08:00
Agenda
The agenda for mysecurityevent Cologne 2027 has not been published yet. Until then, we are showing you the reference agenda from mysecurityevent Munich 2026.
08:01
08:45
08:45
09:00
09:00
CISO strategies for implementing third-party risk management programs
Third-party risks as a growing business factor.
Boris Schröder · CISO · smartFabian Mohs · Specialist Information Security · smart
Show session details
Tailored TPRM strategies instead of standard solutions.
Practical insights from a CISO.
09:35
No BCM Is No Solution Either – Not Just from a NIS2 Perspective
Basic NIS2 requirements and opportunities for business continuity management.
Dirk-Andrew Heil · CISO · Stadtwerke NorderstedtMaik Ellinger · Group Information Security Manager · REHAU
Show session details
BCM opportunities arising from NIS2.
Resilience as a competitive factor.
Preparing and conducting a cyber crisis simulation from the perspectives of a globally operating corporate group and a utility company.
09:35
10:10
10:15
10:25
10:45
10:45
The Power of Transparency: Identifying and Reducing Attack Surfaces
Stop shadow IT: exposure management reveals hidden systems and lowers risk.
Presented byRapid7
Show session details
End the silos: a central approach effectively reduces attack surfaces.
Automated security identifies threats early and enables proactive countermeasures.
11:10
Cyber Resilience in Action: Crisis Simulations as Key to Modern Cyber Defense
See how realistic simulations keep teams capable of acting in an emergency.
Alexander Kliemt · Lead Account Manager · Immersive
Show session details
Continuous resilience instead of one-off awareness.
When technology, people and scenarios come together, real strength emerges.
11:10
The Hugging Face Hack as a Commercial Solution
An AI breaks out of a secure sandbox and attacks another company.
David Berger · Sales Director · TENZAI
Show session details
What if an AI could challenge applications, including mobile apps, APIs and other AIs at the push of a button – always from the attacker’s perspective?
Tenzai finds not only IT vulnerabilities but also exploitable weaknesses in processes.
11:35
Move the Needle - From red to green in a few clicks
How agentic vulnerability management sharpens the focus on what matters.
Matthias Nieraad · Senior Regional Sales Manager · Mondoo
Show session details
Why finding problems alone is not enough – automation makes the difference.
Can compliance be automated?
11:35
Secure AI innovation with AI-SPM – the CSPM for Artificial Intelligence
New opportunities and risks from AI in the cloud.
Tobias Rupprecht · Senior Solutions Engineer · WizAbdullah Schahin · Head of Cloud Security · Mercedes-Benz Tech Innovation
Show session details
AI-SPM as a key component of modern cloud security.
Effectively securing and accelerating AI innovation.
12:00
13:00
14:00
14:00
Countering Cyber Threats with Zero Trust Cyber & Identity Resilience
From prevention to resilience – a paradigm shift in cyber security.
Linus Gmeiner · Account Executive · Rubrik
Show session details
Why purely defensive mechanisms no longer withstand modern attacks.
Operational resilience as a strategic capability for companies.
14:25
14:25
Self-attacking AI: still a “myth”?
The vulnerability nobody really wants to acknowledge · Identify and assess risks · Speed as a guarantee of security
Richard Werner · Security Advisor · TrendAI
Show session details
- The vulnerability nobody really wants to acknowledge
- Identify and assess risks
- Speed as a guarantee of security
14:50
In the Cyber Trenches: War Stories from 180,000 pentests
To defeat the adversary, we must move beyond tracking their tools – we must understand their mind.
Jens Egger · Senior Solution Architect · Horizon3.ai
Show session details
Traditional cyber security has focused on the technical what (malware signatures and TTPs) and the macro why (geopolitics and economics).
The next intelligence and defense frontier is the who: the personality dynamics driving threat actor groups, and autonomous tools that can follow in their footsteps.
14:50
15:15
Panel Discussion
Join the discussion: NIS2 – more security, or simply more bureaucracy?
Martin Zöllner · CISO · HufKlaus-E. Klingner · ISO · asambeautyAmelia Alder · Legal Counsel Security · Knorr-BremseJürgen Grommes · Z-EUR IT Security & Compliance Governance Manager · NestléMartin Hengstmann · ISO · AGROLAB GROUP
15:15
Panel Discussion
Join the discussion: OT security between production and protection – how secure can industry really be?
Dirk-Andrew Heil · CISO · Stadtwerke NorderstedtTimo Schönfeld · Head of IT · HufFelix Hennig · cyber security Architect · EltakoRobert Wimmer · OT Security Manager · Constantia FlexiblesMax Killinger · CIO · BayWa
15:45
16:10
16:10
16:35
Thanks for Standstills: Attackers Reveal What OT Strategies Are Missing
An analysis of the current cyber threat landscape and the differences between OT and IT security.
Mareike Redder · Product Manager · TRIOVEGA
Show session details
Using advanced technologies to strengthen resilience against cyber attacks.
Developing innovative, sustainable strategies to protect critical production systems.
16:35
Hardcoded Secrets as Attack Vectors: Lessons from Recent High-Profile Supply Chain Breaches (Shai-Hulud, Trivy, LiteLLM)
Recent supply-chain attacks (Shai-Hulud, Trivy and LiteLLM) have set a new standard for credential-based exploitation.
Hélène Hartmann · Enterprise Account Executive, DACH · GitGuardian
Show session details
These high-profile incidents show a recurring pattern: initial supply-chain compromise followed by weaponized secret scanning for persistence and cross-platform lateral movement.
17:00
17:00
When Email Attacks Look Like Real Communication – Lessons from EvilTokens, VENOM & Co.
How AI-assisted defense detects sophisticated attacks and exposes attacker intent.
Martin Rutkowski · Enterprise Sales Engineer DACH · Abnormal
Show session details
Insights from the current threat landscape: how attackers exploit trust, identities and context – and why classic IOC/IOA-based defenses miss these attacks.
How behavior-based, AI-native security identifies and stops new and future attack patterns before damage occurs.
Practical lessons: can behavior-based AI security solutions be integrated quickly and simply, ready to use without complex rules?
17:25
17:25
The human factor when nerve lines break.
Cyber attacks are not purely technical incidents, but put people under strain. The focus is on defenders who must decide under extreme pressure about stability, safety and livelihoods.
Matthias Kruger · ISB · VARTAAndreas Hitzig · CIO · VARTA
Show session details
The calm before the storm.
The siege begins.
When nerves are stretched to breaking point.
18:00
Information Security in Higher Education
Classify and protect research, examination and personnel data.
Sandra Heger · Information Security Expert · Westfälische HochschulePeter Ulber · Deputy CISO · Universität Stuttgart
Show session details
Secure decentralized IT structures with consistent security standards.
Awareness training for students and staff reduces the risk of attacks.
18:00
Recruitment as a key factor in reducing cyber risks
A shortage of cyber expertise increases risks.
Miriam Engels · Director, Head of global Talent Attraction and Acquisition · QIAGENChris Lichtenthäler · Director cyber security Risk · QIAGEN
Show session details
Strong recruiting improves IT security.
A talent shortage weakens cyber defense.
18:30
21:00