Canada's security environment is under simultaneous pressure from threats to borders, critical infrastructure, and democratic institutions, while the federal government is being asked to deliver more at speed. This session will give you the shared operating picture for 2026 and the priority decisions you need to make in the next 12 to 18 months to strengthen national resilience across physical and digital domains.

• Align on national priorities and what they mean for operational focus across public safety, intelligence, border, and cyber
• Ground your planning in Public Safety Canada's 2026–27 priorities: border integrity, threat detection, law enforcement capability, and emergency management
• Connect security decisions to sovereignty measures in the Spring Economic Update, including strengthening domestic capability in critical sectors
• Strengthen democratic resilience by understanding the latest signals on foreign interference and influence-transparency measures
• Accelerate collaboration without duplication by clarifying where coordination is essential vs where agencies should act independently

Federal departments, public safety agencies, and critical infrastructure operators are navigating a threat environment that is faster, more targeted, and harder to contain than it was two years ago. This session will show you what effective detection and response looks like in practice for high-consequence government environments, so your team can reduce dwell time, close capability gaps, and respond with greater confidence.

• Identify the detection gaps that matter most in federal and public safety environments and the practical controls that close them
• Strengthen response capacity by building playbooks and escalation pathways aligned to Canada's Federal Cyber Incident Response Plan
• Reduce dwell time by applying threat detection patterns proven in environments operating at national security classification levels
• Improve operational resilience by integrating detection and response tooling into your existing security operations without adding complexity

Canada’s public safety environment is increasingly shaped by blended threats across cybercrime, online fraud, foreign interference, and border-enabled organized crime. This session will share the RCMP’s operational perspective on what readiness looks like in 2026: detecting risks earlier, disrupting threats faster, and responding under pressure through clear escalation pathways, trusted information-sharing, and cross-jurisdiction collaboration.

• Understand how complex threats are converging across mandates
• Clarify what practical readiness means for detection, disruption, and response
• Strengthen collaboration and information-sharing across jurisdictions
• Identify the capabilities and escalation pathways agencies should prioritize in 2026

Threat actors are moving faster, blending tactics across physical and digital domains, and exploiting seams between mandates. This moderated plenary stress-tests what readiness actually means in 2026—and focuses on the practical operating model leaders need to collaborate without duplication or compromise.

• Identify the fastest-moving risk areas across people, process, technology, and geopolitics and what they mean for your mandate
• Understand what new authorities and legislative changes mean for operational readiness and cross-mandate coordination in practice
• Align on the shared threat set Public Safety Canada is prioritizing: critical infrastructure, espionage, terrorism, organized crime, and foreign interference
• Define readiness in measurable terms: capabilities, thresholds, and response expectations your teams can execute against
• Agree on collaboration patterns that work, including roles, decision rights, and escalation paths, and identify where they are currently breaking down

Severe cyber incidents test more than technical response — they test executive decision-making, coordination, continuity, and trust under pressure. This session will examine what turns an incident into a “severe” event, how escalation is initiated, and how initiatives like CIREN and the Federal Cyber Incident Response Plan are shaping Canada’s approach to coordinated response across critical infrastructure and high-consequence environments.

• Understand what distinguishes a severe incident and when escalation should begin
• Clarify the executive decision points that matter most: containment, continuity, disclosure, and recovery
• Explore how CIREN and the Federal Cyber Incident Response Plan support coordinated response
• Identify recovery lessons and coordination patterns that build real readiness across critical infrastructure

Foreign actors are targeting Canadian communities, democratic processes, and public institutions faster than traditional monitoring approaches can track. This session will demonstrate how purpose-built intelligence and threat detection capabilities close the gap between signal and response, so agencies can act decisively when foreign interference intersects with community safety and democratic integrity.

• Apply AI-driven open-source intelligence and real-time threat monitoring to surface foreign influence activity across digital, physical, and social domains
• Understand how to operationalize FITAA obligations with automated monitoring workflows that reduce manual effort and accelerate escalation
• Integrate intelligence platforms to support coordinated response across CSIS, RCMP, and Public Safety Canada without creating new data silos
• Build proportionate, auditable response frameworks that act on threat signals while protecting civil liberties and community trust

Canada's critical infrastructure owners are navigating a threat environment that is simultaneously physical and digital, and the gap between policy frameworks and operational reality is where the exposure lives. This session will examine how energy, transport, health, and water sector operators are working with government to assess risk, close capability gaps, and build the resilience that national security depends on.

• Assess the real risk picture facing Canada's critical infrastructure sectors: where physical and cyber threats converge and what that means for operators and government partners alike
• Strengthen the government-to-operator relationship by understanding what effective information sharing, regulatory expectations, and joint response look like in practice
• Apply lessons from recent incidents to identify the most common failure points in critical infrastructure protection programs before they become national security events
• Clarify the roles of Public Safety Canada, CSE/CCCS, and sector regulators in supporting asset owners when threats escalate beyond what a single operator can manage
• Build a sector-specific resilience baseline that satisfies both operational continuity requirements and the national security obligations that flow from being designated critical infrastructure

Across public safety, cyber defense, border security, and emergency management, Canada is actively building capability: the programs, platforms, and partnerships that are reshaping how agencies deliver national security in 2026 and 2027. This session will show you where investment is flowing, which programmes are at scale or in build, and what it means for your agency's operational planning.

