1st Annual Cybersecurity Startup Expo 2025

Chairman's and Co-Host's Opening Remarks 

Key takeaways:

• Lessons learnt from partnering with venture capital
  

ISO 27001 is the global standard for Managing Information Security management system (ISMS). It defines the list of controls needed to effectively manage the security for an organization. By Deploying ISMS, organizations ensure that they have a comprehensive threat intelligence system, as well as all essential security and privacy controls needed as per business needs. Including IT Governance, Human resource, system monitoring, configuration management, access control, business continuity, change management and continuous improvement processes. ISO 27001 ensures that organizations deploy controls for web systems security, physical security, network and application security as well as ensures organization has qualified individuals who can manage the systems as needed to preserve the security and privacy of the organizational assets including information assets.

In a world where developers are tasked with evermore responsibility, the current way of managing vulnerability will only lead to burnout and alert fatigue. A new way is possible, by automating container hardening with bifrost, your attack surface will be minimized, and potential exploits will be blocked proactively.

Key takeaways:

• What is stopping people from using this technology today?
• How is the industry responding to this alternative approach?
• Are there any performance issues with using this?
• Does understanding behavior pose any risk of leaking sensitive data/PII?

How 3D encryption let's you compute anything anywhere without the risk of exposing information or IP to third parties

Key takeaways:

• Enclaive 3D encryption makes the use of Confidential computing seamless
• Run Time encryption allows companies to leverage the infrastructure of choice for most use cases including current AI boosting flexibility, security at a fractional cost.
• Confidential computing strengthens flexibility and compliance with European and international regulatory frameworks (IS2, HIPPA, DORA a.m.m).

While LIS guides you on WHAT to do, little is said about HOW to do it. We will dive into what it takes for an organization to implement actual working IT- and cybersecurity.

Key takeaways:

• What is it with risk assessments that we miss?
• What are the main prerequisites for implementing actual IT- and cybersecurity?
• What competencies do we need, and what focuses should we have?
• How do we effectively decrease the risk of a breach?

When you are confronted with hundreds of questions about your security program, how do you deal with it? This talk will focus on the type of DDs that exist, what to expect from them, how to prepare and how to respond.

Although security measures have been around for quite some time, these security standards are not properly implemented by Swedish regions, municipalities and companies. As a consequence, there is an increased risk of identity theft and email spoofing. We would like to draw attention to these shortcomings and show ways to correct them and how to stay protected.

Key takeaways:

• Why should I care about securing my email?
• I'm using Office365, does it mean I'm safe?
• Why don't vendors like Microsoft and Google handle this?

Cryptas will talk about  the current cyberthreats and the surge of PKI as a Service. It will also explore current trends such as: (PQC, regulatory compliance (NIS2/DORA/EUCRA), the impact of AI, the end of Microsoft CA) and what to do about it.

A wave of new regulations has washed in over European companies during the last decade. GDPR, NIS2, DORA, The AI Act, CRA - all with the purpose of strengthening European cyber resilience.These regulations are challenging to implement with vague requirements that can be hard to understand, hard to implement in a team setting and difficult to monitor to keep up company security posture.

Key takeaways:

• How can we efficiently keep up with continuously updating regulations?
• How can we merge overlapping regulations and security standards into one unified security plan?
• How can we automate the information security management system using AI?