The 2027 IT Security Summit Saudi Arabia brings together CISOs, security leaders, policymakers, and technology innovators to address AI-powered threats, data sovereignty, identity security, and cyber resilience. With NCA mandates and SDAIA data governance requirements expanding across all sectors, the summit focuses on the strategies, governance, and innovations shaping secure digital enterprise in the kingdom.
77% of Saudi organizations report ransomware as their top threat in 2025.Agentic AI is amplifying these risks: AI-powered attacks now move faster than human-led defenses.
At the same time, NCA mandates and SDAIA data governance requirements are tightening compliance obligations across every sector. This summit delivers the insights and frameworks Saudi security leaders need to defend AI-driven operations, meet rising regulatory demands, and build cyber resilience for Vision 2030.
Trust in the Age of Autonomous AI
Securing AI agents and autonomous systems with governance controls.
The Next Cyber Arms Race
How AI is reshaping cyber defense against advanced automated threats.
Identity-Centric Defense
Defending enterprises through identity-centric access controls and zero trust.
Preparing for the Post-Quantum Security Era
Preparing enterprises for quantum-safe security and data protection.
Resilience-Led Security
Strengthening resilience against ransomware, disruption, and operational continuity risks.
Sovereign Cloud & AI Governance
Building sovereign cloud infrastructure with strong AI governance frameworks.
Securing the Digital Supply Chain
Managing supply chain risk through visibility, trust, and assurance.
Cyber Risk, Governance, and Boardroom Priorities
Aligning cybersecurity with business resilience and executive risk.
By 2028 40% of large enterprises in the META region will have a dedicated budget for GenAI Fraud Defense, as banking and financial services organizations respond to a triple-digit rise in AI- generated fraud attempts.
Source: Worldwide Security Spending Guide, META, 2026
Associate Research Director (META)
IDC
Read Bio
Associate Research Director (META)
IDC
Read Bio
As AI agents gain autonomy to access data, make decisions, and act across enterprise systems, they introduce a new and rapidly expanding attack surface that traditional security models weren’t built to handle. This keynote draws on IDC research to outline how security leaders can govern agent identities, enforce guardrails, and build resilient architectures that let organizations scale agentic AI with confidence.
Saudi Arabia-specific security intelligence
IDC research and analyst insights grounded in Saudi market conditions, NCA compliance realities, and local threat data from 82 Saudi security leaders.
Peer network that matters
Connect with Saudi CISOs and GCC security leaders who share the same regulatory environment, giga-project pressures, and OT security challenges.
Decisions, not just discussions
Leave with a clear view of where to invest, what to prioritize, and how to align security with business growth in Saudi Arabia’s fast-moving market.
Frameworks you can apply now
Take home approaches for NCA-compliant architecture, SDAIA data governance readiness, and AI security governance that work within Vision2030 digital ambitions.
This blog explores how organizations can embed trust, governance, and resilience into AI systems to ensure they operate reliably, transparently, and at scale in the agentic economy.
AI is transforming SOC operations with dynamic, AI-driven playbooks that adapt in real time to evolving threats. Security teams are shifting from static rules to intelligent, on-the-fly decision-making frameworks for faster, more precise response.
Quantum computing raises new security risks, making risk assessments critical. Organizations must act now to become quantum-ready and future-proof their defenses.
Arrive, Register and Connect Over Coffee
Shilpi Handa
Associate Research Director (META), IDC
Autonomous AI is shifting security from protecting systems and people to governing machine-speed decisions and actions, demanding a fundamental rethink of leadership, accountability, and risk. Drawing on IDC research, this keynote shows how CISOs and security leaders can set the strategy, operating models, and trust frameworks needed to stay ahead of emerging threats while enabling responsible AI-driven innovation.
Shilpi Handa
Associate Research Director (META), IDC
Exploring how security leaders are evolving from operational guardians to strategic partners responsible for resilience, trust, and enterprise growth. Saudi CISOs are the architects of the kingdom’s secure digital future and yet balancing security with business priorities continues to be a challenge.
