ItaliaSec: Virtual Edition

 

2nd December 2026 // Online

ItaliaSec: The Virtual Edition Comes to Your Screen This December!

Couldn’t attend ItaliaSec in Milan last May? This December, ItaliaSec: The Virtual Edition brings the best of our Spring conference straight to your screen.

In today’s fast-evolving digital landscape, cyber incidents cannot be entirely prevented. Success is no longer defined solely by the absence of breaches—it’s measured by cyber resilience: the ability to maintain business continuity, protect critical assets, and adapt under pressure.

We are unlocking our session vault to bring you exclusive recordings featuring top CISOs and cyber security leaders. Join us online to shift your mindset from prevention to sustained outcomes, equipping your organisation to withstand disruptions, recover faster, and thrive despite uncertainty. Secure your virtual pass today!

Benefits of Attending

  • Learn Proven Strategies: Hear from industry-leading experts on how to build and measure cyber resilience beyond traditional defences
  • Drive a Culture of Resilience: Understand how to embed resilience into your organisation’s DNA, influencing both teams and leadership stakeholders
  • Transform Cyber Security Metrics: Move beyond breach counts and compliance checklists to metrics that truly reflect organisational strength and adaptability
  • Network with Peers: Connect with fellow CISOs and security executives navigating the same challenges in real-world environments

Key Themes

  • Reframing Cyber Risk as a Systemic Business Challenge
  • Moving Beyond Checkbox Compliance Toward Adaptive, Risk-Based Resilience Models
  • Building Visibility, Assurance, and Resilience Internally and Across the Entire Supply Chain Lifecycle
  • AI as Force Multiplier: Opportunity, Risk, and Solid Governance
  • Maturing Incident Response and Recovery Capabilities to Boost Organisational Preparedness

Agenda

We are currently working on the virtual agenda and will be updating it soon.
In the meantime, take a look at the topics and themes discussed as part of the May 2026 agenda:

2nd December 2026

09:58 – 17:00 (CEST)
09:55 Login
09:58Chairman’s Opening Address: Cecilia Limonta
10:00

What autonomous AI vulnerability discovery and exploitation means for patch velocity, exposure and SOC operations — with a technical walkthrough, not predictions.
.
10:40

CISOs on controlling AI agents as users and as suppliers: non-human identity, least privilege, audit trails and NIS2 accountability.
.
11:00

An essential entity walks through its gap analysis, incident reporting processes, board liability and the parts that were harder than expected.
.
11:00Morning Break & Networking
11:45

An hour-by-hour breach timeline: decisions, mistakes, communications and lessons learned. No vendor logos.
.
12:15

A CISO on business impact analysis, recovery and the board — deciding what must survive an attack, and getting budget for it.
.
12:35

Manufacturers and utilities on segmentation, legacy assets, applying product guidelines and running security across both teams.
.
13:05Lunch
14:05

Live demo of AI-generated phishing, deepfake voice and social engineering — plus the detection and response steps that work against each.
.
14:35

A customer’s story, not a vendor’s: triage automation, changing roles, metrics and the guardrails they had to add.
.
15:00

Continuous third-party risk assessment, Cyber Resilience Act and NIS2 supplier obligations, and dealing with suppliers that don’t cooperate.
.
15:25Afternoon Break & Networking
15:40

Continuous Threat Exposure Management in practice: scoping, prioritisation, proving risk reduction and AI-assisted vulnerability management.
.
16:05

Red team leads, threat intelligence leads and a financial-sector CISO on DORA TLPT, intelligence-led test design and fixing what tests find.
.
16:35

Moving beyond tick-box awareness training to real behaviour change, including in OT environments.
.
16:55Chair’s Closing Remarks and fill in your Feedback Form

Speakers

#ItaliaSec features dynamic presentations, case studies and panel discussions hosted by major cyber security players from across the country. A-list speakers provide cyber security insights based on first-hand lessons learned, assess best practices for addressing workforce challenges, propose industry frameworks for addressing breaches and current threats, and analyse current cyber security trends and predictions for Italy’s core industries.

Last edition’s speaker line-up is listed below:

Andrea Succi

CISO

Ferrari Group

Andrea Succi is the CISO at Ferrari Group, service provider specialising in shipping, integrated logistics and high value-added services for luxury and precious goods, worldwide. He is also one of the founders of CISOs4AI, a community uniting CISOs across Italy.

Giampiero Bonfiglio

CISO Italy & Greece

L’Oreal

Giampiero Bonfiglio is the CISO for Italy and Greece at L’Oreal, with cross-functional responsibility spanning both IT and OT areas for these countries. He has been leading key initiatives that have strengthened the organisation’s security posture, catalysed innovation and fostered a strong, sustainable security culture.

Alessandro Oteri

CISO & Founder

PensieroSicuro

Alessandro is the founder of PensieroSicuro, a podcast that addresses every side of cyber security, privacy and technology in a fun, but deep way. Alessandro has a degree in Science and Technologies for Development, and is a certified CISO. He is the first “PensatoreSicuro”.

