Sessions
One Day Event 10:40 am
The Resilient Enterprise – Why trust will become the most valuable currency of the AI economy
AI gives attackers and defenders the same power, but defenders hesitate while our adversaries act at machine speed Even vendors struggle to contain their own models. So the goal moves from preventing attacks to surviving them and holding trust through disruption. Three fragilities (decision, identity, supply chain) sit unowned in many organizations; Europe’s NIS2/DORA/AI Act/CRA stack is really one blueprint for digital trust. Leaders need answers to five AI-accountability questions, a three-pillar framework (Evaluate, Deploy, Govern) and a named executive owner. The future belongs to organizations with the most trusted AI.
Andrei Dumitru
Andrei leads the Identity for AI practice at IT Smart Systems, where he helps enterprises turn agentic AI from prototype into production. Drawing on two decades of digital identity and open banking implementations for top-tier EMEA financial institutions, Andrei designs the runtime security that makes AI agents trustworthy: every action authorized – agent behaviour scored in real time – and a human in the loop for the decisions that matter. He is the architect of IT Smart Systems’ end-to-end accelerator for securing digital assistants on enterprise agent platforms with the Ping Identity Platform, and a frequent voice on why security, not the model, is what unlocks the agentic channel.
Event Sessions
One Day Event 9:50 am
From Conversational AI to Trusted Agents: Securing the Agentic Channel
AI assistants are moving beyond answering questions and recommendations to acting: accessing data, invoking APIs, orchestrating workflows, and transacting on behalf of people. This creates significant opportunities for better customer experiences, but also new risks around impersonation, excessive permissions, and accountability.
In this session, Andrei will explore how organisations can build trust into conversational and agentic experiences by giving AI agents their own identities, binding them to an accountable human or organisation, applying delegated and least-privilege access, authorising actions at runtime, and keeping people in control of high-impact decisions. The session will show why identity is becoming the control plane for secure AI adoption and the next generation of customer experiences.
Filip Wennerhult
Event Sessions
One Day Event 2:15 pm
Fireside chat: AI and Security: Tool, Threat, Trust
As AI reshapes how fast the business wants to move, security teams are left holding the line between opportunity and exposure. In this fireside chat, IDC’s Duncan Brown sits down with Filip Wennerhult, CISO of Avonova, to talk about what staying in control actually looks like when every team wants to move faster than security can assess.
Axel Sundelöf
Event Sessions
One Day Event 11:20 am
When budget pressure meets ransomware: The cost of waiting to modernize backup
As organizations balance economic pressures, AI initiatives, and cybersecurity priorities, backup modernization is often pushed down the investment list. Yet the financial and operational impact of a successful ransomware attack can far exceed the cost of building resilient recovery infrastructure. Join Veeam and Object First as they explore IDC research on the growing risks of deferred backup investment and share practical recommendations for strengthening cyber resilience.
Johan Sanneskar
Event Sessions
One Day Event 11:20 am
When budget pressure meets ransomware: The cost of waiting to modernize backup
As organizations balance economic pressures, AI initiatives, and cybersecurity priorities, backup modernization is often pushed down the investment list. Yet the financial and operational impact of a successful ransomware attack can far exceed the cost of building resilient recovery infrastructure. Join Veeam and Object First as they explore IDC research on the growing risks of deferred backup investment and share practical recommendations for strengthening cyber resilience.
Ian Wood
During his 25+ years in the software industry, Ian has worked in a variety of roles in data management and security practices, previously at Veritas and Symantec. Ian and his team are engaged with customers to design cyber resilience solutions to solve complex problems for organizations across multiple business sectors.
Event Sessions
One Day Event 11:35 am
The Day After: Why Recovery Has Become the Most Important Security Strategy
Every cybersecurity strategy is built around a single moment: the day after an attack.
When systems are encrypted, identities are compromised, and business services are offline, prevention is no longer the priority. Recovery is.
This session reveals why organisations are shifting investment and leadership focus towards Cyber Resilience and Resilience Operations (ResOps).
Rasmus Andersen
Rasmus Andersen is a cybersecurity and network security professional with more than 14 years of experience spanning security engineering, network architecture, technical presales and team leadership. Based in Denmark, he has designed, implemented and supported secure, scalable infrastructure for organisations across a range of industries, including complex and geographically distributed environments.
Today, Rasmus works at Horizon3, supporting security teams across the Nordics and helping them move beyond assumptions to understand what an attacker could actually do in their environment. His work focuses on practical, evidence-led security, including safe, AI-driven penetration tests with NodeZero.
Event Sessions
One Day Event 11:00 am
In the Cyber Trenches: War Stories from 326,000 pentests
To defeat the adversary, we must move beyond tracking their tools—we must understand their mind.
The traditional approach to cybersecurity has focused relentlessly on the technical what (malware signatures, TTPs) and the macro why (geopolitical tension, economic drivers). However, the next decisive frontier in intelligence and defence requires a pivot to the who: the personality dynamics that fuel cyber threat actor groups and using autonomous tools to follow in their footsteps.