Registration Become a partner

Program - Autumn ITAPA 2026

  • Program
09:00
CYBER DAY
CYBERSEC DAY
POLICY STAGE

Regulation, resilience, accountability and strategic decision-making in cybersecurity

CASE STUDY & DEMO STAGE

Real-world incidents, technology solutions, live demos and practical experience

MASTERCLASSES

Practical sessions for those who want to explore cybersecurity topics in greater depth

08:00
Registration
09:15
Kyber 1
08:45 - 9:00 When the State Must Keep Running: How Do We Build a Resilient Country?

At the start of the day, we will address the broader question of Slovakia’s security and resilience at a time when digital and physical threats are becoming increasingly interconnected. Which government services must remain operational even during a major cyberattack or other crisis? How is the state’s preparedness for new types of threats evolving, and what must Slovakia do to ensure that it can not only respond to crises but also prevent them?

09:30
Kyber 2
09:00 - 9:45 Cybersecurity, Business and AI: It’s Super Bowl Time Every Day!

In sport, athletes prepare for one decisive game. In cybersecurity, business and artificial intelligence, however, the final never ends. Every day brings situations with stakes as high as the Super Bowl, where the difference between winning and losing is measured in data, reputation and trust. This keynote will focus on where cybersecurity, business strategy and artificial intelligence converge – the intersection at which these three forces are coming together at an unprecedented scale and speed. How can organisations build a winning strategy at a time when these three areas are becoming increasingly intertwined on a scale never seen before? Expect bold perspectives, uncomfortable truths and new ways of looking at an era moving at machine speed. Because preparedness is no longer an option – it is a matter of survival. The Super Bowl is played every day.

09:00
Ramsés Gallego, Quantum World Association
Keynote (30 min + 10 min Q&A)
10:15
Kyber 3
9:45 - 10:00 Detection of Cyber Security Incidents
EU Cooperation Framework Progressing, but Only Partially Effective Due to Implementation Delays and Limited Information Sharing.
10:00
Kyber 3.1
10:00 - 10:40 National Defence at AI Speed
10:40
NETWORKING BREAK
11:00
Kyber 4
11:10 - 11:45 How to Keep the Digital State Running During a Cyberattack

How can we ensure that critical public digital services continue to operate during a cyberattack? The panel will combine lessons from a real-world incident with perspectives on government preparedness, operational continuity, incident response coordination and service recovery.

11:10
Miloslava Slížová, Ministry of Investments, Regional Development and Informatization of the Slovak Republic
Ferdinand Vavrík, Ministry of Finance of Slovak Republic
DISCUSSION "How to Keep the Digital State Running During a Cyberattack"
11:10 - 11:50 AI as an Attacker and AI as a Defender – Agentic Attacks, Automation, AI-Powered Detection and Response

AI is no longer just a defensive tool – it is increasingly becoming part of the attack itself. How can organisations deploy AI securely, gain visibility into how it is being used, and respond to new types of threats? Practical demonstrations will show what secure AI operations and infrastructure protection look like in real-world environments.

11:35
Kyber 5
11:45 - 12:25 Post-Quantum Cryptography

New obligations under Slovak cybersecurity legislation are increasing the demands placed on cryptographic risk management. We will explain why now is the time to prepare for post-quantum cryptography, what organisations need to address today, and what practical experience has been gained from preparing for migration.

11:45
Rastislav Samsely, ARICOMA
Michal Sekula, ARICOMA
Post-Quantum Cryptography (PQC) – Is It Time? (7 min)
11:55
Kyber 6
12:25 - 12:45 How to Verify Identity and the Trustworthiness of Communications in the Age of Deepfakes and AI-Driven Fraud

When we can no longer trust our own eyes or even the voice on the other end of the line, identity verification becomes a critical part of security. How can we recognise deepfakes, fraudulent communications or identity misuse, and where do technological safeguards end and human vigilance begin? And how can we build trust in an environment where AI can imitate a person with remarkable accuracy?

11:50 - 12:50 MASTERCLASS: Managed Detection and Response – MDR (Managed Detection and Response)
From the first alert to stopping the attacker: the attack chain, lateral movement, escalation and the MDR team’s intervention.
12:30
Kyber 7
12:45 - 12:55 Technological Dependence as a Security and Geopolitical Risk
12:45
Klára Jelínková, National Security Authority
1on1 interview
12:55
LUNCH
14:00
Kyber 8
14:00 - 14:20 Security Risks of Dependence on Cloud, AI and Technology Providers

Cloud and AI are accelerating modernisation, while at the same time creating new technological dependencies. How can governments and organisations design their cloud strategies to gain flexibility without creating unnecessary vendor lock-in? The discussion will focus on security, regulation and resilience when working with major technology providers.

14:00
Kristián Hodossy, Ministry of Investments, Regional Development and Informatization of the Slovak Republic
Government Multicloud – How to Modernise the State Without Creating New Technological Dependencies? (7 min)
14:00 - 14:50 Ransomware and Incident Response in Practice – What Happens from the First Alert to Service Restoration

What happens from the first alert to the point when critical systems are restored to operation? Real-world incidents and simulated attacks will show how IT teams, SOC teams and crisis management respond during a ransomware attack. The focus will be on decision-making under pressure, service restoration, and identifying weaknesses in the network before an attacker can exploit them.