Claudio De Rossi

CISO

Infocamere

Claudio De Rossi is the CISO at InfoCamere, the digital innovation company of the Italian Chambers of Commerce. In this role, he steers the corporate security strategy, bringing recognized expertise in cyber security, security governance and risk management within complex regulatory frameworks.

Fabio Gianotti

CISO

Retail

Fabio Gianotti is a Security professional with more than 20 years on ICT and Information Security. He has xtensive experience in Cyber Security & Fraud and IT service Platforms, IT Security Governance, Disaster Recovery and Business Continuity, IT Security Engineering and Security R&D.

Simone Santini

CISO

Lucart Group

Simone Santini has been working at Lucart for 25 years and serves as IT Infrastructure Manager & CISO. In this role, he oversees infrastructure, IT/OT security, data centers, networking, and NIS2 compliance, leading modernisation and business continuity initiatives to ensure the resilience and protection of the company’s systems.

Luca Aldo Giusti

CISO & Head of Infrastructure

IDM – Integra Document Management

Luca A. Giusti is CISO, Head of Infrastructure at IDM. His approach to security is anthropocentric and multidisciplinary: “security is a matter of people” is at the core if his approach to foster a 360 degree security culture integrating both technology and humans.

Christian Bassi

CISO

Gruppo Tea

Christian Bassi is the CISO at Grouppo Tea, a utility company, where he oversees cyber security and has been leading NIS2 compliance efforts.

Marco Pedrotti

CISO

Milano Serravalle – Milano Tangenziali

Marco Pedrotti is an electronics Engineer with a long career in information systems management/. He specialises in IT/OT security and NIS2 compliance, coordinating projects focused on infrastructure protection and risk management.

Luca Fioravanti

Group Security Director

Dolce & Gabbana

Luca is a Senior Security Executive 20+ years’ international experience in critical sectors. Formerly Group Head of Security at UniCredit and Vodafone, he currently serves as Group CSO/CISO at Dolce & Gabbana. An expert in Cyber Defence and GRC, he specialises in leading digital transformation initiatives and strengthening operational resilience.

Paolo Cannistraro

CISO

ENGIE Italia

Paolo Cannistraro is the CISO at ENGIE Italia. He specialises in information security, audit, risk management and compliance. He is also one of the founders of CISOs4AI.

Simone Rizzo

CISO

CCR Commercial Refrigeration

Simone Rizzo is the CISO at CCR Commercial Refrigeration. After long experience designing and implementing infrastructures, he shifted his focus to the world of cyber security and has is now in charge of designing, planning and implementing CCR’s security strategy.

Francesco Puccioni

Head of Cyber Security Operations

Credem Banca

Francesco Puccioni is the Head of Cyber Security Operations at Credem Banca. He brings 20+ years’ experience from previous roles at CSE- Consorzio Servizi Bancari, Telepass S.p.A. and CABEL. His areas of expertise include information security, privacy, security compliance, risk management, IT governance, project management, quality assurance, IT audit, business continuity and crisis management.

Vincenza Moroni

Head of Cyber Security and Compliance

Fondazione Milano Cortina 2026

Vincenza Moroni is currently Head of Cyber Security & Compliance at the Milano Cortina 2026 Foundation, the organisation behind the 2026 Winter Olympic and Paralympic Games. In this unique role, she works to protect the Olympic ecosystem from cyber threats.

Giovanni Battista Vassallo

Director Information Security for Operations

Philip Morris

Giovanni has 20+ years of cyber security experience, starting in leading consulting firms before joining Philip Morris International, where he has held roles spanning both IT and OT. He currently serves as Director Information Security for Operations with a global scope, driving secure business strategies, reducing cyber risk, and strengthening resilience.

Gaetano Sanacore

Scientifico Director

Osservatorio per la Cyber Resilienza & AI delle Reti Energetiche

Gaetano is the Scientific Director of National Committee for Electrical Grid Cyber Security, Resilience and AI, in which he has been playing an active role since 2015.

Sponsors

Exhibitor

SecurityScorecard modernises Third Party Risk Management (TPRM) using AI and threat intelligence to continuously manage, detect, and respond to global supply chain risk.

Series Sponsors

Cloudflare

Cloudflare, Inc. (NYSE: NET) is the leading connectivity cloud company. It empowers organizations to make their employees, applications and networks faster and more secure everywhere, while reducing complexity and cost. Cloudflare’s connectivity cloud delivers the most full-featured, unified platform of cloud-native products and developer tools, so any organization can gain the control they need to work, develop, and accelerate their business.

OneTrust

OneTrust is the leading AI-Ready Governance platform. More than 14,000 customers globally, including over half of the Fortune 500, rely on OneTrust to accelerate innovation while ensuring responsible data use.

