Dimitris Tsapogas

Standards for AI are moving quickly. The EU AI Act, NIST frameworks, and Cyber Resilience Act are starting to define expectations. But inside most organisations, these standards have not yet been translated into clear internal rules or enforceable controls. At the same time, agentic AI introduces systems that act, decide, and adapt in ways those standards only partially address. This panel focuses on the gap between policy and practice. It addresses how to turn emerging standards into something usable, define what is acceptable inside your organisation, and evidence control when regulators ask.

"No news is good news" has long defined security success, but AI, especially agentic systems, has changed the reality. Risk is now continuous, visible and shaped by autonomous behaviours that require constant oversight. As boards push to accelerate AI adoption, confidence depends on proving it can be done securely. This panel explores how security leaders can reposition AI security from a perceived blocker to a strategic enabler of trust, investment and business value.