IAM SECURE 2026 | EXECUTIVE INSIGHTS & STRATEGIC SYNTHESISCXO 1 & 2 SERIES|PAGEI AM SECURE 2026 CXO Connect Series 1Executive Insights & Strategic SynthesisEXECUTIVE BRIEFOrchestrating Cybersecurity in a Fragmented Global LandscapeSpeaker Insights • Track Rapporteurs • Overall Evaluation • Cross-Track Synthesis17 June 2026 | The Executive Centre, Makati City, PhilippinesPrepared from the speaker executive summaries and track consensus reports supplied for CXO Connect Series 1. Speaker names, titles, organizations, and presentation topics are retained as stated in the source materials where available.2

Across both CXO Connect seriesIAM SECURE 2026 | EXECUTIVE INSIGHTS & STRATEGIC SYNTHESISTitanium • Platinum • GoldJune and August 2026CXO 1 & 2 SERIES|PAGEThis document presents an individual executive brief for each of the 15 speakers across the Titanium, Platinum, and Gold tracks, followed by an overall synthesis of the event’s shared insights. Each brief identifies the speaker, designation, organization, and presentation topic, then summarizes the principal ideas and executive implications reflected in the supplied materials. The summaries are editorial condensations of the event reports, not verbatim transcripts or independent verification of claims. Titles and organizational affiliations are reproduced from the supplied reports; where the source materials use differing title or company formulations, the event- report wording is retained. The summaries should be reviewed by the relevant speakers and organizers before external publication.Purpose and editorial note The session examined how AI-enabled autonomous threats may identify weaknesses, accelerate exploitation, and adapt faster than conventional defenses can respond. The source summary highlighted a widening gap between vulnerability disclosure and remediation: attackers may exploit newly exposed weaknesses rapidly, while organizations can take considerably longer to assess and patch them. Applications, APIs, and AI-enabled services were identified as areas requiring particular attention. Lim’s presentation introduced Continuous Threat Exposure Management (CTEM) as a continuous cycle of identifying exposures, prioritizing risk, validating defenses, and improving remediation. It also emphasized that no single product or isolated control can address the full threat landscape. Organizations need coordinated risk assessment, exposure reduction, architecture-level safeguards, and response readiness.EXECUTIVE TAKEAWAY Executives should treat exposure management as a continuous business-risk process, prioritize remediation according to business impact, and measure whether defenses are validated—not simply whether tools are deployed.TITANIUM TRACK Chin Keng Lim Senior Director of Strategic Sales, ASEAN | F5 (with Westcon)Presentation:Defending the Enterprise Against Mythos-Class Autonomous Threats32732SPEAKER BRIEFSEXECUTIVE TRACKSCXO CONNECT SERIES

IAM SECURE 2026 | EXECUTIVE INSIGHTS & STRATEGIC SYNTHESISCXO 1 & 2 SERIES|PAGEGabriel TuasonAndjo CapellanTerritory Manager – Philippines | Rapid7Presentation: Head,Information Security | Energy Development Corporation (NMI)Presentation:In Command: AI-Assisted Defense in Modern SecOps Cyber Resilience for Critical Infrastructure inToday’s Evolving Threat LandscapeTuason drew on the critical-infrastructure context to distinguish traditional IT security from the resilience requirements of essential services. In operational environments, the priority is not only protecting information but sustaining availability and preventing disruptions from affecting communities, businesses, and connected services. The report emphasized that IT and operational technology (OT) are increasingly interconnected, creating dependencies that can extend the impact of an incident beyond one organization. Tuason presented a resilience approach built around anticipating disruption, withstanding attacks, recovering operations, and adapting based on lessons learned. Backups alone were described as insufficient without tested restoration and recovery. The discussion also highlighted the need for leaders to understand operational criticality and provide resources appropriate to the required security level.Capellan discussed how AI is changing security operations by helping teams analyze signals, investigate incidents, and respond more efficiently. The session framed AI as a capability that can reduce repetitive workload and help analysts prioritize threats, while recognizing that attackers are also using AI to increase the speed and sophistication of their operations. The source summary noted that modern attacks increasingly target identities, trust relationships, and connected systems—not only endpoints—and that stolen credentials and exploited vulnerabilities can move faster than traditional reactive processes. AI-enabled applications themselves also create additional exposure. The discussion therefore pointed toward proactive, intelligence-led operations that combine automation with contextual analysis, rather than relying on manual triage or isolated alerts.4EXECUTIVE TAKEAWAYEXECUTIVE TAKEAWAY Leaders should evaluate AI-assisted SecOps by its ability to improve detection, investigation, and response outcomes while retaining human validation, clear escalation rules, and oversight of AI-related risks. Boards and executives should identify essential services and dependencies, align protection with operational criticality, and regularly test the ability to restore systems and maintain continuity.Jessica BernardoSenior Solutions Architect | InfobloxPresentation: From Plain Visibility to Certainty: Building Digital Trust and Cyber Resilience in the Age of AI Bernardo addressed the difficulty of making sound security decisions as organizations expand across cloud, applications, data, AI, and interconnected environments. The source summary stressed that asset visibility is now a baseline requirement, but visibility by itself does not establish what matters most.

