Roundtable
Information Security

Chainguard: Racing the Machines: Board-Ready Security Metrics for CISOs in the AI Era

AI-assisted attackers are finding and exploiting vulnerabilities faster than most security teams can triage. This dinner brings senior UK security leaders together to reframe vulnerability management in business and governance terms — translating technical exposure into the cost, disruption and risk metrics boards and regulators actually want to see.
December 2, 2026
UK & Ireland

Discussion Points

1. Retiring the vulnerability myths

Why severity charts, patch counts and incident response speed no longer reassure the board — or the regulators.

2. Pricing the backlog

Translating open critical/high vulnerabilities into people-hour debt and real remediation cost.

3. From firefighting to resilience

Reducing emergency patching and operational disruption in always-on, customer-facing environments.

4. Building it in, not bolting it on

How secure-by-default software inputs shrink attack surface before it reaches production.

5. What "good" looks like

Framing MTTR, accrual rate and backlog trends as evidence for boards, regulators, auditors and customers — across sector-specific regimes, NIS2/DORA and emerging UK resilience legislation.

Racing the Machines: Board-Ready Security Metrics for CISOs in the AI Era

AI-assisted attackers are finding and exploiting vulnerabilities faster than most security teams can triage, assess and remediate them. Across financial services, healthcare, retail, manufacturing, energy, telecoms and technology, boards and regulators are asking a sharper question than severity charts and ticket counts can answer: is material risk actually declining, and can this environment withstand an attacker working at machine speed?

This roundtable brings together senior security leaders from across UK industry to reframe vulnerability management in business and governance terms — translating technical exposure into cost, disruption and risk metrics that boards, regulators and customers want to see. Whether that scrutiny comes from sector regulators, NIS2 and DORA for organisations with EU operations, the UK Cyber Security and Resilience Bill, the EU Cyber Resilience Act for those shipping software and connected products, or customer and supply-chain assurance demands, the vocabulary of risk is changing.

Drawing on Chainguard's research, the conversation will explore how to move from reactive patching to structurally reducing attack surface, and what "good" looks like when reporting upward — including how secure-by-default software inputs shrink exposure before it reaches production, and how MTTR, accrual rate and backlog trends can be framed as evidence across sector-specific regimes.

Agenda

18:15 pm
19:00 pm
Arrival and Networking

Welcomed attendees are integrated into a curated networking space, fostering direct interactions for ice-breaking and relationship-building before engaging in substantive, collaborative discussions.

19:00 pm
19:45 pm
Roundtable Discussion and Drinks

Shifting to a sit-down discussion with drinks, this promotes open, thoughtful dialogue on a set topic agenda, aimed at fostering collaboration and deepening connections in a relaxed, supportive setting.

19:45 pm
21:30 pm
3 Course Meal

The evening culminates with a luxury meal, offering exquisite cuisine in an elegant setting, enhancing networking opportunities, and providing a memorable experience that strengthens professional bonds among attendees.

21:30 pm
22:20 pm
Wrap Up, Q&A, Drinks and Networking

The finale features a wrap-up and Q&A session, where sponsors address the roundtable, followed by drinks and networking, enabling direct engagement and planning of actionable next steps in a collaborative environment.

6:15 pm
7:00 pm
Arrival and Networking
7:00 pm
7:45 pm
Roundtable Discussion and Drinks
7:45 pm
9:30 pm
3 Course Meal
9:30 pm
10:20 pm
Wrap Up, Q&A, Drinks and Networking

About the Hosts

Chainguard is building the trusted source for open source in the age of AI. From containers and virtual machines to libraries, packages, agent skills and actions, Chainguard delivers hardened, verifiable, production-ready builds of the open source software engineers and AI systems depend on — so organisations can build faster, stay compliant and eliminate risk.

The team behind Chainguard has spent decades securing the open source technologies that power modern infrastructure, contributing to foundational projects including Kubernetes, Sigstore, Distroless and DriftlessAF. Chainguard is hosting this private dinner roundtable to help senior security leaders reframe vulnerability management for boards, regulators and customers.

Chainguard

Why Attend?

Exclusive Networking

Connect with senior industry professionals in an intimate setting. Build valuable relationships that can lead to future business opportunities and collaborations.

Insightful Discussions

Engage in deep, meaningful conversations on key industry topics. Gain fresh perspectives and actionable insights from thought leaders and peers.

Tailored Content

Participate in discussions specifically designed to address your business needs and challenges. Benefit from content that is relevant and immediately applicable to your organisation.

