From Compliance to Cyber Resilience
Cybersecurity has entered a new phase. Across Europe—and increasingly in Cyprus—the conversation has moved beyond awareness, frameworks and best practices. The era of voluntary alignment is over. What defines organisations today is not what they know about cyber risk, but how effectively they can respond to it under pressure.
The enforcement of key European frameworks—including NIS2, DORA, the EU AI Act and the Cyber Resilience Act—is fundamentally reshaping the expectations placed on organisations. Cybersecurity is no longer a technical discipline. It is now a matter of governance, accountability and operational resilience.
For boards, executives and risk leaders, the question is no longer theoretical:
Can your organisation withstand a cyber incident—and continue to operate?
FACTS AND FIGURES
THE CONFERENCE
The 6th Cybersecurity Conference 2026 is bringing together regulators, policy makers, CISOs, risk leaders, technology executives and decision-makers from across Cyprus and abroad.
Focused on the critical shift from compliance to operational resilience, the Conference explores how organisations can strengthen preparedness, leadership readiness and cyber resilience in an increasingly complex digital environment.
The Conference will examine:
• The practical implementation of NIS2 and DORA
• Governance, accountability and executive responsibility
• AI-driven threats and the future of cyber defence
• Operational resilience and crisis response
• Critical infrastructure and third-party risk
• Leadership decision-making during cyber incidents
• Building resilient organisations prepared for future disruption
The 2026 edition is designed to move beyond theory and focus on the realities organisations now face in practice.
WHO WILL ATTEND
The Conference is addressed to senior professionals responsible for cybersecurity, risk, compliance and organisational resilience across both the public and private sectors:
- Chief Information Security Officers (CISOs)
- Chief Technology Officers (CTOs)
- Chief Risk Officers (CROs)
- Chief Compliance Officers (CCOs)
- Chief Information Officers (CIOs)
- Managing Directors & General Managers
- Cybersecurity & IT Managers
- Risk & Compliance Professionals
- Legal Advisors & Data Protection Officers
- Security Analysts & Engineers
- Consultants & Advisory Firms
- Representatives from regulatory authorities and government bodies
- Financial Services (Banks, Insurance, Investment Firms)
- Telecommunications & Technology
- Energy & Critical Infrastructure
- Government & Public Sector
- Professional Services (Audit, Legal, Advisory)
- Large Enterprises from all sectors of the economy
Speakers
Agenda
What Organisations Must Do to Prepare for the New Cybersecurity Reality
NIS2 introduces a new era of cybersecurity governance across Europe, significantly expanding obligations for organisations and increasing accountability at executive and board level. As enforcement approaches, organisations in Cyprus must move from awareness to operational readiness.
• Which organisations fall within scope
• Board and executive accountability
• Governance and reporting obligations
• Incident reporting requirements
• Third-party and supply chain risk
• Organisational readiness and enforcement expectations
• Challenges facing Cyprus-based organisations
What Financial Institutions Must Do Now
With DORA now reshaping the regulatory landscape across Europe, financial institutions are entering a new era of operational resilience, accountability and continuous preparedness. Beyond compliance, organisations must demonstrate their ability to withstand, respond to and recover from ICT-related disruption under real operating conditions.
The discussion explores the practical realities, challenges and expectations surrounding DORA implementation, as financial institutions strengthen resilience frameworks, manage third-party risk and prepare for increasing regulatory scrutiny.
This presentation provides an overview of the evolving European cybersecurity and digital standardization landscape, with a particular focus on the Cyber Resilience Act (CRA) and the AI Act. It explores the key harmonized and international standards supporting regulatory compliance, including cybersecurity, artificial intelligence, privacy, cloud services, digital identity, and emerging technologies. The session explains how standards translate legal requirements into practical technical solutions, helping organizations strengthen cyber resilience, build trustworthy digital products and services, and prepare for future regulatory developments. Participants will gain a clear understanding of the role of standards in enabling secure, innovative, and compliant digital transformation across Europe.
What happens when something appears perfectly safe — until the evidence tells a completely different story? In cybersecurity, the line between confidence and reality is often thinner than we think. Behind polished dashboards, mature-looking controls, and well-presented security claims, critical weaknesses may still remain unnoticed. As AI changes the speed of both offensive and defensive cyber operations, this gap becomes more important than ever — and far more difficult to ignore.
How CEOs Are Rethinking Risk, Resilience & Leadership
Cybersecurity is no longer only a technology or compliance issue. As cyber threats, operational disruption and regulatory expectations continue to intensify, leadership teams and boards are increasingly required to approach cybersecurity as a core business and resilience priority. CEOs and business leaders explore how organisations are rethinking cyber risk, operational readiness and leadership responsibility in an increasingly unpredictable digital environment.
• Cybersecurity as a leadership and business priority
• Risk, resilience and organisational readiness
• Leadership responsibility during disruption
• Protecting trust in an increasingly digital environment
• Preparing organisations for future cyber challenges
Cyber incidents have evolved into full-scale business crises that test organisations, leadership teams and operational resilience under extreme pressure.
Built around an anonymised cyber crisis scenario involving ransomware, operational disruption and critical decision-making, the discussion will explore how organisations respond during the first hours of a major cyberattack — from crisis coordination and communication to recovery and resilience.
• The first hours following a cyberattack
• Executive decision-making under pressure
• Crisis coordination and communication
• Business continuity and operational disruption
• Recovery, lessons learned and resilience planning
As cyber threats and operational risks continue to evolve, organisations must strengthen resilience beyond technology and compliance. Leadership, preparedness and the ability to respond effectively under pressure are becoming critical business priorities. What resilient organisations will look like in the years ahead and what leaders must prioritise to strengthen operational readiness in an increasingly unpredictable digital environment?
Strategic Partner
Sponsors
Supporter
With the Support of
Coffee Sponsor
Organisers
Under the Auspices
Communication Sponsors
