Speaker: Thorben Albs 

For anyone running a business today, a successful attack is no longer a worst-case scenario but a realistic expectation. Attackers operate like an industry: specialized, AI-assisted, and driven by clear economic logic. It is not only large corporations and critical infrastructures that are affected – mid-sized companies in particular are moving into focus, often simply because they make an easy target.

Regulatory requirements such as NIS-2 set an important framework. But treating security as a mere compliance exercise wastes potential. Real resilience grows out of a company's own interest: protecting its ability to operate, to deliver, and to keep the trust of customers and partners is a value in itself – independent of any legal obligation.