IAM SECURE 2026 | EXECUTIVE INSIGHTS & STRATEGIC SYNTHESISCXO 1 & 2 SERIES|PAGEMatthew MoorePrincipal Observability Strategist, APJ | Datadog (with Netsec)Moore focused on the operational complexity created by distributed applications, cloud and hybrid environments, and increasingly interconnected digital services. The source report identified fragmented context across development, security, and operations as a key obstacle: organizations may have many tools and alerts yet still lack a shared understanding of business risk. Although DevSecOps practices have brought security earlier into software development, handoffs between pre-production and production can still create gaps, and important context may be lost between teams. The session emphasized end-to-end observability and integrated data as ways to connect system behavior, performance, security signals, and operational dependencies. The objective is to reduce noise, accelerate investigation, and help teams make decisions using a common operational picture.Presentation: Digital Transformation in a Hyperconnected World: Security and Resilience at Scale5EXECUTIVE TAKEAWAYEXECUTIVE TAKEAWAY Executives should demand a business-context view of assets and exposures—one that links technical findings to critical services, dependencies, and actionable risk priorities. Leaders should reduce silos across development, security, and operations and connect observability data to business services so teams can prioritize incidents by impact and respond with shared context. Organizations also need context about asset relationships, dependencies, ownership, and exposure. Unknown assets and unmanaged dependencies can create blind spots that delay response and weaken risk decisions. The session advocated moving from simply collecting information toward actionable intelligence: understanding which systems are connected, how they support business operations, and where risk may propagate. In an AI-driven environment, this contextual understanding supports more reliable prioritization and helps organizations strengthen trust and resilience while managing complexity.Presentation:Beyond AI Governance: Closing the Data Security Gap Before BreachTan’s presentation focused on the gap between AI governance and the practical protection of information used by AI systems. As organizations introduce copilots, generative AI services, and autonomous agents, sensitive data may be ingested, processed, or redistributed across cloud services, third-party models, and automated workflows. The source summary highlighted unstructured information —such as documents, spreadsheets, reports, and knowledge repositories—as a particularly important exposure area. Policies and governance frameworks cannot reliably control data risk unless organizations know what data they hold, how it is classified, who can access it, and how it is used. The session called for a structured AI security approach built on data discovery, classification, and adaptive controls that can be implemented and demonstrated in practice.PLATINUM TRACKBrandon Tan Senior Director of Sales Engineering, APAC | Forcepoint

