Where is the CyberSec India Expo & Conference taking place?

The CyberSec India Expo & Conference is being held in the city of Mumbai, IND.

What is the format of this event?

This event is structured as an expo and conference, indicating a blend of exhibition spaces and formal presentations or panel discussions.

When does the CyberSec India Expo & Conference occur?

The conference takes place over two days in early June.

Is there a specific venue for the conference in Mumbai?

While the city is Mumbai, the specific venue information is not provided in the event details.

CyberSec India Expo & Conference 2027

Name: CyberSec India Expo & Conference 2027
Start: 2027-06-02T00:00:00Z
End: 2027-06-03T00:00:00Z
Location: Mumbai

Jun 2–3, 2027Mumbai, IndiaIn-person

Registration open

The CyberSec India Expo & Conference is a significant event focusing on cybersecurity in the Asian region. Hosted in Mumbai, IND, this conference brings together experts and stakeholders to discuss pressing issues and advancements in the field. It serves as a platform for knowledge exchange and collaboration, addressing the evolving landscape of cyber threats and defensive strategies.

Committees & topics

Topics
Network & Endpoint Security · Cloud & Application Security · Identity & Access Management (IAM) · Threat Detection & Response (SIEM, XDR, SOC) · OT and Critical Infrastructure Security · Data Protection & Encryption · Data Loss Prevention (DLP) · Privacy Management & Compliance

Why it matters

In an increasingly interconnected world, cybersecurity is not merely a technical concern but a critical component of national security, economic stability, and individual privacy. Events like the CyberSec India Expo & Conference highlight the global nature of cyber threats, which transcend national borders and require international cooperation. The conference's location in Mumbai, IND, underscores the growing importance of cybersecurity in emerging economies and the broader Asian context. As digital transformation accelerates across various sectors, the vulnerabilities to cyberattacks also increase, making robust cybersecurity frameworks and continuous innovation essential.

The discussions and collaborations fostered at this event contribute to strengthening the collective defense against sophisticated cyber adversaries. It offers insights into the latest technologies, policies, and best practices, which are crucial for governments, businesses, and individuals alike to protect their digital assets. Understanding the diverse perspectives and approaches to cybersecurity, as presented by participants from various countries, is vital for developing comprehensive and effective global strategies. This event provides a timely opportunity to assess the current state of cyber readiness and identify future challenges and opportunities in the domain.

How to prepare

Participants preparing for the CyberSec India Expo & Conference should consider several key angles to maximize their engagement. Firstly, a thorough understanding of the current cybersecurity landscape in IND and the broader Asian region is essential. This includes familiarizing oneself with recent cyber incidents, regulatory frameworks, and technological advancements specific to the area. Reviewing the event's agenda in advance will allow for targeted preparation on specific topics or sessions of interest.

Secondly, engaging with the principles of What Is Stakeholder Mapping? and Engagement Strategies can be highly beneficial. Identifying key organizations, government bodies, and industry leaders attending the conference will enable more effective networking and collaboration. Understanding the potential Hidden Stakeholders in the cybersecurity ecosystem, such as non-governmental organizations or academic institutions, can also lead to unexpected insights and partnerships. Preparing specific questions or discussion points related to one's own work or interests will facilitate more meaningful interactions during the conference. Finally, considering the geopolitical implications of cybersecurity, particularly in a region with diverse national interests, will enrich the understanding of the broader context of the discussions.

Country perspectives

Where the most-relevant 5 countries stand on the core issues in play. Click through for the full country profile.

India

IND is a significant player in the global cybersecurity landscape, facing both substantial threats and possessing considerable expertise. The nation is actively developing its cyber defense capabilities and fostering a robust cybersecurity industry.

Role in topic

As the host nation, IND plays a central role in organizing and shaping the discourse at the conference. Its growing digital economy and strategic importance make it a key focus for discussions on regional cybersecurity challenges and solutions. IND's perspective on data protection, critical infrastructure security, and cyber warfare will be prominent.

United States

The USA maintains a leading role in cybersecurity innovation and policy, often advocating for international norms and standards while also facing sophisticated state-sponsored and criminal cyber threats.

