Past Events

Join us and explore how a PAM project can reinforce your security on a practical level.

Join us for an insightful session on the successful implementation of a privileged access control integration at a leading global enterprise. In this event, expert speakers will share the strategic approach behind the project, highlighting key challenges encountered along the way and the lessons learned to ensure robust security and seamless operations.

Attendees will gain valuable insights into best practices for deploying privileged access controls across complex, multinational environments, like Glencore. The discussion will also cover strategic planning, stakeholder engagement, and technical considerations essential to achieving a secure and efficient integration.

Networking remains a vital component of the Swiss CyberSecurity events, offering participants the opportunity to connect with industry peers, share experiences, and explore potential collaborations.

Whether you're involved in cybersecurity, IT infrastructure, or compliance, this session provides a comprehensive overview of managing privileged access in a large-scale organization.

Join us for an inspiring and insightful event, "Unlocking the Future of Security with SASE," designed to explore the transformative potential of Secure Access Service Edge (SASE) technology. As organizations increasingly adopt cloud services and remote work becomes standard, traditional security models struggle to keep pace. SASE emerges as a groundbreaking approach, integrating network security and wide-area networking into a unified, cloud-native service, ensuring seamless, secure access regardless of location.

This event features industry-leading cybersecurity experts and thought leaders who will delve into the core principles of SASE, illustrating how it simplifies security architecture while enhancing agility, scalability, and user experience. Attendees will gain a comprehensive understanding of how SASE consolidates VPN, firewall-as-a-service, Zero Trust Network Access (ZTNA), data protection, and SD-WAN functionalities into an integrated platform. This convergence enables organizations to proactively prevent threats, accelerate digital transformation, and reduce costs by streamlining security operations.

Throughout the program, participants will engage in dynamic discussions on real-world implementation strategies, best practices, and the future trajectory of secure network access. Case studies from innovative companies will demonstrate how SASE solutions are driving efficiencies and fortifying defenses against evolving cyber threats. Whether you're a security professional, IT decision-maker, or business executive, this event offers valuable insights into how SASE can unlock new levels of security resilience and operational agility.

Don’t miss this opportunity to stay ahead of the curve and learn how to leverage SASE to safeguard your organization's digital future. Register today to unlock the full potential of next-generation security with SASE and transform your cybersecurity landscape.

• 16:30-17:00 Welcoming coffee and registration
• 17:00-18:00 Presentations
• 18:00-19:30 Networking Reception

Swiss CyberSecurity built a partnership with ISC2 and ISACA thus our participants can earn CPE credits attending the conferences.

The session titled “Cybersecurity Leadership: Opportunities and Challenges" aims to explore the multifaceted landscape of leading cybersecurity initiatives within today’s dynamic digital environment. What we would like to cover:

• - examine the unique difficulties of managing cybersecurity teams across multiple countries and regions, including cultural, legal, and logistical considerations - highlighting the challengers bringing external SME and employing highly qualified professionals.
• - address the challenges in securing adequate budgets to fund cybersecurity initiatives, tools, and personnel
• - discuss strategies for demonstrating tangible cybersecurity risks to executive leadership and the board using appropriate metrics and visualization tools
• - highlight the importance of comprehensive education—covering both technical (hard skills) and leadership/communication (soft skills)—to effectively manage and lead cybersecurity teams, underline the challenge to find the right and reliable information sources in an AI era
• - emphasize the necessity of staying current with rapidly evolving cybersecurity technologies, threats, and best practices
• - and finally the awards that you can receive as a security leader within your company and the great contribution to your professional path

Swiss Cyber Storm covered the AI Revolution in a highly successful 2024 edition of the conference. But the development of AI use cases continues, research runs at full speed and security is still lacking across the board.

At the same time, we feel like trying something new with the conference. We want to add a new flavor to our successful concept and we also want to make security more accessible for an audience that is not interested to follow 5-6 hours of presentation.

This is where the AI Village comes in: In this co-located event at Swiss Cyber Storm, you will find hands-on workshops, demos, poster sessions, panels and discussions at the problem solving desk and a lot of like minded people interested to talk!

Access to the AI Village comes with a Swiss Cyber Storm entry ticket and registration for the limited seats in the workshops starts now.

Join us for an engaging after-work cybersecurity conference focused on “Identities in the Cloud”, a critical topic in today's digital landscape. This event is designed for cybersecurity professionals, IT leaders, and cloud architects eager to explore the latest strategies, best practices, and emerging challenges related to identity management in cloud environments.

