CybersecCon is New Zealand’s premier cybersecurity conference, where you’ll meet like minded people and catch the scoop on the latest in industry developments.
See the all-star industry leader lineup, who will be sharing their knowledge, experiences and foresights.
Registrations for CybersecCon 2026 are free thanks to our sponsors.
Cyber risk is no longer isolated; it’s converging. AI, nation-state tactics, cloud complexity, and expanding attack surfaces are colliding, turning single vulnerabilities into widespread disruption. Beyond 2028, success won’t come from stronger tools alone, but from adaptive, predictive resilience, where organisations anticipate, absorb, and respond to multiple threats at once.
In today’s threat landscape, many organisations are stuck in an endless cycle of patching and chasing vulnerabilities, yet risk continues to grow. This keynote challenges the traditional “whack-a-mole” approach to cybersecurity, exploring how organisations can shift from reactive vulnerability management to a more strategic, risk-based model, with practical insights on prioritising what truly matters, aligning security efforts with business risk, and building resilience against evolving threats.
Most organisations have chosen a cybersecurity framework by now, whether it is NIST, ISO or E8. They have then decided that measuring the maturity of the controls is a good way to improve their cybersecurity posture. However, cybersecurity maturity is a self-fulfilling prophecy that leads to false confidence, misdirected resources and a complete lack of knowledge of the true risks the organisation faces. Join us on a journey from the maturity fallacy to a risk aware cybersecurity program
Cyber threats are increasingly automated, scalable, and relentless, meaning technology alone is no longer enough to defend us – the real differentiator is people. This keynote asks a simple question: why are we in this room? and explores our shared responsibility to protect and future-proof the digital world we all rely on. Ronnie Rehman challenges the industry to rethink human risk by shifting users from the weakest link to an empowered human firewall army, moving beyond awareness into real behavioural change where security is embedded in culture, not just policy.
Artificial intelligence is rapidly reshaping the cybersecurity landscape—on both sides of the battlefield. This panel explores how threat actors are weaponising AI to automate attacks, enhance social engineering, and evade detection, while defenders leverage the same technologies to strengthen threat intelligence, detection, and response.
From generative AI to autonomous security operations, this session will unpack the current state of play, emerging risks, and what organisations must do now to stay ahead in an AI-driven threat environment. Panelists will also explore the ethical implications of AI in cyber warfare and where the line should be drawn in its deployment.
Attendees will gain practical insights into how to prioritise investments and capabilities in a rapidly evolving AI arms race. Speakers to be confirmed.
As organisations accelerate AI adoption, the need for strong governance and control frameworks has never been more critical. This panel will examine why AI guardrails are essential for CISOs tasked with balancing innovation and risk.
Topics include managing data exposure, mitigating model misuse, ensuring compliance, and embedding security into AI lifecycles. Hear from industry leaders on how to implement practical guardrails that enable safe AI use, without slowing down the business. The discussion will also cover real-world examples of AI gone wrong and the lessons learned from those failures.
Panelists will share actionable strategies to align security, legal, and business stakeholders around responsible AI use.
Identity has become the new perimeter—and the primary target. This panel dives into why identity security must be embedded by design, not bolted on as an afterthought. From zero trust principles to modern identity governance and privileged access management, panelists will discuss how organisations can architect identity-centric security strategies that scale.
Learn how to reduce attack surfaces, prevent credential abuse, and build resilient identity frameworks from the ground up. The session will also explore how identity integrates with broader security ecosystems, including cloud and SaaS environments.
Attendees will leave with a clearer understanding of how to future-proof identity strategies in an increasingly decentralised and hybrid world.
The countdown to CybersecCon 2026 is on!