How leading organisations are translating cyber risk into business impact, financial exposure, and investment decisions that resonatewith executive stakeholders. In Saudi Arabia, security investment is a sovereign priority. The ability to articulate it in business termsdetermines whether it is protected or cut.
How governments and enterprises are responding to growing demands for data sovereignty, supply chain integrity, and trusted digitalecosystems across borders. Saudi Arabia’s sovereign cloud push is redefining how CISOs design infrastructure for the kingdom’s mostsensitive workloads.
Security leaders examine how extended digital ecosystems are reshaping third-party risk management, vendor assurance, and supplychain resilience frameworks. With 43% of Saudi CISOs citing supply chain attacks as a top-three threat, and the kingdom’s supplybase expanding through giga-project procurement, third-party risk has become a live operational challenge.
Saudi Arabia’s IDC research shows identity and access management as the second-highest technology investment priority, yet meeting compliance and regulatory standards remains the top identity challenge for organisations. As AI agents, machine identities, and autonomous systems proliferate, organisations need a new approach to identity, access, and trust.
How AI-powered detection, automation, and response capabilities are reshaping security operations and enabling more resiliententerprises. With NCA’s MSOC licensing framework setting new standards for SOC operations in Saudi Arabia, the pressure toautomate, localise, and scale is acute.
Strategies for maintaining visibility, protection, and recovery across increasingly distributed hybrid environments. As Saudi Arabia’sgiga-projects connect IT and OT at unprecedented scale, cyber resilience is not a security metric, it is a national infrastructurerequirement.
Connect with like-minded peers and industry partners in dynamic roundtable discussions, where meaningful conversations come together to surface actionable insights, challenge conventional thinking, and foster candid dialogue.
Connect with like-minded peers and industry partners in dynamic roundtable discussions, where meaningful conversations come together to surface actionable insights, challenge conventional thinking, and foster candid dialogue.
8:50PM – 9:30PM
8:50PM – 9:30PM
8:50PM – 9:30PM
8:50PM – 9:30PM
Regulatory compliance is the top operational priority for 65% of Saudi CISOs.But compliance tells you where you were, not where the threat is going. This workshop explores how leading security teamsare using IDC’s forward-looking intelligence — alongside NCA frameworks and sector-specific guidance — to build securitystrategies that anticipate, not just react.
Shilpi Handa
Associate Research Director (META), IDC
Arrive, Register and Connect Over Coffee
Shilpi Handa
Associate Research Director (META), IDC
As AI agents gain autonomy to access data, make decisions, and act across enterprise systems, they introduce a new and rapidly expanding attack surface that traditional security models weren’t built to handle. This keynote draws on IDC research to outline how security leaders can govern agent identities, enforce guardrails, and build resilient architectures that let organizations scale agentic AI with confidence.
Shilpi Handa
Associate Research Director (META), IDC
An opening keynote examining how AI agents,autonomous workflows, and machine-driven operations are transforming enterprise security models, governance frameworks,and operational risk management.
Explores why enterprises are shifting fromprevention-first security strategies toward resilience, recovery automation, operational continuity, and measurable cyberpreparedness in an “assume breach” world.
Examines how AI is accelerating bothcyberattacks and cyber defense capabilities, reshaping SOC operations, threat intelligence, phishing campaigns, and enterpriserisk exposure globally.
Analyzes how geopolitical tensions, sovereign AImandates, data residency requirements, and evolving regulations are influencing enterprise security architecture and digital truststrategies.
Explores the enterprise implications of quantum computing advancementsand why organizations must begin planning for post-quantum cryptography, long-term data protection, and crypto-agility.
How Qatar’s energy operators are securing OT and industrialcontrol systems as LNG production and export operations become more connected and data-driven.
How AI-powered detection and automation are helping Qatar’sbanking, energy, and government SOCs improve triage speed and analyst productivity under National Cyber Security Strategyrequirements.
