ISC2 SECURE London returns on November 19, 2026, bringing the cybersecurity community together for a day of learning, discussion and networking focused on some of the most pressing challenges facing security professionals and their organizations.
Taking place at Convene, 155 Bishopsgate in central London, the fourth annual ISC2 SECURE London arrives at a pivotal moment for the profession.
Artificial Intelligence (AI) is changing both the threat landscape and the way organizations operate. Regulatory developments are putting cyber resilience at the top of the list of priorities for boards and senior leaders. Meanwhile, cybersecurity teams continue to grapple with ransomware, identity threats, cloud security and the challenge of turning cybersecurity strategy into effective operational practice.
SECURE London 2026 will give ISC2 members and the wider cybersecurity community an opportunity to step away from the day-to-day demands of the profession and explore those challenges together while earning six CPE credits.
Developed with input from the ISC2 member community, the one-day program brings together cybersecurity leaders and practitioners to examine not only emerging risks, but practical approaches professionals can apply within their organizations.
Governing AI In a Changing Threat Landscape
Following welcome remarks from ISC2 Board of Directors Chair Samara Moore, CISSP, the conference will open with one of the defining cybersecurity questions of 2026: how should organizations govern increasingly capable AI?
Monica Verma, CCSP, hacker, CISO and AI advisor, will deliver the opening keynote, Governing AI Before It Hacks You.
With agentic AI increasingly capable of making decisions without continuous human intervention and cybercriminals incorporating AI into their activities, Verma will examine what these developments mean for security, governance, resilience, ethics and organizational trust.
Drawing on more than 20 years of technology, security and executive leadership experience, including serving three times as a CISO, Verma will consider what it takes to build resilient businesses and workforces as AI becomes increasingly embedded in both legitimate enterprise technology and cyber threats.
Preparing For UK Regulatory Change
The evolving UK regulatory landscape will also be firmly on the agenda.
The panel The UK Cyber Security and Resilience Bill: Next Steps to Get Your Organization Ready will examine the developing Cyber Security and Resilience Bill (CSRB) and the implications for organizations preparing for an expanded and strengthened UK Network and Information Systems regime.
Dr. Ed K. Kiyemba Edris, Head of Cybersecurity at Telehouse; Gary Fildes, Senior Cybersecurity Consultant at CGI; and David Manfield, Senior Partner – Cybersecurity at Investigo, will explore organizational preparedness, board-level cyber responsibility, supply-chain dependencies, incident response and the workforce implications of regulatory change.
Importantly, the conversation will extend beyond regulatory compliance. The panel will examine how organizations can use preparations for the changing regulatory environment to strengthen their wider approach to cyber risk and resilience.
Bridging The Gap Between Security Strategy and Reality
Having strong frameworks, policies and security technologies does not automatically produce stronger security outcomes.
That gap between strategy and execution is the focus of From Framework to Reality: Why ‘Good’ Security Fails in Real Organizations, led by Renata Vincoletto, CISSP, CISO at Civica.
Drawing on experience across security operations, cloud and governance, Vincoletto will explore why well-designed security approaches can struggle when confronted by organizational reality. The session will consider issues including unclear ownership, misunderstandings around shared responsibility, compliance-led decision-making and security functions that become more focused on reporting than reducing risk.
Attendees can expect a practical, threat-led perspective on developing controls that can withstand organizational pressures while supporting cloud environments and rapid business delivery.
Shifting Security Everywhere
Software security comes into focus with Paul Holland, CISSP, Cyber Strategy Manager at Royal Mail, in his session Secure by Design? No, Secure by Default. Shift Left? No, Shift Everywhere.
Drawing partly on his experience advising the UK Cabinet Office on Secure by Design approaches, Holland will challenge some familiar cybersecurity terminology and ask whether organizations need to rethink how security is incorporated across software development.
Rather than simply “shifting left,” Holland will explore what could happen when organizations make security a consideration throughout development and focus on secure defaults rather than relying solely on secure design.
Identity security will also feature during Identity Attack Paths: How Exposed Is Your Business? Mark Wilson, Sales Engineering Manager, EMEA at SpecterOps, will examine how combinations of permissions and trusted access can create routes to critical systems across cloud and on-premises environments, and how organizations can identify and prioritize the points where remediation could reduce exposure.
What Does AI Mean for Your Cybersecurity Career?
SECURE London will conclude by bringing the conversation about AI back to the cybersecurity professional.
In Cyber Careers in the Age of AI: Turning Disruption into Opportunity, Kevin Fielder, CISSP, ISSAP, ISSMP, CISO of NatWest Boxed and Mettle, will discuss how automation and AI are changing cybersecurity roles, skills and career pathways.
The fireside chat will consider which skills will become more important, which may become less valuable, how professionals can incorporate AI into their workflows and how they can position themselves for long-term career development as machine intelligence becomes a growing part of cybersecurity work.
For ISC2 members considering their professional development priorities for 2027, it promises to provide a fitting conclusion to a day focused firmly on what comes next.
Extend the SECURE London Experience
Members looking to take their learning further can also attend the two-day pre-conference workshop Securing AI: Cybersecurity Strategy on November 17–18.
Designed for mid- to senior-level cybersecurity professionals, the workshop will explore topics including AI implementation strategies, frameworks, threats and vulnerabilities, ethical AI use, protecting AI systems and developing an organizational AI strategy and roadmap.
ISC2 members can earn up to 16 CPE credits from attending the workshop, along with 6 CPE credits for attending SECURE London.
As organizations turn their attention towards the opportunities and risks of 2027, ISC2 SECURE London on November 19 provides a timely opportunity to learn, connect and return to the workplace with practical insights for the year ahead.
