Agenda

In a cloud-first, hybrid-work era, identities—not networks—form the new security perimeter. This session explores how modern identity security strategies are critical to safeguarding digital assets, preventing insider threats, and ensuring compliance. Learn how enterprises can move beyond traditional IAM to embrace adaptive authentication, risk-based access control, and unified identity governance to defend against sophisticated identity-based attacks

Traditional security awareness metrics often focus on surface-level indicators, such as training completion rates or phishing click rates. that fail to capture meaningful behavioural change. The key question is: Are you measuring performance or real impact?​ 

In this talk, ThinkCyber's CEO and Co-founder, Tim Ward, will discuss how to transition toward metrics that reflect genuine behavioural changes while ensuring compliance and effectively measuring the impact of your security awareness initiatives. ​ 

Tim will cover what to measure to provide deeper insights into security culture, the tools available for tracking progress over time, and how to present these findings effectively to leadership. ​ 

By leveraging behavioural science and meaningful data, organizations can move beyond compliance and successfully influence employee behaviours, thereby reducing operational risks and enhancing their overall security posture. 

As digital identities multiply and become prime targets for threat actors, Identity Threat Detection and Response (ITDR) emerges as a critical pillar in modern cybersecurity. This session explores how organisations can integrate ITDR strategies to secure hybrid Active Directory (AD) environments and beyond. We’ll examine real-world statistics, attack vectors, and the role of tools like Netwrix Threat Manager, Access Analyzer, and PingCastle. Crucially, we will discuss how artificial intelligence is enhancing detection accuracy, accelerating incident response, and transforming ITDR into a proactive defense mechanism. Learn how AI is shaping the future of identity protection and what steps your organization can take now to stay ahead of evolving threats.

Why are suppliers trusted, while employees are vetted and only given trust after checks or probation. Highlighting the contrasting expectations between trusted suppliers and new employees, emphasising the tension between automatic trust and rigorous vetting 

Defending your business, data, and employees from cyberattacks in 2025 will become increasingly difficult. Not only are bad actors doing their best to crack your defenses, but their AI assistants will make it easier for them to launch highly targeted and advanced attacks. 

During this session we will review the new attacks we expect to see in the coming year, including: 

• As multimodal AI systems gain the ability to integrate text, images, voice, and sophisticated coding, threat actors will leverage them to streamline and automate the entire pipeline of a cyber attack.
• Attackers will intensify their attempts to target little-known but widely used third-party open-source libraries and dependencies to avoid detection and execute malicious attacks.
• As threat actors will look to increasingly leverage AI to both find and build vulnerabilities, cybersecurity professionals will also take advantage of AI’s capabilities to uncover and stymie their attempts.
• GenAI will open up new attack vectors for bad actors to profit when they combine it with other sophisticated tactics to earn the trust of organizations to perform what they believe is a legitimate business transaction.

This promises to be a session not to be missed!

Remember to submit your questions during the session and Sarah will try and get as many over to Marcus as possible