Programme

Chairwoman Anna Jois will officially open the 2026 edition of State of Cyber Security with energy, enthusiasm, and her signature engaging style. As a certified moderator from Sweden with more than a decade of experience leading impactful conversations on stage, Anna knows exactly how to create the right atmosphere from the very first moment. The day will begin with a warm welcome and an opportunity to connect with fellow cybersecurity professionals, partners, and industry leaders. Anna will then guide attendees into the program ahead, introducing the first speakers and setting the tone for a day filled with inspiring insights, meaningful discussions, and valuable takeaways.

Most organisations are responding to the AI arms race in predictable ways.  More tools, faster detection, increasing automation. Necessary, but not sufficient. The real pressure is shifting elsewhere: into moments where the situation is unclear, time is short, and critical decisions cannot be delegated to technology. That is where risk is now concentrated – in human judgement under pressure. In this keynote, Monika Kullberg explores how AI is reshaping the conditions for decision-making: altering trust, increasing cognitive load, and accelerating the pace at which people must act without full clarity. Combining insights from psychology and cybersecurity, she introduces practical ways to strengthen judgement, navigate uncertainty, and maintain effectiveness when the stakes are high. Because in the end, the advantage will not come from tools alone, but from the ability to think clearly and act decisively when it matters most.

AI agents are moving beyond answering questions to investigating threats, making decisions, and taking action. But how much autonomy should we really give them? This session traces the journey from AI-assisted to increasingly autonomous security operations, and the trust boundaries that emerge along the way. We’ll examine which SOC tasks can be delegated to agents, where human-in-the-loop or human-on-the-loop oversight still matters, and how guardrails, permissions, context, and auditability shape responsible automation. Through practical examples, we’ll look at what it takes to build security operations where humans and AI agents work together at machine speed.

AI tools are rapidly transforming the way organisations work, collaborate and innovate. At the same time, their growing use can expose sensitive information, bypass existing security controls and create entirely new attack surfaces. In this session, we will explore the hidden security risks associated with workplace AI tools and examine how seemingly harmless use can lead to data leakage, compliance challenges and increased vulnerability. You will gain practical insights into how organisations can identify these risks, strengthen governance and implement effective safeguards without slowing down innovation or limiting the benefits of AI. Join this session to learn how to enable the responsible use of AI while keeping your organisation’s data, systems and people protected.

We often tend to overemphasise the role of quick patch awareness when addressing the human element of cybersecurity. But what if we started earlier, before unsafe habits take root? In this session, Per-Albin Johansson introduces HackShield, an initiative that uses games, storytelling and shared challenges to help users navigate the digital world. By bringing cybersecurity into homes, classrooms and communities, HackShield empowers young people to become part of the solution—and to share their knowledge with others. Tune in and learn: Why building cyber awareness early is an investment in long-term resilience. How playful, interactive learning can make cybersecurity relevant and engaging to different target audiences. How collaboration between schools, public organisations and businesses can help develop tomorrow’s cybersecurity talent. Together, we can move beyond short-term awareness and help raise a generation of future cyber heroes."

Cyberattacks are evolving faster than ever, and successful recovery requires more than just the right technology. Security, IT, identity and business teams must work together, share a clear understanding of the situation and make critical decisions under pressure. In this session, we follow a realistic cyberattack scenario, from the first security alert to a clean and trusted recovery. Discover the challenges organisations face during an incident, the decisions that can make or break their response, and the importance of cross-functional collaboration. Walk away with practical insights, key lessons and the essential questions you should be asking your own teams today to ensure your organisation is prepared when an attack occurs.

