Conference Description
Key Takeaways
- One-day cybersecurity conference addressing ransomware, phishing, DDoS attacks, and AI-driven threats facing Danish organisations
- Focus on NIS2 directive compliance and regulatory requirements affecting critical infrastructure sectors
- Designed for CISOs, IT directors, GRC leaders, and senior executives from public and private sectors
- Emphasis on public-private collaboration and cross-sector digital resilience strategies
- Discussion topics include identity and access management, cloud security, and security architecture
Introduction
State of Cyber Security Denmark brings together the nation’s cybersecurity community for a day of strategic discussion on defending against increasingly sophisticated digital threats. Scheduled for October 6, 2026, at Parken Stadium in Copenhagen, the conference addresses the security challenges facing organisations as Denmark continues its rapid digital transformation across healthcare, financial services, and national infrastructure. The timing is particularly relevant as European regulatory frameworks, notably the NIS2 directive, impose new compliance obligations on organisations operating critical services, while artificial intelligence reshapes both attack methodologies and defensive capabilities.
About This Event
The conference operates as an executive-level gathering designed to facilitate knowledge exchange among cybersecurity practitioners, technology leaders, and policy stakeholders. The programme combines keynote presentations with panel discussions, structured to encourage dialogue rather than passive consumption of information. Experienced moderators guide sessions to ensure conversations remain actionable and relevant to the operational realities facing Danish organisations.
The event positions itself around a central premise: that no single organisation possesses the resources or expertise to address modern cyber threats in isolation. This framing reflects broader industry recognition that threat actors—whether organised criminal groups, state-sponsored operations, or individual hackers—exploit the gaps between organisations rather than targeting them individually. The conference structure encourages participants to share defensive strategies and threat intelligence across traditional competitive boundaries.
Threat Landscape and Attack Vectors
The programme addresses the primary attack vectors currently affecting Danish organisations. Ransomware remains a persistent concern, with criminal groups increasingly targeting organisations that cannot tolerate operational downtime, including healthcare providers and financial institutions. Phishing attacks continue to serve as the initial access point for many intrusions, exploiting human behaviour rather than technical vulnerabilities. Distributed denial-of-service attacks present particular challenges for organisations providing public-facing digital services, where availability directly affects citizen access and commercial operations.
Denmark’s geopolitical position adds complexity to the threat environment. As a NATO member with advanced digital infrastructure, Danish organisations face attention from state-sponsored actors alongside financially motivated criminals. The conference acknowledges this reality by examining how geopolitical tensions translate into operational security requirements for organisations that might not traditionally consider themselves targets of nation-state activity.
Artificial Intelligence in Attack and Defence
A significant portion of the programme examines the dual role of artificial intelligence in cybersecurity. Threat actors now employ machine learning to automate reconnaissance, generate convincing phishing content, and identify vulnerabilities at scale. Defensive applications of the same technologies enable security teams to process threat intelligence, detect anomalous behaviour, and respond to incidents faster than manual analysis permits.
This dynamic creates an asymmetric challenge for defenders. Attackers need only succeed once, while security teams must maintain continuous vigilance across expanding digital estates. The conference explores how organisations can deploy AI-enhanced security tools effectively while managing the risks that accompany increased automation, including the potential for false positives that overwhelm security operations centres and the governance questions surrounding autonomous response capabilities.
NIS2 Compliance and Regulatory Requirements
The NIS2 directive represents a substantial expansion of European cybersecurity regulation, extending compliance obligations to a broader range of sectors and imposing stricter requirements on incident reporting, risk management, and supply chain security. For Danish organisations, implementation requires not only technical controls but also governance structures that demonstrate accountability at board level.
The conference addresses the practical challenges of achieving compliance, particularly for organisations newly brought within regulatory scope. Many mid-sized enterprises now face requirements previously associated with critical infrastructure operators, necessitating investment in security capabilities and documentation that may exceed their current maturity levels. Sessions examine how organisations can prioritise compliance activities to address the highest-risk gaps while building sustainable security programmes rather than checkbox exercises.
Identity and Access Management as Strategic Infrastructure
Identity and access management features prominently in the programme, reflecting its evolution from a technical discipline to a strategic enabler of governance, compliance, and business operations. Modern IAM implementations must balance security requirements against user experience, ensuring that authentication controls protect sensitive resources without impeding legitimate business activities.
The regulatory environment reinforces this strategic importance. NIS2 and related frameworks require organisations to demonstrate control over who accesses critical systems and data, making IAM a compliance requirement rather than merely a security best practice. Cloud adoption further complicates identity management, as organisations must maintain consistent access policies across hybrid environments spanning on-premises infrastructure and multiple cloud platforms.
The Human Factor in Security Operations
Technical controls alone cannot address the full spectrum of cyber risk. The conference dedicates attention to the human elements of security, including security awareness, organisational culture, and the challenge of maintaining vigilance among employees who interact with digital systems daily. Social engineering attacks specifically target human decision-making, bypassing technical defences by manipulating individuals into granting access or transferring funds.
Building security-conscious cultures requires sustained effort beyond annual training exercises. Effective programmes integrate security considerations into daily workflows, making secure behaviour the path of least resistance rather than an additional burden. The conference examines approaches that have demonstrated measurable improvements in employee security behaviour while acknowledging the difficulty of changing established habits.
Who Should Attend
The conference targets senior professionals responsible for cybersecurity strategy and implementation within their organisations. This includes chief information security officers, directors of governance, risk, and compliance, heads of IT and digital transformation, and senior auditors assessing security controls. The programme assumes familiarity with cybersecurity fundamentals and focuses on strategic and operational challenges rather than introductory concepts.
Attendees from both public and private sectors will find relevant content, as the challenges of regulatory compliance, threat management, and secure digital transformation cross organisational boundaries. The emphasis on cross-sector collaboration makes the event particularly valuable for professionals seeking to understand how peers in adjacent industries approach similar challenges.
Building Collective Resilience
The conference ultimately frames cybersecurity as a collective challenge requiring coordinated response. Denmark’s interconnected digital economy means that a successful attack on one organisation can cascade through supply chains and shared infrastructure, affecting entities far removed from the initial target. Public-private collaboration enables threat intelligence sharing, coordinated incident response, and the development of security standards that raise baseline protection across sectors.
State of Cyber Security Denmark provides a forum for these conversations, bringing together practitioners who rarely interact despite facing common adversaries. The relationships formed during such events often prove as valuable as the formal programme content, creating channels for ongoing collaboration that extend well beyond the conference itself.