• - Expert-led keynote sessions on cloud identity frameworks and security protocols
• - Deep dives into identity and access management (IAM) solutions
• - Case studies showcasing real-world implementations and lessons learned
• - Interactive discussions addressing common vulnerabilities and mitigation strategies
• - Networking opportunities with industry peers and cybersecurity innovators

Whether you're looking to strengthen your organization's cloud security posture or stay ahead of evolving threats, this conference provides valuable insights and practical guidance. Join us after work to connect, learn, and collaborate on securing identities in the cloud.

• - 16:30-17:00 Welcoming coffee and registration
• - 17:00-18:00 Presentations
• - 18:00-18:30 Q&A
• - 18:30-19:30 Networking Reception

Juliette Bricot

Juliette is an Identity & Access Management engineer at CERN IT department. She designs and operates the Single Sign-On platform, enabling secure access for thousands of users and applications. Her interests include usable security, privacy by design, and secure development.

Berk Balci

Berk is a software engineer at CERN working on Identity and Access Management. He is the service manager of CERN SSO (Single Sign-On) and the WLCG (Worldwide LHC Computing Grid) IAM. His work on SSO is securing CERN applications by managing identities and controlling access to the applications. His work on WLCG IAM focuses on protecting and enabling access to the scientific data on WLCG. His background is in particle physics, with previous experience on the CMS experiment.

Hannah Short

Hannah leads the Identity and Access Management section at CERN. In addition to being responsible for the systems running at CERN, she is highly involved in global projects around identity federation technology and policy, such as eduGAIN (research and education mutual trust) and the European Open Science Cloud.

Jimmy Richmond

Jimmy Richmond is an Identity Specialist concentrating on the Next-Gen Identity Security platform at CrowdStrike. With 10 years experience across varying aspects of Identity, Jimmy has helped customers with architecting solutions for a multitude of challenges, including the application of Governance, Privileged Access Management, Customer Identity, and Identity Threat Detection and Response. With experience working with organisations of all sizes and verticals across EMEA, he actively drives discussion with customers and partners on current Identity challenges, and the evolving security landscape.

Thank you for CrowdStrike for sponsoring this event:

A game where you impersonate the attacker in real-time.
Two security experts will be attending to this session as panelists: we will go through an initial introduction of the use case, and we would like to understand how the attack might be developing.
But this time the attacker will be you!
The audience will be able to decide how the attack will be launched, creating an unpredictable scenario where the panelists will have to show their readiness to advice the company about how to put in place, during an emergency, the correct action to mitigate and to reply to the attack!

The event will be held in Palexpo from 9:30 until 10:30 at Room B.

• - David Zanellati: Cybersecurity GRC Manager | MSC Cruises
  Seasoned cybersecurity and risk management expert with over 19 years of experience across Europe. Currently Cyber Security GRC Senior Manager at MSC Cruise, he has led cyber security, IT governance, and business continuity programs for major clients of private and public sectors. ITIL, Prince2, and ISO 27001/22301/42001 certified.
• - Stephane Dahlen: Cybersecurity Expert | HES-SO Geneva
  Cybersecurity expert with close to 20 years of international Portfolio, Program and Project Governance (P3G) experience. From infrastructure to digital transformation, he operates at the intersection of cybersecurity and AI. His holistic approach harmonizes security strategies with emerging technologies.
Panel Moderator:
• - Mauro Verderosa: Cybersecurity and IAM Expert | Swiss-CyberSecurity
  Recognized cybersecurity expert with 20+ years of experience in the field and the only Swiss ISC2 Official Trainer. Specialized in IAM and PAM. He contributed to the success of some of the most important projects in Europe. Mauro is also Founder & President of the ISC2 Suisse Romande Chapter. CISSP, CCSP, CSSLP, HCISPP, CGRC certified.

Swiss-Cybersecurity invites you to actively engage with our growing community dedicated to strengthening Switzerland’s digital resilience. During the talk "Everyone's Role in Cybersecurity" we will discuss the importance of cybersecurity professionals having an aligned mindset to approach new challenges with cybersecurity awareness and resilience. At the evolving stage of the industry, we envision a world where digital trust is the norm. We stand for a neutral and non-profit, inclusive and multidisciplinary, knowledge-driven, action-oriented, and recognized and trusted community.

We will present our agenda for 2025-2026, highlighting key insights, achievements, and partnership opportunities. Attendees will also learn about membership benefits, volunteer roles, and how to contribute to our shared mission.

