Conscia Momentum 2026

Rune Espensen fra Nordea tager teknikken og mystikken helt ud af quantum-diskussionen og kommer med et par konkrete og simple bud på hvordan man kommer i gang, hvad der skal til og en tidslinje baseret på Nordeas egne analyser.

Most cybersecurity programmes fail for one simple reason: They stop at insights from an assessment instead of delivering operational controls. This session highlights Conscia’s Customer Journey, which shows how recommendations based on controls can be translated into actual value, not just a compliance checkmark.

Key takeaways:

Why standalone assessment-driven compliance rarely results in sustained risk reduction

How an end-to-end Customer Journey connects CIS maturity, executive decisions, and NIS2 accountability

What leaders must change to turn cybersecurity from reports and recommendations into operational reality

Kom med bag kulisserne på det danske cyberlandshold, der har taget Europa med storm og markeret sig med top 5 placeringer de sidste 5 år – inklusiv Guldmedaljen i 2022 og Sølvmedaljen i 2025. Hvad går konkurrencen ud på? Hvordan træner man? Og hvad betyder Cyberlandsholdet for Danmark og de danske virksomheder? Det er blot nogle af spørgsmålene oplægget kommet omkring.

The traditional security perimeter is dissolving, ushering in an era where Identity has become the new control plane – and the primary target for attackers. This session explores the critical transformation underway in the Identity Security landscape, moving beyond legacy access management to a holistic, intelligence-driven approach. We will dissect how the Palo Alto Networks acquisition of CyberArk/Idira is a seismic shift, reflecting the strategic imperative of securing every identity across all environments. Discover how this powerful union uniquely positions CyberArk/Idira to empower customers in accelerating the transformation of their identity practices, providing a unified defense against the ever-evolving and growing threat of identity-based attacks, from compromise to lateral movement. Learn how to secure your organization in a zero-trust world by embracing the New Identity Mandate.

On Feb 1, 2026, Martin joined Scandinavian Airlines as CISO and Head of Cybersecurity – a company operating in a volatile environment shaped by national and international requirements, regulation, competition, and geopolitical developments. Shortly after he joined, war broke out in the Middle East, heavily impacting the core business as jet fuel prices increased significantly. In this presentation, Martin will reflect on his first six months in a highly competitive industry, experiencing a high degree of cooperation between industry actors while balancing an ambitious cybersecurity strategy with commercial and revenue considerations. An industry “not for the faint-hearted”, as stated by the CEO during Martin’s introductory meeting.

Kom og hør hvordan I kan bygge et phishing-resistent IT-miljø til jeres mobile brugere.
Peter Mohr og Søren Linde gennemgår det aktuelle trusselsbillede for mobile enheder. De viser, hvordan hackere kan få adgang til en Exchange-konto der er beskyttet med MFA. Samtidig ser de på, hvordan man opnår effektiv beskyttelse af mobile enheder og data uden at gå på kompromis med brugervenligheden.
Du kan bl.a. høre om brug af FIDO og andre identity management-teknologier.

Nicklas Fallesen og Mathias Andersen fortæller om politiets bekæmpelse af cybercrime med nedslag i konkrete sager og nye TTP’er anvendt af modstanderen.

2026 has highlighted the industry’s shift from AI assistants to AI agents. These systems do not simply generate responses. They interact with applications, access enterprise data, make decisions, and increasingly participate in operational workflows.

This evolution is changing the role of infrastructure. Every action taken by an AI agent creates network traffic, requires trust decisions, and generates telemetry that must be observed and governed. As organizations introduce agents into business and IT operations, networking becomes more than the foundation for AI infrastructure. It becomes the control plane for trusted AI operations.

In this session, Craig Connors will share the thinking behind Cisco’s Secure AI Factory and connect it to emerging operational models such as AgenticOps, where humans and AI agents work together to manage increasingly complex environments. He will discuss how platforms like Cloud Control, combined with AI-native security and observability, help organizations establish trust, enforce policy, and maintain control as AI systems gain greater autonomy.

The session offers a forward-looking perspective on how networking, security, and operations are converging to support the next generation of enterprise AI. Attendees will gain insight into the architectural principles and operational models that can help organizations embrace AI innovation while maintaining resilience, governance, and human oversight.
2026 has highlighted the industry’s shift from AI assistants to AI agents. These systems do not simply generate responses. They interact with applications, access enterprise data, make decisions, and increasingly participate in operational workflows.

