CISO Singapore schedule

• How is AI reshaping the capability and structure of modern security teams?
• Where does AI meaningfully increase SOC capacity, and how should humans and machines collaborate?
• What new risks emerge from agentic AI, and how can CISOs ensure trust and decision assurance?
• How should CISOs redesign processes, talent, and governance to build an AI accelerated, resilient security organisation?

AI is rapidly becoming one of the biggest drivers of productivity and innovation in the enterprise — and one of the fastest-growing sources of data security risk. As copilots, assistants, and public AI tools become integrated into daily work, sensitive data is flowing into systems that most security teams can’t fully see, understand, or control.

The problem is that traditional data security controls were never built for this. In fact, many organisations were already struggling to operationalise data security before AI accelerated the challenge. The good news? AI isn’t just creating the problem — it’s also enabling a smarter, more effective way to solve it.

In this session, attendees will learn:

• Why AI has become one of the fastest-growing and least visible sources of enterprise risk
• How GenAI is creating new exposure points for sensitive data
• Why legacy data security tools have failed to keep up — and why AI is making those gaps harder to ignore
• How context-aware, AI-driven data security can deliver more accurate visibility, stronger controls, and real-time enforcement
• What organisations can do to enable AI innovation without expanding their risk surface

Attendees will leave with a clearer understanding of how AI is reshaping data security — and how they can use that same technology to gain control, minimise exposure, and support safer AI adoption across the business.

Closing the gap between vision and execution remains one of the biggest hurdles for today’s cyber leaders. From aligning stakeholders to building realistic delivery pathways and identifying the indicators that truly matter, this session focuses on making cyber programs tangible, achievable, and outcome-driven.

• What typically derails the journey from cyber strategy to delivery, and how can leaders navigate around these barriers?
• How can you secure organisation-wide commitment so programs move beyond intention and into action?
• When cyber uplift actually takes hold, what are the critical enablers that create meaningful, long-term impact?

Satyen Desai RVP ASEAN Tanium 

AI is now embedded across the enterprise. From sanctioned and unsanctioned AI tools to autonomous AI agents, organisations are evolving how information is accessed, shared and used. As AI adoption accelerates, traditional or siloed security technologies often lack the visibility and governance needed to manage these evolving risks.

In this session, Jennifer Cheng, Director of Cybersecurity Strategy for APJ at Proofpoint, will outline how CISOs can control sensitive data exposure, reduce AI-driven data risk and modernise governance so organisations can adopt AI with confidence. Attendees will gain practical insights into balancing innovation with protection while preparing for the next phase of AI.

• How can Agentic AI amplify SOC capabilities, automate threat detection, and accelerate response without compromising oversight?
• What operational, ethical, and strategic risks arise when AI systems act autonomously, and which ones should executives prioritise?
• How can boards and C-level leaders balance innovation and operational efficiency with accountability and regulatory compliance?

Moderator
Neha Agarwal Vice-President, Technology Audit Citi
Speakers
Yaron Slutzky CISO Agoda
Marcus Tan Head, Safety & Security Chapter A*STAR Institute of Advanced Intelligence and Computing (A*STAR IAIC)
Eric Wong Director, Cyber Operations & Technologies Synapxe 

AI has fundamentally changed the nature of internet traffic. Across Fastly's global edge network, roughly half of all requests are now non-human, with the vast majority representing unwanted or malicious activity. As AI-powered bots become more sophisticated, distinguishing legitimate automation from malicious activity is becoming one of the defining security challenges for CISOs.

Drawing on attack patterns observed across Fastly's network during 2025 and 2026, this session examines how credential stuffing, AI-powered scraping and attacks targeting modern applications and APIs are evolving, and what security leaders should do about it. Attendees will leave with practical guidance on the metrics that matter, the questions to ask of their security stack, and how to communicate bot and API risk to executive leadership and the board.

• What immediate actions can CISOs take today to prepare for quantum-driven threats?
• Which current cryptographic systems are most vulnerable to quantum attacks, and how do you prioritise them?
• How can organisations start integrating post-quantum cryptography without disrupting existing operations?
• What role do industry standards, vendors, and collaboration play in building quantum-resilient security?

Security leaders are under pressure to defend increasingly complex environments against increasingly capable attackers. But some of the assumptions shaping security programs no longer reflect reality. This session explores uncomfortable truths about modern cybersecurity: why protecting everything equally is impossible, why risk isn’t binary, and how AI is accelerating attackers faster than defenders can adapt.

