Meet-ups area

Meet-up | Wednesday, October 7 | 3.00 PM - 3.30 PM | Meet-ups area

This is your first time attending the Assises, the opening session has just ended, and you might be wondering where to start?

During this session, you’ll discover best practices for optimizing your schedule, getting to know the Grimaldi Forum’s venues better, and making the most of the highlights, including the evening events.

It will also be an opportunity for new participants to connect with one another, where you can ask questions, share your impressions, and start building relationships. Join us!

Speaker:

• Loïs Samain, Group Cybersecurity Strategy Manager - RATP

Meet-up | Wednesday, October 7 | 4.00 PM - 4.45 PM | Meet-ups area

NIS2 redefines cybersecurity requirements for many organizations and places resilience at the heart of strategic priorities.

While some companies are directly subject to the directive, many non-subject entities are nonetheless affected because they are customers, suppliers, and partners of subject entities, making the security of these ecosystems a collective challenge.

Governance, executive accountability, third-party management, and risk control: specialized attorneys and industry experts will share their perspectives to analyze the concrete impacts of NIS2 and discuss the keys to pragmatic implementation.

A discussion to understand how to transform a regulatory obligation into a lever for enhancing cyber resilience.

Speakers:

• Victor Chauve - Derriennic Associés
• Clara Payan - Derrienic Associés
• Paul Richiardi, Group CISO - Baccarat

Meet-up | Thursday, October 8 | 10.00 AM - 10.45 AM | Meet-ups area

The Cyber Resilience Act and the AI Act are no longer merely theoretical regulatory topics; behind the legislation lies a single reality: increased requirements for evidence, traceability, and lifecycle management, with a clear shift in responsibility upstream.

This meet-up offers a highly practical look at what is changing today and what needs to be anticipated to implement these regulations effectively tomorrow:

• procurement and competitive bidding
• deployment and operations
• lifecycle management (patching, AI, misuse, updates)
• risk allocation among software vendors, system integrators, and customers

Objective: to provide concrete guidance on moving from understanding the regulations to their operational implementation within organizations.

Speakers:

• Garance Mathias, Advocate at the Paris Court of Appeal
• Loïs Samain, Group Cybersecurity Strategy Manager - RATP

Meet-up | Thursday, October 8 | 11.00 AM - 11.45 AM | Meet-ups area

The quantum threat is no longer a future concern. How can you prepare for it in practical terms? Where do you start? What are the priorities?

Through FDJ UNITED’s experience, discover the key steps for building a post-quantum roadmap: governance, risk analysis, inventory of cryptographic uses, vendor management, and initial technology choices.

An interactive and practical discussion that will equip you with concrete actions to implement in your organization.

Speaker:

• Bertrand Le Piolot, Head of Cybersecurity - La Française des Jeux Group

Moderator: Fabrice Deblock, journalist and expert in digital transformation

Meet-up | Thursday, October 8 | 12.00 PM - 12.45 PM | Meet-ups area

AI is already profoundly transforming SOCs. Noise reduction, alert prioritization, correlation, investigations, and report generation: the benefits are real. But this evolution also blurs the line between individual assistance and collective processes.

As a result, trust has become a central issue. It determines the distribution of roles and responsibilities between operators and agents, as well as the levels of delegation and autonomy granted to the latter. Through feedback from projects conducted alongside critical infrastructure operators and key players in cybersecurity monitoring, discover the key lessons learned from integrating agent-based systems into SOC tools and processes: architectural choices, human-AI collaboration mechanisms, levels of autonomy, traceability, safeguards, and decision control.

Speakers:

• Paul Labrogère, CEO - IRT SystemX
• Reda Yaich, Head of Cybersecurity & Safety - IRT SystemX

Partner Meet-up x ECSO | Thursday, October 8 | 2.00 PM - 2.45 PM | Meet-ups area

The revision of the Cybersecurity Act marks a new milestone in securing the ICT supply chain. For CISOs, the challenge is no longer just to understand regulatory changes, but to assess their concrete impacts on supplier evaluation, contractual requirements, and risk management throughout the supply chain.

Through scenario-based exercises and peer discussions, this meet-up will help participants decipher the key changes in the legislation and their operational implications. This participatory format will allow attendees to compare practices, share insights, and leave with concrete guidance on a topic that is set to shape cybersecurity strategies for the long term.

Speaker:

• Claudia Comandini, Manager for Policy Analysis and Outreach - ECSO

Meet-up | Thursday, October 8 | 4.00 PM - 4.45 PM | Meet-ups area

When faced with a cyberattack, filing a complaint is often seen as a complex process whose benefits are not always clearly understood. Yet it is a key component of crisis management and protecting the organization’s interests.

This session will provide decision-makers with insight into the conditions, procedures, and consequences of filing a complaint. Who can act on behalf of the company? What are the legal and operational implications of this process? What role does it play in compensation mechanisms and the requirements of cyber insurance policies? These and other questions will be addressed through a practical and operational analysis.

Speakers:

• Myriam Quéméner, Magistrate
• Garance Mathias, Advocate at the Paris Court of Appeal

Partner Meet-up x CLUB EBIOS | Friday, October 9 | 9.30 AM - 10.15 AM | Meet-ups area

Faced with the explosive growth in demand for risk analysis and the scarcity of expertise, AI is making its way into EBIOS RM processes. From preparing workshops to formalizing scenarios and producing deliverables: to what extent can it truly support the analyst?

Drawing on concrete real-world experience, this session will present the observed benefits, the limitations encountered, and the essential precautions for integrating AI without losing control of the analysis.

The goal is not to replace the expert, but to enable them to devote more time to what really matters: understanding, evaluating, and deciding.

Speakers:

• Ian Grispan, Head of the Practitioners’ Council - Club EBIOS
• Jean Olive, Vice President - Club EBIOS