Round tables discussions

Round table | Wednesday, October 7 | 5.00 PM - 5.45 PM | Room: Bosio 2

As a form of organized and international crime, cybercrime requires comprehensive and targeted responses from law enforcement and judicial authorities. This is the very purpose of this roundtable, which brings together high-level experts to analyze the strategies implemented to dismantle these cybercriminal networks. Both the Anti-Cybercrime Office (Ofac) and Section J3 of the Paris Public Prosecutor’s Office will outline their strategies for international cooperation, which have led to numerous arrests. These specialists will present landmark cases that also highlight the importance of international cooperation between public and private actors, such as businesses, to strengthen the fight against this scourge.

This roundtable will provide CISOs with an opportunity to gain insight, through shared experiences and open discussion, into the necessity of involving law enforcement and judicial authorities in the event of a cyber crisis.

Speakers:

• Johanna Brousse, Deputy Prosecutor, Head of the Cybercrime Division of the Paris Public Prosecutor’s Office
• Flore Mevel, Judge in the Cybercrime Division of the Paris Public Prosecutor’s Office (J3)
• Nicolas Guidoux, Head of the Cybercrime Unit / DNPJ

Moderators:

• Myriam Quéméner, Magistrate
• Garance Mathias, Advocate at the Paris Court of Appeal

Round table | Wednesday, October 7 | 5.00 PM - 5.45 PM | Room: Bosio 1

For a long time, cybersecurity was viewed as a technical matter: a protective mechanism, a risk to be contained. The fragmentation of the world has changed the landscape. Tensions between blocs, divergent regulations, and technological dependencies that have become points of leverage, geopolitics has now moved to the heart of information systems, and with it, cybersecurity is taking on a new status. It no longer merely protects the company: it determines its ability to operate, to enter regulated markets, to build value, and to earn the trust of its partners. From a defensive concern, it has become a driver of overall performance.

What kind of shift is underway? How can we reinforce this dynamic rather than simply endure it? And how can we transform today’s geopolitical landscape from a threat to be weathered into a field to be mastered and anticipated?

Decision-makers and security leaders will shed light on this shift: how to interpret geopolitical signals before they become constraints, turn regulatory requirements into sales pitches, and make a well-managed cybersecurity posture a driver of growth. In short, how to transform the world’s complexity into an operational advantage.

Speakers:

• Véronique Bardet, Chief Information Security Officer (CISO) - Pierre Fabre
• Sébastien Blard, Head of Cybersecurity - Renault Group

Moderator: Mélanie Bénard-Crozat, Editor-in-Chief - S&D Magazine and Impact for the Future

Partner Round table x ECSO | Wednesday, October 7 | 5.00 PM - 5.45 PM | Room: Auric 2

Europe has demonstrated its ability to shape the regulatory framework for cybersecurity. The challenge now is to translate this leadership into technological, industrial, and operational capabilities. Against a backdrop of geopolitical tensions, the rise of artificial intelligence, and growing strategic dependencies, cybersecurity has become a matter not only of protection but also of competitiveness, resilience, and sovereignty.

How can European institutions, national authorities, industry leaders, and the entire cybersecurity ecosystem strengthen their cooperation to build a safer, more innovative, and more strategically capable Europe? This roundtable will bring together representatives from these various stakeholders to exchange perspectives and identify the drivers of a European ambition that goes beyond regulation alone to build a genuine capacity for action.

Speaker:

• Frank Van Caenegem, Chief Information Security Officer (CISO) - Schneider Electric and Board Member of CESIN

Moderator: Joanna Świątkowska, Secretary General - ECSO

Thursday, October 8 | 2.00 PM - 4.50 PM | Room: Colette

The insights from the Before come to life at the heart of the Assises. Community members serve as ambassadors for the committees’ work by sharing the key ideas, recommendations, and emerging trends identified during the Before.

From Ambition to Action: The New Priorities in Cybersecurity Strategy

Cybersecurity is now a key issue for governance and competitiveness. Faced with national ambitions, economic constraints, innovation, sovereignty, and resilience, organizations must make choices. This report aims to help decision-makers develop a cybersecurity strategy that balances ambition with on-the-ground realities.

Speakers: Alain Bouillé, Executive Director of CESIN | Florence Puybareau, Director of Clusif

Staying in Control Against Tomorrow's Threats

Artificial intelligence and the rise of cyberattacks are profoundly transforming the technological landscape. In light of these new dependencies, this report highlights the key findings of the commissions to help organizations strengthen their resilience and preserve their decision-making capacity.

Speakers: Anne Doré, CEO and Founder - ADHEL | Maricela Pelegrin-Bomel, CISO - Etablissement Français du Sang

Looking Ahead: Decoding the New Front Lines of Cybersecurity

Threats are no longer limited to cyberattacks. Geopolitics, regulation, and influence are redefining the risks organizations face. This report provides insights for incorporating these new challenges into a strategy for informed decision-making.

