CISO Philippines schedule

During this 5-minute networking session, the aim of the game is to go and meet three people you don't already know. Use the questions on the screen to guide your conversation. Have fun!

• Understanding the shift to AI-powered threats and autonomous attacks
• How AI can strengthen real-time threat detection and incident response
• What CISOs must prioritise to stay resilient in 2026 and beyond

Closing the gap between vision and execution remains one of the biggest hurdles for today’s cyber leaders. From aligning stakeholders to building realistic delivery pathways and identifying the indicators that truly matter, this session focuses on making cyber programs tangible, achievable, and outcome-driven.

• What typically derails the journey from cyber strategy to delivery, and how can leaders navigate around these barriers?
• How can you secure organisation-wide commitment so programs move beyond intention and into action?
• When cyber uplift actually takes hold, what are the critical enablers that create meaningful, long-term impact?

Moderator:

Mar Apuhin CISO GT Capital Holdings

Panellists:

Glenn William S. Alcala CISO Reyes Tacandong & Co

Christian Oliver Dy CIO AC Logistics

Irene M. Camacho CISO Healthway Medical Network

Cyber risk is increasingly shaped by geopolitical tensions, state-sponsored attacks, and AI-enabled threats. This panel brings together cyber leaders to examine how organisations are strengthening resilience against interconnected risks that span cyber, infrastructure, and national security.

What you’ll gain:

• How geopolitical tensions are driving state-sponsored cyber attacks
• Managing rising AI-enabled threats (fraud, deepfakes, automated attacks)
• Protecting critical infrastructure and essential services from disruption
• Strengthening cyber resilience beyond traditional IT boundaries
• Aligning cyber strategy with enterprise risk and business continuity

Moderator:

Jeia Tirante Head of Non-Financial Risk ING Hubs Philippines

Panellists:

Devendra Pratap Singh CIO Atlantic, Gulf & Pacific Company

Steffen Minkmar Deputy CISO Asian Development Bank (ADB)

Marlon Sorongon CISO Maybank Philippines

Mark Anthony Santiago Head of IT Risk Management UnionDigital Bank 

There’s a key defense that organizations often overlook: eradicating data permanently and decisively—and as soon as it’s no longer needed.

Drawing on industry research, best practices, and case studies, we’ll explore why enterprises must address end-of-life data more efficiently and precisely than ever before. We’ll also look at how to target regulated data within traditional endpoints (including remote workplaces), live environments (onsite or in the cloud) and decommissioned IT assets (loose drives and devices).

Session takeaways include:

• How to securely remove sensitive remotely home and on-prem
• The drawbacks of physical destruction for end-of-life assets
• Why reformatting, data deletion, and other data destruction methods are unacceptable approaches
• Best practices for automation and integration, whether to target live data or protect decommissioned assets against unauthorized data access

From Smart Farming to Secure Farming: Cybersecurity in the Age of AI, IoT and Autonomous Agriculture

• the Philippines moving toward in a smart agriculture using AI, IoT, robotics, cloud platforms, data-driven farming, and automated machinery
• Kubota's global roadmap includes remotely monitored autonomous agricultural machinery
• Understanding smart-agriculture strategy to connect machinery, farm data, weather, crop information, and farm-management systems

• Key principles for architecting secure, scalable environments across cloud, hybrid, and edge
• How to embed resilience and agility without compromising speed or user experience
• Real-world approaches to modernising legacy infrastructure while preparing for future threats 

• Navigating IT/OT convergence in legacy-heavy, regulated environments
• Lessons from Kenvue’s global spin-off and scaling security across 14 markets
• Embedding Zero Trust and cybersecurity into fast-paced transformation under budget constraints

• Showcasing how AI-driven cyber security enhances business resilience, operational efficiency, and customer trust
• Translating AI-powered security insights and threat intelligence into business-relevant outcomes for executive stakeholders
• Aligning AI-led security investments with enterprise-wide digital transformation and innovation strategies

• How leading organisations are implementing Zero Trust across hybrid and multi-cloud environments
• Breaking down real-world playbooks: identity, segmentation, continuous verification
• Overcoming resistance, complexity, and legacy system limitations on the path to Zero Trust

Speakers:

