Conference Description
Key Takeaways
- Two-day cybersecurity exposition addressing enterprise security, regulatory compliance and operational resilience
- Focus on NIS2 Directive and Cyber Resilience Act implementation for European organisations
- Industrial cybersecurity coverage spanning IT/OT convergence, SCADA systems and programmable logic controllers
- Designed for CISOs, IT directors, compliance officers, executive leadership and public sector decision-makers
- Co-located with SIDO Lyon, connecting cybersecurity with IoT, artificial intelligence and robotics communities
Introduction
Lyon Cyber Expo returns to the Cité Internationale de Lyon on 16–17 September 2026, bringing together cybersecurity professionals, technology vendors and organisational leaders to address the evolving threat landscape facing European enterprises and public institutions. The event arrives at a critical juncture as organisations work to meet compliance deadlines under the NIS2 Directive and prepare for the Cyber Resilience Act, while simultaneously defending against increasingly sophisticated ransomware campaigns and supply chain attacks.
About Lyon Cyber Expo
Lyon Cyber Expo positions itself as a strategic platform where cybersecurity practitioners can move beyond reactive defence toward proactive threat anticipation. The programme combines conference sessions, roundtable discussions, hands-on workshops and an exhibition floor featuring security vendors and solution providers. Running alongside SIDO Lyon—which covers IoT, artificial intelligence, extended reality and robotics—the event creates opportunities for cross-pollination between cybersecurity specialists and adjacent technology communities.
The exposition emphasises that cybersecurity has evolved from a technical concern confined to IT departments into a governance issue that touches every function within an organisation. This cross-functional perspective shapes the programme content, which addresses not only technical controls but also board-level accountability, supply chain risk management and workforce awareness.
Regulatory Compliance and Digital Sovereignty
European regulatory developments feature prominently in the programme. The NIS2 Directive, which significantly expands the scope of organisations subject to cybersecurity requirements, demands that covered entities implement risk management measures, incident reporting procedures and supply chain security controls. The Cyber Resilience Act introduces mandatory security requirements for products with digital elements throughout their lifecycle, affecting manufacturers, importers and distributors across multiple sectors.
Digital sovereignty—the capacity of organisations and nations to maintain control over their data, infrastructure and technology choices—emerges as a recurring theme. For French and European organisations, this encompasses decisions about cloud service providers, secure communications platforms and the geographic location of sensitive data processing. Exhibitors such as Hexatrust, representing French cybersecurity vendors, and the French Cybersecurity Federation (FFCyber) reflect this emphasis on domestic and European security capabilities.
Industrial Cybersecurity and IT/OT Convergence
The convergence of information technology and operational technology environments presents distinct security challenges that Lyon Cyber Expo addresses directly. Industrial control systems, including SCADA platforms and programmable logic controllers, were historically isolated from corporate networks and the internet. As these systems become increasingly connected to enable remote monitoring, predictive maintenance and operational efficiency, they inherit vulnerabilities that traditional IT security tools may not adequately address.
Sessions covering IoT and Industrial IoT security examine how organisations can protect connected devices that often lack the processing power for conventional endpoint security agents. The intersection of artificial intelligence with cybersecurity receives attention from multiple angles: AI as a defensive tool for threat detection and response, AI systems as attack targets requiring their own protection, and the emerging challenge of AI-powered attacks that can adapt and scale beyond human-operated campaigns.
Building Operational Resilience
Ransomware defence and operational resilience form a practical thread throughout the event. With ransomware attacks continuing to disrupt organisations across sectors, the focus extends beyond prevention to encompass detection, response and recovery capabilities. Penetration testing methodologies help organisations identify vulnerabilities before adversaries exploit them, while secure communications solutions address the need to maintain coordination during incidents when primary systems may be compromised.
Vendors present at the exposition include Rainbow4all in secure communications, Certilience specialising in IoT and IIoT security, NinjaOne offering endpoint management capabilities, and Avangarde Cyber Security. Microsoft maintains a presence through its Security Hub France initiative.
Who Should Attend
Lyon Cyber Expo serves a broad professional audience united by responsibility for organisational security and resilience. Chief Information Security Officers and IT directors will find technical depth alongside strategic perspectives, while compliance officers can explore practical approaches to meeting regulatory obligations. Executive committee members and production managers benefit from content designed to bridge the gap between cybersecurity specialists and business leadership. The event also addresses the needs of SMEs and mid-sized companies that must implement robust security programmes with more limited resources than large enterprises, as well as local authorities and public sector organisations navigating their own compliance requirements.