Let's talk about how we can drive digital resilience through the Swiss CyberSecurity Association. As a Geneva-based non-profit, we bridge gaps between professionals, learners, and decision-makers. In this session, we'll dive into how our neutral, collaborative platform helps us share knowledge and tackle real-world threats - from GRC to Identity Management.
Let's discuss how we can build a safer, more resilient digital ecosystem together. No corporate buzzwords, just community first!
Join us to explore which methods are use to protect Kubernetes Clusters
At a time when Cloud-Native and Kubernetes architectures are becoming central to digital strategies, containerized environments too often remain a blind spot in cybersecurity. Isolation does not guarantee protection, just as automation does not guarantee control. The reality on the ground shows that container security is regularly underestimated, until the day a compromise exposes the entire chain. I-TRACING team will share a concrete case study of an end-to-end compromise and break down the critical points to secure within your Cloud-Native environments.
Let's meet again! Open talk about cybersecurity!
Dear Group Members and New Participants,
after spending nice evenings on the Bateau de Genève the latest years, we would like to repeat the experience this year as well. There will be one of our staff members waiting for you at the entrance and guiding you to our table, otherwise, just ask at the bar.
Let's meet again! Open talk about cybersecurity!
Dear Group Members and New Participants,
after spending nice evenings on the Bateau de Genève the latest years, we would like to repeat the experience this year as well. There will be one of our staff members waiting for you at the entrance and guiding you to our table, otherwise, just ask at the bar.
Let's meet again! Open talk about cybersecurity!
Dear Group Members and New Participants,
after spending nice evenings on the Bateau de Genève the latest years, we would like to repeat the experience this year as well. There will be one of our staff members waiting for you at the entrance and guiding you to our table, otherwise, just ask at the bar.
A well-known Geneva firm hired a remote support specialist.
They thought they filled a gap in support, but instead they opened the door to a threat that moved faster than anyone expected...
Join Stefan Lüders and Kate Wong on the 2nd of June in Geneva: from 16:30 you will attend to an event where a real-time attack will be launched directly by the audience!
Book your sit!
AI is increasingly entering into society, simplifying tasks and boosting efficiency.
Excessive dependence may degrade the human abilities we’ve developed during over thousands of years: assistance is valuable, but surrendering core abilities weakens individual competence and long-term resilience.
Let’s deep-dive and argue for balanced adoption: leverage AI to augment, and not replace, human judgment, preserving skills, creativity and competitiveness for a sustainable future.
Improper computer or security configurations and programming errors are causing vulnerabilities that can be exploited by criminals. The “Zero-Day” concept refers to the fact, that the developers are already aware of the vulnerabilities, and maybe the attackers as well, and as a consequence, they have “zero days” to fix the issues.
The Zero-Day Conference has been scored among one of the top-conferences in Europe.
Join us and explore how a PAM project can reinforce your security on a practical level.
Join us for an insightful session on the successful implementation of a privileged access control integration at a leading global enterprise. In this event, expert speakers will share the strategic approach behind the project, highlighting key challenges encountered along the way and the lessons learned to ensure robust security and seamless operations.
Attendees will gain valuable insights into best practices for deploying privileged access controls across complex, multinational environments, like Glencore. The discussion will also cover strategic planning, stakeholder engagement, and technical considerations essential to achieving a secure and efficient integration.
Networking remains a vital component of the Swiss CyberSecurity events, offering participants the opportunity to connect with industry peers, share experiences, and explore potential collaborations.
Whether you're involved in cybersecurity, IT infrastructure, or compliance, this session provides a comprehensive overview of managing privileged access in a large-scale organization.
Join us for an inspiring and insightful event, "Unlocking the Future of Security with SASE," designed to explore the transformative potential of Secure Access Service Edge (SASE) technology. As organizations increasingly adopt cloud services and remote work becomes standard, traditional security models struggle to keep pace. SASE emerges as a groundbreaking approach, integrating network security and wide-area networking into a unified, cloud-native service, ensuring seamless, secure access regardless of location.
This event features industry-leading cybersecurity experts and thought leaders who will delve into the core principles of SASE, illustrating how it simplifies security architecture while enhancing agility, scalability, and user experience. Attendees will gain a comprehensive understanding of how SASE consolidates VPN, firewall-as-a-service, Zero Trust Network Access (ZTNA), data protection, and SD-WAN functionalities into an integrated platform. This convergence enables organizations to proactively prevent threats, accelerate digital transformation, and reduce costs by streamlining security operations.
