Programme

Chairwoman Anna Jois will officially open the 2026 edition of State of Cyber Security with energy, enthusiasm, and her signature engaging style. As a certified moderator from Sweden with more than a decade of experience leading impactful conversations on stage, Anna knows exactly how to create the right atmosphere from the very first moment. The day will begin with a warm welcome and an opportunity to connect with fellow cybersecurity professionals, partners, and industry leaders. Anna will then guide attendees into the program ahead, introducing the first speakers and setting the tone for a day filled with inspiring insights, meaningful discussions, and valuable takeaways.

Most organisations are responding to the AI arms race in predictable ways.  More tools, faster detection, increasing automation. Necessary, but not sufficient. The real pressure is shifting elsewhere: into moments where the situation is unclear, time is short, and critical decisions cannot be delegated to technology. That is where risk is now concentrated – in human judgement under pressure. In this keynote, Monika Kullberg explores how AI is reshaping the conditions for decision-making: altering trust, increasing cognitive load, and accelerating the pace at which people must act without full clarity. Combining insights from psychology and cybersecurity, she introduces practical ways to strengthen judgement, navigate uncertainty, and maintain effectiveness when the stakes are high. Because in the end, the advantage will not come from tools alone, but from the ability to think clearly and act decisively when it matters most.

How should Sweden’s organisations prepare for cyber threats in the age of AI, and where can closer cooperation make a difference? In this session, Otto Elmgart offers a perspective from Sweden’s National Cybersecurity Centre (NCSC) on its current work and future priorities, with a focus on the emerging cybersecurity challenges surrounding AI. He explores what these developments mean for public and private organisations, and how cooperation across sectors can help strengthen Sweden’s collective resilience. For cybersecurity professionals looking beyond their own organisation, this session connects the national perspective with the challenges they face in practice. Key takeaways: Insight into NCSC’s current activities and priorities. A clearer understanding of emerging AI-related cybersecurity challenges. Perspectives on strengthening cooperation between the public and private sectors.

AI agents are moving beyond answering questions to investigating threats, making decisions, and taking action. But how much autonomy should we really give them? This session traces the journey from AI-assisted to increasingly autonomous security operations, and the trust boundaries that emerge along the way. We’ll examine which SOC tasks can be delegated to agents, where human-in-the-loop or human-on-the-loop oversight still matters, and how guardrails, permissions, context, and auditability shape responsible automation. Through practical examples, we’ll look at what it takes to build security operations where humans and AI agents work together at machine speed.

AI tools are rapidly transforming the way organisations work, collaborate and innovate. At the same time, their growing use can expose sensitive information, bypass existing security controls and create entirely new attack surfaces. In this session, we will explore the hidden security risks associated with workplace AI tools and examine how seemingly harmless use can lead to data leakage, compliance challenges and increased vulnerability. You will gain practical insights into how organisations can identify these risks, strengthen governance and implement effective safeguards without slowing down innovation or limiting the benefits of AI. Join this session to learn how to enable the responsible use of AI while keeping your organisation’s data, systems and people protected.

During the afternoon break-out sessions, attendees can choose from a selection of interactive sessions focused on sharing in-depth knowledge, practical insights, and discussion around the key themes of State of Cyber Security 2026. Further details and session content will be announced below here.

Mark Snel, Head of Cyber Security at Volvo Cars, shares a deeply personal and practical story about resilience, burnout, and the human side of cybersecurity leadership. After stepping into a Business CISO role in 2019 and later taking responsibility for the SOC, the constant pressure of 24/7 security leadership began to take its toll, not only professionally, but personally as well. Faced with exhaustion and the risk of burnout, Mark was forced to confront a difficult question: could he continue doing the work he loved without sacrificing his health, family life, and peace of mind? In this honest and relatable session, Mark explores the unique stress patterns affecting CISOs and incident response professionals, while sharing the lessons he learned through trial, failure, and recovery. From cold exposure and meditation to micro-habits and resilience training with former special forces, attendees will gain practical insights into what truly helps under pressure. The session also highlights the organizational factors that amplify stress, including leadership expectations, role overload, and toxic workplace dynamics. Participants will leave with actionable strategies to recognize early warning signs, strengthen personal resilience, and build a more sustainable approach to cyber leadership, because cyber resilience ultimately depends on human resilience.

How can organisations turn the potential of artificial intelligence into cyber defence capabilities that continue to perform under operational pressure? Drawing on experience in cyber defence capability development within the Swedish Air Force, this presentation explores how AI can be integrated into cyber defence while maintaining the ability to operate when digital systems are disrupted, compromised or no longer trustworthy. The starting point is not the technology itself, but the operational task: what must the organisation remain capable of doing, and which digital dependencies support that mission? From this perspective, AI should be assessed by its contribution to effective analysis, timely decision-making and the continuity of critical functions. The session will explore where AI can add practical value, including supporting analysis, assisting technical specialists and strengthening training and exercises. It will also address the essential conditions for responsible implementation, such as reliable data access, clear accountability, human expertise and appropriate levels of automation. A central theme will be the importance of realistically testing the complete capability. What happens when information is incomplete, digital dependencies fail or AI produces unreliable results? Effective cyber defence requires people, processes and technology to perform together,even under disruption. Although grounded in a military operational perspective, the lessons are directly relevant to critical infrastructure, public services and industry. Key takeaways Start with critical operational tasks and identify their digital dependencies. Introduce AI through clearly defined use cases with measurable value and ownership. Maintain human knowledge and procedures when AI support becomes unavailable. Test whether people, processes and technology can perform together under pressure. Connect AI opportunities with demonstrable cyber readiness and resilience.

For many organizations, NIS2 has become a catalyst for strengthening cybersecurity, improving resilience, and creating clearer accountability. While Vend's NIS2 journey was already underway, the rapid rise of AI has introduced new challenges around risk, identity and access management, data protection, and incident response. In this session, Kimmy Nordqvist, CISO at Vend, shares how Vend is navigating NIS2 in an AI-driven world. Through practical insights, she explores how organizations can balance compliance, business enablement, and future-ready cyber resilience.

AI is transforming cybersecurity at an unprecedented pace. But as technology becomes more powerful and cyber threats grow increasingly sophisticated, one question becomes more important than ever: What does effective leadership look like in the age of AI? In this panel discussion, leading voices from cybersecurity, technology and law enforcement come together to explore how leaders can navigate an increasingly complex digital landscape. From balancing AI-driven innovation with security and accountability to building resilient organisations and maintaining human judgement in an automated world, the discussion will focus on the decisions and responsibilities shaping the future of cybersecurity leadership. Key questions we'll explore: How is AI changing the role and responsibilities of cybersecurity leaders? How can organisations embrace AI while maintaining control, trust and accountability? What leadership qualities and organisational capabilities will be essential in the years ahead? How can industry and law enforcement work together to address emerging AI-driven cyber threats? Expect an engaging, thought-provoking conversation combining different perspectives, practical experiences and honest insights into the challenges ahead. Moderated by: Linda Nieminen – Co-founder, Cyber Chats & Chill Margarita Sallinen – Co-founder, Cyber Chats & Chill Panellists: Klas Bergwall – Chief Security Officer, Advania Petra Klein – Managing Director Sweden, Syndis Jan Olsson – Swedish Police Authority