Speakers:

Diego de Haller / Information Security Officer

Diego de Haller is a results-driven professional specializing in cybersecurity. With a wealth of experience in the field, he is passionate about safeguarding businesses from potential threats. Diego possesses a deep understanding of network security, data protection, and risk assessment. His expertise extends to vulnerability testing, incident response, and security audits.

Maria Bicsi / Community Manager at Swiss CyberSecurity

Project Manager with international experience in several projects with the main focus on IAM. Currently based in Geneva helping companies and organizations to achieve their cybersecurity standards, increase their security posture and to stay compliant with the regulations. Maria is organizing cybersecurity events, she is the Community Manager of the Swiss CyberSecurity organization, Board Member at ISC2 Suisse Romande Chapter and organizer of the Zero-Day Conference, the largest cybersecurity conference in the French-speaking part of Switzerland.

If you are member of the association, contact Maria to get a free entrance

As organizations across Switzerland continue to pursue ambitious digital transformation initiatives, the threat landscape in cybersecurity is consistently evolving and expanding. Despite this increasing demand, the availability of qualified cybersecurity leadership remains scarce.

To address this critical gap, ISC2 initiated several cybersecurity educational programs and peepers IT/security professionals to have a deeper understanding in the security topics and to perform better their daily job.

PSYND, as a Swiss Cybersecurity Consultancy Company, received the accreditation from ISC2 - a globally recognized and vendor-neutral cybersecurity credential provider -, and acts as the sole Training Partner in the country.

At this event Vickram Benawra will give a high level overview on the security job market, followed by a round-table moderated by Mauro Verderosa, Official ISC2 Trainer with Yves Maumary, CISSP, IT Director at Rentes Genevoises and Pablo Pines Leon, CISSP and CCSP IT Security Lead at Open Systems. They will be exploring the great benefits of owning an ISC2 certification.

Don't miss this chance to stay in touch with security professionals. We look forward to seeing you there!

Improper computer or security configurations and programming errors are causing vulnerabilities that can be exploited by criminals. The “Zero-Day” concept refers to the fact, that the developers are already aware of the vulnerabilities, and maybe the attackers as well, and as a consequence, they have “zero days” to fix the issues.

The Zero-Day Conference has been scored among one of the top-conferences in Europe.

Many on-prem-first organizations face a major challenge when it comes to implementing multi-factor authentication (MFA): most MFA solutions are designed with a cloud-first approach. This works well for companies shifting identity management to the cloud. But for organizations in highly regulated industries or those who prefer to keep identity on-premises for security reasons, this presents complex hurdles.

In this talk, we'll dive into the hidden complexities of MFA, from user resistance and IT management overhead to evolving cyber threats targeting MFA systems. We'll also tackle the complexities of implementing MFA in hybrid Active Directory environments, the push towards Single Sign-On (SSO), and how institutions can balance security, usability, and cost-effectiveness.

Ultimately, this talk will equip CISOs with practical strategies for navigating MFA implementation in a way that works best with their environment, ensuring regulatory compliance, and staying ahead of the latest threats.

AGENDA:

• - 16:30-17:00 - Welcoming coffee and registration
• - 17:00-18:00 - Presentations
• - 18:00-19:30 - Networking Reception

Swiss CyberSecurity built a partnership with ISC2 and ISACA thus our participants can earn CPE credits attending the conferences.

IS Decisions is a global software company specializing in security and access management for Active Directory. Trusted by over 3700 organizations, it offers proven solutions for small to medium-sized businesses (SMBs) and large organizations, including some of the most regulated and security-conscious in the world.

Starting from the modern definition of what a smart city is, we will explore what technological and societal pitfalls lie in a wide deployment and acceptability of smart cities. Security in its various facets represents one of the key challenges, but also opportunities, to rethink and adapt existing strategies and approaches when designing and implementing cybersecurity and privacy aware solution.

This conference on Smart City Cybersecurity will also explore the crucial need for transversal awareness across all sectors, questioning the foundations and usage of technology in urban environments. We'll compare successes and failures of various cities, highlighting best practices and pitfalls. Join us to discuss strategies for enhancing digital safety, ensuring robust, citizen-centric smart cities that are resilient against cyber threats.