Throughout the program, participants will engage in dynamic discussions on real-world implementation strategies, best practices, and the future trajectory of secure network access. Case studies from innovative companies will demonstrate how SASE solutions are driving efficiencies and fortifying defenses against evolving cyber threats. Whether you're a security professional, IT decision-maker, or business executive, this event offers valuable insights into how SASE can unlock new levels of security resilience and operational agility.
Don’t miss this opportunity to stay ahead of the curve and learn how to leverage SASE to safeguard your organization's digital future. Register today to unlock the full potential of next-generation security with SASE and transform your cybersecurity landscape.
AGENDA:Swiss CyberSecurity built a partnership with ISC2 and ISACA thus our participants can earn CPE credits attending the conferences.
The session titled “Cybersecurity Leadership: Opportunities and Challenges" aims to explore the multifaceted landscape of leading cybersecurity initiatives within today’s dynamic digital environment. What we would like to cover:
Swiss Cyber Storm covered the AI Revolution in a highly successful 2024 edition of the conference. But the development of AI use cases continues, research runs at full speed and security is still lacking across the board.
At the same time, we feel like trying something new with the conference. We want to add a new flavor to our successful concept and we also want to make security more accessible for an audience that is not interested to follow 5-6 hours of presentation.
This is where the AI Village comes in: In this co-located event at Swiss Cyber Storm, you will find hands-on workshops, demos, poster sessions, panels and discussions at the problem solving desk and a lot of like minded people interested to talk!
Access to the AI Village comes with a Swiss Cyber Storm entry ticket and registration for the limited seats in the workshops starts now.
Join us for an engaging after-work cybersecurity conference focused on “Identities in the Cloud”, a critical topic in today's digital landscape. This event is designed for cybersecurity professionals, IT leaders, and cloud architects eager to explore the latest strategies, best practices, and emerging challenges related to identity management in cloud environments.
Event Highlights:Whether you're looking to strengthen your organization's cloud security posture or stay ahead of evolving threats, this conference provides valuable insights and practical guidance. Join us after work to connect, learn, and collaborate on securing identities in the cloud.
AGENDA:Juliette Bricot
Juliette is an Identity & Access Management engineer at CERN IT department. She designs and operates the Single Sign-On platform, enabling secure access for thousands of users and applications. Her interests include usable security, privacy by design, and secure development.
Berk Balci
Berk is a software engineer at CERN working on Identity and Access Management. He is the service manager of CERN SSO (Single Sign-On) and the WLCG (Worldwide LHC Computing Grid) IAM. His work on SSO is securing CERN applications by managing identities and controlling access to the applications. His work on WLCG IAM focuses on protecting and enabling access to the scientific data on WLCG. His background is in particle physics, with previous experience on the CMS experiment.
Hannah Short
Hannah leads the Identity and Access Management section at CERN. In addition to being responsible for the systems running at CERN, she is highly involved in global projects around identity federation technology and policy, such as eduGAIN (research and education mutual trust) and the European Open Science Cloud.
Jimmy Richmond
Jimmy Richmond is an Identity Specialist concentrating on the Next-Gen Identity Security platform at CrowdStrike. With 10 years experience across varying aspects of Identity, Jimmy has helped customers with architecting solutions for a multitude of challenges, including the application of Governance, Privileged Access Management, Customer Identity, and Identity Threat Detection and Response. With experience working with organisations of all sizes and verticals across EMEA, he actively drives discussion with customers and partners on current Identity challenges, and the evolving security landscape.
Thank you for CrowdStrike for sponsoring this event:
CrowdStrike, a global cybersecurity leader, has redefined modern security with the world’s most advanced cloud-native platform for protecting critical areas of enterprise risk, endpoints and cloud workloads, identity, and data. Purpose-built in the cloud with a single lightweight-agent architecture, the Falcon platform delivers rapid and scalable deployment, superior protection and performance, reduced complexity, and immediate time-to-value.A game where you impersonate the attacker in real-time.
Two security experts will be attending to this session as panelists: we will go through an initial introduction of the use case, and we would like to understand how the attack might be developing.
But this time the attacker will be you!
The audience will be able to decide how the attack will be launched, creating an unpredictable scenario where the panelists will have to show their readiness to advice the company about how to put in place, during an emergency, the correct action to mitigate and to reply to the attack!
The event will be held in Palexpo from 9:30 until 10:30 at Room B.