IAM SECURE 2026 | EXECUTIVE INSIGHTS & STRATEGIC SYNTHESISCXO 1 & 2 SERIES|PAGECountry Manager | Varonis (with Westcon)Presentation:Secure AI and the Data That Powers ItArroyo emphasized that secure and trustworthy AI adoption depends on the security and governance of the data behind AI systems. The source report identified three persistent obstacles: limited visibility into what AI tools can access, difficulty understanding the potential data exposure from compromised accounts, and inadequate detection of abnormal access or misuse. Overshared or poorly classified information can become more exposed when integrated into AI workflows, particularly across cloud repositories and collaboration environments. The discussion noted that organizations may already have data protection and auditing tools, yet incomplete classification, inconsistent participation, and unresolved findings can limit their effectiveness. The core message was to shift attention from AI applications alone to the data they consume, the permissions they inherit, and the exposure those permissions create.6Kae Arroyo Area Vice President, Sales Engineering | ExabeamPresentation:Securing the Agentic Enterprise: Redefining Insider Threat for Humans and AIIbrahim explored how organizations are moving toward environments where employees, AI agents, digital assistants, and automated systems operate side by side. This shift introduces machine identities and autonomous activity that may hold permissions comparable to those of human users. The source summary emphasized that insider risk is not limited to malicious employees: compromised credentials, legitimate access, automated workflows, and AI-driven activity can also create risk while appearing operationally normal. Traditional perimeter- and signature-based approaches may struggle to distinguish authorized behavior from misuse. AI can assist security teams by improving analysis and reducing workload, but human expertise remains necessary for validation and decisions. The session highlighted identity, behavior, visibility, and continuous monitoring as central to managing the agentic enterprise. Mohamed IbrahimEXECUTIVE TAKEAWAY Before scaling AI, leadership should establish data ownership, classification, access governance, exposure review, and monitoring across repositories and AI-connected workflows.EXECUTIVE TAKEAWAY Executives should ensure AI governance is backed by operational data controls: discover sensitive information, reduce excessive access, monitor data use, and prioritize protection according to risk.EXECUTIVE TAKEAWAY Executives should inventory and govern AI agents and machine identities, enforce least privilege, monitor behavior across human and non-human users, and assign clear ownership for autonomous systems.

IAM SECURE 2026 | EXECUTIVE INSIGHTS & STRATEGIC SYNTHESISCXO 1 & 2 SERIES|PAGEGonz GonzalesJohn Henri RalletaPresident | Cloud Security Alliance PhilippinesPresentation: Sales Engineer | Gigamon (with MEC & Msecurity)Presentation:Dela Cruz presented cyber resilience as a shared responsibility extending beyond individual organizations and national boundaries. The source summary described how cloud adoption, remote work, digital transformation, and interconnected technologies have weakened the relevance of traditional organizational perimeters. Cyber incidents can affect multiple sectors and connected entities, making isolated security practices insufficient. The session emphasized moving from a prevention-only mindset toward the ability to sustain operations, protect critical data, and recover when incidents occur. Public-private collaboration, threat-intelligence sharing, capacity building, and incident-response readiness were identified as important elements of broader resilience. The discussion positioned cooperation and preparedness as necessary complements to internal security controls in an increasingly connected digital economy.Deep Observability:Strengthening Cyber Resilience in a Complex Digital WorldTrust at Scale: Securing the Philippines’ Digital Future in an Era of AI, Cloud, and Geopolitical UncertaintyGonzales framed trust as an engineered capability that must be continuously verified, measured, and strengthened—not simply assumed. As organizations and public institutions expand digital services, cloud adoption, and AI use, the digital ecosystem grows more interconnected and exposed to cyber, operational, and geopolitical risks. The source summary described “Trust at Scale” as maintaining confidence across complex environments and stakeholder relationships. It emphasized that resilience should be deliberately designed and security outcomes made measurable and demonstrable. The discussion also connected digital trust to the Philippines’ expanding digital economy, including government services, e-wallets, online platforms, and cloud-based services. Governance, risk management, collaboration, and measurable controls were presented as important foundations for sustained confidence.GOLD TRACK7Albert Dela Cruz Co-Founder and Director | Philippine Computer Emergency Response Team (PH-CERT)Presentation:Cyber Resilience Without Borders: Strengthening National and Enterprise Defense in a FragmentedDigital WorldEXECUTIVE TAKEAWAY Executives should build trusted information-sharing relationships, define cross-organization incident coordination, strengthen recovery readiness, and treat ecosystem dependencies as part of enterprise risk.EXECUTIVE TAKEAWAY Leadership should define what trust means in measurable terms—through governance, verified controls, resilience, and transparent accountability—and connect those measures to stakeholder confidence and business continuity.