14:00
Lucia Gocníková, The Geodesy, Cartography and Cadastre Authority of the Slovak Republic
The reality following a security incident (15 min)
14:15
Daniel Hejda, Cyber Rangers (provisonally confirmed)
DEMO
14:30
Kyber 9
14:20 - 15:00 Who Is Responsible for Cyber Risk at the Executive Level?

Cyber risk is no longer solely an IT issue; it is also a matter for senior management, legal teams and statutory representatives. Who is responsible when security measures fail, and where do managerial, legal, contractual and personal liabilities intersect? The discussion will also examine how organisations are addressing the shortage of cybersecurity expertise and outsourcing parts of their security operations to external providers.

Moderator: Ivan Makatura

14:50 - 15:10 AI Agents in the Enterprise: Who Gave Them Access to Data, APIs and Tools?

Enterprise AI is no longer just a chatbot layered on top of documents. Models are connected to internal data, APIs and tools, while AI agents can search, make decisions and perform actions on behalf of users. This changes the security challenge. Protecting the model against prompt injection is no longer enough; organisations need to manage the entire flow of interactions between the user, agent, model, data and tools. The DEMO will show how an AI Gateway can serve as a single control point for enterprise AI: enforcing security policies in real time, protecting against data leakage and prompt injection, managing agents’ access to MCP tools and APIs, ensuring auditability, and integrating with existing application and API security. Through specific scenarios, we will demonstrate why secure AI requires the same operational discipline as any other critical application.

14:50
15:00
Kyber 9.2
15:00 - 15:40 Next-Generation Identity

Digital identity is no longer limited to humans. With the rise of AI agents, machine accounts and other non-human identities, there is a growing need to understand who or what is acting within a system and what permissions they have. The discussion will focus on the security, management and legal aspects of next-generation identity.

Moderator: Ivan Makatura

15:00
Marek Ledecký, RSA Security
NHI – Non-Human Identities (15 min)
15:15
Matúš Mesarčík, Comenius University Bratislava, Faculty of Law, Institute of Information Technology Law and Intellectual Property Law
DISCUSSION "Next-Generation Identity"
15:10 - 15:30 SOC in Action: From the First Alert to Stopping the Attack

The Ministry of Labour, Social Affairs and Family has built its own cybersecurity monitoring centre for the entire ministry. Using a specific anonymised incident or a simulated scenario, it will demonstrate what happens from the first suspicious signal through detection and assessment to threat isolation and the restoration of secure operations.

15:40
NETWORKING BREAK
16:15
Kyber 11
16:10 - 16:50 Which Security Decisions Can Be Delegated to AI, and Which Must Remain with Humans?
As AI is increasingly used in cybersecurity, the question is no longer simply what the technology can do. It also raises questions about who is accountable for automated decisions, where human oversight must be retained, and what happens if AI, for example, blocks a user, isolates a device or flags a transaction as high-risk.

Moderator: Ivan Makatura
16:10
16:17
Martin Daňko, Department of Information Technology Law and Intellectual Property Law, Faculty of Law, Comenius University in Bratislava
Miroslav Chlipala, BCH Advokáti Chlipala
Zuzana Motúzová, Motúzová & Lacko Law Firm
DISCUSSION "Which Security Decisions Can Be Delegated to AI, and Which Must Remain with Humans?"
16:10 - 17:10 MASTERCLASS: Third-Party Risk Management

We are preparing the panel.

16:50
Kyber 11.2
16:50 - 17:00 How Can we Prepare People and the Organisation for a Cyber Incident?
Technology alone is not enough. How can we prepare staff, management and internal processes so that an organisation is able to respond appropriately in the event of an attack, an outage or a crisis? What can be practised in advance, and where do the greatest vulnerabilities lie today?
16:50
Róbert Bučko, Ministry of Investment, Regional Development and Informatization of the Slovak Republic
When an attack strikes, it’s too late for training: can preparedness be practised?
16:45
Kyber 12
17:00 - 17:30 How to Turn Regulatory Compliance into Genuine Cyber Resilience

New cybersecurity requirements are expanding the range of regulated organisations and introducing a number of new obligations. The key question, however, is how to ensure that organisations do not view regulation merely as a checklist of requirements to be formally satisfied, but instead use it as a tool to genuinely strengthen their resilience.

Moderator: Ivan Makatura

17:00
Michal Ďorda, IT & Cybersecurity auditor
Ondrej Zimen, The Office for Personal Data Protection
DISCUSSION "How to Turn Regulatory Compliance into Genuine Cyber Resilience"
17:10 - 17:20 The Security of AI Systems
We are preparing the panel.
17:15
Kyber 13
17:30 - 18:30 ITAPA OPEN TALK: Cyber Threats Are Growing. Is Our Defence Keeping Pace?

Cyber threats are evolving faster than ever. Can governments, businesses and critical infrastructure keep pace? The closing roundtable will reflect on the key findings of CyberSec Day, identify the most significant weaknesses in our defences and address the question of what specifically needs to change if we are to be more secure a year from now.

17:30
Closing Networking
08:00
Partner Cybersec Da
Partner of Cybersec Day

PARTNER of CYBERSEC DAY