CISO Forum 2026 Focuses on AI Governance and Identity Security
Share
The CISO Forum Virtual Summit 2026 has commenced, addressing the critical security implications of integrating artificial intelligence into enterprise infrastructure. The two-day event, running from 10 to 11 November 2026, focuses on the transition of AI from a novelty to a fundamental component of modern business operations, which introduces both enhanced capabilities and significant new vulnerabilities.
A central theme of the summit is the establishment of robust AI governance. Industry leaders are examining practical frameworks for securing generative AI (GenAI) and managing the risks associated with autonomous AI agents. Discussions include the development of repeatable security programmes that scale alongside organisational AI ambitions, as well as accountability frameworks to manage the complexities of autonomous systems handling sensitive tasks.
Identity and Supply Chain Security in the AI Era
The summit highlights a shift in identity security, moving towards runtime identity protection to combat threats targeting both human and machine identities. As AI-driven automation increases, securing these non-human identities is becoming a primary concern for enterprise security executives.
The software supply chain is also under scrutiny. Experts are evaluating how AI is redefining vulnerabilities within the supply chain, necessitating new playbooks for defence. This includes moving beyond individual bug tracking to more sophisticated models that score potential attack paths, a method being explored by security researchers at Snyk.
Operational Resilience and Human Factors
Beyond technical controls, the event addresses the operational challenges facing cybersecurity teams. This includes strategies for mitigating team burnout and managing alert fatigue, which can lead to security incidents if not addressed. Case studies from high-stakes environments are being used to demonstrate how improved context can significantly reduce false positives in security operations.
The agenda also addresses the evolving regulatory landscape, including the impact of the Cyber Resilience Act on enterprise security strategies and compliance requirements.