 Moderator
Fenil Pathak Vice President, Regional Cyber Risk and Controls Manager State Street
Speakers
Phoram Mehta Vice President & Head of International Cyber Risk PayPal
Kenneth Choo Luo Yi CISO & CDPO SPH Media
Yaron Slutzky CISO Agoda 

Rahim Abd Malek will guide executive-level discussions on AI-powered phishing, email security, human risk, and modern strategies for defending against increasingly sophisticated cyberattacks

Cybersecurity leaders have spent years investing in new tools, capabilities and programmes. Yet many security teams remain trapped in an endless cycle of identifying, prioritising and addressing new risks. The question is not whether enough is being done. The question is whether we are addressing the causes of cyber risk, or simply managing the symptoms.

In this fireside chat, Prof Dan Haagman and Kai Feng Thia explore the "Zero-Budget Cybersecurity Test”, a simple way to distinguish between activities that manage cyber risk and decisions that reduce it at its source. Drawing on lessons from cyber leadership, critical infrastructure and airport operations, they discuss how organisations can reduce risk by improving decisions, simplifying complexity and addressing causes rather than symptoms.

Speakers
Kai Feng Thia Deputy CISO (Operations) Changi Airport Group
Prof. Dan Haagman CEO Chaleit & Honorary Professor Murdoch University

AI is expanding the attack surface faster than many security and governance programmes can adapt. At the same time, boards, auditors and regulators expect organisations to demonstrate that controls are not merely documented, but operating effectively.

Join David Coleman, Sales Engineering Director, APJ at Rapid7, to explore how Continuous Threat Exposure Management (CTEM) and Cyber GRC can operate as one discipline, connecting live security context, control validation, risk ownership and evidence. Discover how continuously validated common controls can reduce duplicated governance effort, provide a foundation for global standards and regional regulatory requirements, and give executives greater confidence in the decisions they make about cyber risk.

Attendees will learn how to:

• Connect exposure management, control validation and governance workflows into a continuous operating model.
• Use live operational evidence to continuously validate controls, identify control drift and strengthen executive assurance.
• Reuse common controls across global standards such as ISO/IEC 27001, ISO/IEC 42001, NIST CSF and NIST AI RMF, while simplifying alignment with Singapore-specific obligations including MAS TRM, PDPA and emerging AI governance expectations.
• Reduce the human cost of audits, assessments and repeated evidence collection by shifting from point-in-time compliance to continuous assurance.
• Translate security telemetry into defensible risk, governance and investment decisions that enable more confident conversations with boards, auditors and regulators.

After years of relying on point solutions, companies now seek to consolidate identity security across all their environments. From on-prem AD and local accounts to modern cloud identities, machine identities and now agentic AI identities – it’s becoming increasingly difficult. Join this session to learn a new approach for consolidating identity security across all IAM silos – not only for unified visibility, but also for runtime enforcement.

As AI reshapes cybersecurity, the conversation often focuses on what AI can do. The more important question may be what it is doing to us. AI is accelerating attacks, transforming how work gets done, and changing the way people make security decisions.

As employees increasingly rely on AI to reduce cognitive load, capabilities such as critical thinking, trust calibration, verification, and the confidence to challenge assumptions become more important - not less. At the same time, attackers rely on AI too, in order to make attacks more sophisticated at scale.

Through examples including Shadow AI, modern social engineering, and deepfakes, this session explores how AI is changing the environments in which security decisions are made, and how leaders can build the cultures that reinforce resilient human behaviour.

Attendees will leave with practical approaches for strengthening security culture, improving decision-making under pressure, and building AI-era resilience.

What even remains of cybersecurity after the Mythos, GenAI upheaval, global enduring conflicts and fraying of international order? Do "hygiene", "basics" even work anymore? If not - what can we do to survive and thrive?

The session would focus on how AI agents and AI-enabled systems are increasingly performing work like digital employees, and why organisations need to rethink governance, accountability, risk ownership, and oversight structures accordingly.

Speaker
Justin Ong APAC CISO & CPO Panasonic

Moderator
Prof. Dan Haagman CEO Chaleit & Honorary Professor Murdoch University 

When an autonomous AI agent executes a high-impact task that leads to a security breach or compliance violation, where does the ultimate liability land? This interactive session confronts the urgent challenge of Agent Identity Management, examining how to assign traceable identities, define permission scopes, and monitor the behavior of "digital employees." We will dissect real-world scenarios to help CISOs establish foolproof accountability frameworks that ensure humans remain firmly in control of self-executing systems.