IAM SECURE 2026 | EXECUTIVE INSIGHTS & STRATEGIC SYNTHESISCXO 1 & 2 SERIES|PAGELau examined the browser as a critical workspace for employees and an emerging operating environment for AI agents. The source summary discussed highly evasive adaptive threats and the risks created when AI agents process information and perform actions at machine speed without the same skepticism as human users. Prompt injection, instruction-data confusion, and runtime exploitation can manipulate AI activity, while limited visibility makes autonomous operations difficult to monitor and control. The presentation argued that conventional network-focused defenses are not always sufficient for modern browser-based work. A browser-centric security approach was presented as a way to protect both people and agents, isolate risky activity, and support secure interaction with web applications and legacy systems. The session emphasized proactive protection and architectural safeguards alongside monitoring and response.Malek described how generative AI and phishing-as-a-service platforms lower the barriers to creating convincing, personalized social-engineering campaigns at scale. The source materials discussed a VENOM campaign targeting senior executives and demonstrated techniques such as QR-code phishing, credential harvesting, adversary-in-the-middle activity, and device-code abuse. These methods can evade conventional controls and even bypass multi-factor authentication by exploiting trust, context, and user behavior rather than relying on obvious malicious attachments or known indicators. The session emphasized that attackers can alter domains and content quickly, making static detection less reliable. Behavioral analysis—understanding normal communication patterns, relationships, and activity—was presented as a key means of identifying anomalies and reducing exposure to sophisticated email threats.Ralleta highlighted the visibility challenges created by hybrid infrastructure, encrypted traffic, AI adoption, supply-chain dependencies, and evolving regulatory expectations. The source report described how security blind spots can persist even when organizations invest in multiple cybersecurity technologies. Deep observability was presented as a way to gain a more comprehensive view of network activity across cloud, on-premises, OT, and AI-driven environments. This broader view can support threat detection, incident response, compliance, and business decisions. The presentation also stressed that executives and boards are increasingly accountable for cyber risk and need technical information translated into business outcomes. Visibility is therefore not only an operational concern; it helps leadership understand exposure, dependencies, and potential disruption.Security Consultant | Abnormal (with Netsec)Presentation: Boon Peng Lau Rahim Malek Vice President, Sales Engineering – Asia Pacific | Menlo Security (with MEC & Msecurity)Presentation:Secure Workdays: Browser Security for Humans and AgentsThe AI Arms Race in Your Inbox: How Gen AI-Powered Phishing Is Outpacing TraditionalDefenses8EXECUTIVE TAKEAWAY Executives should connect observability capabilities to business-critical services and use network-level context to identify blind spots, accelerate response, and communicate cyber risk in business terms.EXECUTIVE TAKEAWAY Executives should treat browsers and AI agents as part of the enterprise attack surface, define permitted agent actions, and ensure browser-based workflows have appropriate isolation, visibility, and controls.

IAM SECURE 2026 | EXECUTIVE INSIGHTS & STRATEGIC SYNTHESISCXO 1 & 2 SERIES|PAGECarlos TengkiatJohn Paul Richard AlarconChief Information Security Officer | Land Bank of the PhilippinesPresentation: Professor, Cybersecurity Program | De La Salle–College of Saint Benilde Alarcon’s session focused on moving from a collection of individual security controls toward a coherent security architecture that can support trust across a connected digital ecosystem. The source consensus report placed this discussion within the broader challenge of securing cloud services, digital platforms, users, applications, and data across organizational boundaries. A fragmented set of controls can leave gaps when identities, systems, and partners interact, while architecture provides a way to align security decisions with the relationships and dependencies among them. The event’s overall findings also connected this architectural perspective with continuous verification, governance, visibility, and resilience. The leadership implication is to design security into digital transformation and ensure that controls operate as an integrated system rather than as isolated point solutions.Presentation:From Security Controls to Architecture: Building Trust Across the Digital EcosystemSecuring Trust at Scale: Cyber Resilience for National Financial InfrastructureTengkiat discussed the role of cyber resilience in protecting financial infrastructure as digital banking, real-time payments, and interconnected services become increasingly important to economic activity and public confidence. The source summary highlighted how greater accessibility, interoperability, innovation, and connectivity create opportunities for financial inclusion while also expanding operational and cyber risk. Maintaining trust requires secure and reliable services that can continue operating despite disruption. The presentation emphasized collaboration between public and private stakeholders and referred to sector-wide initiatives and information sharing as part of strengthening the financial ecosystem. The core concern was not only the security of an individual institution but also the resilience of connected payment systems and services on which customers and businesses depend.9EXECUTIVE TAKEAWAYEXECUTIVE TAKEAWAY Executives should avoid treating email filtering or MFA as complete safeguards; strengthen identity protections, behavioral detection, verification of unusual requests, and executive-level awareness of business email compromise. Financial-sector leaders should prioritize continuity of critical services, coordinate across interconnected institutions, and integrate cyber risk, incident response, and recovery planning into financial infrastructure governance.EXECUTIVE TAKEAWAY Executives should require security architecture to map to business services and ecosystem dependencies, with consistent identity, access, data, and resilience principles across platforms and partners.