• Map the active capability investments across public safety, cyber defense, border security, and emergency management that are reshaping what federal security delivery looks like
• Understand which modernization programs are at scale, which are in build, and where coordination with your agency is expected
• Connect ongoing Northern and Arctic infrastructure investments to operational readiness outcomes your teams need to plan around
• Identify where industrial capacity is being built across defense production, domestic technology, and secure supply chains, and what procurement implications follow
• Clarify the interoperability commitments already in motion and what they require from agencies that haven’t yet aligned

Most federal networks still operate on implicit trust; once inside the perimeter, lateral movement is too easy. This session will demonstrate what eliminating that implicit trust looks like at the network and workload layer in a real GC environment, so your team can contain the blast radius of any compromise without rebuilding your entire architecture.

• Apply micro-segmentation to control east-west traffic in federal environments, preventing lateral movement between systems that have no business communicating
• Implement workload isolation patterns for hybrid and multi-cloud GC environments that enforce least-privilege connectivity without creating operational bottlenecks
• Apply a phased segmentation approach that protects the highest-value targets first without requiring a full network redesign
• Integrate zero trust network controls with existing GC perimeter security investments rather than replacing them
• Measure network trust posture with the visibility and policy enforcement metrics that satisfy both operations teams and security auditors

Pick your topic. Pull up a seat and join a 60-minute interactive discussion with your government peers. Facilitated by an industry expert, you'll share challenges and swap practical approaches within the topic area. Take this opportunity to benchmark what good looks like, pressure-test ideas, and workshop next steps together.

Roundtable One - Agentic AI & Machine Based Decision: Are You Ready?

Roundtable Two - Continuing the Conversation: Securing Canada’s Critical Infrastructure – Embedding Mission-Critical Cyber Defence

Roundtable Three - Stay Ahead of the Threat: Operationalizing Real-Time Intelligence for Government

Roundtable Four - Sharing and Operationalizing Data

Roundtable Five - Staying Left of Boom to Reduce Canada's Threat Risk Profile

Roundtable Six - AI Frontier: Harnessing GenAI and Delivering Trustworthy Public Service Delivery

Roundtable Seven - The Road to Mobile PBMM: Operationalizing Compliance and Overcoming the Policy Hurdles for a Secure Mobile Workforce

Public safety and national security teams are managing faster-moving threats across cyber, digital, physical, and information environments. The challenge is no longer just detecting risk — it is turning signals into coordinated action before threats escalate. This session will explore how agencies can build integrated digital operating models that improve situational awareness, information sharing, escalation, and response across mandates.

• Identify where digital signals, intelligence, cyber alerts, and operational data need to connect to support faster decision-making
• Improve information sharing across public safety, national security, cyber, border, and emergency management partners
• Strengthen escalation pathways so digital indicators can move quickly from monitoring to assessment, disruption, or response
• Explore how AI, analytics, and shared platforms can support integrated operations without creating new governance or privacy risks
• Clarify what agencies need from partners to build a trusted, interoperable operating picture during fast-moving incidents

Federal security operations teams are expected to do more with the same people: more alerts, more complexity, more accountability, while the analyst talent pipeline stays constrained. This session will show you how AI is changing the economics of government Security Operations Centre (SOC) operations, automating the repetitive work that burns out analysts and freeing human judgment for the investigations that actually need it.

• Reduce the time analysts spend on routine alert enrichment, context gathering, and case documentation through AI-assisted investigation
• Automate high-volume, low-complexity event handling at machine speed, surfacing only genuine escalations for analyst review
• Apply an analyst augmentation model that improves junior analyst output without requiring senior analyst oversight at every step
• Build a governance and human-in-the-loop framework that enables security leadership to trust AI-driven decisions in a government accountability environment
• Define a realistic adoption roadmap: where AI delivers value fastest in a federal SOC, and what to avoid in the first 12 months

When threats escalate quickly, fragmented operations cost time, and time is the most expensive resource in public safety. This session will focus on the practical operating model for integrated operations, so you can improve information sharing, joint readiness, and coordinated response across prevention, disruption, and the current IMVE threat environment.

• Identify what is blocking integration across decision rights, data sharing, tooling, and culture, and how leading teams are unblocking it
• Improve coordination across federal, provincial, territorial, and Indigenous partners for emergency readiness and response
• Strengthen joint operations readiness with clearer roles, escalation pathways, and shared situational awareness
• Respond faster under pressure by aligning on what good looks like across prevention, disruption, and incident response

A strong agenda only matters if it changes what happens next. This closing keynote turns the day into a 12‑month action plan—what to prioritize, how to measure progress, and what success by next year should look like for leaders responsible for Canada’s security outcomes.

• Commit to a 12‑month priority set that balances prevention, readiness, and resilience building
• Define success measures leaders can track (capability delivery, readiness thresholds, resilience outcomes)
• Align stakeholders early on roles, decision rights, and collaboration expectations
• Leave with next steps you can take immediately—what to start, stop, and accelerate