Role in topic

The USA's involvement in the conference would likely focus on sharing advanced technological solutions, discussing international cooperation frameworks, and highlighting the importance of public-private partnerships in cybersecurity. Its perspective often emphasizes global threat intelligence sharing and capacity building.

China

CHN is a major global actor in cyberspace, known for its advanced cyber capabilities and its unique approach to internet governance and data sovereignty.

Role in topic

CHN's participation would offer insights into its national cybersecurity strategy, including its emphasis on data localization and critical information infrastructure protection. Discussions might touch upon its perspectives on cyber espionage, industrial cyber security, and its role in shaping global cyber norms.

Russia

RUS is recognized for its sophisticated cyber capabilities, often associated with state-sponsored activities and a focus on information security and critical infrastructure protection.

Role in topic

RUS's perspective would likely center on national security aspects of cybersecurity, including defense against cyberattacks on critical infrastructure and the development of independent cyber technologies. Discussions could also involve its views on international cyber warfare doctrines and information security.

Israel

ISR is a global leader in cybersecurity innovation, known for its advanced defense technologies and a thriving ecosystem of cybersecurity startups.

Role in topic

ISR's contribution to the conference would likely highlight cutting-edge cybersecurity technologies, startup innovation, and strategies for national cyber defense. Its experience in developing resilient cyber systems and responding to persistent threats would be a valuable perspective.

Topics & background

The background behind each topic and the actors that shape it.

Network & Endpoint Security

Network and endpoint security form the historical backbone of cyber defense, dating to the firewall and antivirus era of the 1990s. As enterprise perimeters dissolved with mobility, BYOD, and remote work — accelerated dramatically by the COVID-19 pandemic — traditional perimeter models gave way to next-generation firewalls, endpoint detection and response (EDR), and Zero Trust Network Access (ZTNA). India's threat landscape, tracked by CERT-In, has seen sustained growth in ransomware, supply-chain intrusions, and credential-based attacks on unmanaged endpoints. The core dispute today is architectural: legacy network-centric controls versus identity- and device-centric Zero Trust frameworks codified in NIST SP 800-207. Vendors and CISOs debate consolidation (SASE, XDR) against best-of-breed stacks, while regulators push minimum baselines for endpoint hygiene. India's CERT-In 2022 directive on log retention and incident reporting within six hours has reshaped operational expectations for network and endpoint telemetry. Where it stands: enterprises are migrating to cloud-delivered network security (SSE/SASE), AI-assisted EDR, and continuous device posture checks, while contending with talent shortages and a rapidly expanding attack surface from IoT and unmanaged endpoints.

Key players

Cloud & Application Security

Cloud adoption accelerated through the 2010s as AWS, Azure, and GCP became default infrastructure, shifting security responsibility into a shared model between provider and customer. Application security evolved in parallel, with the OWASP Top 10 anchoring practice and DevSecOps embedding security into CI/CD pipelines. High-profile breaches — Capital One (2019), SolarWinds (2020), and Log4Shell (2021) — demonstrated that misconfigured cloud resources and vulnerable software supply chains had become primary attack vectors. The core issues today center on Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), Cloud-Native Application Protection Platforms (CNAPP), and the security of APIs, containers, and serverless workloads. Software supply-chain integrity — SBOMs, signed artifacts, and dependency provenance — has moved from niche concern to regulatory expectation, reflected in the US Executive Order 14028 and EU Cyber Resilience Act. India's growing SaaS sector and Digital Public Infrastructure increase the stakes of cloud misconfiguration. Where it stands: organizations are consolidating fragmented cloud tooling into CNAPP platforms, adopting AI-assisted code scanning, and grappling with multi-cloud governance, while sovereign cloud requirements complicate cross-border data architectures.

Key players

Identity & Access Management (IAM)

Identity has emerged as the new perimeter. Earlier IAM focused on directory services and single sign-on inside the corporate LAN; the cloud and SaaS era forced a redesign around federated identity (SAML, OIDC), adaptive MFA, and privileged access management (PAM). Breaches at Okta, MGM, and Microsoft (Midnight Blizzard, 2024) underscored that identity compromise — phishing, MFA fatigue, token theft, and OAuth abuse — now drives the majority of intrusions, a finding echoed in Verizon's annual DBIR. Core debates include the migration to passwordless and FIDO2/passkey authentication, governance of non-human identities (service accounts, workload identities, AI agents), and the rise of Identity Threat Detection and Response (ITDR). In India, Aadhaar-based authentication and DigiLocker have made identity a national infrastructure question, with the Digital Personal Data Protection Act, 2023 framing consent and identity data handling. Where it stands: enterprises are unifying workforce, customer (CIAM), and machine identity, deploying continuous authentication, and confronting the explosive growth of machine identities driven by microservices and AI agents.

