Cybersecurity Financial Services Summit: Toronto

Resilience isn't just about surviving attacks - it's about business continuity, regulatory alignment and protecting long-term trust.

As ransomware tactics evolve and destructive payloads target core financial infrastructure, Canadian institutions are doubling down on cyber resilience strategy.

This panel will explore how to align incident response planning with enterprise risk, integrate simulations and crisis testing, and partner with internal and external teams to accelerate recovery timelines.

Key Discussion Points:

• How Canadian financial institution’s are aligning incident response planning with OSFI guidelines and business continuity plan requirements;
• What resilience testing looks like in practice (e.g., simulations, tabletops, red/blue teams);
• Integrating threat intel into response playbooks;
• Communicating with regulators, customers and internal stakeholders during crisis recovery.

AI in 2025 is a far different landscape than it was when ChatGPT was introduced in 2022.

As a result, the term “Secure AI” has new meanings as well. In this session, Anton Chuvakin, security advisor at Google Cloud, shares insights on:

• The AI security issues we should be discussing in 2026;
• Lessons learned over the past three years;
• Today’s practical and effective AI use cases.

Today's top CISO roles come with enviable perks: the "C" title with its prestige and rewards, responsibility for an enterprise's cybersecurity posture, and direct access to senior business leaders and the board.

But it also comes with a target painted squarely on your back. Who’s to blame when the organization gets breached? Who is potentially legally liable for a security lapse, and who might be the sole executive prosecuted if that worst-case scenario comes true?

Not a dream, not a hoax, not an imaginary story. This is reality for today’s top security leaders. And in this exclusive fireside chat, veteran security leader Sunil Chand opens up on what he looks for in his next CISO opportunity – questions to ask, answers to seek and red flags that make him walk away.

Key Discussion Topics:

• What does it take to earn that seat at the table – the skills and experiences?
• What’s your coverage – who has your back – if you’ve done all the right things and still get breached?
• What’s the reporting relationship – and what does that mean regarding access to senior leaders and the board?

As cyber insurance premiums climb and coverage terms tighten, financial institutions are facing a new reality: insurers are no longer just pricing risk - they're dictating security expectations.

This session will explore how Canadian underwriters are approaching coverage in 2026, what it takes to avoid exclusions, and how security leaders are rethinking the value of cyber insurance in light of recent claim denials and market shifts.

Backed by real-world experience from a seasoned security executive, this conversation will examine what’s changing – and what boards need to understand – about risk transfer in a climate of rising breach costs and insurer skepticism.

Key Discussion Points:

• How Canadian insurers are evaluating security maturity and incident response plans in 2026;
• What insurers are looking for in claims today and how clients and brokers can work together to meet expectations;
• How to align cyber insurance with security investments for maximum impact;
• Strategies to help boards see cyber insurance as a component – not a substitute – for robust security.

The core challenge of modern software delivery is the perceived trade-off between speed and security. Too often, organizations struggle with security teams acting as bottlenecks late in the cycle, forcing slow, costly rework and frustrating development teams. In this session, Sean D. Mack, Managing Director of ISMG’s CXO Advisor and author of The DevSecOps Playbook, explores how integrating security seamlessly into the development lifecycle empowers teams to move faster, safer, and smarter. Drawing from real-world experience as a former CIO & CISO, Sean breaks down the cultural, organizational, and technical shifts required to truly deliver securely at speed.

• Learn how you can integrate the principles of DevSecOps to deliver secure products to market without sacrificing speed
• Gain insight into evolving threat landscapes and why traditional perimeters no longer work.
• Hear techniques for fostering a shared security ownership model that bridges the gap between Development, Security, and Operations teams
• Adopt best practices for handling, prioritizing, and remediating security findings at scale while maintaining high delivery frequency
• Find out how to successfully drive transformation in your organization.