Panelists:Swiss-Cybersecurity invites you to actively engage with our growing community dedicated to strengthening Switzerland’s digital resilience. During the talk "Everyone's Role in Cybersecurity" we will discuss the importance of cybersecurity professionals having an aligned mindset to approach new challenges with cybersecurity awareness and resilience. At the evolving stage of the industry, we envision a world where digital trust is the norm. We stand for a neutral and non-profit, inclusive and multidisciplinary, knowledge-driven, action-oriented, and recognized and trusted community.
We will present our agenda for 2025-2026, highlighting key insights, achievements, and partnership opportunities. Attendees will also learn about membership benefits, volunteer roles, and how to contribute to our shared mission.
Diego de Haller is a results-driven professional specializing in cybersecurity. With a wealth of experience in the field, he is passionate about safeguarding businesses from potential threats. Diego possesses a deep understanding of network security, data protection, and risk assessment. His expertise extends to vulnerability testing, incident response, and security audits.
Project Manager with international experience in several projects with the main focus on IAM. Currently based in Geneva helping companies and organizations to achieve their cybersecurity standards, increase their security posture and to stay compliant with the regulations. Maria is organizing cybersecurity events, she is the Community Manager of the Swiss CyberSecurity organization, Board Member at ISC2 Suisse Romande Chapter and organizer of the Zero-Day Conference, the largest cybersecurity conference in the French-speaking part of Switzerland.
If you are member of the association, contact Maria to get a free entrance
As organizations across Switzerland continue to pursue ambitious digital transformation initiatives, the threat landscape in cybersecurity is consistently evolving and expanding. Despite this increasing demand, the availability of qualified cybersecurity leadership remains scarce.
To address this critical gap, ISC2 initiated several cybersecurity educational programs and peepers IT/security professionals to have a deeper understanding in the security topics and to perform better their daily job.
PSYND, as a Swiss Cybersecurity Consultancy Company, received the accreditation from ISC2 - a globally recognized and vendor-neutral cybersecurity credential provider -, and acts as the sole Training Partner in the country.
At this event Vickram Benawra will give a high level overview on the security job market, followed by a round-table moderated by Mauro Verderosa, Official ISC2 Trainer with Yves Maumary, CISSP, IT Director at Rentes Genevoises and Pablo Pines Leon, CISSP and CCSP IT Security Lead at Open Systems. They will be exploring the great benefits of owning an ISC2 certification.
Don't miss this chance to stay in touch with security professionals. We look forward to seeing you there!
Improper computer or security configurations and programming errors are causing vulnerabilities that can be exploited by criminals. The “Zero-Day” concept refers to the fact, that the developers are already aware of the vulnerabilities, and maybe the attackers as well, and as a consequence, they have “zero days” to fix the issues.
The Zero-Day Conference has been scored among one of the top-conferences in Europe.
Many on-prem-first organizations face a major challenge when it comes to implementing multi-factor authentication (MFA): most MFA solutions are designed with a cloud-first approach. This works well for companies shifting identity management to the cloud. But for organizations in highly regulated industries or those who prefer to keep identity on-premises for security reasons, this presents complex hurdles.
In this talk, we'll dive into the hidden complexities of MFA, from user resistance and IT management overhead to evolving cyber threats targeting MFA systems. We'll also tackle the complexities of implementing MFA in hybrid Active Directory environments, the push towards Single Sign-On (SSO), and how institutions can balance security, usability, and cost-effectiveness.
Ultimately, this talk will equip CISOs with practical strategies for navigating MFA implementation in a way that works best with their environment, ensuring regulatory compliance, and staying ahead of the latest threats.
Swiss CyberSecurity built a partnership with ISC2 and ISACA thus our participants can earn CPE credits attending the conferences.
IS Decisions is a global software company specializing in security and access management for Active Directory. Trusted by over 3700 organizations, it offers proven solutions for small to medium-sized businesses (SMBs) and large organizations, including some of the most regulated and security-conscious in the world.
Starting from the modern definition of what a smart city is, we will explore what technological and societal pitfalls lie in a wide deployment and acceptability of smart cities. Security in its various facets represents one of the key challenges, but also opportunities, to rethink and adapt existing strategies and approaches when designing and implementing cybersecurity and privacy aware solution.
This conference on Smart City Cybersecurity will also explore the crucial need for transversal awareness across all sectors, questioning the foundations and usage of technology in urban environments. We'll compare successes and failures of various cities, highlighting best practices and pitfalls. Join us to discuss strategies for enhancing digital safety, ensuring robust, citizen-centric smart cities that are resilient against cyber threats.