Fastly

Fastly is upgrading the internet experience to give people and organizations more control, faster content, and more dynamic applications. By combining the world’s fastest global edge cloud network with powerful software, Fastly helps customers develop, deliver, and secure modern distributed applications and compelling digital experiences. Fastly’s customers include many of the world’s most prominent companies, including Pinterest, The New York Times, and GitHub.

Akamai

Akamai is the cyber security and cloud computing company that powers and protects business online. Our market-leading security solutions, superior threat intelligence, and global operations team provide defence in depth to safeguard enterprise data and applications everywhere. Akamai’s full-stack cloud computing solutions deliver performance and affordability on the world’s most distributed platform.

Delinea

Delinea, a pioneer in identity protection through centralised authorisation, makes companies more secure by seamlessly governing their interactions across the modern enterprise. It applies context and intelligence across the identity lifecycle including cloud and traditional infrastructure, data and SaaS applications to eliminate identity-related threats. Delinea uniquely provides intelligent authorisation for all identities, enabling accurate user identification, appropriate access assignment, interaction monitoring and rapid response to irregularities.

Ping Identity

At Ping, we deliver identity and access solutions that make it possible to trust every digital moment—moments with customers, employees, partners, and non-human identities. Whether you’re securing millions of users, fighting sophisticated fraud, simplifying third-party access, or embracing passwordless experiences and verifiable credentials, establishing trust shouldn’t slow you down. Our enterprise-grade identity platform is built for scale, speed, and flexibility.

ThreatLocker

Stop attacks before they happen. ThreatLocker brings Zero Trust solutions to your organization with controls that put you in charge of who—and—what gets into your environment.

SSH

SSH Communications Security (SSH) is a leading defensive cybersecurity company that secures communications and access for and between humans, systems, and networks. Our customers include a diverse range of enterprises, from multiple Fortune 500 companies to SMBs across various sectors, including Finance, Retail, Industrial, Critical Infrastructure, Healthcare, and Government. We help customers secure their business in hybrid cloud environments and distributed IT and OT infrastructures. SSH’s shares (SSH1V) are listed on Nasdaq Helsinki.

Claroty

Claroty has redefined cyber-physical systems (CPS) protection with an unrivaled industry-centric platform built to secure mission-critical infrastructure. The Claroty Platform provides the deepest asset visibility and the broadest, built-for-CPS solution set in the market comprising exposure management, network protection, secure access, and threat detection – whether in the cloud with Claroty xDome or on-premise with Claroty Continuous Threat Detection (CTD).

ESET

ESET® provides cutting-edge cybersecurity, preventing attacks before they happen. By combining AI with human expertise, ESET stays ahead of global threats to secure businesses, infrastructure, and individuals. Whether for endpoint, cloud, or mobile protection, our AI-native solutions are effective and easy to use. ESET technology includes robust detection, encryption, and multifactor authentication with 24/7 defense and local support.

Perforce-Delphix

Perforce-Delphix automates secure, compliant data delivery to power DevOps, AI, and cloud transformation. By eliminating data bottlenecks, Perforce-Delphix helps enterprises speed up innovation, reduce risk, and cut costs — enabling faster releases, AI model training, and seamless compliance with privacy regulations.

Riot

Combining a clever mix of tailored awareness and hands-on training, Riot is the next-generation platform for preparing employees for cyberattacks. Founded in 2020, Riot has raised more than €3 million from prestigious investors, including Y Combinator (Stripe, Airbnb, Dropbox…), Frst Capital (Payfit, Doctrine) and FundersClub (Coinbase, Slack…). Today, Riot prepares more than 100,000 employees each month to deal with cyberattacks, including teams from Alan, Deezer, Intercom, Alcatel-Lucent and Le Monde.

You Too Can Showcase your Cyber Security Solutions as a Sponsor…

Step on ItaliaSec’s virtual stage and present to CISOs, VPs & Heads of IT Security from the likes of Banca d’Italia, Calzedonia, Ferrari, ACEA, Sky Italia & Poste Italiane

Choose Your Pass

End-Users, Gov & Academia

€299

For End-users, Government
& Academia

  • Enjoy Presentations, Panels & Case Studies
  • Access All Areas Virtual Summit Pass
  • Content Available for up to 7 Days
  • Download PDF Copies of All Presentations (Post-event)
  • Enjoy 3+ Hours of Networking
  • 6 CPE Credits & Certificate of Attendance
*End Users:  Representatives of public or private sector organisations who are not vendors, insurance providers, consultants, or lawyers.
Buy Now

Vendors

€999

For Cyber/IT Security Solution/Product Providers & Consultants

  • Meet Senior Decision Makers
  • 3+ Hours of Valuable Networking
  • Evaluate Sponsorship for 2027
*Vendors:  Solution or insurance providers, consultants, or lawyers.
Buy Now

Register Now

Register Now

View the Agenda

Find Out More

Request A Sponsor Pack

Access Here