Cloud & Cyber & Security Expo 2027

Attendees, exhibitors & solutions

Who this event is for

Industry trends

Key trends shaping this market and its wider industry.

Arrival airports

Choose from the following airports, with convenient access to the event and venue.

Hotel tiers

A range of accommodation options near the venue and across key areas.

Local transport

Get around the city with these convenient transport options.

Frequently asked

Glossary

1

Zero Trust architecture

A security model that removes implicit trust from the network perimeter and verifies every user, device and workload request. At a cloud security show it is the frame buyers use when comparing identity-aware proxies, micro-segmentation and continuous verification tools.

2

Identity and Access Management (IAM)

The policies and platforms that decide who can reach which system, and under what conditions. Cloud IAM conversations focus on least privilege, role sprawl across AWS, Azure and Google Cloud, and lifecycle automation for joiners, movers and leavers.

3

Multi-factor authentication (MFA) and phishing-resistant credentials

Login controls that require more than a password, increasingly built on FIDO2 passkeys or hardware tokens. Buyers evaluate MFA against helpdesk load and against credential-phishing attacks that defeat SMS or push-based prompts.

4

Privileged Access Management (PAM)

Vaulting, session brokering and just-in-time elevation for administrator and service accounts. Common evaluation points are secrets rotation, session recording for audit, and how well the tool covers cloud control planes as well as on-premise servers.

5

Security Information and Event Management (SIEM)

Centralised log collection, correlation and alerting. Cloud-era SIEM buying weighs ingestion cost, detection content quality and how much tuning is needed to keep noise down for a small security team.

6

SOAR (Security Orchestration, Automation and Response)

Playbook automation that links detection tools to response actions such as isolating an endpoint or disabling an account. Teams compare it on integration breadth and on how much analyst time each playbook actually removes.

7

Extended Detection and Response (XDR)

A product category that correlates telemetry across endpoint, identity, email, network and cloud workloads to surface incidents rather than isolated alerts. Differentiation usually lies in native sensor coverage versus third-party integrations.

8

Managed detection and response (MDR)

An outsourced service combining detection technology with a human analyst team on call. It is a common route for mid-sized organisations that cannot staff a 24/7 internal security operations centre.

9

Security Operations Centre (SOC)

The team, process and tooling stack that monitors and responds to incidents. Show-floor discussions cover tiering models, runbooks, mean time to detect and how automation changes analyst headcount planning.

10

CNAPP (Cloud-Native Application Protection Platform)

A consolidated platform spanning cloud posture, workload protection, container and Kubernetes security, and infrastructure-as-code scanning. Buyers weigh consolidation savings against depth in each individual module.

11

CSPM and CWPP

Cloud Security Posture Management finds misconfigurations and drift against benchmarks; Cloud Workload Protection Platform secures running compute. They are often bought together, and the split matters when comparing vendor scope.

12

SASE and SSE

Secure Access Service Edge converges networking and security at the cloud edge; Security Service Edge is the security-only subset covering secure web gateway, cloud access security broker and zero trust network access. Enterprise buyers often migrate toward SSE first.

13

Data Loss Prevention (DLP)

Controls that detect and block sensitive data leaving an organisation, including through SaaS applications and generative AI assistants. Modern evaluations focus on classification accuracy and user-coaching workflows rather than hard blocking.

14

DevSecOps and software supply chain security

Embedding security checks into build pipelines and verifying the provenance of third-party code. Related controls include SBOM (software bill of materials), signed artefacts and dependency scanning.

15

SBOM (software bill of materials)

A machine-readable inventory of components inside a software product. Regulated buyers increasingly request one as a condition of procurement, which makes SBOM tooling a practical show-floor topic.

16

NIS2 Directive

EU legislation widening cybersecurity obligations to more sectors and requiring risk management, incident reporting and management accountability. Swedish organisations in scope look for gap-assessment help, supplier assurance and reporting tooling.

17

GDPR and Schrems II

The EU data protection framework and the court ruling that reshaped transatlantic data transfers. Security buying tied to it covers data residency, encryption key control and processor due diligence.

18

ISO/IEC 27001

The international standard for an information security management system. Certification is frequently used as a minimum supplier filter in Nordic public and enterprise procurement.

19

Penetration testing and red teaming

Authorised simulated attacks, ranging from scoped application tests to full adversary simulation. Buyers compare methodology, reporting quality and whether remediation retesting is included.

20

Threat intelligence and KEV

Curated information about adversaries and exploited vulnerabilities; the CISA Known Exploited Vulnerabilities catalogue is a common prioritisation input. Useful evaluation question: how fast does the feed reach patch decisions?

21

Post-quantum cryptography readiness

Inventorying and migrating cryptographic algorithms before quantum computers break current public-key schemes. Early activity centres on crypto-discovery tooling and TLS and certificate lifecycle management.

22

Ransomware resilience and immutable backup

Architectures that keep recoverable copies beyond an attacker's reach, plus tested recovery plans. Nordic buyers pair this with cyber insurance requirements and board-level reporting.

23

Incident response retainer

A pre-agreed contract giving access to forensic and recovery specialists during a breach. Terms to compare include response time commitments, retainer scope and whether legal privilege support is included.

24

MSB guidance

Sweden's Civil Contingencies Agency publishes national cybersecurity and information security guidance used by public sector and critical infrastructure organisations. Vendors often map product controls to it when selling into Swedish agencies.