Conference Description
Key Takeaways
- Two-day conference addressing cybersecurity challenges specific to banking, insurance, and financial services
- Focus on implementing DORA, the Cyber Resilience Act, and AI Act requirements
- Practical sessions on threat intelligence, stress testing, and quantifying cyber risk
- Designed for CISOs, CIOs, compliance officers, and IT security specialists in financial institutions
- Emphasis on collective defence strategies and sector-wide collaboration through initiatives such as NFCERT
Introduction
Cybersikkerhed i den finansielle sektor brings together authorities, industry practitioners, and security specialists to examine the evolving cyber threat landscape facing financial institutions. Held over two days at Scandic Copenhagen, the conference addresses a convergence of pressures that have made cybersecurity governance increasingly complex: sophisticated state-sponsored attacks, financially motivated threat actors, and a wave of European regulatory requirements that demand demonstrable operational resilience.
The timing reflects broader industry urgency. Financial institutions across Europe are working to meet compliance deadlines under the Digital Operational Resilience Act while simultaneously preparing for obligations under the Cyber Resilience Act and the AI Act. These frameworks require not only technical controls but also governance structures capable of translating cyber risk into board-level decision-making.
Regulatory Complexity and Operational Resilience
DORA represents a significant shift in how financial regulators approach information and communication technology risk. Rather than treating cybersecurity as a purely technical concern, the regulation requires institutions to demonstrate end-to-end operational resilience, including rigorous oversight of third-party service providers and the ability to recover critical functions during severe disruptions.
The conference examines how organisations are interpreting these requirements in practice. Sessions address the interplay between DORA, the Cybersecurity Act, and emerging AI governance obligations, helping attendees understand where frameworks overlap and where distinct compliance efforts are necessary. For institutions already managing multiple regulatory programmes, this integrated perspective is essential for avoiding duplication and identifying gaps.
Vendor and supply chain risk management receives particular attention. Financial institutions increasingly depend on external technology providers, yet DORA places accountability for third-party resilience squarely on the regulated entity. Practitioners share approaches to due diligence, contractual controls, and ongoing monitoring that satisfy regulatory expectations without creating unsustainable administrative burdens.
Threat Intelligence and Collective Defence
The financial sector has long recognised that individual institutions cannot defend effectively in isolation. Threat actors frequently target multiple organisations using similar techniques, making shared intelligence a force multiplier for defenders. The conference explores how sector-wide collaboration through platforms such as NFCERT enables faster detection and coordinated response.
Sessions also address the strategic dimension of cyber threats, including hybrid warfare scenarios where financial infrastructure becomes a target for geopolitical purposes. Understanding these dynamics helps security leaders contextualise their risk assessments and justify investments in resilience capabilities that may seem excessive when measured against historical incident data alone.
Quantifying Risk and Stress Testing
Translating cyber risk into financial terms remains one of the discipline’s persistent challenges. Boards and executive committees require quantified assessments to allocate resources effectively, yet the probabilistic nature of cyber events resists straightforward actuarial treatment. The programme includes practical approaches to stress testing and scenario analysis that help bridge this gap.
Cryptographic protection and its future trajectory also feature in discussions. As quantum computing advances, institutions must evaluate the longevity of current encryption standards and plan migration paths to post-quantum algorithms—a process that requires years of preparation given the complexity of financial technology environments.
Artificial Intelligence in Security Operations
AI presents a dual challenge for financial sector security teams. Defensive applications promise improved threat detection and faster incident response, while adversaries increasingly leverage machine learning to craft more convincing social engineering attacks and automate vulnerability discovery. The conference examines both sides of this equation, helping attendees evaluate AI-enabled security tools critically while preparing for AI-augmented threats.
Who Should Attend
The programme is designed for senior professionals responsible for cybersecurity strategy, risk management, and regulatory compliance within financial services. This includes CISOs, CIOs, chief compliance officers, data protection officers, IT architects, and legal professionals working in banks, insurance companies, pension funds, and fintech organisations. The content assumes familiarity with enterprise security concepts and focuses on strategic and governance challenges rather than introductory material.
Conference Format
The event combines keynote presentations, panel discussions, and case studies drawn from real-world implementation experience. A live podcast session and structured networking breaks provide additional opportunities for peer exchange. Partners including ISACA Denmark Chapter, IT-Branchen, and Den danske Fondsmæglerforening contribute to the programme, reinforcing the event’s position as a sector-specific forum for practical knowledge sharing.