Speakers: Mélanie Benard-Crozat, Editor in Chief - S&D Magazine et Impact for the future | Eric Singer, CISO - Comité Editorial Global Security Mag

Partner Round table x CLUSIF | Friday, October 9 | 9.30 AM - 10.15 AM | Room: Auric 3

Vulnerability management is often seen as a matter of tools and patches. In reality, it has become one of the most fundamental issues in cybersecurity today, at the intersection of technical, organizational, and geopolitical challenges. On the technical front, the pace of change is unprecedented. The volume of disclosed vulnerabilities is skyrocketing, while the “time to exploit” continues to shrink, driven by automation and artificial intelligence. Identifying vulnerabilities that are actually exploitable, prioritizing them, and taking action before the attacker does is now a major challenge.

But the difficulty is just as much organizational. A vulnerability cannot be addressed solely based on a CVSS score: its criticality depends on the business lines, processes, technical dependencies, and operational constraints of each organization.

Finally, vulnerability management has become a matter of sovereignty. Who discovers vulnerabilities? Who assesses them? Who decides whether to disclose them? On which standards is global trust based? The uncertainties that have arisen regarding the funding of the CVE program have served as a reminder that these mechanisms, often viewed as invisible infrastructure, are in fact critical common goods upon which much of international cybersecurity depends.

This roundtable will provide an opportunity to share Clusif’s work on this topic, which has become central to all organizations, to compare experts’ perspectives, and to explore a truly integrated approach to vulnerability management, aimed at achieving more effective and resilient cybersecurity.

Speakers:

• Odile Duthil, Head of Cybersecurity - Caisse des Dépôts Group and President of CLUSIF
• Michel Dubois, Treasurer of CLUSIF, Scientific and Technical Director - La Poste Group

Moderator: Loïc Guézo, Vice President - CLUSIF

Round table | Friday, October 9 | 10.30 AM - 11.15 AM | Room: Auric 2

Artificial intelligence isn’t just transforming tools, it’s redefining cybersecurity roles. As attackers gain speed and capability thanks to AI, cybersecurity teams must also evolve: adopting new ways of working, automating tasks, making real-time decisions, building new skills, and taking on new responsibilities.

How can organizations adapt without losing control? To what extent should automation be implemented? What skills should be developed to remain effective in a world where machine time is gradually replacing human time? Drawing on concrete real-world experiences, this roundtable discussion will explore the transformations that are already reshaping cybersecurity roles. Translated with DeepL.com (free version)

Speakers:

• Vincent Lefret, Group CISO - Coopérative U and board member of CESIN
• Nicolas Vielliard, Group CISO - Danone

Moderators: Fabrice Deblock, journalist and expert in digital transformation

Round table | Friday, October 9 | 3.00 PM - 3.45 PM | Room: Bosio 1

Innovation is accelerating across all organizations: AI, new services, experiments, partnerships with startups… Faced with this momentum, cybersecurity teams often encounter the same challenge: ensuring security without slowing things down. How can we support business units from the earliest stages of a project? What safeguards should be put in place without hindering agility? And how can we strike the right balance between risk-taking, innovation, and security? Drawing on real-world experiences, this roundtable discussion will explore new ways to make cybersecurity a true partner in innovation and to forge new relationships with business units.

Speakers:

• Odile Duthil, Head of Cybersecurity - Caisse des Dépôts Group and President of CLUSIF
• Loïs Samain, Head of Group Cybersecurity Strategy - RATP

Moderators: Christofer Ciminelli, Co-founder of Orso Media and the media outlet Le Switch

Round table | Friday, October 9 | 3.00 PM - 3.45 PM | Room: Auric 3

Not all crises are the same. A cyberattack, the failure of a critical supplier, or a kill switch do not require the same responses or the same level of investment.

How do we define the expected level of resilience? To what extent should an organization invest in capabilities that will remain inactive 99.99% of the time?

Has dependence on non-European technologies become a risk in its own right? Finally, how can an organization’s resilience be measured in practical terms?

Addressing these questions, several CISOs will share their decisions, trade-offs, and lessons learned. We will also discuss the Digital Resilience Index (IRN), a tool designed to objectively assess organizations’ level of preparedness and to spark a debate on how to evaluate resilience.

Speakers:

• Laurent Amsel, Group CISO - ENGIE
• Arnaud Martin, Director of Operational Risk - Caisse des Dépôts Group

Moderators: Véronique Loquet, cybersecurity expert

Round table | Friday, October 9 | 3.00 PM - 3.45 PM | Room: Auric 2

October 2025. The break-in at the Louvre makes headlines. Initially, it was not a cyber crisis. But very quickly, rumors, misinformation, questions about a possible cyberattack, and media coverage turned the event into a crisis in which the CISO played a pivotal role.

One year after this event, Christophe Delpierre reflects for the first time on building a cybersecurity strategy grounded in humility, trust, and the commitment of senior leadership, and one conviction: to defend more effectively, you must learn to think like an attacker.

Working alongside a Red Team, he will share how this collaboration between strategic vision and an offensive approach makes it possible to identify real vulnerabilities, strengthen the resilience of the supply chain, challenge preconceived notions, and sustainably improve the cybersecurity posture of an institution as iconic as the Louvre.

Speakers:

• Christophe Delpierre, Head of Information Systems Security - Louvre Museum
• Jérémy Nedjar, Founder - L-XPLOIT Cyber Experts

Moderator: Christophe Chesneau, President of Opteam DSI and member of the CIP