ABOUT THE SPEAKERS:

Dr. Anastasija Collen, Senior Researcher, University of Geneva: Anastasija is a Senior Researcher at the University of Geneva. She is a member of the Director Board of InfoSec continuous education program in information security and the co-director of the Information Security Group (I-Sec Lab). She is actively engaged in multiple EU-funded projects, integrating research findings on cybersecurity, risk assessment and data privacy within IoT-enabled ecosystems, ranging from smart homes and automated vehicles to the overarching smart cities infrastructure.

Matteo Mazzeri, Human-centric tech consultant: Matteo is an entrepreneur dedicated to a citizen-first approach in technology. With extensive international experience and fluency in five languages, he champions cybersecurity awareness for citizens, emphasizing digital safety and equitable access to information. Matteo has played a pivotal role in organizing key conferences, such as DevOpsDays Geneva and TEDxGeneva, fostering knowledge sharing and collaboration.

The Swiss CyberSecurity Association invites you on the 28th of January at PSYND office for an exciting workshop: Building Resilience through Business Continuity, where our expert will delve into the major role of Business Continuity Management in today’s digital landscape.

Join this interactive workshop on Business Continuity Planning, featuring a case simulation based on some of the most recent incidents.Collaborate with peers to explore effective countermeasures and share insights from various industries.

Enhance your knowledge and network in this engaging session!

ABOUT THE SPEAKER:

Fausto Schiavone - P&G IT Director: He is an IT Director at P&G, overseeing the Consumer Data Platform and 1st Party Data activation in CRM and omnichannel marketing. With nearly 18 years at P&G, he has advanced through various IT leadership roles, gaining expertise in IT project management, digital transformation, innovation, analytics, and cybersecurity, particularly in digital marketing and eCommerce. Before P&G, he earned a Master’s in Telecommunication and worked as an IT consultant for a few years.

AGENDA:

• - 17:30-18:00 - Welcoming coffee and registration
• - 18:00-20:00 - Workshop
• - 20:00-20:30 - Networking Reception

Swiss CyberSecurity built a partnership with ISC2 and ISACA thus our participants can earn CPE credits attending the conferences.

Swiss-CyberSecurity invites you on to explore IoT/OT Security: Safeguarding the Future of Connected Devices and Operational Technologies.

Leading experts will discuss the crucial importance of securing IoT and OT environments, as cybersecurity is pivotal for operational resilience in industrial sectors, moreover considering the threat landscape trend.

Join us as we explore how to deploy successfully EDR in the OT space with deep understanding of the unique characteristics of OT and to listen to real-life examples and implementation strategies

About the speakers:

Florian Goutaudier - Global OT specialist at CrowdStrike: he leads technical initiatives worldwide with a focus on architecting and securing plant-wide networks through advanced Purdue-model strategies, leveraging 19 years of expertise in Industrial Ethernet design, network security and threat hunting.With a deep background in pentesting, he drives innovation in OT security across diverse industries and strives to deliver the best practices for deploying EDR in OT environments.

Daniel Morano - CISO at ORYX Energies: As a CISO and CISSP-certified professional with over 25 years of experience in infrastructure and security management, he specializes in securing complex IT and OT environments across aerospace, telecommunications, trading, and banking sectors. His expertise spans cybersecurity strategy and project and team management, ensuring secure and efficient operations.

Ricardo Pinto - Cybersecurity manager at TIL Group: seasoned professional with extensive experience in Technology and Cybersecurity. Currently serving as Cybersecurity Manager at Terminal Investment (Mediterranean Shipping Company Group), Ricardo has a proven track record in IT, Cybersecurity, Data Protection and also Customer management.

ABOUT THE SPEAKERS

Cyrille Larrieu: Senior Sales Engineer at Trend Micro - Cyrille has worked for leading companies, specializing in cybersecurity and emerging technologies such as Zero Trust. Currently with Trend Micro, he covers Switzerland, Germany, and Austria, guiding organizations in adopting agile, cloud-based security strategies. His expertise spans SASE, SSE, and XDR, helping businesses align security policies with digital transformation goals. Cyrille ensures companies are resilient against evolving cyber threats while optimizing their existing investments

Mikhael Salamin is an expert in data protection, with a particular interest in issues related to research and public administration. He has worked as a consultant at Redstone Consulting SA, a consultancy firm specializing in data protection and cybersecurity based in Geneva, where he collaborated with numerous public and private organizations. He is currently the Data Protection Officer (DPO) at the University of Lausanne, a member of the ASDPO committee, and frequently conducts training sessions in French-speaking Switzerland.