Securing citizen services, TASMU-linked platforms, andmachine identities across Qatar’s smart government initiatives.
Explore how AI and automation, through SOAR platforms and machine learning-based detection, are being built into managed security services in Qatar
How managed detection and response (MDR) services combine threat intelligence, behavioral analytics, and human-led investigation to cut mean time to detect and respond
11:50AM – 12:05PM
12:05PM – 12:20PM
12:20PM – 12:35PM
11:50AM – 12:05PM
12:05PM – 12:20PM
12:20PM – 12:35PM
11:50AM – 12:05PM
12:05PM – 12:20PM
12:20PM – 12:35PM
12:35PM – 12:50PM
12:50PM – 1:05PM
1:05PM – 1:20PM
12:35PM – 12:50PM
12:50PM – 1:05PM
1:05PM – 1:20PM
12:35PM – 12:50PM
12:50PM – 1:05PM
1:05PM – 1:20PM
1:20PM – 1:50PM
1:20PM – 1:50PM
1:20PM – 1:50PM
Associate Research Director (META)
IDC
Read bio
Regulatory compliance is the top operational priority for 65% of Saudi CISOs.But compliance tells you where you were, not where the threat is going. This workshop explores how leading security teamsare using IDC’s forward-looking intelligence — alongside NCA frameworks and sector-specific guidance — to build securitystrategies that anticipate, not just react.
Autonomous AI is shifting security from protecting systems and people to governing machine-speed decisions and actions, demanding a fundamental rethink of leadership, accountability, and risk. Drawing on IDC research, this keynote shows how CISOs and security leaders can set the strategy, operating models, and trust frameworks needed to stay ahead of emerging threats while enabling responsible AI-driven innovation.
Associate Research Director (META)
IDC
Read bio
The demands on the kingdom’s CISOs have never been greater or more consequential. AI-driven attacks arerising. The digital agenda will not slow down. Resilience is no longer a defence posture, but a competitiveadvantage. The IDC CISO Xchange is where they meet to shape what comes next.
Building Trust in the Age of Autonomous AI
Governance, accountability, and trust frameworks for AI-powered enterprises.
Cyber Resilience as Business Strategy
Making resilience a driver of business continuity and growth.
Identity, Trust and Expanding Attack Surface
Securing identities across people, systems, and AI agents.
Digital Sovereignty and Strategic Trust
Protecting data sovereignty, strategic assets, and regulatory trust.
Translating Cyber Risk into Business Value
Connecting security investments to business outcomes.
The Future of Security Operations
Balancing AI innovation with security and governance.
Supply Chain Security and Third-Party Risk
Managing third-party and supply chain risk across extended digital ecosystems.
Leadership in an Era of Continuous Disruption
Leading security strategy amid evolving risks and change.
Saudi Arabia's cybersecurity spending will grow 20% in 2026-2027, the fastest rate of any market in the META region.
Associate Research Director (META)
IDC
Read Bio
Associate Research Director (META)
IDC
Read Bio
Regulatory compliance is the top operational priority for 65% of Saudi CISOs.But compliance tells you where you were, not where the threat is going. This workshop explores how leading security teamsare using IDC’s forward-looking intelligence — alongside NCA frameworks and sector-specific guidance — to build securitystrategies that anticipate, not just react.
Autonomous AI is shifting security from protecting systems and people to governing machine-speed decisions and actions, demanding a fundamental rethink of leadership, accountability, and risk. Drawing on IDC research, this keynote shows how CISOs and security leaders can set the strategy, operating models, and trust frameworks needed to stay ahead of emerging threats while enabling responsible AI-driven innovation.
Peer intelligence
Every session grounded in IDC primary research and guided by IDC security analysts.
IDC Research
Candid peer exchange with Saudi Arabia’s most senior security leaders – selected by seniority and role.
