9:00 AM PT

Welcome to Cyber Risk Series: Cloud-Native to AI-Native Edition

9:05 AM PT

Advancing Security from Cloud-Native to AI-Native

As organizations move from cloud-native to AI-native architectures, the nature of cyber risk is changing. What once centered on managing an “attack surface” now requires understanding a much broader risk surface — one that spans code, identities, data, cloud services, and increasingly, AI systems and autonomous agents. The volume and speed of these risks far exceed what human teams can track, making agentic AI essential for filtering noise, identifying what truly matters, and helping teams act with focus rather than overwhelm.

In this new era, security leaders also need the ability to quantify cyber risk, communicate it clearly, and align decisions with business priorities. To support this shift, we introduce the concept of a Cloud Risk Operations Center — a unified approach to continuously understanding, measuring, and managing risk across modern cloud and AI-driven environments.

This keynote will explore how the industry must evolve to meet the AI-native future and why a move toward risk-centric, AI-assisted operations is now fundamental to securing tomorrow’s enterprises.

9:30 AM PT

Intelligent Risk Management to Scale Security for Business Growth

As organizations are focused on increasing productivity and leveraging new technologies to fuel business growth, security teams face pressure to mitigate risk and speed response to threats and attacks. In this session, learn about effective strategies to protect workloads across computing environments, including multi-cloud, on-premises, and hybrid environments, so that security is instrumental to enabling business success.

10:00 AM PT

Fireside Chat: Where Cloud Security Meets Responsible AI

As enterprises shift from cloud-native to AI-native operations, security teams must adapt to environments where code writes itself, workloads autonomously scale, and agents make decisions in real time. In this fireside chat, Qualys CTO Dilip Bachwani and CSA’s Troy Leach discuss how AI-generated code, autonomous agents, and self-orchestrating cloud systems introduce new visibility gaps—and new opportunities for intelligent defense.

They’ll explore how the CSA AI Controls Framework provides the guardrails needed to ensure these systems operate securely and responsibly, addressing cybersecurity, safety, privacy, transparency, and explainability. The conversation highlights how leaders can balance innovation with accountability, apply effective governance, and build security architectures capable of supporting an AI-native future.

10:30 AM PT

Beyond Cloud-Native: Risk Evolution in the Age of Agentic Workloads

The rapid evolution from traditional cloud-native architectures toward AI-enabled, agentic, and autonomous workloads presents new considerations for security approaches. This session explores perspectives on the shifting security landscape in AWS environments, examining how the integration of LLMs and agentic AI influences application development, service access patterns, and risk profiles. Drawing from emerging patterns and observations, we’ll discuss frameworks being considered for securing AI-native workloads while maintaining protective controls. The session will conclude with thoughts on AI marketplace dynamics and their potential security implications.

11:00 AM PT

A Defender’s Lens on AI-driven Risks

As organizations adopt agentic AI, defenders must rethink how infrastructure and cloud systems are secured. This session examines AI-driven risk from a practitioner’s perspective, focusing on the architectural realities blue teamers must contend with today ranging from development to deployment. We begin with the shift happening in the developer ecosystem with AI inside IDEs shaping code, IaC, and cloud policies. We then explore securing model weights and novel failure modes from agentic autonomy.

This session concludes with a forward-looking view on protecting agentic AI workloads and platforms. Attendees will walk away with a clear understanding of the practical steps defenders can take to secure AI-native cloud environments.

11:30 AM PT

The Next Frontier of Cloud Security

Cloud security is being reshaped by multi-cloud adoption, containerized architectures, and the rise of AI-native applications. These shifts are creating expanding attack surfaces, faster-changing workloads, and fragmented ownership across development, platform, and security teams. The challenge is no longer just identifying exposures — it’s understanding how they intersect across code, identities, data paths, and infrastructure, and doing so in environments where context can change in minutes.

This session explores the emerging trends driving this transformation and the new visibility gaps introduced by AI-driven workloads and autonomous systems. It also examines why agentic AI is becoming a foundational requirement — enabling security programs to interpret signals, correlate risk, automate routine analysis, and operate at the scale and speed modern cloud environments demand.