Dr. Anastasija Collen, Senior Researcher, University of Geneva: Anastasija is a Senior Researcher at the University of Geneva. She is a member of the Director Board of InfoSec continuous education program in information security and the co-director of the Information Security Group (I-Sec Lab). She is actively engaged in multiple EU-funded projects, integrating research findings on cybersecurity, risk assessment and data privacy within IoT-enabled ecosystems, ranging from smart homes and automated vehicles to the overarching smart cities infrastructure.
Matteo Mazzeri, Human-centric tech consultant: Matteo is an entrepreneur dedicated to a citizen-first approach in technology. With extensive international experience and fluency in five languages, he champions cybersecurity awareness for citizens, emphasizing digital safety and equitable access to information. Matteo has played a pivotal role in organizing key conferences, such as DevOpsDays Geneva and TEDxGeneva, fostering knowledge sharing and collaboration.
The Swiss CyberSecurity Association invites you on the 28th of January at PSYND office for an exciting workshop: Building Resilience through Business Continuity, where our expert will delve into the major role of Business Continuity Management in today’s digital landscape.
Join this interactive workshop on Business Continuity Planning, featuring a case simulation based on some of the most recent incidents.Collaborate with peers to explore effective countermeasures and share insights from various industries.
Enhance your knowledge and network in this engaging session!
Fausto Schiavone - P&G IT Director: He is an IT Director at P&G, overseeing the Consumer Data Platform and 1st Party Data activation in CRM and omnichannel marketing. With nearly 18 years at P&G, he has advanced through various IT leadership roles, gaining expertise in IT project management, digital transformation, innovation, analytics, and cybersecurity, particularly in digital marketing and eCommerce. Before P&G, he earned a Master’s in Telecommunication and worked as an IT consultant for a few years.
Swiss CyberSecurity built a partnership with ISC2 and ISACA thus our participants can earn CPE credits attending the conferences.
Swiss-CyberSecurity invites you on to explore IoT/OT Security: Safeguarding the Future of Connected Devices and Operational Technologies.
Leading experts will discuss the crucial importance of securing IoT and OT environments, as cybersecurity is pivotal for operational resilience in industrial sectors, moreover considering the threat landscape trend.
Join us as we explore how to deploy successfully EDR in the OT space with deep understanding of the unique characteristics of OT and to listen to real-life examples and implementation strategies
Florian Goutaudier - Global OT specialist at CrowdStrike: he leads technical initiatives worldwide with a focus on architecting and securing plant-wide networks through advanced Purdue-model strategies, leveraging 19 years of expertise in Industrial Ethernet design, network security and threat hunting.With a deep background in pentesting, he drives innovation in OT security across diverse industries and strives to deliver the best practices for deploying EDR in OT environments.
Daniel Morano - CISO at ORYX Energies: As a CISO and CISSP-certified professional with over 25 years of experience in infrastructure and security management, he specializes in securing complex IT and OT environments across aerospace, telecommunications, trading, and banking sectors. His expertise spans cybersecurity strategy and project and team management, ensuring secure and efficient operations.
Ricardo Pinto - Cybersecurity manager at TIL Group: seasoned professional with extensive experience in Technology and Cybersecurity. Currently serving as Cybersecurity Manager at Terminal Investment (Mediterranean Shipping Company Group), Ricardo has a proven track record in IT, Cybersecurity, Data Protection and also Customer management.
ABOUT THE SPEAKERS
Cyrille Larrieu: Senior Sales Engineer at Trend Micro - Cyrille has worked for leading companies, specializing in cybersecurity and emerging technologies such as Zero Trust. Currently with Trend Micro, he covers Switzerland, Germany, and Austria, guiding organizations in adopting agile, cloud-based security strategies. His expertise spans SASE, SSE, and XDR, helping businesses align security policies with digital transformation goals. Cyrille ensures companies are resilient against evolving cyber threats while optimizing their existing investments
Mikhael Salamin is an expert in data protection, with a particular interest in issues related to research and public administration. He has worked as a consultant at Redstone Consulting SA, a consultancy firm specializing in data protection and cybersecurity based in Geneva, where he collaborated with numerous public and private organizations. He is currently the Data Protection Officer (DPO) at the University of Lausanne, a member of the ASDPO committee, and frequently conducts training sessions in French-speaking Switzerland.
