CISO FSI ANZ Online schedule

• Reconciling cyber strategy and business priorities that don't always pull in the same direction
• Defining meaningful risk tolerances and executive accountability
• Security outcomes using metrics that matter to boards
• Turning compliance obligations into sustained risk reduction

• Demonstrating continuous control monitoring across even the most complex financial environments
• Automating evidence collection and regulatory reporting, so teams spend less time proving compliance and more time acting on it
• Shared risk visibility across security, risk and audit teams, instead of three separate versions of the truth
• Strengthening assurance while reducing the compliance effort it takes to get there 

• How AI is reshaping payment fraud, account takeover and financial crime
• Strengthening collaboration between cyber, fraud and finance teams
• Fraud prevention and customer experience don't have to be a trade-off: getting the balance right
• AI-enabled attack techniques are emerging faster than most playbooks — how organisations are responding

• Discovering sensitive data before AI systems can access it
• Applying policy-driven controls across AI workloads
• Reducing data leakage while enabling AI adoption
• Balancing innovation with regulatory obligations 

Speaker:
Senior Representative, Obsidian Security 

• Not every resilience investment has delivered equal value — what worked and what didn’t
• Recent incidents have changed more than incident response plans — what's shifted in practice?
• How organisations are strengthening readiness for prolonged disruption
• Raising the bar on resilience — what are IT leaders planning?

• Visibility gaps across cloud and SaaS environments are where risk tends to hide
• Configuration and identity risk multiply with every new environment added: rethinking oversight itself, not just adding more tools
• Protecting APIs and third-party integrations — the connective tissue of open banking
• Maintaining compliance across distributed infrastructure in every environment 

Speaker:
Senior Representative, Docker 

• Embedding AI into existing risk and control frameworks, rather than building a parallel regime
• Translating AI risk appetite into metrics boards can actually act on
• Closing the assurance gap on vendor and embedded AI tools

• What does Zero Trust look like once it's applied across identities, networks and workloads?
• Shrinking the attack surface and keeping users unaffected with the right architecture
• Extend existing IAM and PAM investments as the foundation Zero Trust builds on
• Building a phased roadmap for enterprise adoption 

• Concentration risk across cloud and strategic suppliers is growing — how are organisations managing it?
• Extending resilience across fintech and third-party ecosystems
• Annual vendor reviews are no longer enough — what continuous assurance looks like in practice
• Third-party risk is a sector-wide problem, and stronger collaboration across financial institutions is part of the answer

Speakers:

Aaron McKeown CISO NGM Group

Daminda Kumara CISO Commonwealth Superannuation Corporation

Tony Arnold CISO TSB Bank New Zealand

Rucha Gatti Director, Tech & Info Security Risk, Resilience Risk - Group Risk National Australia Bank  (moderator) 

• How AI is reshaping identity attacks — from credential theft to synthetic and impersonated identities
• Extending IAM and access governance to keep pace with AI-driven threats and AI-powered tools inside the organisation
• Practical steps for strengthening identity assurance without adding friction for legitimate users 

• Winning buy-in and budget
• Choosing metrics that mean something in the boardroom, not just the SOC
• Turning governance and compliance obligations into decisions that build real resilience