Leonardo Sacamos Jr CIO FAST Logistics Group

Arnaldo Torrevillas IS Risk and Compliance Philippines Airlines 

• Introduction to AI in Identity Security: Discuss the integration of artificial intelligence and machine learning in identity governance and administration, highlighting how these technologies enhance threat detection and response.
• Overview of Saviynt's Intelligence Suite: Present Saviynt's latest AI-powered Intelligence Suite, emphasizing its capabilities in providing intelligent recommendations and analytics for identity security.
• Addressing Third-Party Access with a Converged Identity Platform: Explore how Saviynt's converged identity platform secures third-party access, mitigating risks associated with external users, contractors, and partners. Highlight features that streamline provisioning, enforce least-privilege access, and monitor third-party activities in real time.
• Case Studies and Real-World Applications: Share success stories and practical examples of organizations that have implemented AI-driven identity security solutions to strengthen their cyber resilience.
• Future Trends in Identity Security: Explore the evolving landscape of identity security, including the management of machine identities and the challenges posed by emerging technologies.

• Understanding where AI adoption is creating new security gaps, particularly across data, identity, third-party platforms, shadow AI and increasingly autonomous systems
• Putting guardrails around AI without slowing innovation, balancing experimentation and speed with security, accountability and regulatory expectations
• Preparing for AI-enabled attacks and AI-enabled defence, from automated threat detection and response to deepfakes, fraud and AI-assisted cybercrime
• Bringing security into the AI governance conversation, ensuring CISOs have a voice in how AI is deployed, governed and managed across the enterprise

• Designing security architectures that account for compliance from the ground up
• Mapping risk appetite to architecture decisions for better resilience
• Avoiding “bolt-on compliance” by embedding controls directly into systems and workflows
• Balancing employee and customer experience with regulatory requirements in architecture choices
• Case studies: how organisations align security-by-design with regulatory compliance

“What actually gets exploited in AI, third-party, and supply chain — not what the reports say”

Every vendor report this year will tell you what security teams are worried about. I'm going to tell you what actually got exploited. Those are two different lists.

None of this was novel. No zero-days, no exotic AI attacks — just agents nobody inventoried, access nobody revoked, and grants nobody reviewed. The attackers aren't outpacing you. You're just not doing the boring stuff at scale. Fix the boring stuff.

• Understanding the unique cyber risk profile of critical infrastructure – why IT/OT convergence, legacy systems, and national dependency make these environments high-impact targets
• Building operational resilience where safety, uptime, and security intersect – rethinking incident response, recovery, and decision-making when cyber incidents can disrupt essential services
• Strengthening ecosystem collaboration – how operators, regulators, and technology partners can work together to uplift resilience across Philippines’s critical infrastructure landscape

Speakers:

Gen Macalinao Security GRC – OT AboitizPower

Gabriel Tuason Head, Information Security Energy Development Corporation

Examines how cybersecurity must evolve from reactive defense to anticipatory resilience. It explores emerging risks including synthetic identities, agentic AI attacks, quantum computing, 6G and IoT expansion, and increasingly sophisticated social engineering. The presentation outlines practical priorities such as crypto-agility, post-quantum readiness, AI-enabled defense, stronger governance, and adaptive human training. Together, these strategies position organizations to manage uncertainty and build security systems that are faster, more flexible, and resilient by design.

• Moving beyond compliance to address real-world security risks
• Aligning security architecture with Philippine regulatory requirements
• Preparing for stronger expectations around cyber incident reporting and accountability
• Building resilience to detect, respond to, and recover from cyber attacks 

AI is reshaping cybersecurity on both sides of the battlefield. It is powering more sophisticated attacks while enabling smarter defences. But where do humans fit in? This session unpacks how organisations are redefining the “human-in-the-loop” to stay resilient in an AI-driven threat landscape.

What you’ll gain:

• How AI is transforming threat detection, response, and fraud prevention
• Insights into AI-enabled attacks (deepfakes, automation, advanced phishing)
• Where human expertise still outperforms AI in cyber defence
• Strategies to upskill cyber teams for an AI-augmented future
• How to address talent anxiety and job displacement concerns

Moderator:

Ricson Singson Que IT Security Manager De La Salle – College of St Benilde

Panellists:

Wendel Calaguas CIO ATRAM Group

Enrique Ibañez CIO Liberty Commercial Center

Garrett Silao CISO Globe Telecom