How can organisations turn the potential of artificial intelligence into cyber defence capabilities that continue to perform under operational pressure? Drawing on experience in cyber defence capability development within the Swedish Air Force, this presentation explores how AI can be integrated into cyber defence while maintaining the ability to operate when digital systems are disrupted, compromised or no longer trustworthy. The starting point is not the technology itself, but the operational task: what must the organisation remain capable of doing, and which digital dependencies support that mission? From this perspective, AI should be assessed by its contribution to effective analysis, timely decision-making and the continuity of critical functions. The session will explore where AI can add practical value, including supporting analysis, assisting technical specialists and strengthening training and exercises. It will also address the essential conditions for responsible implementation, such as reliable data access, clear accountability, human expertise and appropriate levels of automation. A central theme will be the importance of realistically testing the complete capability. What happens when information is incomplete, digital dependencies fail or AI produces unreliable results? Effective cyber defence requires people, processes and technology to perform together,even under disruption. Although grounded in a military operational perspective, the lessons are directly relevant to critical infrastructure, public services and industry. Key takeaways Start with critical operational tasks and identify their digital dependencies. Introduce AI through clearly defined use cases with measurable value and ownership. Maintain human knowledge and procedures when AI support becomes unavailable. Test whether people, processes and technology can perform together under pressure. Connect AI opportunities with demonstrable cyber readiness and resilience.

Mark Snel, Head of Cyber Security at Volvo Cars, shares a deeply personal and practical story about resilience, burnout, and the human side of cybersecurity leadership. After stepping into a Business CISO role in 2019 and later taking responsibility for the SOC, the constant pressure of 24/7 security leadership began to take its toll, not only professionally, but personally as well. Faced with exhaustion and the risk of burnout, Mark was forced to confront a difficult question: could he continue doing the work he loved without sacrificing his health, family life, and peace of mind? In this honest and relatable session, Mark explores the unique stress patterns affecting CISOs and incident response professionals, while sharing the lessons he learned through trial, failure, and recovery. From cold exposure and meditation to micro-habits and resilience training with former special forces, attendees will gain practical insights into what truly helps under pressure. The session also highlights the organizational factors that amplify stress, including leadership expectations, role overload, and toxic workplace dynamics. Participants will leave with actionable strategies to recognize early warning signs, strengthen personal resilience, and build a more sustainable approach to cyber leadership, because cyber resilience ultimately depends on human resilience.

For many organizations, NIS2 has become a catalyst for strengthening cybersecurity, improving resilience, and creating clearer accountability. While Vend's NIS2 journey was already underway, the rapid rise of AI has introduced new challenges around risk, identity and access management, data protection, and incident response. In this session, Kimmy Nordqvist, CISO at Vend, shares how Vend is navigating NIS2 in an AI-driven world. Through practical insights, she explores how organizations can balance compliance, business enablement, and future-ready cyber resilience.

How should Sweden’s organisations prepare for cyber threats in the age of AI, and where can closer cooperation make a difference? In this session, Otto Elmgart offers a perspective from Sweden’s National Cybersecurity Centre (NCSC) on its current work and future priorities, with a focus on the emerging cybersecurity challenges surrounding AI. He explores what these developments mean for public and private organisations, and how cooperation across sectors can help strengthen Sweden’s collective resilience. For cybersecurity professionals looking beyond their own organisation, this session connects the national perspective with the challenges they face in practice. Key takeaways: Insight into NCSC’s current activities and priorities. A clearer understanding of emerging AI-related cybersecurity challenges. Perspectives on strengthening cooperation between the public and private sectors.

AI is transforming cybersecurity at an unprecedented pace. But as technology becomes more powerful and cyber threats grow increasingly sophisticated, one question becomes more important than ever: What does effective leadership look like in the age of AI? In this panel discussion, leading voices from cybersecurity, technology and law enforcement come together to explore how leaders can navigate an increasingly complex digital landscape. From balancing AI-driven innovation with security and accountability to building resilient organisations and maintaining human judgement in an automated world, the discussion will focus on the decisions and responsibilities shaping the future of cybersecurity leadership. Key questions we'll explore: How is AI changing the role and responsibilities of cybersecurity leaders? How can organisations embrace AI while maintaining control, trust and accountability? What leadership qualities and organisational capabilities will be essential in the years ahead? How can industry and law enforcement work together to address emerging AI-driven cyber threats? Expect an engaging, thought-provoking conversation combining different perspectives, practical experiences and honest insights into the challenges ahead. Moderated by: Linda Nieminen – Co-founder, Cyber Chats & Chill Margarita Sallinen – Co-founder, Cyber Chats & Chill Panellists: Klas Bergwall – Chief Security Officer, Advania Petra Klein – Managing Director Sweden, Syndis Jan Olsson – Swedish Police Authority