Conference Description
Key Takeaways
- Addresses the convergence of AI as both a defensive tool and a new threat vector in enterprise security
- Covers Zero Trust frameworks, AI governance, and detection and response automation
- Designed for CISOs, risk managers, privacy officers, and security leaders responsible for board-level strategy
- In-person format featuring keynotes, roundtables, analyst sessions, and a vendor marketplace
About the Event
The Forrester Security & Risk Forum takes place November 9 to 10, 2026, in Washington DC. The two-day forum examines how AI is reshaping enterprise security, risk, and privacy functions. Forrester frames this shift as a “security singularity,” where AI’s rapid integration into enterprise decision-making creates both defensive capabilities and novel attack surfaces.
The program combines keynotes, roundtable discussions, one-on-one analyst sessions, and peer networking opportunities. A vendor marketplace provides attendees access to solution providers.
AI Governance and Risk Management
Central to the forum is the challenge of operationalizing AI at speed and scale while maintaining trust, explainability, and resilience. Sessions address engineering AI systems with built-in guardrails, governing AI intent, and establishing effective controls for autonomous AI. The event provides frameworks for managing AI-driven risk and adapting governance structures to accommodate rapidly evolving threat landscapes.
Security Fundamentals and Zero Trust
Beyond AI-specific topics, the forum covers foundational security concerns including Zero Trust frameworks, cloud security, identity management, and data protection. Sessions explore how organizations can leverage AI to enhance detection, response, and threat intelligence capabilities while strengthening core security practices.
Who Should Attend
The forum targets security, risk, and privacy leaders from large enterprises, particularly those responsible for organizational resilience and board-level security strategy. CISOs, information security leaders, privacy officers, risk managers, and technology practitioners will find relevant content on building trust and assurance organizations capable of proving security posture at scale.