IAM SECURE 2026 | EXECUTIVE INSIGHTS & STRATEGIC SYNTHESISCXO 1 & 2 SERIES|PAGEAcross the 15 presentations in the Titanium, Platinum, and Gold tracks, a consistent message emerged: cybersecurity is a strategic business, governance, and resilience responsibility—not solely a technical function. The discussions examined an environment shaped by AI adoption, cloud and hybrid infrastructure, autonomous systems, interconnected supply chains, critical services, and rapidly evolving cyber threats. These developments create new opportunities while expanding the attack surface and making organizational dependencies more complex.AI security begins with understanding the data AI systems can access, how it is classified, who owns it, and whether permissions and usage are appropriate. Governance must be supported by operational controls and monitoring. Telemetry and asset inventories are insufficient without understanding dependencies, business criticality, and potential impact. Observability and integrated intelligence should support faster, better- informed decisions. Compromised credentials, insider activity, phishing, and autonomous agents may operate through legitimate access. Continuous verification, least privilege, and behavioral analysis are needed across people and machine identities. Organizations need to anticipate disruption, withstand incidents, recover critical services, and adapt. Tested recovery and continuity plans are essential, particularly for critical infrastructure and financial services. Fragmented controls and siloed teams create gaps. Security should be embedded across development, operations, data, cloud, browsers, AI workflows, and third-party relationships. Fragmented controls and siloed teams create gaps. Security should be embedded across development, operations, data, cloud, browsers, AI workflows, and third-party relationships.Overall executive synthesis Identify critical business services, sensitive data, AI use cases, key identities, and third-party dependencies. Assign executive ownership for cyber risk, data protection, AI oversight, incident response, and business continuity. Review data classification and access, including AI agents and machine identities; reduce unnecessary permissions and exposure.Six themes across the speakers1. Protect the data that powers AI.3. Move from visibility to actionable context.2. Treat identity and behavior as central security signals.4. Build resilience beyond prevention.5. Integrate security into architecture and operations.6. Make trust and collaboration measurable.Executive priorities emerging from the event10

IAM SECURE 2026 | EXECUTIVE INSIGHTS & STRATEGIC SYNTHESISCXO 1 & 2 SERIES|PAGEThe collective outlook from CXO Connect Series 1 is that resilience and trust must be deliberately engineered into the digital enterprise. The executive challenge is to translate strategy into operating discipline: protect data and identities, connect technical signals to business context, align teams and architecture, test the ability to sustain and restore essential services, and collaborate across the ecosystem. Progress should be judged not only by controls deployed, but by the organization’s demonstrated ability to protect critical outcomes and maintain trust when disruption occurs.I AM SECURE 2026 CXO Connect Series 1 | 17 June 2026 | The Executive Centre, Makati City, Philippines. Theme: “Orchestrating Cybersecurity in a Fragmented Global Landscape.” This document synthesizes the speaker executive summaries and track consensus reports supplied for the event. It is not an independent audit, survey, or external threat assessment. Speaker titles and organization names follow the provided event materials and should be confirmed with each speaker before publication.Closing perspectiveEvent details and source note11Improve context across security telemetry by mapping assets and alerts to business services and operational dependencies. Test incident response and recovery plans through cross-functional exercises, including communications and external coordination. Use a concise executive scorecard that tracks exposure reduction, response and recovery readiness, control enforcement, and overdue high-risk actions. Strengthen trusted information-sharing channels and coordinate with relevant industry, government, and ecosystem partners.

IAM SECURE 2026 | EXECUTIVE INSIGHTS & STRATEGIC SYNTHESISCXO 1 & 2 SERIES|PAGEI AM SECURE 2026 CXO Connect SeriesExecutive Insights & Strategic SynthesisEXECUTIVE BRIEFEngineering Cyber Resilience in the Age of Intelligent and Autonomous ThreatsSpeaker Insights • Track Consensus • Overall Evaluation • Cross-Track Synthesis5August 2026 | The Executive Centre, Makati City, PhilippinesPrepared from the speaker executive summaries and track consensus reports supplied for CXO Connect Series 2. Speaker names, titles, organizations, and presentation topics are retained as stated in the source materials where available.12

