Gartner Security & Risk Management Summit

Gartner Security & Risk Management Summit
Name	Gartner Security & Risk Management Summit
Genre	Conference
Frequency	Annual
First	2001
Organizer	Gartner
Location	Varied (primarily United States, Europe, Asia)

Gartner Security & Risk Management Summit The Gartner Security & Risk Management Summit is an annual professional conference focused on information security, risk management, and cybersecurity strategy for enterprise leaders. Organized by Gartner since the early 2000s, the event gathers executives, technologists, and analysts from multinational corporations, government agencies, and academic institutions to discuss emerging threats, compliance, and security operations. Keynote sessions, research briefings, and vendor exhibitions provide a platform for cross-sector engagement among stakeholders from Microsoft, Amazon Web Services, Google, IBM, Cisco Systems, and major financial, healthcare, and technology organizations.

Overview

The Summit functions as a convergence point for practitioners from J.P. Morgan Chase, Bank of America, HSBC, Deutsche Bank, Goldman Sachs, and other large enterprises to compare strategies for securing assets against threats such as campaigns by Fancy Bear, Lazarus Group, Anonymous (group), and ransomware operations linked to REvil. Attendees include CISOs from Facebook, Apple, Intel Corporation, Oracle Corporation, Salesforce, and heads of security from public institutions like National Security Agency, Department of Homeland Security, European Commission, NATO, and regulatory bodies including Financial Conduct Authority and Office of the Superintendent of Financial Institutions. The Summit emphasizes actionable guidance aligned with frameworks such as NIST Cybersecurity Framework, ISO/IEC 27001, and doctrines referenced by MITRE ATT&CK.

History and Evolution

The Summit originated as a response to early-21st-century incidents that reshaped corporate security priorities following events associated with Code Red, Conficker, and the aftermath of the September 11 attacks on organizational risk posture. Over time the agenda expanded to cover major incidents implicating Equifax, Target Corporation (2006 breach), Sony Pictures 2014 attack, and supply-chain compromises like those involving SolarWinds. Gartner integrated research on cloud transformation influenced by Amazon.com (AWS), Google Cloud, and Microsoft Azure alongside privacy developments tied to laws such as the General Data Protection Regulation and rulings by courts like the European Court of Justice. The Summit’s vendor exhibition grew to feature firms like Palo Alto Networks, Fortinet, CrowdStrike, FireEye, Okta, Splunk, and Trend Micro.

Conference Format and Programming

Typical programming consists of plenary keynotes, analyst-led research sessions, hands-on workshops, peer networking, and an expo hall featuring product demonstrations by companies such as McAfee, Bitdefender, Check Point Software Technologies, and Tenable, Inc.. Sessions often include case studies from organizations like Procter & Gamble, Walmart, General Electric, Boeing, Siemens, and GlaxoSmithKline. Certifications and training tied to bodies such as ISACA, (ISC)², and SANS Institute are frequently available. Regional editions have been held in cities connected to major tech and policy hubs including Las Vegas, Orlando, London, Frankfurt am Main, Singapore, Sydney, and Tokyo.

Key Themes and Topics

Recurring themes encompass cloud security and identity management driven by platforms like Microsoft 365, Azure Active Directory, Okta Identity Cloud, and concepts linked to Zero Trust Architecture as advocated by John Kindervag and agencies such as CISA. Other topics include threat intelligence referencing organizations like Recorded Future and Mandiant, incident response modeled on playbooks from CERT Coordination Center and US-CERT, and application security practices associated with OWASP Top Ten. Privacy, compliance, and data governance feature references to HIPAA, Sarbanes–Oxley Act, California Consumer Privacy Act, and guidance from International Organization for Standardization. Emerging areas include operational technology security for Siemens and Schneider Electric environments, quantum-resistant cryptography discussed alongside researchers at NIST, and AI-driven security products developed by teams at OpenAI and DeepMind.

Notable Speakers and Presentations

Keynote and featured speakers have included analysts from Gartner, CISOs from Adobe Systems, Netflix, Cisco Systems, and leaders from public sector organizations such as United States Cyber Command and the European Union Agency for Cybersecurity. Presentations have analyzed major breaches like those affecting Yahoo, Marriott International (2018 data breach), and Capital One (2019 data breach), and have showcased incident lessons learned from responses coordinated with FBI and Interpol. Panels have brought together executives from Accenture, Deloitte, PwC, and KPMG to discuss outsourcing, managed security services, and third-party risk management.

Industry Impact and Reception

The Summit is influential in shaping procurement cycles at enterprises such as Mercedes-Benz Group, Toyota Motor Corporation, ExxonMobil, and Shell plc by informing analyst-driven Magic Quadrant assessments for vendors like Zscaler and CrowdStrike. Coverage in trade publications such as Wired, The Wall Street Journal, The New York Times, and The Economist underscores its role in framing discourse on cyber policy alongside academic collaborations with institutions like Massachusetts Institute of Technology, Stanford University, and Carnegie Mellon University. Critics and observers from think tanks including RAND Corporation and Brookings Institution have debated the Summit’s emphasis on vendor-led solutions versus systemic resilience and public-private coordination exemplified by initiatives like Cybersecurity and Infrastructure Security Agency (CISA) partnerships.

Category:Information security conferences