08:00
Agenda
mysecurityevent Munich 2026
Wednesday, 18 November 2026
08:01
08:45
08:45
09:00
09:00
CISO strategies for implementing third-party risk management programs
Boris Schröder · CISO · smartFabian Mohs · Specialist Information Security · smart
Show session details
Third-party risks as a growing business factor.
Tailored TPRM strategies instead of standard solutions.
Practical insights from a CISO.
09:35
No BCM Is No Solution Either – Not Just from a NIS2 Perspective
Dirk-Andrew Heil · CISO · Stadtwerke NorderstedtMaik Ellinger · Group Information Security Manager · REHAU Group
Show session details
Basic NIS2 requirements and opportunities for business continuity management.
BCM opportunities arising from NIS2.
Resilience as a competitive factor.
Preparing and conducting a cyber crisis simulation from the perspectives of a globally operating corporate group and a utility company.
09:35
CVE Lists, Audits & Chaos
Manuel Blessing · Head of Security Architecture & Shopfloor Cyber Security
Show session details
Why nobody understands your cyber risks any more – except your digital AI cyber risk agent.
Without AI, companies drown in technical details and nobody has a clear picture of the risk.
10:10
10:15
10:25
10:45
10:45
The Power of Transparency: Identifying and Reducing Attack Surfaces
Nikolaus Musil · Field CISO · Rapid7
Presented byRapid7
Show session details
Stop shadow IT: exposure management reveals hidden systems and lowers risk.
End the silos: a central approach effectively reduces attack surfaces.
Automated security identifies threats early and enables proactive countermeasures.
11:10
Cyber Resilience in Action: Crisis Simulations as Key to Modern Cyber Defense
Thomas Tack · Immersive
Show session details
See how realistic simulations keep teams capable of acting in an emergency.
Continuous resilience instead of one-off awareness.
When technology, people and scenarios come together, real strength emerges.
11:10
The Hugging Face Hack as a Commercial Solution
David Berger · Sales Director · TENZAI
Show session details
An AI breaks out of a secure sandbox and attacks another company.
What if an AI could challenge its own applications, including mobile apps, APIs and AIs at the push of a button – always from the attacker’s perspective?
Tenzai finds not only IT vulnerabilities but also exploitable weaknesses in processes.
11:35
11:35
12:00
13:00
14:00
14:00
Resilience 2.0 – ready for a real incident?
Frank Schwaak · Field CTO EMEA · Rubrik
Show session details
Attackers now move in seconds. Recovery still takes weeks. AI widens this gap from both sides. This session shows how companies build resilience across data, identities and AI agents.
- Why recovery speed now determines the cost of an incident, rather than prevention
- Which questions must be answered in advance so recovery can begin immediately when needed
- Why identity is the central target of attacks and why you must not have to choose between "clean" and "up to date"
- Why agentic AI is the next gap in resilience: seeing what agents do, controlling what they are allowed to do, and undoing what goes wrong
14:25
14:25
Self-attacking AI: still a “myth”?
Richard Werner · Security Advisor · TrendAI
Show session details
The vulnerability nobody really wants to acknowledge · Identify and assess risks · Speed as a guarantee of security
- The vulnerability nobody really wants to acknowledge
- Identify and assess risks
- Speed as a guarantee of security
14:50
In the Cyber Trenches: War Stories from 180,000 pentests
Jens Egger · Senior Solution Architect · Horizon3
Show session details
To defeat the adversary, we must move beyond tracking their tools – we must understand their mind.
The traditional approach to cyber security has focused relentlessly on the technical what (malware signatures, TTPs) and the macro why (geopolitical tension, economic drivers).
However, the next decisive frontier in intelligence and defence requires a pivot to the who: the personality dynamics that fuel cyber threat actor groups and using autonomous tools to follow in their footsteps.
14:50
15:15
Panel Discussion
Join the discussion: NIS2 – more security, or simply more bureaucracy?
Martin Zöllner · CISO · HufKlaus-E. Klingner · ISO · asambeautyAmelia Alder · GRC Cyber Security Manager · Knorr-BremseJürgen Grommes · Z-EUR IT Security & Compliance Governance Manager · NestléMartin Hengstmann · ISO · AGROLAB GROUP
15:15
Panel Discussion
Join the discussion: OT security between production and protection – how secure can industry really be?
Dirk-Andrew Heil · CISO · Stadtwerke NorderstedtTimo Schönfeld · Head of IT · HufFelix Hennig · Cyber Security Architect · EltakoRobert Wimmer · OT Security Manager · Constantia FlexiblesMax Killinger · CIO · BayWaElke Liebrich · Head of IT Operations Governance · Bosch
15:45
16:10
16:10
16:35
Thanks for Standstills: Attackers Reveal What OT Strategies Are Missing
Benjamin Pieritz · CEO · TRIOVEGAMichael Herde · medi
Show session details
An analysis of the current cyber threat landscape and the differences between OT and IT security.
Using advanced technologies to strengthen resilience against cyber attacks.
Developing innovative, sustainable strategies to protect critical production systems.
16:35
Hardcoded Secrets as Attack Vectors: Lessons from Recent High-Profile Supply Chain Breaches (Shai-Hulud, Trivy, LiteLLM)
Hélène Hartmann · Enterprise Account Executive, DACH · GitGuardian
Show session details
This session examines how recent supply chain attacks (Shai-Hulud, Trivy, LiteLLM) have set a new standard in credential-based exploitation.
These high-profile incidents show a recurring pattern: initial supply-chain compromise followed by weaponized secret scanning for persistence and cross-platform lateral movement.
17:00
17:00
When Email Attacks Look Like Real Communication – Lessons from EvilTokens, VENOM & Co.
Martin Rutkowski · Enterprise Sales Engineer DACH · Abnormal
Show session details
How AI-assisted defense detects sophisticated attacks and exposes attacker intent.
Insights from the current threat landscape: how attackers deliberately exploit trust, identities and context – and why classic defenses based on IOC/IOA (Indicator of Compromise/Attack) miss these attacks.
How behavior-based, AI-native security identifies and stops new and future attack patterns before damage occurs.
Practical lessons: can behavior-based AI security solutions be integrated quickly and simply, ready to use without complex rules?
17:25
17:25
The human factor when nerves are stretched to breaking point.
Matthias Kruger · ISB · VARTAAndreas Hitzig · CIO · VARTA
Show session details
Cyber attacks are not purely technical incidents, but put people under strain. The focus is on defenders who must decide under extreme pressure about stability, safety and livelihoods.
The calm before the storm.
The siege begins.
When nerves are stretched to breaking point.
18:00
18:00
Recruitment as a key factor in reducing cyber risks
Miriam Engels · Director, Head of global Talent Attraction and Acquisition · QIAGENChris Lichtenthäler · Director Cyber Security Risk · QIAGEN
Show session details
A shortage of cyber expertise increases risks.
Strong recruiting improves IT security.
A talent shortage weakens cyber defense.
18:30
21:00