SecIT by Heise

Attendees, exhibitors & solutions

Who this event is for

Photos

Industry trends

Key trends shaping this market and its wider industry.

Market news

Latest updates from across the market.

Arrival airports

Choose from the following airports, with convenient access to the event and venue.

Hotel tiers

A range of accommodation options near the venue and across key areas.

Local transport

Get around the city with these convenient transport options.

Frequently asked

Glossary

1

SIEM (Security Information and Event Management)

A platform that collects and correlates log and event data from across an IT estate to detect attacks and support compliance reporting. At secIT, SIEM vendors typically present alongside SOC service providers, so buyers can compare tooling with the managed detection services built on top of it.

2

SOC (Security Operations Centre)

The team and tooling that monitor an organisation's systems around the clock, triage alerts and run incident response. secIT sessions and exhibitors cover both in-house SOC builds and outsourced SOC-as-a-service models for mid-sized German organisations.

3

EDR and XDR

Endpoint Detection and Response software (EDR) monitors and remediates threats on laptops, servers and mobile devices; Extended Detection and Response (XDR) widens the same telemetry to network, email, identity and cloud sources. Exhibitors use the HCC floor to demonstrate detection, hunting and automated containment workflows.

4

Zero Trust

An architecture principle in which no user, device or workload is trusted by default and every access request is continuously verified against identity, device posture and policy. It shows up at secIT mainly in identity, network segmentation and privileged access discussions.

5

NIS2

The EU directive that raises cybersecurity risk-management and reporting obligations for a wider set of essential and important entities, transposed into German law through the NIS2-Umsetzungsgesetz. Because it pushes compliance duties onto management boards, NIS2 readiness is a recurring theme in the conference programme and on consultancy stands.

6

BSI IT-Grundschutz

The German Federal Office for Information Security (BSI) framework of building blocks, risk analysis and audit steps used to establish an information security management system. Exhibitors and speakers at secIT regularly map their products and services to BSI IT-Grundschutz and ISO 27001 requirements.

7

PAM (Privileged Access Management)

Controls that vault, broker and record the credentials of administrators, service accounts and machine identities. PAM is a core theme for the public-sector and critical-infrastructure visitors who use secIT to compare vaulting, session recording and just-in-time access approaches.

8

Ransomware and double extortion

An attack pattern in which data is encrypted and additionally exfiltrated, with a second payment demand for non-disclosure. Incident response providers, backup and recovery vendors and cyber insurers use the secIT exhibition to discuss recovery time objectives and negotiation policy.

9

Vulnerability management and CVE

The continuous process of inventorying software assets, matching them against disclosed vulnerabilities identified by CVE identifiers, and prioritising patches by exploitability and business impact. Scanners, patch orchestration and exposure-management platforms form a recurring product category at secIT.

10

Penetration test

An authorised, simulated attack on systems or applications that verifies whether real weaknesses can be exploited. Several Hanover-area and national testing firms exhibit at secIT, and talks explain how to scope tests, report findings and rerun them after remediation.

11

MFA, FIDO2 and passkeys

Multi-factor authentication adds a second proof of identity beyond a password, while FIDO2 security keys and passkeys replace passwords with phishing-resistant cryptographic credentials. These are hands-on topics for the administrators in the secIT audience who are rolling out phishing-resistant logins.

12

OT and industrial security

Security for operational technology such as production lines, building automation and utility control networks, where availability matters more than confidentiality. secIT covers segmentation, monitoring and patch strategy for OT environments that cannot be stopped for maintenance windows.

13

CISO

Chief Information Security Officer, the role accountable for an organisation's security strategy, risk register and incident escalation. secIT is built around peer exchange between CISOs, their security architects and the vendor and consultancy teams serving them.

14

Incident response and crisis exercise

The pre-planned process of detecting, containing, eradicating and recovering from a breach, ideally rehearsed in tabletop exercises before a real event. Service providers at the HCC present retainer models, forensics and communication support for the first 24-72 hours.