Conference Description
Key Takeaways
- Annual cyber security summit serving senior IT and security leaders across Germany, Austria and Switzerland
- Focus on regulatory compliance frameworks including NIS2 and DORA
- Examination of artificial intelligence and automation in security operations
- Sector-specific coverage spanning banking, finance, automotive, pharmaceuticals, chemicals and utilities
- CPE-certified sessions delivered in English with emphasis on practical implementation
Introduction
DACHsec: Cyber Security Summit brings together senior cyber security professionals from across the German-speaking region for focused discussion on enterprise security strategy, regulatory compliance and emerging technology adoption. The 2027 edition marks the tenth anniversary of an event that has established itself as a significant gathering point for CISOs, security architects and risk managers navigating an increasingly complex threat environment. With European regulatory frameworks such as NIS2 and DORA reshaping compliance obligations, and artificial intelligence transforming both defensive capabilities and attack methodologies, the summit addresses challenges that have moved firmly onto executive agendas.
About DACHsec: Cyber Security Summit
DACHsec operates as an in-person summit held at the Radisson Blu Hotel in Frankfurt, drawing attendees from enterprises, financial institutions, manufacturing organisations, pharmaceutical companies, utilities and public sector bodies. The programme combines expert-led panel discussions, interactive roundtables and practitioner case studies designed to facilitate knowledge exchange between security leaders facing similar operational realities.
Sessions are conducted in English and carry CPE certification, supporting the professional development requirements of security practitioners. The format emphasises peer-to-peer learning rather than purely vendor-driven content, positioning the event as a collaborative platform where end-users can share implementation experiences and evaluate approaches adopted by organisations with comparable risk profiles.
Regulatory Compliance and the Evolving European Framework
The regulatory landscape for European enterprises has shifted substantially with the introduction of the Network and Information Security Directive (NIS2) and the Digital Operational Resilience Act (DORA). NIS2 expands the scope of organisations subject to mandatory security requirements, while DORA imposes specific operational resilience obligations on financial services firms and their critical technology providers. Both frameworks demand documented risk management processes, incident reporting capabilities and supply chain security assessments that many organisations are still working to implement.
DACHsec dedicates significant programme time to examining how organisations are interpreting these requirements and translating regulatory text into operational controls. For security leaders in the DACH region, where cross-border operations frequently involve multiple regulatory jurisdictions, understanding the practical implications of these frameworks has become essential to strategic planning. The summit provides a forum for comparing compliance approaches and identifying common implementation challenges before they escalate into audit findings or enforcement actions.
Artificial Intelligence and Automation in Security Operations
The integration of artificial intelligence into security operations represents both an opportunity and a challenge for enterprise security teams. On the defensive side, machine learning capabilities are being deployed across threat detection, incident triage and vulnerability prioritisation, offering the potential to address the persistent shortage of skilled security analysts. Automation frameworks promise to accelerate response times and reduce the manual burden on security operations centres already struggling with alert fatigue.
However, the same technologies are simultaneously enhancing the capabilities of threat actors. AI-generated phishing content, automated vulnerability discovery and adaptive malware present new challenges that traditional signature-based defences struggle to address. DACHsec examines this dual-use reality, exploring how organisations can leverage AI-enhanced tools while developing detection and response capabilities suited to an environment where attackers have access to similar technologies.
The practical questions facing security leaders extend beyond technology selection to workforce implications, governance frameworks and the validation of AI-driven security decisions. Sessions at the summit address these operational considerations, drawing on implementation experiences from organisations at various stages of AI adoption.
Sector-Specific Security Challenges
While cyber security fundamentals apply across industries, the specific threat landscape, regulatory requirements and operational constraints vary significantly between sectors. Financial services organisations face stringent regulatory oversight and sophisticated threat actors motivated by direct financial gain. Manufacturing and automotive companies must secure increasingly connected operational technology environments where availability requirements often conflict with traditional IT security practices. Pharmaceutical and chemical firms manage intellectual property of substantial value while navigating complex supply chains and research collaboration arrangements.
Utilities and critical infrastructure operators confront the challenge of protecting legacy industrial control systems against threats they were never designed to withstand, often with limited maintenance windows and extended asset lifecycles. Public sector organisations balance transparency obligations against security requirements while operating under procurement constraints that can limit technology options.
DACHsec brings together practitioners from these diverse sectors, enabling cross-industry learning while acknowledging the distinct contexts in which security programmes operate. The presence of both private and public sector attendees creates opportunities for dialogue on shared challenges such as supply chain security and incident coordination.
Geopolitical Dimensions of Cyber Risk
The intersection of geopolitical tensions and cyber operations has become impossible to ignore for enterprise security leaders. State-sponsored threat actors, hacktivism aligned with political movements and the weaponisation of supply chain dependencies all feature in contemporary risk assessments. For organisations operating in the DACH region, with its concentration of advanced manufacturing, financial services and critical infrastructure, these considerations have direct operational relevance.
The summit addresses how organisations are incorporating geopolitical intelligence into threat modelling and strategic planning, moving beyond purely technical assessments to consider the broader context in which cyber threats emerge and evolve.
Who Should Attend
DACHsec is designed for senior IT and cyber security professionals responsible for strategic direction and operational oversight. The programme is particularly relevant for Chief Information Security Officers, Heads of Information Security, Security Architects and Risk Managers working within large enterprises. Attendees typically hold executive or senior management positions and are seeking peer-level discussion rather than introductory education.
The event serves professionals from organisations grappling with the challenge of maintaining security posture while adapting to regulatory change, technology evolution and resource constraints. Those responsible for compliance programmes, security architecture decisions or risk management frameworks will find directly applicable content and networking opportunities with counterparts facing similar challenges.
Solution Providers and Technology Landscape
The summit features participation from established security vendors and emerging technology providers, including Veracode, Delinea, Vanta, Varonis, CoreView, Magnet Forensics, Checkmarx, MetaCompliance, BlueVoyant, Versa Networks, Armis, GitGuardian, Illumio, Horizon3.ai, Rubrik, KnowBe4, D3 Security, DataGuard, Infoblox and ThreatLocker. This vendor presence spans application security, identity management, compliance automation, data protection, network security, endpoint protection, security awareness and incident response capabilities.
For security leaders evaluating technology investments, the event provides an opportunity to assess solutions in the context of peer experiences and implementation realities rather than relying solely on vendor presentations. The concentration of both end-users and providers facilitates substantive technical discussion and enables procurement conversations grounded in operational requirements.