IAM SECURE 2026 | EXECUTIVE INSIGHTS & STRATEGIC SYNTHESISCXO 1 & 2 SERIES|PAGEThis chapter presents the executive insights from CXO Connect Series 2, held on 5 August 2026, under the theme “Engineering Cyber Resilience in the Age of Intelligent and Autonomous Threats.” It consolidates the supplied speaker executive outlooks, track consensus reports, and event press release into speaker briefs and a cross-track synthesis. The summaries are editorial condensations of the supplied materials, not verbatim transcripts or independent verification of claims. Speaker names, roles, organizations, and presentation topics are retained as stated in the source documents. The event materials describe three executive tracks— Titanium, Platinum, and Gold—with additional guest perspectives spanning governance, leadership, critical infrastructure, and public-private collaboration.Purpose and editorial noteKothari examined how AI is changing threat actors’ capabilities, tools, and attack methods, while also creating opportunities for defenders. The source materials stress the need to reassess existing defenses as attack velocity and sophistication evolve, and to pair technology with operational readiness.Molloy’s session focused on the shrinking window between compromise and impact as attackers use AI to increase speed and scale. The discussion emphasized integrated detection, automated response, rapid containment, and operational continuity, shifting the objective from preventing every intrusion to limiting its consequences.TITANIUM TRACKPeter MolloyMayuresh KothariAdvisory Solution Principal | Sophos (with WSI)Presentation:Cyber Security in the Age of AI: Threat Actors, Tools and Defenses Chief Growth Officer | ViewQwestPresentation:Detection to Containment: Building Resilient Enterprises When Threats Move at Machine Speed13EXECUTIVE TAKEAWAYEXECUTIVE TAKEAWAY Build and test detection-to-containment capabilities, reduce response latency, and connect security operations to business continuity. Regularly reassess controls against AI-enabled threats and ensure security teams can detect, investigate, and respond at the pace incidents demand.

IAM SECURE 2026 | EXECUTIVE INSIGHTS & STRATEGIC SYNTHESISCXO 1 & 2 SERIES|PAGEField CISO and Principal CXO Adviser, Chief Cybersecurity Evangelist | PLDT Enterprise and ePLDT Liao addressed the gap between identifying vulnerabilities and applying effective remediation. The session highlighted AI-powered virtual patching as a way to reduce exposure while permanent fixes are developed and deployed, with prioritization tied to risk and operational constraints.Bernardino’s guest perspective considered the intersection of AI adoption, digital transformation, and cybersecurity. The materials frame AI as both a business opportunity and a source of new exposure, requiring security strategy to evolve alongside digital initiatives.Castillo focused on securing organizational AI adoption across its lifecycle. The session emphasized the need to understand AI-related risks and apply coordinated security controls, governance, and visibility as AI capabilities become embedded in enterprise operations.PLATINUM TRACKPresentation:Digital Crossroads of AI and Cyber Senior Manager, Systems Engineering | Fortinet (with VST ECS)Presentation:Securing Your AI Journey Practice Lead, Machine Identity and Access Management | ArconPresentation:Beyond Point Products: Building Cyber Resilience Through Machine Identity Management14 Senior Solutions Engineer | TrendAI (with VST ECS)Presentation:Closing the Gap Between Vulnerability Discovery and AI-Powered Virtual PatchingUlysses LiaoAlexis BernardinoNap CastilloVigneshkumar KathiravanEXECUTIVE TAKEAWAYEXECUTIVE TAKEAWAYEXECUTIVE TAKEAWAY Shorten the interval between vulnerability discovery and risk reduction; use exposure-based prioritization and validate interim protections. Integrate cybersecurity considerations into AI and digital transformation decisions, with clear accountability for risk and resilience. Make security and governance part of AI planning, deployment, and ongoing oversight rather than treating them as a later-stage add-on.