Strategic Takeaways

Leave with practical strategies and ideas to implement in your business. Enhance your approach and drive growth with insights gained from the roundtable discussions.
“I think the product demos are really good, and I’ve enjoyed that. It educates me on what's happening in technology. Also I like to know what's happening behind people's day jobs in a similar role to mine. And so hearing some of the presenters speak about what they're facing as their challenges, they resonate with me.”
Mike Samra
CTO, The AA
“The network that we've established and built today, always goes a long way into having better conversations, getting better insights with the people we work with, and ultimately just delivering better all around service. So it's been a really great day and I highly recommend it to anybody as well.”
Marco Oliver
Co-founder & CEO at Configur
“The value to Devoteam of sponsoring this event has been an opportunity to present to the delegates, but also to have a number of really high quality 1 on 1 meetings with, with business and tech leaders from the UK. Some really inspirational people delivering some fantastic transformations. So it's been really good to talk to them.”
Richard Andrews
Managing Director UK&I, DevoTeam
“It's helping us to meet with key CISO target audiences that we would typically only dream of trying to meet in a typical financial year. So having 10 guaranteed meetings as part of the conference agenda has really, really helped us boost the pipeline and start those conversations.”
Chris Whelan
UK Regional Marketing Lead, NCC Group
“It's great to get the condensed meetings together. So it's actually quite useful from a time perspective for us to be able to do that. And actually, we've had an opportunity to appear out of one of the meetings. So it's great that that could potentially fund the entire event for us. And, now, that propels us to want to do more of these events with you.”
Robin Wright
Senior Account Executive, Fortra
“Bring lots of water because you're gonna talk a lot. I think, it's just great to kind of get out and meet people and to see what other people are doing and go with an open mind because you'll actually learn a lot and you'll find people, I suppose, that have synergies with you and what you're trying to achieve.”
Michelle Kearns
Head of IT - Boots Ireland
“The opportunity to speak to people both from a kind of one to one networking standpoint, over a coffee, face to face is really useful, really powerful to be able to swap those sort of war stories around how we're encountering challenges and how we're kind of overcoming them.”
Ben Trethowan
CISO, BRIT Insurance
“The people who have been attending on the buyer side have definitely been the type of stakeholders that we would like to engage with as vendors. These are decision makers. These are influencers. These are high level ROI conversations. It’s been amazing.”
Yoav Lebens
UK Country Manager, OX Security
“I think there's been some really good presentations particularly around you know, everyone's talking about AI, but what does that really mean? There have been some good conversations around how we mesh AI with human interaction to make sure we're getting the best of both worlds.”
Andy Piper
CISO - Investment Bank, Barclays
“As an attendee, the value I've got from attending this is actually speaking and meeting with like minded people. I think it's really interesting, having conversations about what you do in your day job and being able to compare it with others. And from that, you end up solutionising over a conversation or over food and drinks.”
Goher Mohammed
Group Head of IT Security, L&Q
“I think for me personally, for an organisation that is quite legacy, it's great to take forward some of the best practice that we've seen from other, speakers and and sessions today, really going away to look at how we can sort of drive the AI journey within our own business and how we can use data better to leverage, really insightful decision making.”
Neil Shah
IT & Digital Director, Arriva UK Trains
“This is the 3rd event we’ve done with Inspire Business Media. And what I'm starting to see is that whilst we may pick up opportunities that can benefit our business in the short term. I'm starting to see real long term benefits and building relationships as I'm walking through the room. It's not just about meeting somebody and doing a meeting and generating a new project or a new opportunity. It's really meeting people that can amplify our message. And I think that's gonna drive a lot of value for our business long term.”
Andy Mullings
Global Director, Bluprintx
“I've had some great conversations today, talking to suppliers. 1 of them has made me think about some of the security aspects that I have within my own organisation. We have a good comprehensive security program going on, where we are at the moment. But there's been a few moments where it's made me think, have I got these things covered?”
Vicky Higgin
CDIO, Cityfibre
“You know, for me, coming to an event like this has a huge impact, not only on my ability to build my personal brand a little bit, which is always really, nice thing for me to be able to do, but also in just taking away these really, really insightful moments from other people who are in the trenches as well and being able to implement them in my team.”
Heather Hurd
Senior Director, Content Marketing, FIS Global

Apply to Attend

Interested in joining us? Apply to attend and be part of our upcoming event. We're excited to see you.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.