Alexandre Jotterand is a lawyer specialized in technology and data management. Speclialized in IT, AI & frontier technologies, privacy, data protection, cybersecurity, life sciences, and open source. He is a board member of the Swiss Data Protection Officer Association (ASDPO), a member of the Digital Trust Expert Group of the Swiss Digital Initiative, and serves as an expert for the EDPB’s Support Pool of Experts. He regularly lectures and write on his field of expertise

Palexpo: 25th of September at 16:10
Defending against the future: how protecting against AI-Driven cybersecurity threats

What if AI might take control of our systems and turn against our businesses? Are we prepared for such challenge?

Join our panel and discover through an hypothetical scenario what could happen and which will be the remediation that could be considered.

Mauro Verderosa - PSYND: cybersecurity expert (CISSP, CCSP, HCISPP, CSSLP) and specialized in the domain of the IAM with more than 20 years of experience. He will be the moderator of the panel, taking the panelists through the attack scenario

Jorge Figueiredo - Edmond de Rothschild: as panelist: Information Security Manager with over 12 years in cyber security. Experienced in network security, engineering, and audits, he served as CISO for 2 years before his current role at a prestigious bank.

Sylvain Ravot - Societe Generale Private Banking: as panelist: Info security expert with 15+ years in managing cybersecurity programs and global initiatives. Skilled in security strategies, tech leverage, compliance, and building effective security functions.

In today's tech-driven world, advancements in AI and other innovations often overshadow the basics of Information Security: understanding what needs protection and having efficient monitoring in place. Without thorough SOC monitoring, even the best technologies leave us vulnerable to attacks. Effective risk management hinges on robust threat intelligence, enabling organizations to anticipate and mitigate potential threats proactively. High reactivity is paramount; the ability to respond swiftly to emerging threats can mean the difference between a minor alert and a major breach.

This conference will explore the vital role of SOC in safeguarding our digital environments, focusing on the necessity of robust, continuous oversight in preventing and responding to cyber threats.

Olivier Spielmann - Senthorus General Manager - With a Master's in Communication Systems Engineering from EPFL, Olivier kicked off his career with a thesis internship at 3Com Corporation in Silicon Valley. He earned his CISSP in 2003 and has since built a solid career in IT and security.
With over 20 years in the field, he’s now the General Manager of Senthorus, focused on expanding their services. When he’s not working, Olivier enjoys the nature and mountains of Switzerland, finding balance and inspiration in the great outdoors.

Diego de Haller is a results-driven professional specializing in cybersecurity. With a wealth of experience in the field, he is passionate about safeguarding businesses from potential threats. Diego possesses a deep understanding of network security, data protection, and risk assessment. His expertise extends to vulnerability testing, incident response, and security audits.

Jacques Fontignie is an expert in cybersecurity, currently serving as the Head of Cyber Security for the Bank Lombard Odier & Cie. With over 20 years of experience, Jacques has an extensive expertise in cybersecurity, dat

Improper computer or security configurations and programming errors are causing vulnerabilities that can be exploited by criminals. The “Zero-Day” concept refers to the fact, that the developers are already aware of the vulnerabilities, and maybe the attackers as well, and as a consequence, they have “zero days” to fix the issues.

The Zero-Day Conference has been scored among one of the top-conferences in Europe.

María Gabriela Soberano: Acting as a Data Protection Specialist for the Vendor Risk Assessment Centre at Aquanima, part of Santander Group. Has also worked for the government, before as Head of Unit for Transparency, Access to Public Information and Data Protection Officer

Omar Khan, acting as vCISO/vDPO and providing Risk Management expertise on behalf of Oxford Scientifica towards small-to-medium sized enterprise, is CISSP, CISM, CISA, ISO 27001 Lead Auditor Certified, a HIPAA Security Expert, and a C-DPO and certified GDPR-Practitioner.

Jérémy Voisin, acting as Chief Information Security Officer and Head of Information Security division is CISSP, CISM, C|CISO certified and also holds several certifications in offensive security. With more than 10 years of experience in information security, he had the chance to work and provide services to many clients in several fields of activity

Improper computer or security configurations and programming errors are causing vulnerabilities that can be exploited by criminals. The “Zero-Day” concept refers to the fact, that the developers are already aware of the vulnerabilities, and maybe the attackers as well, and as a consequence, they have “zero days” to fix the issues.

The Zero-Day Conference has been scored among one of the top-conferences in Europe.

Main speakers:
- Olivier Busolini
- Jerome Berthier
- Eva Thelisson
- Hippolyte Fouque