Key players

Threat Detection & Response (SIEM, XDR, SOC)

Security Operations Centers grew out of military and telecom monitoring functions, formalized in the enterprise during the 2000s alongside the first SIEM platforms (ArcSight, QRadar, Splunk). The SOC's mission expanded as adversary tradecraft — mapped by MITRE ATT&CK since 2013 — outpaced signature-based detection. Extended Detection and Response (XDR) emerged around 2019 to correlate telemetry across endpoint, network, identity, and cloud, while Managed Detection and Response (MDR) services proliferated to address the global SOC analyst shortage. The core dispute is whether the future SOC is a consolidated XDR-plus-SIEM stack from a single vendor, an open data-lake architecture with bring-your-own-detection, or an AI-driven autonomous SOC. Detection engineering, threat intelligence integration, and high SIEM ingestion costs (driving interest in security data lakes built on Snowflake or open formats) dominate practitioner debates. India's CERT-In six-hour incident reporting rule has made mature detection-and-response capabilities a regulatory necessity. Where it stands: SOCs are integrating generative AI for triage and investigation, adopting SOAR for automation, and rebalancing in-house versus MDR/MSSP models amid persistent staffing gaps.

Key players

OT and Critical Infrastructure Security

Operational technology — the industrial control systems, SCADA, and PLCs running power grids, water, manufacturing, and transport — was historically air-gapped and security-by-obscurity. Stuxnet (2010) demonstrated that nation-state actors could weaponize OT vulnerabilities; subsequent incidents including Ukraine's grid attacks (2015, 2016), the Colonial Pipeline ransomware (2021), and Volt Typhoon's prepositioning in US critical infrastructure (disclosed 2023-2024) confirmed OT as a strategic battleground. IT/OT convergence, driven by Industry 4.0, has eroded the air gap and expanded the attack surface. Core disputes involve segmentation versus connectivity, patching legacy controllers that cannot tolerate downtime, applying frameworks such as IEC 62443 and NIST CSF, and assigning regulatory accountability for cross-sector dependencies. India has designated Critical Information Infrastructure under the IT Act and stood up NCIIPC; the EU's NIS2 Directive and US TSA pipeline rules reflect parallel hardening efforts globally. Where it stands: operators are deploying OT-specific monitoring (passive network analysis), establishing unified IT/OT SOCs, and preparing for state-sponsored threats targeting energy, water, and telecom in geopolitically tense regions.

Key players

Data Protection & Encryption

Encryption moved from a classified government technology to a commercial pillar after the 1990s Crypto Wars, with AES standardization in 2001 and the mainstreaming of TLS securing the open web. Data protection now spans encryption at rest, in transit, and increasingly in use (confidential computing, homomorphic encryption), alongside key management infrastructures (HSMs, KMS) and tokenization. High-profile breaches and the rise of cloud have made customer-controlled keys (BYOK/HYOK) a baseline expectation for regulated industries. The defining contemporary issue is the post-quantum transition. NIST finalized its first post-quantum cryptography standards in 2024 (ML-KEM, ML-DSA, SLH-DSA), and "harvest now, decrypt later" attacks have prompted urgent migration planning. Concurrent debates over lawful-access encryption backdoors — revived by the EU's CSAM proposal and UK Online Safety Act — pit law enforcement equities against end-to-end encryption advocates. India's DPDP Act, 2023 imposes data fiduciary obligations without prescribing specific cryptographic controls, leaving sectoral regulators to set the bar. Where it stands: organizations are inventorying cryptographic assets, piloting PQC, and adopting confidential computing for sensitive workloads while navigating divergent national positions on encryption policy.

