International Cybersecurity Forum - FIC

Attendees, exhibitors & solutions

Who this event is for

Industry trends

Key trends shaping this market and its wider industry.

Hotel tiers

A range of accommodation options near the venue and across key areas.

Local transport

Get around the city with these convenient transport options.

Frequently asked

Glossary

1

NIS2 Directive

EU directive (2022/2555) that replaced the original NIS Directive and expands cyber risk-management, incident-reporting and supply-chain security duties to more sectors and to many mid-sized organisations in the EU.

2

DORA (Digital Operational Resilience Act)

EU regulation applying to banks, insurers, investment firms and their ICT third-party providers, with requirements on ICT risk management, incident reporting, resilience testing and contractual clauses.

3

Cyber Resilience Act (CRA)

EU regulation introducing mandatory security requirements for products with digital elements, including vulnerability handling, security updates and CE marking obligations along the manufacturer supply chain.

4

ANSSI

France's national agency for information systems security, which publishes security guidance, reference frameworks and certification schemes used widely by French public-sector and critical-infrastructure buyers.

5

CERT / CSIRT

Computer emergency response team, or computer security incident response team: a national, sectoral or corporate unit that detects, coordinates and responds to incidents and shares advisories.

6

SOC (Security Operations Centre)

A team plus tooling that monitors, triages and responds to security events around the clock, usually combining SIEM, EDR telemetry, threat intelligence and defined escalation playbooks.

7

SIEM and SOAR

Security Information and Event Management aggregates and correlates logs; Security Orchestration, Automation and Response executes automated playbooks across security tools.

8

EDR, XDR and MDR

Endpoint Detection and Response covers hosts; Extended Detection and Response spans endpoint, network, cloud and identity telemetry; Managed Detection and Response delivers those capabilities as an outsourced service.

9

Threat intelligence and TTPs

Threat intelligence is the collection, enrichment and analysis of adversary indicators, campaigns and motivations; TTPs are the tactics, techniques and procedures describing how attackers operate.

10

MITRE ATT&CK

A publicly maintained knowledge base of adversary tactics and techniques used to structure detection engineering, red-team planning and coverage reporting.

11

Zero Trust

An architecture principle that removes implicit trust from the network and verifies every request through identity, device posture and policy, rather than assuming anything inside the perimeter is safe.

12

IAM and PAM

Identity and Access Management governs who can access which systems; Privileged Access Management narrows, vaults and records the accounts that hold administrative power.

13

Pentest, red team, blue team

A penetration test is a scoped, time-boxed attack simulation; a red team runs longer goal-based adversary simulation; a blue team is the defending operations group that detection exercises are measured against.

14

OT and ICS security

Security of operational technology and industrial control systems, where availability and safety take priority over confidentiality and where segmentation and IEC 62443 practices guide design.

15

SASE and SSE

Secure Access Service Edge converges networking and security at the cloud edge; Security Service Edge is the security subset, covering zero-trust network access, secure web gateway and cloud access security broker functions.

16

Post-quantum cryptography (PQC)

Cryptographic algorithms designed to resist attacks from future quantum computers, with migration guidance now standardised and crypto-agility becoming a design requirement.

17

Supply chain attack

Compromise reaching a target through a third party, such as a software vendor, managed service provider, update mechanism or open-source dependency.

18

Vulnerability disclosure and bug bounty

Structured programmes, including coordinated vulnerability disclosure, vulnerability disclosure policies and paid bounty schemes, through which researchers report flaws before public exploitation.

19

Cyber sovereignty and EU cloud certification

Policy discussion about where data is stored, who can lawfully access it and which certification schemes (including EU-level cloud security schemes) determine eligibility for public-sector procurement.

20

CISO

Chief Information Security Officer: the executive accountable for security strategy, risk appetite, regulatory posture and security budget inside an organisation.