Alexandre Jotterand is a lawyer specialized in technology and data management. Speclialized in IT, AI & frontier technologies, privacy, data protection, cybersecurity, life sciences, and open source. He is a board member of the Swiss Data Protection Officer Association (ASDPO), a member of the Digital Trust Expert Group of the Swiss Digital Initiative, and serves as an expert for the EDPB’s Support Pool of Experts. He regularly lectures and write on his field of expertise
Palexpo: 25th of September at 16:10
Defending against the future: how protecting against AI-Driven cybersecurity threats
What if AI might take control of our systems and turn against our businesses? Are we prepared for such challenge?
Join our panel and discover through an hypothetical scenario what could happen and which will be the remediation that could be considered.
Mauro Verderosa - PSYND: cybersecurity expert (CISSP, CCSP, HCISPP, CSSLP) and specialized in the domain of the IAM with more than 20 years of experience. He will be the moderator of the panel, taking the panelists through the attack scenario
Jorge Figueiredo - Edmond de Rothschild: as panelist: Information Security Manager with over 12 years in cyber security. Experienced in network security, engineering, and audits, he served as CISO for 2 years before his current role at a prestigious bank.
Sylvain Ravot - Societe Generale Private Banking: as panelist: Info security expert with 15+ years in managing cybersecurity programs and global initiatives. Skilled in security strategies, tech leverage, compliance, and building effective security functions.
In today's tech-driven world, advancements in AI and other innovations often overshadow the basics of Information Security: understanding what needs protection and having efficient monitoring in place. Without thorough SOC monitoring, even the best technologies leave us vulnerable to attacks. Effective risk management hinges on robust threat intelligence, enabling organizations to anticipate and mitigate potential threats proactively. High reactivity is paramount; the ability to respond swiftly to emerging threats can mean the difference between a minor alert and a major breach.
This conference will explore the vital role of SOC in safeguarding our digital environments, focusing on the necessity of robust, continuous oversight in preventing and responding to cyber threats.
ABOUT THE SPEAKERS:Olivier Spielmann - Senthorus General Manager - With a Master's in Communication Systems Engineering from EPFL, Olivier kicked off his career with a thesis internship at 3Com Corporation in Silicon Valley. He earned his CISSP in 2003 and has since built a solid career in IT and security.
With over 20 years in the field, he’s now the General Manager of Senthorus, focused on expanding their services. When he’s not working, Olivier enjoys the nature and mountains of Switzerland, finding balance and inspiration in the great outdoors.
Diego de Haller is a results-driven professional specializing in cybersecurity. With a wealth of experience in the field, he is passionate about safeguarding businesses from potential threats. Diego possesses a deep understanding of network security, data protection, and risk assessment. His expertise extends to vulnerability testing, incident response, and security audits.
Jacques Fontignie is an expert in cybersecurity, currently serving as the Head of Cyber Security for the Bank Lombard Odier & Cie. With over 20 years of experience, Jacques has an extensive expertise in cybersecurity, dat
Improper computer or security configurations and programming errors are causing vulnerabilities that can be exploited by criminals. The “Zero-Day” concept refers to the fact, that the developers are already aware of the vulnerabilities, and maybe the attackers as well, and as a consequence, they have “zero days” to fix the issues.
The Zero-Day Conference has been scored among one of the top-conferences in Europe.
María Gabriela Soberano: Acting as a Data Protection Specialist for the Vendor Risk Assessment Centre at Aquanima, part of Santander Group. Has also worked for the government, before as Head of Unit for Transparency, Access to Public Information and Data Protection Officer
Omar Khan, acting as vCISO/vDPO and providing Risk Management expertise on behalf of Oxford Scientifica towards small-to-medium sized enterprise, is CISSP, CISM, CISA, ISO 27001 Lead Auditor Certified, a HIPAA Security Expert, and a C-DPO and certified GDPR-Practitioner.
Jérémy Voisin, acting as Chief Information Security Officer and Head of Information Security division is CISSP, CISM, C|CISO certified and also holds several certifications in offensive security. With more than 10 years of experience in information security, he had the chance to work and provide services to many clients in several fields of activity
Improper computer or security configurations and programming errors are causing vulnerabilities that can be exploited by criminals. The “Zero-Day” concept refers to the fact, that the developers are already aware of the vulnerabilities, and maybe the attackers as well, and as a consequence, they have “zero days” to fix the issues.
The Zero-Day Conference has been scored among one of the top-conferences in Europe.
Main speakers:
- Olivier Busolini
- Jerome Berthier
- Eva Thelisson
- Hippolyte Fouque