Strategic Outcomes
Leave with frame works and evidence ready for boards, budgets, and teams in the kingdom’s most complex sectors.
The Right Room
Insights anchored to Saudi Arabia’s security investment priorities and the regulatory environment shaping enterprise decisions.
This blog explores how organisations can embed trust, governance, and resilience into AI systems to ensure they operate reliably, transparently, and at scale in the agentic economy.
AI is transforming SOC operations with dynamic, AI-driven playbooks that adapt in real time to evolving threats.
Cyber risk is no longer just a technical issue, it is a core business concern discussed at the highest levels of the organization.
Associate Research Director (META)
IDC
Read bio
As AI agents gain autonomy to access data, make decisions, and act across enterprise systems, they introduce a new and rapidly expanding attack surface that traditional security models weren’t built to handle. This keynote draws on IDC research to outline how security leaders can govern agent identities, enforce guardrails, and build resilient architectures that let organizations scale agentic AI with confidence.
Associate Research Director (META)
IDC
Read bio
To access this content, please enter the password you have received from IDC.
To access this content, please enter the password you have received from IDC.
Arzu Yıldırım
Sales Director
SinerjiBT
Yapay Zekâda Yeni Risk: Bilgiden Eyleme Geçiş
Bugüne kadar kurumsal yapay zekâ güvenliğinde temel odak noktalarından biri, hassas verilerin yetkisiz platformlara aktarılmasıydı. Ancak yapay zekâ ajanlarının yaygınlaşmasıyla riskler artık veri güvenliğinin ötesine geçiyor.
Bir yapay zekâ ajanı, kendisine tanımlanan yetkiler doğrultusunda dosyaları değiştirebilir, yazılım yükleyebilir veya sistem komutlarını çalıştırabilir. Bu durum, ajanların sahip olduğu erişim ayrıcalıklarının kurumların operasyonel güvenliği açısından kritik hale gelmesine neden oluyor.
Özellikle yönetici yetkilerine sahip kullanıcı hesapları üzerinden çalışan yapay zekâ ajanları, hatalı veya kontrolsüz işlemler sonucunda iş sürekliliğini etkileyebilecek riskler oluşturabiliyor.
Güvenli Yapay Zekâ Dönüşümünde Ayrıcalıklı Erişim Yönetimi
Kurumların yapay zekâ yatırımlarından sürdürülebilir değer elde edebilmesi için güvenliğin inovasyonu sınırlandıran değil, destekleyen bir unsur olarak konumlandırılması gerekiyor.
Bu noktada Delinea’nın uzmanlık alanlarından biri olan Privileged Access Management (PAM) yaklaşımı önem kazanıyor. En az ayrıcalık ilkesinin uygulanması, kullanıcı ve uygulama yetkilerinin sınırlandırılması, kritik erişimlerin denetlenmesi ve ihtiyaç duyulduğunda kontrollü yetki yükseltme süreçlerinin uygulanması, yapay zekâ ajanlarının oluşturabileceği risklerin azaltılmasına katkı sağlıyor.
Güvenlik Yatırımlarında Yeni Öncelik: İş Değeri ve Süreklilik
Günümüzde kurumların teknoloji yatırımlarını değerlendirirken yalnızca operasyonel hız ve maliyet avantajına değil, güvenlik dayanıklılığına ve sürdürülebilirliğe de odaklanması gerekiyor.
Yapay zekâ ajanlarının kurumsal iş süreçlerine entegrasyonu, erişim yönetiminin artık yalnızca BT ekiplerinin değil, iş stratejilerinin de önemli bir parçası olduğunu gösteriyor.
Gelecekte rekabet avantajı sağlayacak kurumlar, yapay zekâyı yalnızca hızlı benimseyenler değil, bu teknolojiyi kontrollü, güvenli ve sürdürülebilir biçimde iş süreçlerine entegre edebilenler olacak.
Çünkü yapay zekâ çağında gerçek dijital dönüşüm, inovasyon ile güvenlik arasında doğru dengeyi kurabilmekten geçiyor.
