Conference Description
Key Takeaways
- One-day cybersecurity summit addressing nation-state threats and advanced persistent adversaries targeting New Zealand organisations
- Designed for CISOs, CIOs, and senior technology risk leaders across finance, utilities, telecommunications, healthcare, and education sectors
- Focus areas include threat intelligence, incident response, crisis management, security operations centre readiness, and AI-related security risks
- Practical emphasis on moving beyond compliance-driven security toward continuous testing and organisational resilience
- Features panel discussions, case studies, interactive workshops, and networking with industry peers and solution providers
Introduction
The Cyber Resilience Summit NZ 2026 convenes senior cybersecurity professionals in Auckland for a concentrated examination of the threats reshaping enterprise security strategy. Held at the Hilton Auckland, this executive-level conference brings together Chief Information Security Officers, technology risk leaders, and IT executives from critical infrastructure sectors to address the growing sophistication of state-sponsored cyber operations and the practical measures required to counter them.
The timing reflects an increasingly complex threat environment. Nation-state actors have expanded their targeting beyond traditional government and defence sectors, with financial services, utilities, telecommunications, and healthcare organisations now facing sustained campaigns from well-resourced adversaries. For New Zealand organisations operating within interconnected global supply chains, understanding these threats and building genuine resilience has become an operational imperative rather than a theoretical concern.
About the Cyber Resilience Summit NZ 2026
The summit operates as a single-day, in-person event structured around panel discussions, case study presentations, interactive workshops, and dedicated networking sessions. This format enables attendees to engage directly with peers facing similar challenges while gaining exposure to current thinking on threat mitigation and incident management.
Sponsoring organisations participating in the event include Yokogawa, Fortinet, Splunk, Arctic Wolf, Google Cloud Security, Cloudflare, Bitsight, Cycraft, and CoreView. Their involvement reflects the breadth of technologies and approaches now required to address enterprise security challenges, spanning network protection, security analytics, threat detection, cloud security, and risk quantification.
The attendee profile skews heavily toward senior decision-makers. Finance sector representatives comprise approximately 35 percent of participants, with utilities and telecommunications accounting for 30 percent, healthcare and education contributing 20 percent, and remaining sectors making up the balance. This composition creates opportunities for cross-sector knowledge exchange, particularly valuable given that threat actors frequently employ similar tactics across different industries.
Nation-State Threats and Geopolitical Dimensions
A central theme running through the summit programme concerns the evolution of nation-state cyber operations and their implications for enterprise security planning. State-sponsored threat actors operate with resources, persistence, and technical capabilities that distinguish them from financially motivated cybercriminals. Their objectives often extend beyond immediate financial gain to include intellectual property theft, supply chain compromise, and pre-positioning within critical infrastructure networks.
The summit addresses how geopolitical developments translate into tangible cyber risks for organisations. Understanding adversary motivations and tactics enables security teams to prioritise defensive investments and detection capabilities more effectively. Sessions examining threat intelligence and adversary emulation provide frameworks for anticipating attacker behaviour rather than simply responding to incidents after they occur.
Purple teaming exercises, which combine offensive and defensive security perspectives, feature prominently in the programme. This approach tests organisational defences against realistic attack scenarios while simultaneously improving detection and response capabilities. For organisations facing sophisticated adversaries, such exercises reveal gaps that compliance-focused assessments often miss.
Incident Response and Crisis Management
Effective incident response remains a persistent challenge for organisations of all sizes. The summit dedicates significant attention to the practical aspects of detecting, containing, and recovering from security incidents. This includes technical considerations around security monitoring and detection, as well as the organisational and communication challenges that emerge during crisis situations.
Security operations centre readiness forms a key discussion area. Many organisations have invested substantially in security monitoring tools yet struggle to operationalise these investments effectively. Alert fatigue, skills shortages, and inadequate processes can undermine even well-funded security operations. The summit examines approaches to improving SOC effectiveness, including the integration of automation and the development of more mature detection engineering practices.
Crisis management extends beyond technical response to encompass executive communication, regulatory notification, and business continuity. The reputational and operational consequences of major security incidents often exceed the direct costs of remediation. Sessions addressing these broader dimensions help attendees prepare their organisations for the full scope of incident impact.
Artificial Intelligence in Security Operations
The intersection of artificial intelligence and cybersecurity presents both opportunities and risks that the summit explores in depth. On the defensive side, AI and automation offer potential improvements in threat detection, alert triage, and response orchestration. These capabilities can help address the scale challenges facing security teams dealing with expanding attack surfaces and increasing data volumes.
However, the programme also examines emerging risks associated with AI adoption. AI-generated code introduces new vulnerability considerations as development teams increasingly rely on automated code generation tools. Understanding the security implications of these tools and implementing appropriate review processes has become an important concern for organisations embracing AI-assisted development.
The dual-use nature of AI technologies means that adversaries are also leveraging these capabilities. More convincing social engineering attacks, automated vulnerability discovery, and adaptive malware represent potential applications that defenders must anticipate. The summit provides a forum for examining how these developments are reshaping the threat landscape.
Moving Beyond Compliance-Driven Security
A recurring theme throughout the summit concerns the limitations of compliance-focused security programmes. While regulatory requirements and industry standards provide important baselines, they often lag behind evolving threats and may create false confidence when treated as sufficient measures of security maturity.
The summit advocates for continuous testing and assessment as essential components of genuine cyber resilience. Vulnerability management programmes that identify and remediate weaknesses before adversaries exploit them, combined with regular exercises that test response capabilities, provide more meaningful assurance than periodic compliance audits alone.
Insider threat management also receives attention, recognising that not all risks originate from external actors. Whether through malicious intent or inadvertent error, insider actions can compromise security controls and expose sensitive information. Effective programmes balance security requirements with operational practicality and employee privacy considerations.
Who Should Attend
The Cyber Resilience Summit NZ 2026 is designed for senior leaders responsible for cybersecurity strategy and operations within their organisations. Chief Information Security Officers and Heads of Information Security will find direct relevance in the technical and strategic content. Chief Information Officers and Heads of IT gain perspective on how security considerations should inform broader technology decisions.
Technology risk leaders benefit from the summit’s emphasis on risk management frameworks and the quantification of cyber risk in business terms. The cross-sector attendance provides valuable exposure to how peer organisations in different industries approach similar challenges, often revealing transferable practices and common pitfalls.
Organisations operating critical infrastructure or handling sensitive data face particularly acute versions of the challenges addressed at the summit. The focus on nation-state threats and advanced adversaries speaks directly to the risk profiles of utilities, telecommunications providers, financial institutions, and healthcare organisations.
Building Organisational Resilience
The summit’s emphasis on resilience rather than prevention alone reflects a mature understanding of contemporary cyber risk. Complete prevention of all security incidents is neither achievable nor a realistic planning assumption. Organisations that acknowledge this reality and invest in detection, response, and recovery capabilities position themselves to limit the impact of incidents when they occur.
Fostering organisation-wide cyber responsibility represents another important theme. Security cannot remain solely the province of dedicated security teams when threats increasingly target human behaviour through social engineering and when business decisions routinely create or mitigate cyber risk. The summit examines approaches to embedding security awareness and accountability throughout organisational structures.
For New Zealand organisations navigating an increasingly hostile threat environment, the Cyber Resilience Summit NZ 2026 offers an opportunity to benchmark current practices, learn from peer experiences, and engage with the technologies and approaches shaping the future of enterprise security.