Conference Description
Key Takeaways
- Invitation-only forum bringing together more than 70 CISOs and senior cybersecurity executives
- Three-day programme featuring intelligence briefings, boardroom discussions, tactical workshops and live red/blue team simulations
- Core topics include threat intelligence, zero trust architecture, identity governance, AI-driven security operations and board-level risk communication
- Community-driven agenda shaped by an executive council of practising CISOs
- Designed for security leaders from large enterprises, government agencies, financial services, healthcare and critical infrastructure
Introduction
The Watchtower CISO Forum Austin convenes senior cybersecurity leaders for three days of intensive intelligence sharing, strategic dialogue and hands-on exercises. Scheduled for September 20–22, 2026, at the Hyatt Lost Pines in Austin, Texas, the invitation-only gathering addresses the operational and governance challenges facing enterprise security teams as threat actors grow more sophisticated and regulatory expectations continue to rise.
About the Watchtower CISO Forum
Watchtower positions itself as a community-driven event rather than a conventional conference. An executive council composed of CISOs from leading organisations shapes the agenda, ensuring that sessions reflect the priorities of practising security leaders rather than vendor marketing objectives. Discussions operate under Chatham House Rules, encouraging candid exchange of tactics, lessons learned and emerging threat data.
The forum is fully hosted for approved enterprise security executives, with travel, accommodation and meals provided. This model removes commercial barriers and reinforces the peer-to-peer character of the programme.
Threat Intelligence and Nation-State Adversaries
A significant portion of the agenda focuses on real-time threat intelligence and the tactics employed by nation-state actors. Intelligence briefings examine current attack patterns, attribution challenges and the geopolitical factors that influence targeting decisions. For security leaders responsible for defending critical infrastructure, financial systems or government networks, access to timely, contextualised threat data is essential for prioritising defensive investments and informing executive stakeholders.
Zero Trust, Identity Governance and Network Security Posture
Zero trust architecture remains a central theme as organisations move away from perimeter-based models toward continuous verification of users, devices and workloads. Sessions explore the practical realities of implementing zero trust at scale, including identity governance frameworks that must accommodate hybrid workforces, cloud-native applications and an expanding universe of machine identities.
Network security posture management complements these discussions by addressing visibility gaps across distributed environments. As enterprises operate across multiple cloud providers, on-premises data centres and edge locations, maintaining a coherent security posture requires tooling and processes that can normalise policy enforcement and detect configuration drift.
AI-Driven Security Operations and Incident Response
Artificial intelligence is reshaping both offensive and defensive capabilities. The forum examines how security operations centres are integrating AI-driven automation to accelerate detection, triage and response while managing the risks introduced by adversarial use of generative AI. Workshops provide opportunities to test incident response playbooks in simulated environments, including live red and blue team exercises that stress-test detection logic and coordination protocols.
Communicating Cyber Risk to the Board
Quantifying cyber risk in terms that resonate with boards and executive committees remains a persistent challenge for security leaders. Boardroom sessions at the forum address risk quantification methodologies, metrics that translate technical exposure into business impact, and strategies for securing budget and executive sponsorship. As regulatory bodies increasingly hold directors accountable for cybersecurity oversight, the ability to communicate risk clearly has become a core competency for CISOs.
Who Should Attend
The Watchtower CISO Forum is designed for Chief Information Security Officers, Chief Information Officers, Vice Presidents and Directors of Security, and other senior cybersecurity executives. Attendees typically represent large enterprises, government agencies, financial institutions, healthcare organisations, educational institutions and critical infrastructure operators. The forum’s value proposition centres on peer exchange, benchmarking and access to intelligence that may not be available through public channels.
Sponsor and Vendor Ecosystem
The event features participation from a broad cross-section of the cybersecurity vendor landscape. Sponsors and solution providers include Commvault, AppOmni, Sentra, Halcyon, Axonius, Torq, Swimlane, Tufin, NowSecure, Cisco, Microsoft, Okta, Druva, Cyera, IBM, Trend Micro, SentinelOne, CrowdStrike, Dataminr, Fortinet, Zscaler and Varonis, among others. Their presence offers attendees opportunities to evaluate emerging technologies and engage directly with product teams in a setting oriented toward executive dialogue rather than exhibition-floor demonstrations.