IAM SECURE 2026 | EXECUTIVE INSIGHTS & STRATEGIC SYNTHESISCXO 1 & 2 SERIES|PAGEJulius GerolaPhilip CasanovaRookie NagtalonCountry Sales Manager | BeyondTrust (with Westcon)Presentation:From Shadow AI to Agent InventoryBoard of Trustees | CIO PhilippinesPresentation:Beyond Technology: The Executive Playbook for Cyber ResilienceCybersecurity Consulting Partner | SGVCasanova examined how AI affects cybersecurity operations, workforce capabilities, and enterprise risk. The materials emphasized that AI should augment rather than replace cybersecurity professionals; human validation, critical thinking, skills development, governance, and strong cybersecurity fundamentals remain essential.Presentation:The Human Edge: Leadership and Workforce Readiness in the Age of Intelligent Threats Nagtalon framed cyber resilience as an executive and organizational responsibility that extends beyond technology deployment. The session emphasized leadership, governance, preparedness, and coordinated action as essential components of the resilience agenda.Gerola addressed the risks associated with unsanctioned AI use and the emergence of autonomous AI agents in enterprise environments. The session emphasized visibility into AI tools and agents, governance of their actions, and controls that address identities and access.GOLD TRACK15Kathiravan highlighted machine identities as a growing component of the enterprise attack surface. The session addressed the risks created by non-human identities, credentials, and access privileges, and the importance of governing them across systems and workflows.EXECUTIVE TAKEAWAYEXECUTIVE TAKEAWAYEXECUTIVE TAKEAWAY Inventory machine identities, assign ownership, control credentials and privileges, and continuously review access for non-human accounts. Translate cyber risk into executive decisions, define accountability, and prepare the organization to withstand and recover from disruption. Invest in workforce readiness and continuous learning, maintain human accountability for AI-supported decisions, and strengthen identity, vulnerability, and data-security fundamentals.EXECUTIVE TAKEAWAY Establish visibility into AI applications and agents, define permitted use, and govern agent identities, privileges, and activity.

IAM SECURE 2026 | EXECUTIVE INSIGHTS & STRATEGIC SYNTHESISCXO 1 & 2 SERIES|PAGEPresentation: Beyond Compliance: Executive Oversight in the Age of Adaptive Threats Oteyza positioned cybersecurity as a strategic business and governance responsibility rather than solely a technical or compliance function. The session discussed adaptive defense, executive and board oversight, meaningful metrics, internal audit, accountability, and continuous improvement. It also emphasized that compliance is a foundation, not the endpoint, of resilience.Enggay’s session addressed the role of executive leadership in shaping a cyber-resilient digital environment. The materials place leadership, organizational readiness, governance, and sustained attention to cyber risk at the center of resilience.Melanie OteyzaCalix EnggaySenior Vice President and Chief Audit Executive | Meralco Committee Co-Chair for Membership, ISOG; Former Board of Trustee, ISACA Manila ChapterPresentation:Executive Leadership for a Cyber-Resilient Digital Future16Col. Roland Ong Deputy Brigade Commander, 1503rd Ready Reserve Infantry Brigade, Philippine Army Reserve Command | Armed Forces of the PhilippinesPresentation:Strengthening Public-Private CollaborationOng’s guest perspective focused on collaboration between public institutions and private organizations in addressing cybersecurity and resilience challenges. The materials highlight coordinated preparedness, communication, and shared responsibility across sectors.EXECUTIVE TAKEAWAY Build trusted coordination channels and clarify roles for information-sharing, preparedness, and response across public- and private-sector partners.EXECUTIVE TAKEAWAYEXECUTIVE TAKEAWAY Integrate cyber risk into enterprise governance, define executive accountability, and use meaningful metrics and independent assurance to evaluate resilience. Make cyber resilience a continuing leadership priority supported by clear governance, organizational alignment, and sustained capability-building.

IAM SECURE 2026 | EXECUTIVE INSIGHTS & STRATEGIC SYNTHESISCXO 1 & 2 SERIES|PAGE17Across the Titanium, Platinum, and Gold tracks, CXO Connect Series 2 presented cyber resilience as an enterprise capability for anticipating, containing, recovering from, and adapting to intelligent and increasingly autonomous threats. The sessions connected technical controls with executive governance, identity and access management, operational response, AI oversight, workforce readiness, and cross- sector cooperation.Seventhemes across the speakersOverall executive synthesis________________________________________________________________________________________________The discussions emphasized that AI-enabled threats can compress the time available to detect and respond. Organizations need integrated monitoring, clear escalation, automated response where appropriate, and tested containment procedures that protect critical operations. As services and AI agents operate through machine identities, credentials and privileges become important sources of exposure. Identity inventories, ownership, least privilege, credential protection, and ongoing access review support resilience. Shadow AI and agentic systems create visibility, data-handling, and access-control challenges. Leaders need inventories of AI applications and agents, defined acceptable use, accountable owners, and controls over the identities and actions of non-human systems. The materials emphasized prioritizing vulnerabilities by risk and reducing exposure while remediation is underway. Virtual patching and other interim safeguards should be validated and linked to a process for permanent remediation. Compliance alone does not establish resilience. Board and executive oversight, clear accountability, risk-informed resource allocation, meaningful performance measures, internal assurance, and continuous improvement help connect cybersecurity to business outcomes. AI adoption requires workforce development, organizational readiness, and human oversight. AI can support cybersecurity work, but judgment, validation, accountability, and strong foundational controls remain important. Cyber resilience extends beyond individual organizations. Trusted partnerships, defined coordination roles, information-sharing, and preparedness across sectors support a more coordinated response to shared risks.1. Engineer rapid detection, response, and containment.3. Treat machine identity as a core security domain.2. Govern AI applications and autonomous agents.4. Reduce exposure between vulnerability discovery and remediation.5. Make cyber resilience an executive governance responsibility.6. Prepare people and organizations for AI-enabled change.7. Strengthen public-private coordination and ecosystem readiness.

