SecureD & Under Control

The focus is on real technical solutions that raise security to the required level in practice.
We demonstrate how technically functioning solutions ensure a security level that meets regulatory requirements.

When Theory Meets Practice: Cyber Compliance 2026
Compliance with NIS2, ZInfV-1, and DORA requires clear, technically feasible steps—not more theory.
At the SecureD & Under Control conference, we focus on solutions that demonstrably raise an organization’s security level in real environments. We don’t talk about concepts, but about architectures, controls, and technical procedures used daily by system engineers, architects, CISOs, and IT content managers.
The focus is on real technical solutions that practically raise security to the required level.
We will present examples where the right combination of security functions creates a stable infrastructure, clear visibility, and control over key risk points. Such solutions enable the establishment of concrete, verifiable controls essential for managing modern threats and meeting regulatory requirements.
The event is intended for organizations that want to ensure a higher level of resilience and compliance and want to understand how to actually achieve this in practice.
You will gain direct insight into what works in real environments, how different technologies can be aligned, and how to ensure stable, verifiable, and regulation-compliant operation of critical systems.
The focus is on practical results, real examples, and technical integrations.

SecureD & Under Control—the conference where theory finally meets practice.

January 26, Monday / Day 1 Workshops Track 1

January 26, Monday / Day 1 Workshops Track 2

January 28, Wednesday/ Day 3 Demo room

Workshops

Catch the attacker with advanced protection – Live Capture the Flag Workshop

A Hands-on Capture the Flag workshop allows participants experience real-world attack scenarios and practice detection and response in a controlled environment. The focus is on identifying attacker behavior, correlating events across multiple data sources, and responding to incidents using advanced security capabilities designed for modern enterprise environments.

Enabling Advanced Security Use Cases with Complete Network Visibility (for AI D&R or IDS)

Effective AI-based detection and response depend on accurate and complete network data. This workshop shows why full network visibility is essential for identifying and responding to threats. Participants will explore how comprehensive access to network traffic—including both external (north–south) and internal (east–west) communication—enhances anomaly detection, behavioural analysis, and response accuracy. The session also demonstrates how forwarding internal traffic to next-generation firewalls uncovers blind spots within the network, ensuring intrusions are detected across all areas and maximizing overall threat visibility.

Preventing Malware Entry via USB and Email

Removable media and email attachments remain common attack vectors. This workshop covers practical strategies to inspect, sanitize, and control files before they reach internal systems or users. Participants will learn how to safely manage USB usage and validate email attachments, minimizing the risk of malware infection and data compromise while maintaining normal operations and productivity.

Secure web browsing and file downloads

This session demonstrates how organizations can protect users from web-based threats during everyday browsing and file downloads. Participants will learn how web sessions and downloaded content can be controlled and inspected to reduce exposure to malicious websites, compromised files, and hidden threats, all without disrupting normal user workflows.

Do you know which vulnerable components your applications are built on?

Modern applications are built from numerous third-party and open-source components. This session highlights how hidden vulnerabilities in these components can impact application security and compliance. Participants will learn how to gain visibility into application composition and identify security risks throughout the software lifecycle, empowering organizations to take control over their application vulnerability.

Invisible. Unreachable. Secure.

This workshop focuses on reducing the attack surface by making critical services invisible and unreachable to unauthorized users. Participants will learn how to enforce strict access controls and minimize system exposure by default. The session demonstrates how limiting visibility and access at the network and service levels significantly reduces the risk of external attacks, lateral movement, and exploitation of unknown (0-day) vulnerabilities.

FOTO & VIDEO

from previous conferences