Attackers now target the decisions and data driving the business, and they're increasingly autonomous and AI-driven, faster than human-speed defenses can match. That makes cyber resilience a board-level growth question, not just an IT line item. This keynote lays out Agentic Cyber Resilience: preemptive, identity-aware recovery built into SaaS, AI, and core infrastructure so the business can contain and recover from AI-driven threats as fast as they strike. We'll set the stakes for scaling AI adoption without betting the company on it.

Enterprises now need one operational fabric across hybrid data, identity, SaaS, and AI agent activity, and the bar for resilience keeps moving. This session previews the roadmap and where the Rubrik platform is headed for CXOs: agentic operations across Rubrik Security Cloud and Rubrik Agent Cloud, orchestrated recovery workflows that compress weeks of manual work into minutes, and governance guardrails that keep autonomous actions auditable and reversible.

CXOs are on the front lines of data protection and resilience, and the strategies that work aren't always the ones in the playbook. This session digs into what IT and security leaders are actually doing inside their organizations: the tactics that held up under pressure, the ones that didn't, and what they'd do differently. 

The Rubrik Security Cloud (RSC) is a SaaS platform that combines backup, recovery, and data security into a single solution. This helps users detect threats faster, minimize risk, and recover with confidence. Built on zero trust principles, RSC protects data across enterprise, cloud, and SaaS environments.
 

M365 is the central nervous center for collaboration at many organizations, making it truly a Tier 0/1 app. As AI agents proliferate, the blast radius of a single identity compromise expands exponentially, with the possibility to lead to data exfiltration or ransomware.This session examines practical workflows for protecting identities, mailboxes, and collaboration data; rapid restoration during account takeover; and containment across Entra ID and M365. To become resilient, organizations must be confident in their ability to recover across their entire IT estate and quickly.

For both new customers evaluating Rubrik and existing customers scaling up: this session covers licensing, commercial models, and sizing to move from proof-of-value to production, then how to operate and extract full value at scale: automation, onboarding, telemetry, patching, and advanced scenarios across databases, big data, hybrid estates, and archive.

When identity systems fail, business stops. Recovering Microsoft AD Forests can take days and involve manual, error-prone processes. Entra ID applications are rarely backed up, making rebuilds even more complex. Okta does not offer native tenant-level recovery, and organizations often miss critical configurations, attributes, and metadata during restoration.

Most AI agent pilots never reach production because there's no way to monitor, govern, or control them at scale. This session covers Rubrik Agent Cloud: how it gives leaders visibility into what AI agents are doing, keeps them compliant and secure, and provides the controls needed to move from pilot to production with confidence.

Most CISOs and CIOs can articulate technical risk. Fewer can translate that risk into numbers a CFO will fund. Across the business value assessments we've run with organizations worldwide, the same gap shows up: strong technical justification, weak financial justification. This session shares those findings alongside a financial model that links RTO/RPO to revenue protection, downtime cost, and regulatory exposure, giving operating leaders a way to build the budget case, not just the risk case.

Cloud-native applications are critical revenue and productivity drivers, but their distributed nature makes it harder to ensure their resilience. Attackers know this, and are increasing cloud attacks in response. Organizations struggle to understand what data is exposed, how long recovery would take, and how to demonstrate resilience to stakeholders like boards and regulators.

AI coding assistants are driving a 153% increase in complex architectural flaws reaching production, yet most DevOps platforms have no tested backup or rollback for repositories and pipeline configuration. This session covers what DevOps recovery requires: point-in-time restore for code and pipeline state, and validation before rollback, so AI-assisted development can scale without becoming unrecoverable risk.

Many organizations are asked to invest in cyber resilience without a clear, board-level way to show where they actually stand. As former CISOs and heads of cyber resilience, we've seen that gap firsthand - and we want to hear how you see it too. Join us for a candid, executive-level discussion on what "resilience readiness" really means and how it should be measured: what a good board-endorsed blueprint looks like, whether recovery is assumed or proven, where identity resilience blind spots hide, and how minimum viable operations should be defined. We'll also share how gaps translate into quantified financial exposure to support your business case. We will get you signed up for our Cyber Resilience Readiness Assessment (CRRA) and get a credible starting point in an hour, not a quarter.

Claude Code and Cowork agents now touch production infrastructure with elevated access and can make mistakes, go rogue, or get compromised. This session covers how Rubrik Agent Cloud secures that risk: runtime guardrails powered by a purpose-built small language model, and Agent Rewind to roll back destructive changes. We'll also share how Rubrik uses Agent Cloud internally to protect over a trillion tokens of usage and 1,000+ developers every month, and what our partnership with Anthropic looks like up close.

Unstructured data: file shares, NAS, object storage, is where ransomware leverage lives, and most recovery strategies restore the compromised state right along with it. This session covers building an immutable, air-gapped recovery tier and using Rubrik SAGE to classify unstructured data at scale, so you know exactly what's compromised and can recover with precision instead of paying a ransom.

Attempting a full infrastructure rebuild after a cyberattack means the entire business waits on it. Recovery time is a direct function of scope: the more you try to restore at once, the longer revenue stays offline.

This session presents a framework for defining a Minimum Viable Business (MVB) for your organization. 

Terry Szuplat, one of President Obama's longest-serving speechwriters, crafted nearly 500 speeches across 40+ countries, including remarks written in the immediate aftermath of crises. Every organization eventually faces its own high-stakes moment: a breach, an outage, a failure of trust, and for CIOs, CISOs, and CTOs, that means translating technical risk into language that moves a board to act. Terry shares how great communicators earn trust, drive urgency, and use storytelling to move people to act before a problem becomes a crisis.

Join your peers for your choice between three curated afternoon Newport Beach experiences.

• Tee off at one of Southern California's most celebrated courses with a round of golf at Pelican Hill Resort, set against dramatic coastal bluffs and ocean views.
• Experience the marine life of the Pacific on a guided whale watching excursion near Dana Point, the Dolphin and Whale Watching Capital of the World®.
• Paddle the Pacific coastline on a guided kayaking excursion off Dana Point, taking in sea caves, coastal wildlife, and the harbor's scenic waters.