IAM SECURE 2026 | EXECUTIVE INSIGHTS & STRATEGIC SYNTHESISCXO 1 & 2 SERIES|PAGECXO Connect Series 2’s central message is that resilience must be deliberately engineered across technology, identity, people, processes, governance, and partnerships. The executive task is to translate that principle into measurable readiness: knowing what must be protected, assigning responsibility, reducing exposure, containing incidents quickly, and sustaining critical operations while adapting to evolving threats.I AM SECURE 2026 CXO Connect Series 2 | 5 August 2026 | The Executive Centre, Makati City, Philippines. Theme: “Engineering Cyber Resilience in the Age of Intelligent and Autonomous Threats.” This chapter was prepared from the CXO2 press release, supplied speaker executive outlooks, and track consensus reports.Closing perspectiveEvent details and source note18Identify critical business services, key systems, sensitive data, AI applications, autonomous agents, and third-party dependencies. Assign accountable owners for AI governance, cyber risk, machine identities, incident response, and business continuity. Review identity and access controls for human and non-human accounts, including credential management and least privilege. Measure the time required to detect, investigate, contain, and recover from incidents; exercise these capabilities against realistic scenarios. Prioritize vulnerabilities and exposures according to business impact, and track interim safeguards through permanent remediation. Establish an executive cyber-resilience scorecard covering exposure, response readiness, recovery capability, governance, and overdue high-risk actions. Assess workforce readiness for AI-enabled environments and sustain continuous learning, human validation, and clear accountability. Maintain trusted coordination arrangements with relevant public- and private-sector partners.Executive priorities emerging from the event

IAM SECURE 2026 | EXECUTIVE INSIGHTS & STRATEGIC SYNTHESISCXO 1 & 2 SERIES|PAGEThe following contributors are credited in the supplied track consensus reports and speaker materials. Rapporteur assignments are listed by track. The overall evaluators are identified separately to reflect their event-wide review and content leadership roles.Rapporteurs and Overall Evaluators Titanium Platinum GoldJoseph Joekaven Ramizares, MBA Danilo I. M. Balaysoche, MBA Charlene Gay B. Pablo, MSHM Instructor IV, Lyceum of the Philippines- Manila Assistant Professor 3, Lyceum of the Philippines- Manila Assistant Professor 4, Lyceum of the Philippines- Manila President, ISOG | Lead Curator of the I AM SECURE 2026 Program; approver of session topics,presentation decks, and content direction CEO, XMS| I AM SECURE Partner; session rapporteur, session design, and audience engagementcurator. Overall evaluation and editorial review: Engr. Chito Jacinto and Xialeemar Valdeavilla, MBA. Alvin Punsalan, MBA Vice President, ISOG | Deputy Curator of the I AM SECURE 2026 Program; approver of session topics,presentation decks, and content directionTrack rapporteursOverall evaluatorsTrackRapporteurDesignation and Organization19Engr. Chito Jacinto, MBAXialeemar Valdeavilla, MBA

W E B S I T EL I N K E D I NF A C E B O O KY O U T U B EStay Connected Through Our Social Media ChannelsStakeholders & AlliancesO r g a n i z at i o n a l A l l i a n c e sI n s t i t u t i o n a l A l l i a n c e sT i t a n i u m S p o n s o r sP l at i n u m S p o n s o r sG o l d S p o n s o r sM e d i a N e t w o r k