Pierpaolo Taliento
GM-EEMEA
Citrix
En büyük risk, yapay zekânın daha akıllı hale gelmesi değil. Asıl risk, ona her şeye erişim imkânı vermemiz.
Her yapay zekâ asistanı ve her otonom ajan bir kimlik üzerinden çalışıyor. Bu kimlik CRM, ERP, dosya paylaşım sistemleri ve iş birliği araçlarına erişebiliyorsa, yapay zekâ da büyük ölçüde aynı yetkileri devralıyor. Yapay zekâ, hangi bilginin gizli, hangisinin gizli olmadığını kendiliğinden ayırt etmiyor. Yalnızca bizim tanımladığımız erişim sınırları içinde hareket ediyor.
İşte bu nedenle güvenlik gündemi artık yalnızca yapay zekâyı korumakla ilgili değil. Asıl konu kimlik, erişim ve güven.
Birçok kurum bu yeni döneme daha fazla güvenlik aracı, daha fazla izleme ve daha fazla uyarı ekleyerek hazırlanıyor. Ancak güvenlikte daha fazla katman her zaman daha fazla güvenlik anlamına gelmiyor. Önemli olan, doğru güvenlik kontrollerini doğru noktada uygulayabilmek.
Bence en etkili kontrol, yeni bir gösterge paneli eklemekten ziyade, kullanıcıların ve giderek daha fazla yapay zekâ ajanının kurumsal uygulamalar ve verilerle etkileşime girdiği noktada erişimi doğru şekilde yönetmek.
Bu yaklaşım, uygulamaların nasıl çalıştığını değiştirmeden erişim politikalarının daha dinamik ve bağlama duyarlı hale getirilmesini mümkün kılıyor.
Örneğin; erişim talebinde bulunan kişinin kim olduğu, kullandığı cihaz, bulunduğu konum ve mevcut güvenlik koşulları birlikte değerlendirilebilir. Gerektiğinde indirme, kopyalama veya veri paylaşımı gibi işlemler kısıtlanabilir; hassas içerikler için ek koruma uygulanabilir ve en az ayrıcalık prensibi hayata geçirilebilir.
Citrix’in değer önerisi de bu noktada anlam kazanıyor. Citrix, kullanıcı ile kurumsal uygulama arasındaki erişim katmanında konumlanarak, kimlik ve bağlam bilgisini uygulamalara erişim politikalarıyla birleştirmeye yardımcı oluyor. Böylece güvenlik kontrollerinin yalnızca ağ veya uygulama seviyesinde değil, kullanıcının ve giderek yapay zekâ ajanlarının uygulamayla etkileşim kurduğu noktada uygulanabilmesini sağlıyor.
Buradaki temel fikir aslında Citrix’e özgü değil. Çünkü yapay zekâ yeni güvenlik prensipleri yaratmıyor; mevcut prensiplerin önemini daha da artırıyor.
Kimlik yönetimi ve yönetişimi zayıfsa, yapay zekâ mevcut riski büyütüyor.
Kimlik yönetimi ve yönetişimi güçlüyse, yapay zekâ işin büyümesini hızlandırıyor.
Bu nedenle, yapay zekâ çağında gerçek rekabet avantajının güven olacağına inanıyorum.
En hızlı hareket eden şirketler, en fazla yapay zekâ kullananlar olmayacak.
Yapay zekânın etrafında doğru sınırları oluştururken, inovasyonun önünü kesmeyen şirketler olacak.
Çünkü güvenliğin geleceği yalnızca uygulamaları korumaktan ibaret değil.
Geleceğin güvenliği; kimlikler, yapay zekâ ajanları ve veriler arasındaki her etkileşimi yönetmekten geçiyor.
Güven tam da burada yaratılıyor.
Ve yapay zekâ, tam da burada bir iş riskinden çıkarak iş avantajına dönüşüyor.
