October 15, 2025
Empowering Security

This panel discussion will explore the implications of the NIS2 Directive and its transposition into Irish law. Experts from legal, cybersecurity, and regulatory backgrounds will discuss the challenges, opportunities, and practical steps for compliance. The session aims to provide attendees with a comprehensive understanding of how NIS2 impacts Ireland's cybersecurity landscape and what organizations need to do to align with the new requirements. 

Organizations are increasingly challenged to manage compliance across multiple domains—information security, privacy, and AI governance—each with its own standards, risks, and obligations. Yet, these management systems share significant overlap in principles, controls, and audit mechanisms. This talk explores how a unified management system can harmonize governance across these domains, leveraging common risk assessment processes, shared controls, and integrated audit practices. By aligning overlapping requirements and centralizing oversight, organizations can reduce complexity, improve efficiency, and strengthen trust. 

This panel explores the critical question of AI ownership within organisations. As AI becomes increasingly integral to business operations, understanding which team or function holds responsibility for AI development, deployment, governance, and ethics is essential. Panelists will discuss various ownership models, including centralized AI teams, distributed ownership across product and engineering, and the role of legal, security, and ethics teams. Attendees will gain insights into best practices for aligning teams, ensuring accountability, and fostering collaboration to maximize AI's impact while managing risks. 

Data poisoning, prompt injection, and model inversion are only a few of the growing attack vectors against AI. This session would analyze how attackers target AI systems and how governance frameworks such as ISO/IEC 42001 and the NIST AI RMF provide structured defenses. Participants will learn how to embed red-teaming, continuous monitoring, and technical guardrails into governance programs to strengthen resilience.