AI is no longer just a tool for innovation: it’s a double-edged sword in cybersecurity. While defenders leverage AI to detect threats faster, automate responses, and predict attacks, adversaries are equally harnessing AI for sophisticated phishing, evasion, and autonomous attacks. This panel dives into the dual-use nature of AI in cybersecurity, exploring whether the advantage lies with attackers, defenders, or if the outcome depends on strategy, governance, and ethical use.

• How is AI changing the cybersecurity landscape for both defenders and attackers?
• What types of AI-powered tools are organisations using today to strengthen security, and what challenges are you seeing in their deployment?
• With attackers potentially using AI as well, how can organisations maintain a strategic advantage?
• How do internal policies, ethical frameworks, and regulatory requirements influence AI adoption in cybersecurity?
• What should CISOs prioritise in building an AI-ready security culture, from talent and training to processes and governance?

Moderator
Ming Lu Head of IT Security and Platform Green Link Digital Bank
Speakers
Zhou Zhihao Vice President ISC2 Singapore Chapter
Yaron Slutzky CISO Agoda
Tien San Chng Cyber Technology and Strategy, Cybersecurity Temasek
Frankie Shuai VP of Information Security Bitdeer 

• •  Why traditional SIEM architectures are reaching their limits
  • Building a modern security data strategy with the data pipeline at its core
  • Reduce cost, improve visibility and deliver the right data to the right tools
  • Preparing your security operations for AI-driven detection and investigation
    

Speaker
Justin Ong APAC CISO & CPO Panasonic

Moderator
Prof. Dan Haagman CEO Chaleit & Honorary Professor Murdoch University 

• How can organisations attract and retain top cyber talent in an increasingly competitive landscape?
• What practical strategies help upskill teams for AI-driven security and emerging threats?
• How do you foster a culture where security is embraced across all departments, not just within IT or SOC teams?
• Which leadership and engagement practices create resilient, motivated, and high-performing security teams?

Moderator
Tan Chin Tang Head, IT Operations & CyberSecurity Pathology Asia
Speakers
Christopher Lek Director, Cyber Security, Centre for IT Services
Nanyang Technological University
Yaron Slutzky CISO Agoda
Sourabh Chitrachar Chief Technology Officer MS First Capital Insurance 
James Cook Group Vice President, APJ Digicert 

• How can CISOs effectively communicate cyber risk to boards in a way that drives actionable decisions?
• What strategies ensure that cyber culture is aligned across all teams, from executives to operational staff?
• How can boards support security initiatives without stifling innovation or agility?
• What lessons can CISOs share about creating a culture where security is a shared responsibility, not just a compliance checkbox?

Moderator
Jenny Tan Singapore Group Chair IRM
Speaker
Kenneth Choo Luo Yi CISO & CDPO SPH Media
Sreehari Padmanabhan Senior Vice President - Information Security Risk Governance Bank of America
Hwee Cher Group Head, Information Security & Data Governance CGS International
Sourabh Chitrachar Chief Technology Officer MS First Capital Insurance

Shilpa Sawant Vice President - Cyber Security Financial Services Industry

• What have we learnt about hype, governance, and readiness?
• How do these lessons shape our AI journey now?
• How can these lessons help us prepare for future emerging technology?

Moderator
Jenny Tan Chair, Singapore Group Institute of Risk Management (IRM)

• As OT and IT environments converge and air gaps vanish, are traditional, network-focused security strategies enough to protect increasingly exposed systems?
• What critical risks are being overlooked when physical security, access control, and on-site monitoring are not fully integrated into cyber defence?
• How can organisations rethink their approach to OT security and embed physical security as a core component of cyber resilience in a connected environment?

The security industry is betting heavily on autonomy: systems that patch themselves, agents that act without asking permission. Almost no one is asking which decisions should never be delegated. Some security decisions deserve friction. They are better made by a human who holds context no agent can infer, and the CISO's job is now to work out which they are. This session looks at how to split decisions between people and agents, and where organisations might be drawing that line in the wrong place.

Speakers
Ang Leong Boon Senior Head (Cybersecurity & GRC) NUS Information Technology
Fenil Pathak Vice President, Regional Cyber Risk and Controls Manager State Street