Key players

Data Loss Prevention (DLP)

DLP emerged in the mid-2000s as a discipline for discovering, classifying, and controlling movement of sensitive data — initially focused on email, USB drives, and endpoint channels. The shift to cloud and SaaS made traditional network DLP brittle, prompting integration with CASB, SSE, and Insider Risk Management platforms. Insider incidents, from Snowden to ongoing IP exfiltration cases, kept DLP central to regulated industries and defense supply chains. The current inflection point is generative AI. Employee use of ChatGPT and similar tools has created a major new exfiltration vector — sensitive code, customer data, and trade secrets pasted into third-party LLMs — driving a new category of AI DLP and prompt-aware controls. Traditional rule-based DLP, plagued by false positives, is giving way to ML-driven classification, user and entity behavior analytics (UEBA), and content-aware policies tied to data classification taxonomies. India's DPDP Act, financial sector RBI guidelines, and global regimes like GDPR all create concrete legal exposure for uncontrolled data egress. Where it stands: DLP is converging with insider risk, SSE, and AI governance into unified data security platforms, with effectiveness depending heavily on upstream data discovery and classification maturity.

Key players

Privacy Management & Compliance

Modern privacy regulation traces to the OECD privacy principles (1980) and EU Data Protection Directive (1995), culminating in the GDPR (2018), which set a global template through extraterritorial reach and significant fines. A wave of jurisdictions followed: Brazil's LGPD, California's CCPA/CPRA, China's PIPL (2021), and India's Digital Personal Data Protection Act, 2023. Cross-border data transfers have been repeatedly destabilized by the Court of Justice of the EU (Schrems I and II), with the EU-US Data Privacy Framework (2023) as the current bridge. The core compliance challenge is operationalizing fragmented, sometimes conflicting regimes: data mapping, consent management, data subject rights fulfillment, breach notification timelines, and Data Protection Impact Assessments. India's DPDP Act introduces concepts of Data Fiduciaries, Significant Data Fiduciaries, and a Data Protection Board, with Rules under finalization shaping its operational reality. AI governance — the EU AI Act, sectoral AI guidance, and emerging Indian frameworks — is being absorbed into privacy programs, given AI's dependence on personal data. Where it stands: organizations are deploying privacy management platforms to automate rights requests, consent, and records of processing, while preparing for AI Act-style obligations and continued turbulence around cross-border data flows.

Key players

Resources

News, lessons, and country profiles to prep for CyberSec India Expo & Conference 2027.

Recent reporting to ground your prep

Arming an archipelago: Is time running out for Europe's oldest DMZ? | Euronews

Comprehensive approach to security: Federal Council launches consultation on Switzerland's security policy strategy

Europe's June Heatwave: Infrastructure Crisis

Ukraine Drone Strikes Crimea Power Grid

Lessons

Bite-sized lessons to build the basics

Dynamic Analysis

Hidden Stakeholders

Engagement Strategies

Stakeholder Mapping Workshop

Courses

Guided courses that go deeper on the topic

Crisis Management

Advanced Negotiation

Multilateral Negotiation

Policy Brief Writing

The states in play, with the data that shapes their stance

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

Country dossier

By committee

Frequently asked questions

CyberSec India Expo & Conference 2027

Jun 2–3, 2027Mumbai, IndiaIn-person

Registration open

Committees & topics

Topics
Network & Endpoint Security · Cloud & Application Security · Identity & Access Management (IAM) · Threat Detection & Response (SIEM, XDR, SOC) · OT and Critical Infrastructure Security · Data Protection & Encryption · Data Loss Prevention (DLP) · Privacy Management & Compliance

Why it matters

How to prepare

Country perspectives

Where the most-relevant 5 countries stand on the core issues in play. Click through for the full country profile.

India

Role in topic

United States

Role in topic

China

CHN is a major global actor in cyberspace, known for its advanced cyber capabilities and its unique approach to internet governance and data sovereignty.

Role in topic

Russia

RUS is recognized for its sophisticated cyber capabilities, often associated with state-sponsored activities and a focus on information security and critical infrastructure protection.

Role in topic

Israel

ISR is a global leader in cybersecurity innovation, known for its advanced defense technologies and a thriving ecosystem of cybersecurity startups.

Role in topic