This evolution is changing the role of infrastructure. Every action taken by an AI agent creates network traffic, requires trust decisions, and generates telemetry that must be observed and governed. As organizations introduce agents into business and IT operations, networking becomes more than the foundation for AI infrastructure. It becomes the control plane for trusted AI operations.

In this session, Craig Connors will share the thinking behind Cisco’s Secure AI Factory and connect it to emerging operational models such as AgenticOps, where humans and AI agents work together to manage increasingly complex environments. He will discuss how platforms like Cloud Control, combined with AI-native security and observability, help organizations establish trust, enforce policy, and maintain control as AI systems gain greater autonomy.

The session offers a forward-looking perspective on how networking, security, and operations are converging to support the next generation of enterprise AI. Attendees will gain insight into the architectural principles and operational models that can help organizations embrace AI innovation while maintaining resilience, governance, and human oversight.

I denne session vil Thomas Kristmar vise SITs praktiske arbejde med digital suverænitet, herunder hvordan arbejdet med trusselsbilledet omsættes til konkrete handlinger. Session vil vise, hvordan man i praksis sammenkobler en organisations beredskabsarbejde med trusselsbilledet.

Automatisk hacking – se hvordan A.I hacking foregår og hvordan stemmer og ansigter kan kopieres i realtid så robotterne narrer dig til at tro det er ægte mennesker du kommunikerer med.
Ovenstående indbefatter også en lille video om Droner der dræber og mulighederne med sådan nogle i fremtiden

Hvordan opdyrker og fastholder vi de cyberkompetencer, Danmark har brug for? I denne session giver FDCA og Martin Kofoed Høding et indblik i Forsvarets cyberværnepligt, alumnernes rolle efter endt tjeneste og hvordan erhvervslivet kan være med til at styrke talentmassen, fællesskabet og Danmarks samlede digitale modstandsdygtighed.

AL Sydbank har som én af de første danske banker gennemført avanceret Threat Lead Penetration Test (TLPT) efter den nye DORA-forordning. Hør om erfaringerne fra testen og hvordan sammenspillet med deres SOC/CDR fungerede.

For two decades, the alert queue has set the SOC’s pace. Agents that can investigate and act on their own break that model. This talk reframes the shift to autonomous response – where agents earn autonomy, where humans stay in the loop, how to get there in practice, and what it means for the future SOC.

“EU cloud” is not one single thing. In this session, we begin with an overview of the cloud landscape—from U.S. hyperscalers to European public cloud providers, enterprise cloud platforms, and managed private cloud models.

We then take a closer look at Scaleway as a practical example of a European cloud provider in action. Through a specific migration use case for “Customer X,” we compare Scaleway and AWS service by service, giving you a clear understanding of what you gain, what you lose, and what considerations to keep in mind when data sovereignty and EU jurisdiction are key factors in your decision-making process.
“EU cloud” is not one single thing. In this session, we begin with an overview of the cloud landscape—from U.S. hyperscalers to European public cloud providers, enterprise cloud platforms, and managed private cloud models.

We then take a closer look at Scaleway as a practical example of a European cloud provider in action. Through a specific migration use case for “Customer X,” we compare Scaleway and AWS service by service, giving you a clear understanding of what you gain, what you lose, and what considerations to keep in mind when data sovereignty and EU jurisdiction are key factors in your decision-making process.

Peter Sindt, Incident Response Manager, vil i dag introducere Incident Response med fokus på, hvordan organisationer effektivt håndterer kritiske cyberangreb. Der vil samtidig blive sat fokus på, hvordan Conscias Incident Response Retainer kan styrke beredskabet og sikre en hurtig og kvalificeret indsats, når det virkelig gælder.

I dette indlæg perspektiveres ledelsens ansvar, opgaver og roller i forhold til cybersikkerhed og resiliens i bred forstand. Hvordan kan vi fra it-organisationen bedst hjælpe ledelserne med at leve op til både ansvaret og opgaverne på en både grundig, troværdig, innovativ, nytænkende og omhyggelig måde – der samtidig kan virke i organisationen.