Day One

• Building a Secure Foundation: Key steps and considerations for establishing data governance and security policies before premature AI rollout
• The rationale and process behind halting an enterprise-wide AI initiative to address security vulnerabilities
• The Road Ahead: Insights into the planned, security compliant, and phased approach to AI deployment and the expected progress in the coming months

Practical Takeaway: Leave with a clearer framework for evaluating where AI creates measurable operational value, where it introduces new cyber risk, and how to balance adoption with control across live projects

• Using AI to automate alert triage to reduce incident response times
• Safe implementation – checks and balances and human-in-the-loop
• Improve efficiency, costs, and analyst happiness
• Focus on high-value activities that will result in the best return on investment

Practical Takeaway: Learn how to safely deploy AI-powered threat analysis to reduce response times and free security teams to focus on higher-value activities while maintaining security control

• Keeping pace as AI reshapes risk, cost, and operational exposure
• Understand how attackers are using AI to target payments, credentials, and subcontractor workflows through phishing, impersonation, and automation
• See how lean security teams are using AI to automate detection, reduce response time, and manage growing operational load

Practical Takeaway: Leave with peer-tested approaches for identifying, prioritizing and mitigating the new cyber risks emerging from AI across payments, project delivery and third-party relationships

• Where are you seeing AI-driven threats show up first across payments, subcontractor communication, and client approvals?
• How are teams using AI in practice to reduce disruption across active projects, and where is it adding new risk or complexity?
• As AI tools scale across platforms, vendors, and workflows, how are you managing the expanding attack surface without slowing delivery or exposing the business?

Practical Takeaway: Leave with peer-tested approaches for identifying, prioritising and mitigating the new cyber risks emerging from AI across payments, project delivery and third-party relationships

• Turn cybersecurity into a behavioral issue across project, field, and office teams, not just a compliance requirement
• Build practical controls that reduce friction while addressing real risks in construction environments
• Measure what actually changes behaviour and strengthens resilience, not just training completion

Practical Takeaway: Leave with peer-tested approaches for identifying, prioritizing and mitigating the new cyber risks emerging from AI across payments, project delivery and third-party relationships

• Manage risk across vendors, platforms, and subcontractors where access to project systems creates direct exposure to delays, disruption, and data loss
• Identify where accountability breaks down across contracts and supply chains, creating gaps that attackers can exploit and operational failures can emerge
• Implement controls that protect project timelines, payment flows, and client data without slowing delivery or overloading small teams

Practical Takeaway: Leave with a practical framework for strengthening cyber and operational resilience across your supply chain, helping reduce third and fourth-party risk while protecting project continuity, commercial performance, and client trust

• Define what project, contractor, and client data should be stored, shared, or deleted across platforms and teams
• Manage privacy requirements across jurisdictions without introducing delays or operational friction
• Avoid exposing sensitive data through AI tools, collaboration platforms, and subcontractor access that puts contracts and client relationships at risk

Practical Takeaway: Leave with a practical framework for governing project and client data, reducing compliance risk while maintaining operational efficiency across teams and projects

• Connect cyber risk to payments, project delivery, and real-world consequences to drive engagement
• Explain the “why” behind controls to increase adoption across field and office teams
• Balance stronger awareness with fatigue across large, diverse workforces for successful adoption

Practical Takeaway: Getting diverse workforces to understand, care and act

• Turn cybersecurity from a compliance exercise into a practical behaviour change program across office, field and project teams
• Build security controls that work in construction environments, from mobile workforces and jobsites to shared systems and project teams
• Measure what actually changes behavior and reduces exposure, rather than relying on training completion as the only proof of progress

Practical Takeaway: Leave with a practical roadmap for embedding security into day to-day project delivery, helping teams move beyond awareness training and create behaviours that genuinely reduce cyber risk